Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
File:                     MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft (raw, json)
Hash identifier:          wovkJ8XD/7sW0yXBB9KYCGWXzPeA3o77vSXfDN2QaxE=
Subject key identifier:   F9:5A:D6:5A:80:7C:05:E4:25:2C:BB:60:45:D9:18:2B:E8:7C:F9:9A
Authority key identifier: 32:04:C0:3C:36:C8:06:D6:87:E8:3E:A8:D2:72:0C:EE:BB:BD:C3:43
Certificate issuer:       /CN=3204c03c36c806d687e83ea8d2720ceebbbdc343
Certificate serial:       0193568B0AFB4CF4AFAD8AACFC7F0156B82A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
Manifest number:          0353
Signing time:             Sat 23 Nov 2024 01:02:53 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:53 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:53 +0000
Files and hashes:         1: 6C5NluXbCGGIZvz90v7p5F-ZkuY.roa (hash: bZ8iWCsffXWoB7Tbp6+x9Q4F0M7xUxole7teHahCMMk=)
                          2: MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl (hash: eOxxKT6hf1xHQxZMX68nMv9JBF/GI5hkL5LXJg5HeSQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:0a:fb:4c:f4:af:ad:8a:ac:fc:7f:01:56:b8:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3204c03c36c806d687e83ea8d2720ceebbbdc343
        Validity
            Not Before: Nov 23 01:02:53 2024 GMT
            Not After : Nov 24 01:02:53 2024 GMT
        Subject: CN=f95ad65a807c05e4252cbb6045d9182be87cf99a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d3:58:bb:aa:8c:62:4e:a8:a4:5a:3e:03:0d:
                    8e:d7:5c:20:c2:98:f5:c0:ca:b8:86:be:5b:f3:a5:
                    fc:58:25:3c:c9:4b:27:c6:cc:e3:bb:f5:8d:ec:11:
                    84:f5:ca:83:e0:60:dd:b6:22:13:84:6b:5f:89:a0:
                    22:99:24:08:7f:ae:fe:67:2b:63:c7:9a:b9:3c:52:
                    71:50:f8:f6:15:36:42:0e:5e:4f:3d:3c:fd:f4:11:
                    de:f7:98:52:ed:8c:62:05:8a:84:4c:e0:6e:d5:55:
                    fe:c8:e1:f2:76:92:a0:a0:db:42:eb:c1:f2:41:7d:
                    48:ac:0f:90:a0:e1:35:51:5a:7c:ee:6a:22:98:3d:
                    86:4f:14:27:d1:5e:53:bf:a4:dc:72:a6:49:1d:f4:
                    be:b2:77:8c:7e:7d:7c:65:ef:44:a8:c0:18:9a:d0:
                    64:91:9a:9f:ef:ba:c7:3e:bf:0e:22:f6:c3:8b:3f:
                    07:d0:75:0c:bf:f3:63:15:68:90:12:02:fd:e7:0c:
                    9e:55:c3:c3:b5:99:f0:dd:58:5e:5e:f4:3d:db:3d:
                    50:87:a1:f5:4d:6a:35:d2:52:80:b9:45:f0:a1:c5:
                    a3:a9:32:19:6a:42:2f:08:e0:47:7c:9e:7d:6d:19:
                    6b:b2:20:a8:dd:01:50:dc:c2:98:53:4e:f3:a9:78:
                    55:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5A:D6:5A:80:7C:05:E4:25:2C:BB:60:45:D9:18:2B:E8:7C:F9:9A
            X509v3 Authority Key Identifier:
                keyid:32:04:C0:3C:36:C8:06:D6:87:E8:3E:A8:D2:72:0C:EE:BB:BD:C3:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e1:73:21:35:b5:13:a8:9f:ec:81:06:62:b6:c2:37:67:a4:
         53:b5:ef:d8:a6:b0:18:57:bf:f5:5d:2b:68:29:2f:0f:73:37:
         2f:10:41:81:88:86:1b:0c:13:6f:c2:f5:e5:30:80:90:c7:0d:
         56:9f:46:40:c8:af:3f:df:d4:16:0a:8e:f1:6e:ca:8f:20:22:
         57:6a:42:45:f7:8a:29:28:6d:6c:d0:c5:fd:f5:1f:15:93:7d:
         b4:8b:51:bc:86:30:7c:8a:19:37:b2:1e:ca:1e:8d:46:0f:13:
         3a:98:24:12:0d:08:f6:3f:03:04:0a:dc:60:00:36:96:ee:56:
         f9:3b:76:9d:5f:a5:f5:08:a9:5b:03:c7:2c:6c:80:df:41:1c:
         ca:da:79:f2:0a:76:fd:9f:c9:0e:88:a7:ef:c4:e6:33:90:18:
         da:59:b4:97:a7:e6:0b:c0:2c:88:bc:72:26:7e:26:b9:ee:cd:
         fa:f7:dd:a8:e8:b9:d5:d6:cb:30:89:4a:eb:14:46:77:af:e8:
         39:8e:96:0f:60:16:11:fa:51:43:a0:8c:a4:61:2b:ec:79:78:
         93:aa:17:95:2c:d8:61:b4:21:6a:24:6f:d4:96:ac:5a:1b:10:
         f2:95:bd:58:53:5c:8d:49:4e:a0:b8:86:11:7e:42:2a:f3:00:
         51:84:bc:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiwr7TPSvrYqs/H8BVrgqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMDRjMDNjMzZjODA2ZDY4N2U4M2VhOGQyNzIwY2VlYmJi
ZGMzNDMwHhcNMjQxMTIzMDEwMjUzWhcNMjQxMTI0MDEwMjUzWjAzMTEwLwYDVQQD
EyhmOTVhZDY1YTgwN2MwNWU0MjUyY2JiNjA0NWQ5MTgyYmU4N2NmOTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtNYu6qMYk6opFo+Aw2O11wgwpj1
wMq4hr5b86X8WCU8yUsnxszju/WN7BGE9cqD4GDdtiIThGtfiaAimSQIf67+Zytj
x5q5PFJxUPj2FTZCDl5PPTz99BHe95hS7YxiBYqETOBu1VX+yOHydpKgoNtC68Hy
QX1IrA+QoOE1UVp87moimD2GTxQn0V5Tv6TccqZJHfS+sneMfn18Ze9EqMAYmtBk
kZqf77rHPr8OIvbDiz8H0HUMv/NjFWiQEgL95wyeVcPDtZnw3VheXvQ92z1Qh6H1
TWo10lKAuUXwocWjqTIZakIvCOBHfJ59bRlrsiCo3QFQ3MKYU07zqXhVdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPla1lqAfAXkJSy7YEXZGCvofPmaMB8GA1UdIwQY
MBaAFDIEwDw2yAbWh+g+qNJyDO67vcNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWdUQVBEYklCdGFINkQ2bzBuSU03cnU5dzBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81YmY3OTctYmM1NS00OGMxLTllOTIt
OTkyODI1Y2QzMjE0LzEvTWdUQVBEYklCdGFINkQ2bzBuSU03cnU5dzBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny81YmY3OTctYmM1NS00OGMxLTllOTItOTkyODI1Y2QzMjE0
LzEvTWdUQVBEYklCdGFINkQ2bzBuSU03cnU5dzBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOFzITW1
E6if7IEGYrbCN2ekU7Xv2KawGFe/9V0raCkvD3M3LxBBgYiGGwwTb8L15TCAkMcN
Vp9GQMivP9/UFgqO8W7KjyAiV2pCRfeKKShtbNDF/fUfFZN9tItRvIYwfIoZN7Ie
yh6NRg8TOpgkEg0I9j8DBArcYAA2lu5W+Tt2nV+l9QipWwPHLGyA30Ecytp58gp2
/Z/JDoin78TmM5AY2lm0l6fmC8AsiLxyJn4mue7N+vfdqOi51dbLMIlK6xRGd6/o
OY6WD2AWEfpRQ6CMpGEr7Hl4k6oXlSzYYbQhaiRv1JasWhsQ8pW9WFNcjUlOoLiG
EX5CKvMAUYS8Kw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:57:00 2024 by rpki-client on console-fra.rpki-client.org