Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
File:                     ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft (raw, json)
Hash identifier:          P1N36UumihcuMuSDLDIJEgoCCewj+7m6vuir3ZTJnpI=
Subject key identifier:   19:CE:42:A2:C6:D4:90:A5:72:A5:60:3D:CE:CA:2F:08:13:61:F6:A8
Authority key identifier: 66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
Certificate issuer:       /CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Certificate serial:       0193512C14EF9BEFAF84726D34F765BAFCB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
Manifest number:          1372
Signing time:             Fri 22 Nov 2024 00:01:03 +0000
Manifest this update:     Fri 22 Nov 2024 00:01:03 +0000
Manifest next update:     Sat 23 Nov 2024 00:01:03 +0000
Files and hashes:         1: 9iNNjitmnxEMLr2K1yCbvuQUs-I.roa (hash: DOiyHp8slWnZ34606YAeFptixA22bjrRB1dI4k7fo3k=)
                          2: Neqj_Uo2IH979jpQtFxOAhP3KgU.roa (hash: eMlQILlUSDHWc+VPLLsa+M+kQcgb5M997fVJWehkeBA=)
                          3: Yxb0tQH6JbBw81cjfua2ZA3hME0.roa (hash: 1qK1Iqi1UXJTNMWyoZhJdZYYMS22vHvxVDNnj4Ne+Jk=)
                          4: ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl (hash: PI4a8wcU/QAFkrKD3PqUDq4ipfsaHw2ZCOaW/FG8OZU=)
                          5: _fKGQgaJezM2GM4k10QyNUNTCuQ.roa (hash: xj9tc3HgRHHOaF9irl6Si2kNvOWfiWuIme8OtwLfZ/s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2c:14:ef:9b:ef:af:84:72:6d:34:f7:65:ba:fc:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6665dd97665a23b1b183e223822b66b5ae536a2f
        Validity
            Not Before: Nov 22 00:01:03 2024 GMT
            Not After : Nov 23 00:01:03 2024 GMT
        Subject: CN=19ce42a2c6d490a572a5603dceca2f081361f6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fc:ac:69:9a:77:1f:66:8c:00:7d:dd:aa:84:
                    b5:2c:68:66:0d:35:c4:c0:72:d0:9f:eb:3b:53:9c:
                    d2:bb:72:47:30:3a:70:c6:76:e4:19:f9:f8:8a:e0:
                    89:b6:74:42:94:e2:54:64:4f:9f:46:74:f2:78:f0:
                    7d:90:37:c7:be:2b:0e:53:3d:36:e8:fa:1a:5d:d6:
                    86:de:21:29:85:39:6b:ea:f4:c5:cb:70:33:db:a7:
                    0c:48:f2:e1:ea:5f:fe:35:59:a5:ce:d2:1c:e7:cf:
                    df:18:3d:b6:17:5c:c4:e5:ce:c1:d2:29:cd:f7:42:
                    a7:62:6a:f2:01:ee:32:97:9e:4b:55:08:1f:b1:50:
                    0e:a4:d3:cc:7d:03:5a:3f:62:26:e2:d4:0d:b4:7f:
                    c0:ff:a4:18:58:0e:ff:ab:56:bb:38:09:e9:7a:be:
                    04:e4:18:0f:2d:d6:15:d6:05:43:1d:6c:bf:06:f4:
                    1d:e6:45:57:aa:3c:5b:7d:cd:ac:a1:30:c7:a2:79:
                    24:c8:08:7b:b9:50:7e:77:0e:80:35:2b:3d:7a:6c:
                    e7:41:55:da:23:a6:de:0e:4d:5b:0b:9a:2c:ca:06:
                    b4:f7:67:2d:7c:d4:98:18:d4:b6:bd:10:7e:6e:63:
                    8e:ef:f8:59:3e:4d:38:8a:a4:d0:20:11:33:7c:91:
                    7a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:CE:42:A2:C6:D4:90:A5:72:A5:60:3D:CE:CA:2F:08:13:61:F6:A8
            X509v3 Authority Key Identifier:
                keyid:66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:86:b8:e5:19:2f:16:01:53:9f:54:15:6c:63:c8:29:6f:28:
         87:41:e9:fe:d2:b0:99:e9:ec:4d:30:16:c1:20:c3:1b:63:de:
         2b:a5:7b:25:ba:f3:5e:08:ee:32:8e:07:61:fd:64:2b:7d:0c:
         0f:a1:cf:1f:cd:76:1f:02:57:43:9b:27:cf:6d:bf:14:42:73:
         d7:4c:37:8d:c6:97:6a:28:6c:00:b6:bd:ef:31:55:80:c2:6d:
         fc:07:3b:99:9e:f8:87:59:9d:2f:e7:62:15:f0:ca:51:41:9e:
         5b:df:e2:17:c2:75:65:e6:32:51:d7:5a:47:c1:58:67:57:1d:
         49:25:de:2a:f0:d7:5f:24:6f:c4:ca:7a:d2:7f:ba:93:ea:9f:
         90:83:1a:3c:aa:d5:5a:f2:b6:56:09:bc:8e:22:07:89:00:db:
         0e:65:4b:f2:c2:ae:ba:ed:5e:f6:e8:d7:67:34:7f:2a:45:6d:
         e7:98:99:32:43:b9:4d:44:6e:eb:48:43:6e:17:b3:d0:c5:36:
         f3:31:72:f3:09:08:74:31:d1:0a:4b:c4:b7:d8:84:87:9d:d9:
         7d:16:fb:40:de:2c:f9:a7:60:0e:b7:78:71:7f:6a:0c:a6:23:
         29:9f:96:f6:bc:f5:13:fc:64:44:25:7a:f5:44:20:ef:db:14:
         4f:4c:0d:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRLBTvm++vhHJtNPdluvy3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NjVkZDk3NjY1YTIzYjFiMTgzZTIyMzgyMmI2NmI1YWU1
MzZhMmYwHhcNMjQxMTIyMDAwMTAzWhcNMjQxMTIzMDAwMTAzWjAzMTEwLwYDVQQD
EygxOWNlNDJhMmM2ZDQ5MGE1NzJhNTYwM2RjZWNhMmYwODEzNjFmNmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPysaZp3H2aMAH3dqoS1LGhmDTXE
wHLQn+s7U5zSu3JHMDpwxnbkGfn4iuCJtnRClOJUZE+fRnTyePB9kDfHvisOUz02
6PoaXdaG3iEphTlr6vTFy3Az26cMSPLh6l/+NVmlztIc58/fGD22F1zE5c7B0inN
90KnYmryAe4yl55LVQgfsVAOpNPMfQNaP2Im4tQNtH/A/6QYWA7/q1a7OAnper4E
5BgPLdYV1gVDHWy/BvQd5kVXqjxbfc2soTDHonkkyAh7uVB+dw6ANSs9emznQVXa
I6beDk1bC5osyga092ctfNSYGNS2vRB+bmOO7/hZPk04iqTQIBEzfJF6qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnOQqLG1JClcqVgPc7KLwgTYfaoMB8GA1UdIwQY
MBaAFGZl3ZdmWiOxsYPiI4IrZrWuU2ovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWIt
ZThkNzA3MTdmZjhhLzEvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWItZThkNzA3MTdmZjhh
LzEvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQIa45Rkv
FgFTn1QVbGPIKW8oh0Hp/tKwmensTTAWwSDDG2PeK6V7JbrzXgjuMo4HYf1kK30M
D6HPH812HwJXQ5snz22/FEJz10w3jcaXaihsALa97zFVgMJt/Ac7mZ74h1mdL+di
FfDKUUGeW9/iF8J1ZeYyUddaR8FYZ1cdSSXeKvDXXyRvxMp60n+6k+qfkIMaPKrV
WvK2Vgm8jiIHiQDbDmVL8sKuuu1e9ujXZzR/KkVt55iZMkO5TURu60hDbhez0MU2
8zFy8wkIdDHRCkvEt9iEh53ZfRb7QN4s+adgDrd4cX9qDKYjKZ+W9rz1E/xkRCV6
9UQg79sUT0wNIQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:40:32 2024 by rpki-client on console-fra.rpki-client.org