Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
File:                     MGavc-_zrCH_F6CVL_Nw5gykS10.mft (raw, json)
Hash identifier:          WuOJQht3r1eEtM1uE+1CwDYDPz/5QHQ0K7rba+lTBpY=
Subject key identifier:   84:B0:E0:E3:A4:7E:A5:61:48:B9:4D:0A:DF:F7:3E:0D:51:C6:7F:DB
Authority key identifier: 30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D
Certificate issuer:       /CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
Certificate serial:       019369D8A88631D2BBAD582DDB512CA3EF68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
Manifest number:          137A
Signing time:             Tue 26 Nov 2024 19:00:26 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:26 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:26 +0000
Files and hashes:         1: E4yycqohGkC-XxmZgouWOj-U-G0.roa (hash: qAC10Ztzcv8ehFxpH/l9Mknv1zUj3ldK2x7pT+fV0mw=)
                          2: MGavc-_zrCH_F6CVL_Nw5gykS10.crl (hash: swBuB31BbWMJSANMCfp9cugU14KT+AzRFByTTX5ELnE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:a8:86:31:d2:bb:ad:58:2d:db:51:2c:a3:ef:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
        Validity
            Not Before: Nov 26 19:00:26 2024 GMT
            Not After : Nov 27 19:00:26 2024 GMT
        Subject: CN=84b0e0e3a47ea56148b94d0adff73e0d51c67fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cd:ed:53:d0:fe:a3:b4:95:4e:93:b5:4f:6e:
                    05:98:f9:ab:c9:a0:0d:91:d7:31:9a:7e:90:24:01:
                    48:ee:75:18:f0:a2:45:c2:18:8d:6f:77:6f:7e:b4:
                    e3:f2:55:dd:25:7b:7b:a1:ae:45:66:14:16:9d:2e:
                    b1:09:8a:13:c4:ce:5d:cd:d2:f9:2b:e4:68:04:2a:
                    0b:b4:90:e0:08:cf:89:06:20:f7:7f:c1:74:e7:42:
                    78:a4:9a:df:93:5e:7b:d2:a8:84:8b:15:3f:1d:67:
                    bb:b3:51:b4:99:f6:b0:f1:38:ff:b9:c7:ce:87:60:
                    51:44:94:17:ae:f0:0c:38:ee:9e:d8:e9:9e:df:dd:
                    4d:05:12:b1:d2:75:c9:31:9a:3c:f1:e1:8b:d7:c2:
                    31:f7:73:8f:7b:59:a0:c5:38:36:d0:f7:c6:c9:5f:
                    ab:de:d3:2a:0d:11:fe:4c:be:23:be:02:4b:95:17:
                    76:8c:4b:ff:bd:53:fc:c8:da:94:0a:79:97:4e:b0:
                    e5:02:c4:36:f4:29:e4:4d:c6:9b:b5:bd:11:6a:e4:
                    9d:1f:60:d7:3e:26:e0:c1:49:95:9c:05:f0:2f:6e:
                    1c:3f:0e:76:85:97:a4:62:35:49:5d:86:ab:0f:ad:
                    f6:e6:c8:20:81:92:6a:89:b8:ac:6f:e3:76:bc:d6:
                    a5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B0:E0:E3:A4:7E:A5:61:48:B9:4D:0A:DF:F7:3E:0D:51:C6:7F:DB
            X509v3 Authority Key Identifier:
                keyid:30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f0:75:fd:e0:21:7c:59:42:50:01:25:0f:ac:0e:5f:0a:04:
         b0:5c:a5:82:6d:b7:c4:f5:7a:af:ed:75:a1:b0:72:ce:8c:a3:
         88:25:49:a7:f8:cc:72:7e:cc:1b:f7:63:dc:2c:22:cb:b1:d6:
         72:eb:d2:63:9e:44:07:ff:ff:72:b8:91:50:7c:53:1a:80:6d:
         3a:05:b6:44:36:25:75:02:93:73:bd:85:c1:fb:c9:ff:c8:42:
         79:86:9b:8a:d6:76:4c:1c:23:f9:8d:1d:0f:db:cd:1f:79:ae:
         b8:d2:1b:24:92:4a:f5:0a:6e:6e:18:45:99:60:6e:b6:19:5c:
         54:87:9b:c3:2d:fc:da:a4:ef:32:81:4a:0f:eb:21:5f:6a:15:
         00:c4:14:e4:e5:f5:bc:1a:41:ca:9b:42:f7:1b:fb:de:41:1a:
         af:55:82:60:fb:0d:1c:b6:43:0c:07:1c:67:41:3d:be:75:29:
         b6:71:5b:e2:86:4b:56:88:2d:97:8a:39:41:1b:ac:e3:ca:1f:
         28:fb:1c:61:97:4a:9c:c9:a1:65:b9:04:e8:cb:20:63:bc:ec:
         4a:e0:bc:2d:4c:f9:74:dc:60:22:dd:35:84:f0:16:ff:45:3c:
         63:41:1f:a3:5b:20:3d:33:0b:8b:5e:87:98:71:67:7b:ff:3f:
         80:38:ae:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2KiGMdK7rVgt21Eso+9oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNjZhZjczZWZmM2FjMjFmZjE3YTA5NTJmZjM3MGU2MGNh
NDRiNWQwHhcNMjQxMTI2MTkwMDI2WhcNMjQxMTI3MTkwMDI2WjAzMTEwLwYDVQQD
Eyg4NGIwZTBlM2E0N2VhNTYxNDhiOTRkMGFkZmY3M2UwZDUxYzY3ZmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos3tU9D+o7SVTpO1T24FmPmryaAN
kdcxmn6QJAFI7nUY8KJFwhiNb3dvfrTj8lXdJXt7oa5FZhQWnS6xCYoTxM5dzdL5
K+RoBCoLtJDgCM+JBiD3f8F050J4pJrfk1570qiEixU/HWe7s1G0mfaw8Tj/ucfO
h2BRRJQXrvAMOO6e2Ome391NBRKx0nXJMZo88eGL18Ix93OPe1mgxTg20PfGyV+r
3tMqDRH+TL4jvgJLlRd2jEv/vVP8yNqUCnmXTrDlAsQ29CnkTcabtb0RauSdH2DX
PibgwUmVnAXwL24cPw52hZekYjVJXYarD6325sgggZJqibisb+N2vNalEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISw4OOkfqVhSLlNCt/3Pg1Rxn/bMB8GA1UdIwQY
MBaAFDBmr3Pv86wh/xeglS/zcOYMpEtdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUdhdmMtX3pyQ0hfRjZDVkxfTnc1Z3lrUzEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8yMzJjZmQtNzZkYy00OWU5LWE5NGQt
NTE4OGVhMTdkOWE5LzEvTUdhdmMtX3pyQ0hfRjZDVkxfTnc1Z3lrUzEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8yMzJjZmQtNzZkYy00OWU5LWE5NGQtNTE4OGVhMTdkOWE5
LzEvTUdhdmMtX3pyQ0hfRjZDVkxfTnc1Z3lrUzEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk/B1/eAh
fFlCUAElD6wOXwoEsFylgm23xPV6r+11obByzoyjiCVJp/jMcn7MG/dj3Cwiy7HW
cuvSY55EB///criRUHxTGoBtOgW2RDYldQKTc72FwfvJ/8hCeYabitZ2TBwj+Y0d
D9vNH3muuNIbJJJK9QpubhhFmWButhlcVIebwy382qTvMoFKD+shX2oVAMQU5OX1
vBpByptC9xv73kEar1WCYPsNHLZDDAccZ0E9vnUptnFb4oZLVogtl4o5QRus48of
KPscYZdKnMmhZbkE6MsgY7zsSuC8LUz5dNxgIt01hPAW/0U8Y0Efo1sgPTMLi16H
mHFne/8/gDiurg==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:41:34 2024 by rpki-client on console-fra.rpki-client.org