Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
File:                     rs1kyXg317-sBmN92VK97eDCXYU.mft (raw, json)
Hash identifier:          nuEgdNXgJ93cRRBRLJhE2/kDHMDu5jZCSVMn6RM9QzM=
Subject key identifier:   AB:1D:B1:3C:30:4C:26:C5:74:8C:F1:E2:9A:2F:15:DE:4F:A2:DA:FB
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Certificate issuer:       /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial:       019358ADE0B9DC7DD712203C6E75D770F95F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
Manifest number:          0C8F
Signing time:             Sat 23 Nov 2024 11:00:10 +0000
Manifest this update:     Sat 23 Nov 2024 11:00:10 +0000
Manifest next update:     Sun 24 Nov 2024 11:00:10 +0000
Files and hashes:         1: DHQwb8pl36Cd5-t6FZeb8-gDqSA.roa (hash: fKqPEOj1xFuRGmEFC4retIJv11NQ0uzvR05wqpk3AxI=)
                          2: EID29ENSWychSsL0QkO90mVdgq8.roa (hash: cQORP9B1U0Nxodalcp+0xvd//qzmPc4mconl/rHtfLM=)
                          3: PzzwV1Irn8awfg0deJCEYTlDERs.roa (hash: Q2keIUvBIK3Hmhtk5p1Mcf9cV93nHkoCBhO0R1ZMegg=)
                          4: j7yyDbS1ewlIDq3X9h7EZ5TIkVc.roa (hash: hjDnJRKOBwwwgkB1/Z5hHyk4Kns3r+LsqGJ0S3AMcyM=)
                          5: nYMrZ6FBKnRoSg-kRC8zap2GnTI.roa (hash: wUcT5zCtAaTUEJibuSnx5gSio0ilE12UoQwz9XhhEGs=)
                          6: rs1kyXg317-sBmN92VK97eDCXYU.crl (hash: 1Y+p6snGbuBt/WqYvdN20rtT8JO1Rn62M0FZjg24lI4=)
                          7: u4xBDvL_2FpacABdirqO9A0f3EY.roa (hash: hSHrEIN6y3W02cp3UI5I2S4bRviNKTI+M/AtsyD7nmc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:ad:e0:b9:dc:7d:d7:12:20:3c:6e:75:d7:70:f9:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
        Validity
            Not Before: Nov 23 11:00:10 2024 GMT
            Not After : Nov 24 11:00:10 2024 GMT
        Subject: CN=ab1db13c304c26c5748cf1e29a2f15de4fa2dafb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4f:09:5b:18:de:65:55:54:95:2f:53:c2:78:
                    b4:4c:38:63:d6:6b:7f:76:29:2d:47:0a:0e:12:f4:
                    e1:0e:11:e3:9a:78:0c:86:01:ae:87:51:1d:ed:b7:
                    6c:e6:2f:c1:2c:48:2a:a5:91:28:12:e3:69:38:49:
                    96:26:8f:fb:e5:ff:1b:1b:eb:b8:56:ac:6e:ec:d2:
                    66:fb:1d:97:95:6d:86:27:c5:08:5e:a3:21:73:43:
                    2d:69:8d:98:b2:81:81:f5:ba:fc:db:dc:e0:96:bc:
                    68:9c:09:a2:31:4b:61:ad:a9:75:d3:b4:7e:a5:6b:
                    3e:38:ec:3a:c1:0b:c8:1f:d2:36:20:4e:ab:18:ca:
                    64:e3:d7:54:67:c6:ad:35:0e:ee:0d:0d:eb:19:9d:
                    27:71:6b:1c:80:d7:51:98:93:fc:8a:23:fc:f0:da:
                    90:cb:f2:2b:51:a9:d8:02:64:2d:e8:1c:23:5c:33:
                    8d:5f:3d:a6:c9:c5:d4:52:cd:93:e6:48:95:7a:0c:
                    0b:3a:42:05:97:58:50:83:48:87:66:ba:eb:79:8c:
                    5f:a5:79:69:67:68:3f:be:8c:00:69:c0:ab:2a:bf:
                    cb:f4:e6:e5:9f:e2:29:ad:e8:04:2f:f4:cc:a6:81:
                    92:2b:f8:3a:52:0e:be:bb:a3:ba:da:5e:7f:9d:00:
                    16:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:1D:B1:3C:30:4C:26:C5:74:8C:F1:E2:9A:2F:15:DE:4F:A2:DA:FB
            X509v3 Authority Key Identifier:
                keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:69:68:1f:d3:03:ae:f2:34:45:32:4c:88:00:65:4b:a9:47:
         e5:9b:6c:ba:07:70:9c:28:68:b2:a4:ae:f6:8a:3e:28:9b:c7:
         bf:c7:57:b4:5b:01:06:aa:d4:1e:06:56:96:c0:62:ed:11:d5:
         43:15:de:90:56:22:81:45:9a:59:91:46:e6:db:10:3e:9a:19:
         ae:bb:af:6a:78:3a:7b:f8:7b:7f:38:44:f4:75:ac:a0:16:d0:
         fa:ec:5b:c1:32:17:0e:4e:6d:40:1f:ce:c8:50:eb:70:48:87:
         0b:a0:65:df:fe:39:ee:8f:6e:2a:5f:9f:97:4d:cc:e7:20:31:
         57:83:fd:ef:82:2a:38:3d:29:54:58:d8:c4:04:e9:dc:e8:15:
         05:3a:01:f4:23:34:ad:a7:a1:20:f8:c9:99:42:58:c2:ce:59:
         f3:10:11:f8:65:8a:38:aa:32:c8:3f:aa:eb:1f:d2:b9:3b:82:
         3a:8f:44:0f:d1:ae:75:a2:dc:4f:68:7e:cf:8a:47:b1:a3:b4:
         22:51:b2:ee:c4:cb:d7:e6:00:01:73:38:69:76:c6:cb:ee:01:
         4c:47:4c:79:8a:c6:ec:fb:6f:1d:35:0b:7e:ed:1f:1f:82:1d:
         4c:3c:db:3c:dd:5f:9d:f0:a4:b6:24:32:26:b4:49:2f:85:43:
         a8:4d:59:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYreC53H3XEiA8bnXXcPlfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlY2Q2NGM5NzgzN2Q3YmZhYzA2NjM3ZGQ5NTJiZGVkZTBj
MjVkODUwHhcNMjQxMTIzMTEwMDEwWhcNMjQxMTI0MTEwMDEwWjAzMTEwLwYDVQQD
EyhhYjFkYjEzYzMwNGMyNmM1NzQ4Y2YxZTI5YTJmMTVkZTRmYTJkYWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj08JWxjeZVVUlS9Twni0TDhj1mt/
diktRwoOEvThDhHjmngMhgGuh1Ed7bds5i/BLEgqpZEoEuNpOEmWJo/75f8bG+u4
Vqxu7NJm+x2XlW2GJ8UIXqMhc0MtaY2YsoGB9br829zglrxonAmiMUthral107R+
pWs+OOw6wQvIH9I2IE6rGMpk49dUZ8atNQ7uDQ3rGZ0ncWscgNdRmJP8iiP88NqQ
y/IrUanYAmQt6BwjXDONXz2mycXUUs2T5kiVegwLOkIFl1hQg0iHZrrreYxfpXlp
Z2g/vowAacCrKr/L9Obln+IpregEL/TMpoGSK/g6Ug6+u6O62l5/nQAWgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsdsTwwTCbFdIzx4povFd5Potr7MB8GA1UdIwQY
MBaAFK7NZMl4N9e/rAZjfdlSve3gwl2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnMxa3lYZzMxNy1zQm1OOTJWSzk3ZURDWFlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81OTJkNGYtZDcxZS00ZThiLWE2MzIt
MWVjZGUxNzkxNTExLzEvcnMxa3lYZzMxNy1zQm1OOTJWSzk3ZURDWFlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi81OTJkNGYtZDcxZS00ZThiLWE2MzItMWVjZGUxNzkxNTEx
LzEvcnMxa3lYZzMxNy1zQm1OOTJWSzk3ZURDWFlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWloH9MD
rvI0RTJMiABlS6lH5ZtsugdwnChosqSu9oo+KJvHv8dXtFsBBqrUHgZWlsBi7RHV
QxXekFYigUWaWZFG5tsQPpoZrruvang6e/h7fzhE9HWsoBbQ+uxbwTIXDk5tQB/O
yFDrcEiHC6Bl3/457o9uKl+fl03M5yAxV4P974IqOD0pVFjYxATp3OgVBToB9CM0
raehIPjJmUJYws5Z8xAR+GWKOKoyyD+q6x/SuTuCOo9ED9GudaLcT2h+z4pHsaO0
IlGy7sTL1+YAAXM4aXbGy+4BTEdMeYrG7PtvHTULfu0fH4IdTDzbPN1fnfCktiQy
JrRJL4VDqE1Z5g==
-----END CERTIFICATE-----