Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
File:                     Obi08Elz83zGn7fCNGj5U_FJQg4.mft (raw, json)
Hash identifier:          DIWw/dXU7lICz7LQ7I/uRMUv7mpXKlVpBhHk1aDesd0=
Subject key identifier:   77:70:25:04:C4:39:29:1B:BF:F1:61:52:83:5B:97:30:E8:25:21:CD
Authority key identifier: 39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E
Certificate issuer:       /CN=39b8b4f04973f37cc69fb7c23468f953f149420e
Certificate serial:       019358E549A259C404D045DBE02E236EF8B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 12:00:41 +0000
Manifest this update:     Sat 23 Nov 2024 12:00:41 +0000
Manifest next update:     Sun 24 Nov 2024 12:00:41 +0000
Files and hashes:         1: NNxE_RB4Aux1ggglU-6x4tKxcqI.roa (hash: acPfvXZuY+QBpHKDWkcG4JZpEO6IR4J32RF+aGtdQdo=)
                          2: Obi08Elz83zGn7fCNGj5U_FJQg4.crl (hash: x1X56HCXDwNDwLTvV4IlU0OIprKuH95xAIX63QUcow8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:e5:49:a2:59:c4:04:d0:45:db:e0:2e:23:6e:f8:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b8b4f04973f37cc69fb7c23468f953f149420e
        Validity
            Not Before: Nov 23 12:00:41 2024 GMT
            Not After : Nov 24 12:00:41 2024 GMT
        Subject: CN=77702504c439291bbff16152835b9730e82521cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4b:7e:15:24:d5:31:d4:ab:fb:f8:ce:f6:87:
                    48:59:a6:d2:3b:63:76:f6:26:2b:4b:16:4b:a7:b7:
                    bf:d9:ca:ae:d8:fc:e6:85:5f:ce:51:5d:9a:b0:25:
                    7e:d3:74:d9:d9:65:e2:4e:5f:a7:a4:74:81:45:b6:
                    6c:8d:71:b8:48:10:80:af:52:cf:eb:3f:ba:8a:ed:
                    8a:d4:80:ac:f8:b2:c2:e3:4d:b6:1c:aa:d3:79:aa:
                    5e:29:5a:71:28:58:3e:4d:b4:19:fc:38:8a:5e:d6:
                    f4:62:e6:cf:6b:b1:a5:19:6d:d1:27:f5:c9:cd:63:
                    e1:b1:8d:2a:7a:ed:74:5e:c4:eb:12:1b:a0:ac:3e:
                    51:53:e8:b2:1c:99:16:79:f9:ac:09:12:4b:52:32:
                    be:11:87:0a:06:52:4b:ea:af:28:24:6e:8d:b0:48:
                    ef:1c:72:ca:35:5c:56:48:a6:a1:2c:3f:5f:46:15:
                    82:0d:0a:5a:7e:fc:fd:55:de:09:9c:a1:17:ce:35:
                    83:fb:fa:32:8c:f2:d9:43:f4:c9:3f:6f:66:68:44:
                    b9:3f:99:00:52:81:1c:0c:d7:b0:91:5e:2d:03:70:
                    a0:45:17:10:14:a8:d5:c3:f7:ae:86:b6:4f:0f:90:
                    c2:24:c1:61:57:83:27:ce:a0:a8:b7:26:de:d2:65:
                    57:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:70:25:04:C4:39:29:1B:BF:F1:61:52:83:5B:97:30:E8:25:21:CD
            X509v3 Authority Key Identifier:
                keyid:39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:23:63:c6:22:75:4e:77:ed:6a:e2:26:88:4d:f4:f1:08:21:
         bd:e3:3b:3b:e5:6f:75:3c:82:b4:68:91:06:3c:87:32:53:1b:
         39:12:cb:b7:50:b7:66:ca:fd:33:b8:81:c6:34:3a:0d:8e:0f:
         4d:8b:55:a3:2e:74:0c:5e:62:6d:ef:ad:fe:f8:f1:15:ed:04:
         00:fe:22:98:b7:09:56:b3:4a:04:25:d1:b7:e7:d2:69:2e:9a:
         02:ef:c4:f6:f6:a9:2b:6b:cb:74:6e:5f:95:bf:ca:24:2d:89:
         46:a6:6c:e6:0f:1b:c4:09:99:d6:b9:64:38:86:56:5d:67:33:
         d1:65:2e:c7:88:74:d1:55:14:4f:dc:f0:0b:7f:0b:e2:19:1b:
         a0:6a:68:3a:69:30:78:06:25:39:4a:e8:da:85:ee:f1:ff:be:
         27:cb:a9:69:a4:cf:38:87:a0:1b:4f:90:22:39:06:ce:a1:d5:
         a6:db:a2:a7:0c:ba:4f:1a:d9:73:cc:16:44:3f:09:ca:73:51:
         9b:31:a2:7e:84:62:3e:20:31:04:02:ff:18:71:63:e3:5a:d1:
         2e:22:16:b4:0c:0b:23:45:6a:52:b9:3a:ca:a3:1f:75:c3:1e:
         46:7c:41:b5:04:61:79:4c:f4:1e:46:3a:92:f0:ae:5d:89:09:
         b6:6b:ca:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNY5UmiWcQE0EXb4C4jbvizMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YjhiNGYwNDk3M2YzN2NjNjlmYjdjMjM0NjhmOTUzZjE0
OTQyMGUwHhcNMjQxMTIzMTIwMDQxWhcNMjQxMTI0MTIwMDQxWjAzMTEwLwYDVQQD
Eyg3NzcwMjUwNGM0MzkyOTFiYmZmMTYxNTI4MzViOTczMGU4MjUyMWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUt+FSTVMdSr+/jO9odIWabSO2N2
9iYrSxZLp7e/2cqu2PzmhV/OUV2asCV+03TZ2WXiTl+npHSBRbZsjXG4SBCAr1LP
6z+6iu2K1ICs+LLC4022HKrTeapeKVpxKFg+TbQZ/DiKXtb0YubPa7GlGW3RJ/XJ
zWPhsY0qeu10XsTrEhugrD5RU+iyHJkWefmsCRJLUjK+EYcKBlJL6q8oJG6NsEjv
HHLKNVxWSKahLD9fRhWCDQpafvz9Vd4JnKEXzjWD+/oyjPLZQ/TJP29maES5P5kA
UoEcDNewkV4tA3CgRRcQFKjVw/euhrZPD5DCJMFhV4MnzqCotybe0mVXrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdwJQTEOSkbv/FhUoNblzDoJSHNMB8GA1UdIwQY
MBaAFDm4tPBJc/N8xp+3wjRo+VPxSUIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2JpMDhFbHo4M3pHbjdmQ05HajVVX0ZKUWc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi84YWNjNGItZTBhMi00ZDIxLWI4NjQt
OTkwMzA3ZDIwM2M4LzEvT2JpMDhFbHo4M3pHbjdmQ05HajVVX0ZKUWc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi84YWNjNGItZTBhMi00ZDIxLWI4NjQtOTkwMzA3ZDIwM2M4
LzEvT2JpMDhFbHo4M3pHbjdmQ05HajVVX0ZKUWc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbyNjxiJ1
TnftauImiE308QghveM7O+VvdTyCtGiRBjyHMlMbORLLt1C3Zsr9M7iBxjQ6DY4P
TYtVoy50DF5ibe+t/vjxFe0EAP4imLcJVrNKBCXRt+fSaS6aAu/E9vapK2vLdG5f
lb/KJC2JRqZs5g8bxAmZ1rlkOIZWXWcz0WUux4h00VUUT9zwC38L4hkboGpoOmkw
eAYlOUro2oXu8f++J8upaaTPOIegG0+QIjkGzqHVptuipwy6TxrZc8wWRD8JynNR
mzGifoRiPiAxBAL/GHFj41rRLiIWtAwLI0VqUrk6yqMfdcMeRnxBtQRheUz0HkY6
kvCuXYkJtmvKnw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 14:52:19 2024 by rpki-client on console-ams.rpki-client.org