Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
File:                     hElpeAFBgkzQrL-lp4RhHusKfds.mft (raw, json)
Hash identifier:          iMPjZwKwG04vzgiovwFjxOmnKuVI/euJrzZGIZ/ywwA=
Subject key identifier:   CF:97:D4:0C:CD:A3:2B:03:EA:9B:1D:12:38:7E:4E:F6:11:47:78:21
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Certificate issuer:       /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial:       019356BFB0DF8D5AEBDA8D1566F1DD2F0994
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
Manifest number:          041A
Signing time:             Sat 23 Nov 2024 02:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:23 +0000
Files and hashes:         1: hElpeAFBgkzQrL-lp4RhHusKfds.crl (hash: rbFSo2DNkLJlFjrkuEyRCo1bRny7YpbqP7MiBd7MyUA=)
                          2: mkexmrcpP9Bn98t7JCUYJGJwOYI.roa (hash: hW3i6FA8RFxyHl371joABk2n97802VOwTWDIvnTxGas=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:b0:df:8d:5a:eb:da:8d:15:66:f1:dd:2f:09:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
        Validity
            Not Before: Nov 23 02:00:23 2024 GMT
            Not After : Nov 24 02:00:23 2024 GMT
        Subject: CN=cf97d40ccda32b03ea9b1d12387e4ef611477821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4b:82:d2:3d:bd:a1:e8:e5:32:73:60:28:ce:
                    b4:85:4e:8d:11:20:61:55:85:9f:8c:f8:eb:cc:ba:
                    4d:09:55:39:97:30:18:99:52:91:c8:d8:0c:60:2a:
                    ab:79:91:94:32:a5:19:95:28:a9:67:65:09:a2:72:
                    4e:27:02:9c:93:53:83:6b:03:c8:68:52:a3:23:29:
                    29:ec:fd:4e:dc:69:bc:56:e8:b0:a9:16:b3:18:7f:
                    eb:da:9e:93:4b:c0:6c:a8:e8:11:fe:2c:f1:4d:06:
                    78:79:56:d2:bd:cb:eb:83:a3:0e:02:80:cf:1d:10:
                    3e:d0:14:31:ef:99:ae:91:96:56:de:27:ba:bc:38:
                    d1:2e:cb:53:21:f9:ff:fc:96:b7:92:e6:cf:15:0e:
                    73:e2:9c:71:96:0a:c1:50:3b:42:78:47:9f:af:af:
                    ae:1c:33:ff:93:98:77:bb:2a:ed:83:e9:1d:83:64:
                    87:2b:79:cc:4d:6e:91:4f:05:a4:0c:4a:3d:d2:c1:
                    6c:4f:44:64:cc:44:5e:06:ca:7f:0e:e1:6d:d3:ad:
                    7b:a2:06:90:55:10:a8:ef:e9:50:71:6f:03:8e:cd:
                    f4:8d:b3:b6:74:dd:fc:54:65:d8:8c:6d:87:47:ab:
                    61:3c:76:73:a2:77:64:36:1c:43:61:c5:f8:84:5d:
                    db:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:97:D4:0C:CD:A3:2B:03:EA:9B:1D:12:38:7E:4E:F6:11:47:78:21
            X509v3 Authority Key Identifier:
                keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c8:38:21:5d:6c:14:15:1e:7f:9b:54:39:03:9b:cd:ef:ff:
         4b:39:c0:8a:b1:62:4b:d1:27:53:eb:55:f1:1b:b1:8d:68:b5:
         12:b1:24:c4:08:7c:42:1b:5b:22:fa:dc:77:cc:cf:84:fd:11:
         79:be:05:f3:b2:e3:0d:aa:4f:a2:98:cc:6f:ba:4e:28:3d:b5:
         b3:96:2e:7a:0a:57:fc:9d:e5:76:75:e2:52:f3:fd:ab:4d:c7:
         11:39:62:2c:ae:31:62:a4:26:b9:b4:d5:29:5b:7a:c8:0c:9b:
         30:6a:d8:ef:4d:00:eb:51:68:4b:ba:3b:7d:af:d2:9d:fb:0e:
         3a:f6:f1:69:e5:27:b1:2a:52:dd:26:e6:d2:c5:1d:78:f6:c1:
         be:19:41:59:c9:0b:1d:03:14:8e:f5:c8:3a:72:7b:e3:23:b8:
         06:e7:87:4b:40:0a:dd:0d:77:9e:15:13:39:67:be:66:f0:40:
         fe:75:7e:b2:6e:4b:11:d1:f2:24:14:00:5c:d8:06:2e:ff:7c:
         05:4d:03:9a:79:7a:ff:a0:c4:59:ab:83:2c:f4:a8:9d:0b:06:
         32:20:71:70:a8:2e:3a:5f:65:bc:2e:7c:4a:31:ff:eb:ff:c8:
         ce:3a:be:08:0d:81:95:2e:4f:3e:44:55:64:fa:e0:6e:51:83:
         22:9f:21:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWv7DfjVrr2o0VZvHdLwmUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NDk2OTc4MDE0MTgyNGNkMGFjYmZhNWE3ODQ2MTFlZWIw
YTdkZGIwHhcNMjQxMTIzMDIwMDIzWhcNMjQxMTI0MDIwMDIzWjAzMTEwLwYDVQQD
EyhjZjk3ZDQwY2NkYTMyYjAzZWE5YjFkMTIzODdlNGVmNjExNDc3ODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kuC0j29oejlMnNgKM60hU6NESBh
VYWfjPjrzLpNCVU5lzAYmVKRyNgMYCqreZGUMqUZlSipZ2UJonJOJwKck1ODawPI
aFKjIykp7P1O3Gm8VuiwqRazGH/r2p6TS8BsqOgR/izxTQZ4eVbSvcvrg6MOAoDP
HRA+0BQx75mukZZW3ie6vDjRLstTIfn//Ja3kubPFQ5z4pxxlgrBUDtCeEefr6+u
HDP/k5h3uyrtg+kdg2SHK3nMTW6RTwWkDEo90sFsT0RkzEReBsp/DuFt0617ogaQ
VRCo7+lQcW8Djs30jbO2dN38VGXYjG2HR6thPHZzondkNhxDYcX4hF3byQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+X1AzNoysD6psdEjh+TvYRR3ghMB8GA1UdIwQY
MBaAFIRJaXgBQYJM0Ky/paeEYR7rCn3bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEVscGVBRkJna3pRckwtbHA0UmhIdXNLZmRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lNjJmOTUtYWJiZC00MzBkLTgxNjAt
MDRhYzE3ODgxYWE5LzEvaEVscGVBRkJna3pRckwtbHA0UmhIdXNLZmRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9lNjJmOTUtYWJiZC00MzBkLTgxNjAtMDRhYzE3ODgxYWE5
LzEvaEVscGVBRkJna3pRckwtbHA0UmhIdXNLZmRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsg4IV1s
FBUef5tUOQObze//SznAirFiS9EnU+tV8RuxjWi1ErEkxAh8QhtbIvrcd8zPhP0R
eb4F87LjDapPopjMb7pOKD21s5YuegpX/J3ldnXiUvP9q03HETliLK4xYqQmubTV
KVt6yAybMGrY700A61FoS7o7fa/SnfsOOvbxaeUnsSpS3Sbm0sUdePbBvhlBWckL
HQMUjvXIOnJ74yO4BueHS0AK3Q13nhUTOWe+ZvBA/nV+sm5LEdHyJBQAXNgGLv98
BU0Dmnl6/6DEWauDLPSonQsGMiBxcKguOl9lvC58SjH/6//Izjq+CA2BlS5PPkRV
ZPrgblGDIp8hZA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:11:40 2024 by rpki-client on console-fra.rpki-client.org