Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
File:                     0Mv2ugl6drYQyFYDW8GN55fCpnc.mft (raw, json)
Hash identifier:          EdVzEjcxjQwmvUgGrhT93k2BzrkUV2rhEbuDI6CI9bQ=
Subject key identifier:   AF:6E:82:AF:B2:19:22:E0:D5:A9:D9:08:37:86:6D:8A:57:1A:4D:ED
Authority key identifier: D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77
Certificate issuer:       /CN=d0cbf6ba097a76b610c856035bc18de797c2a677
Certificate serial:       019355E429CC527A7EBBF5881C1A0983DE7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
Manifest number:          0559
Signing time:             Fri 22 Nov 2024 22:00:36 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:36 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:36 +0000
Files and hashes:         1: 0Mv2ugl6drYQyFYDW8GN55fCpnc.crl (hash: wMr9lrL7D+0nam+OTYcgpNQU8jgI2qNY11WfdZ7NhiM=)
                          2: AnCLQF3AEeb0_H9PaY-lIa5EN28.roa (hash: vbA1F66256rsCzU3mxewwVf9Afs6E5XbS6o29znFmvY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:29:cc:52:7a:7e:bb:f5:88:1c:1a:09:83:de:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0cbf6ba097a76b610c856035bc18de797c2a677
        Validity
            Not Before: Nov 22 22:00:36 2024 GMT
            Not After : Nov 23 22:00:36 2024 GMT
        Subject: CN=af6e82afb21922e0d5a9d90837866d8a571a4ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f0:98:d1:4f:c6:0f:4d:15:06:9e:ae:58:7d:
                    19:1b:c5:7e:a4:d8:09:58:06:02:7a:4e:26:e3:4b:
                    10:e0:dd:7a:48:b9:17:b9:4d:b3:75:01:ad:0b:d4:
                    a4:d6:76:f4:5d:d9:3e:a0:d2:88:98:d5:b3:8b:db:
                    dc:e1:d2:d7:af:3c:5f:5f:76:28:b8:58:ac:c8:46:
                    52:30:2c:db:38:00:62:5d:56:91:4a:d4:ad:9e:7d:
                    72:a6:47:75:31:15:8e:e5:3b:47:7c:73:a5:5b:64:
                    3d:5c:40:f8:7e:89:8d:a9:8e:fb:c6:64:3e:f9:60:
                    e1:fe:7f:61:5d:e3:02:de:c3:0f:fc:56:09:8e:95:
                    af:82:8f:68:7d:f9:70:0f:15:23:8c:19:5b:c9:4d:
                    ab:e5:71:49:50:e4:3b:78:39:1d:81:8c:ef:57:7e:
                    87:0f:92:1a:ce:4b:59:8d:dd:70:ce:da:1e:a2:18:
                    ce:49:54:6e:10:ea:44:69:3d:7d:91:6f:36:73:cd:
                    3d:9e:71:24:d6:58:e2:d5:ff:c5:00:00:9e:ff:26:
                    7d:f9:e5:ad:c1:4a:7c:be:30:43:01:49:d9:2a:0d:
                    a7:02:ea:32:50:49:7c:da:eb:91:94:b2:5d:eb:11:
                    fb:ef:52:d7:ac:22:24:f0:bd:2b:4d:ce:2a:7c:3d:
                    51:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6E:82:AF:B2:19:22:E0:D5:A9:D9:08:37:86:6D:8A:57:1A:4D:ED
            X509v3 Authority Key Identifier:
                keyid:D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:21:70:49:3b:78:f7:61:4b:8a:32:78:74:a4:d5:18:82:06:
         f4:f3:f8:97:d6:a4:e5:03:a6:78:bc:96:9c:b5:e8:e3:a0:e9:
         5b:17:84:10:48:bd:33:a0:8c:24:f4:dc:b7:43:ef:0a:7d:bb:
         8d:e4:c2:fb:83:47:bb:8f:a0:86:d2:fa:c3:b5:97:21:bc:90:
         0f:13:83:02:79:0c:14:56:be:55:fe:27:7f:01:da:cd:60:16:
         83:40:98:c7:20:58:7e:25:a7:72:8f:90:c4:05:46:8b:6f:b3:
         7c:d4:de:a4:f9:55:38:05:a5:d8:f6:23:c0:40:69:96:97:8c:
         83:b2:bd:7c:f8:06:64:cc:85:2d:2d:29:38:36:cc:eb:fd:9a:
         cc:4d:3a:22:7c:61:0a:56:55:59:90:db:66:e8:d5:42:51:cf:
         0a:53:2c:b1:8a:0b:72:9e:ef:c7:de:27:09:e9:8f:81:76:f2:
         fc:63:eb:8c:67:21:2d:8c:f0:3a:e2:88:d7:4c:db:5a:09:1f:
         84:06:23:b5:6a:25:37:15:2a:4f:4d:98:fd:c4:c9:94:0c:ea:
         cf:88:d3:ac:22:1b:96:32:dd:1b:81:cc:27:78:e3:69:fe:e0:
         e4:00:27:d4:8d:a4:0d:3f:14:5a:4e:ae:2e:78:37:fb:58:02:
         9a:bd:de:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNV5CnMUnp+u/WIHBoJg959MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwY2JmNmJhMDk3YTc2YjYxMGM4NTYwMzViYzE4ZGU3OTdj
MmE2NzcwHhcNMjQxMTIyMjIwMDM2WhcNMjQxMTIzMjIwMDM2WjAzMTEwLwYDVQQD
EyhhZjZlODJhZmIyMTkyMmUwZDVhOWQ5MDgzNzg2NmQ4YTU3MWE0ZGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvCY0U/GD00VBp6uWH0ZG8V+pNgJ
WAYCek4m40sQ4N16SLkXuU2zdQGtC9Sk1nb0Xdk+oNKImNWzi9vc4dLXrzxfX3Yo
uFisyEZSMCzbOABiXVaRStStnn1ypkd1MRWO5TtHfHOlW2Q9XED4fomNqY77xmQ+
+WDh/n9hXeMC3sMP/FYJjpWvgo9offlwDxUjjBlbyU2r5XFJUOQ7eDkdgYzvV36H
D5IazktZjd1wztoeohjOSVRuEOpEaT19kW82c809nnEk1lji1f/FAACe/yZ9+eWt
wUp8vjBDAUnZKg2nAuoyUEl82uuRlLJd6xH771LXrCIk8L0rTc4qfD1RdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9ugq+yGSLg1anZCDeGbYpXGk3tMB8GA1UdIwQY
MBaAFNDL9roJena2EMhWA1vBjeeXwqZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME12MnVnbDZkcllReUZZRFc4R041NWZDcG5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mOTliNjItYjNlMy00YzVkLWFhODYt
ZDY2OGM1M2Y2NjEyLzEvME12MnVnbDZkcllReUZZRFc4R041NWZDcG5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mOTliNjItYjNlMy00YzVkLWFhODYtZDY2OGM1M2Y2NjEy
LzEvME12MnVnbDZkcllReUZZRFc4R041NWZDcG5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCFwSTt4
92FLijJ4dKTVGIIG9PP4l9ak5QOmeLyWnLXo46DpWxeEEEi9M6CMJPTct0PvCn27
jeTC+4NHu4+ghtL6w7WXIbyQDxODAnkMFFa+Vf4nfwHazWAWg0CYxyBYfiWnco+Q
xAVGi2+zfNTepPlVOAWl2PYjwEBplpeMg7K9fPgGZMyFLS0pODbM6/2azE06Inxh
ClZVWZDbZujVQlHPClMssYoLcp7vx94nCemPgXby/GPrjGchLYzwOuKI10zbWgkf
hAYjtWolNxUqT02Y/cTJlAzqz4jTrCIbljLdG4HMJ3jjaf7g5AAn1I2kDT8UWk6u
Lng3+1gCmr3eng==
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:41:31 2024 by rpki-client on console-fra.rpki-client.org