Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
File:                     Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft (raw, json)
Hash identifier:          fUDE7CAxJ9iH8hxdfsKG8Dhe53OJtrsg/pfimatFwTM=
Subject key identifier:   AF:32:10:A2:B7:0B:CF:2F:8B:26:11:D9:DD:BD:D7:0F:98:18:AD:F8
Authority key identifier: 63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47
Certificate issuer:       /CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
Certificate serial:       0193591C569E6BC3713708581CB5486A6659
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
Manifest number:          1378
Signing time:             Sat 23 Nov 2024 13:00:49 +0000
Manifest this update:     Sat 23 Nov 2024 13:00:49 +0000
Manifest next update:     Sun 24 Nov 2024 13:00:49 +0000
Files and hashes:         1: PmO_uOpAaee8Q6P9O2qRKkVaABc.roa (hash: eQTpX81RRqb/yNLkIUCvbrgN3q9lYBnbavWv4fly0nU=)
                          2: Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl (hash: 63sQ+Pg9tiw82qBGnszTFnaFLqP3h68gs3yWN78iRsc=)
                          3: pnw46b8q4O1SLQ_CKYNcUIA_cP4.roa (hash: hvi2VV92szvwCFLLK1sBnMcEC62YOW9GzatVyTdkLZw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:1c:56:9e:6b:c3:71:37:08:58:1c:b5:48:6a:66:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
        Validity
            Not Before: Nov 23 13:00:49 2024 GMT
            Not After : Nov 24 13:00:49 2024 GMT
        Subject: CN=af3210a2b70bcf2f8b2611d9ddbdd70f9818adf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9f:a3:b5:f9:bc:dc:98:66:2a:cd:28:8c:14:
                    25:0a:16:4d:17:c8:01:20:3e:c6:e5:bc:3d:06:8f:
                    83:08:53:d6:73:8f:bc:4f:90:9f:45:67:cc:3a:d4:
                    4b:56:4a:53:b5:9a:f9:ff:fe:4b:7a:bf:01:f9:8e:
                    04:0d:91:6a:5e:c0:48:73:91:26:79:3d:c0:d5:ff:
                    60:23:6b:8e:74:e8:c2:d8:43:f7:07:11:76:90:7b:
                    66:82:20:93:e5:67:50:55:53:c4:d6:c7:73:57:3e:
                    9f:3a:f4:2d:88:b2:29:b6:6c:7e:ac:b5:28:11:10:
                    85:0f:fc:13:34:d9:ee:4c:38:e9:a5:e0:df:50:93:
                    46:62:4a:04:35:64:db:a4:eb:e2:fc:d8:f3:b4:a9:
                    b4:b2:55:c1:07:72:0b:a6:76:b1:bd:84:42:a0:20:
                    57:29:f6:73:10:1d:66:b0:0b:4e:bd:3e:ba:b4:a8:
                    d3:fe:a6:3e:5d:03:df:b5:75:01:66:7a:e4:d8:ee:
                    21:11:09:79:8e:a6:c8:74:37:6f:e4:e6:14:40:19:
                    dd:40:29:9a:97:5a:21:7c:77:1d:fb:a7:c8:08:f8:
                    f0:ee:a9:34:c1:4b:d7:e4:c3:f3:88:e6:a6:a9:7f:
                    bb:ae:00:23:c1:18:5a:cd:15:f0:4a:67:9c:80:b7:
                    b0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:32:10:A2:B7:0B:CF:2F:8B:26:11:D9:DD:BD:D7:0F:98:18:AD:F8
            X509v3 Authority Key Identifier:
                keyid:63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:05:1a:4a:04:02:b6:7f:62:05:c7:a8:ef:5d:83:08:7c:35:
         09:0e:97:87:57:b0:2b:23:22:79:ae:2b:00:63:9c:be:f6:dc:
         ea:ed:42:13:a0:8b:6c:ae:e8:25:a5:fb:a9:0b:47:2c:2f:02:
         d1:0f:2d:6e:7a:6e:56:89:d8:fa:6a:c6:a8:b0:44:79:14:d7:
         a8:61:3d:86:b5:49:fd:42:38:9a:d7:6d:b9:39:51:81:c6:00:
         ad:b1:03:2c:53:6f:26:15:f3:6f:4f:39:5f:7a:d1:33:3f:30:
         ce:13:a0:08:60:61:1a:f1:e4:f5:93:fd:6c:aa:34:f0:9b:6d:
         4c:ec:f1:97:d0:07:6c:65:40:7b:f5:df:87:cd:7b:fd:9e:c4:
         35:8d:e7:ac:17:57:ea:4c:f5:7f:75:9b:6b:ca:14:4d:65:42:
         6f:2e:e0:a4:6e:e4:50:8d:31:a3:1f:d8:61:00:0d:32:ff:55:
         c4:48:6f:11:81:8e:16:14:b3:0f:af:6b:f8:ff:82:10:f7:d2:
         d6:55:06:9f:f0:ce:53:78:81:5f:f2:8c:fa:00:bb:5f:9a:83:
         d4:c9:51:b0:3c:c8:46:7a:2b:62:ac:01:c3:44:2a:ed:8a:75:
         a2:a6:a0:14:47:35:77:97:22:df:07:da:6e:c3:b4:b4:93:4f:
         1b:84:17:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNZHFaea8NxNwhYHLVIamZZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZjE0ZjhlMTQ0YzZkNTBjMzhhYjRmYWZmNWFjNmU1NDdm
ZTFkNDcwHhcNMjQxMTIzMTMwMDQ5WhcNMjQxMTI0MTMwMDQ5WjAzMTEwLwYDVQQD
EyhhZjMyMTBhMmI3MGJjZjJmOGIyNjExZDlkZGJkZDcwZjk4MThhZGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup+jtfm83JhmKs0ojBQlChZNF8gB
ID7G5bw9Bo+DCFPWc4+8T5CfRWfMOtRLVkpTtZr5//5Ler8B+Y4EDZFqXsBIc5Em
eT3A1f9gI2uOdOjC2EP3BxF2kHtmgiCT5WdQVVPE1sdzVz6fOvQtiLIptmx+rLUo
ERCFD/wTNNnuTDjppeDfUJNGYkoENWTbpOvi/NjztKm0slXBB3ILpnaxvYRCoCBX
KfZzEB1msAtOvT66tKjT/qY+XQPftXUBZnrk2O4hEQl5jqbIdDdv5OYUQBndQCma
l1ohfHcd+6fICPjw7qk0wUvX5MPziOamqX+7rgAjwRhazRXwSmecgLewCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8yEKK3C88viyYR2d291w+YGK34MB8GA1UdIwQY
MBaAFGPxT44UTG1Qw4q0+v9axuVH/h1HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWV9GUGpoUk1iVkREaXJUNl8xckc1VWYtSFVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS83YjBhYWUtOWQyNy00OTUxLWJhYjct
ZGEzOTQzODRlOTI1LzEvWV9GUGpoUk1iVkREaXJUNl8xckc1VWYtSFVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS83YjBhYWUtOWQyNy00OTUxLWJhYjctZGEzOTQzODRlOTI1
LzEvWV9GUGpoUk1iVkREaXJUNl8xckc1VWYtSFVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArAUaSgQC
tn9iBceo712DCHw1CQ6Xh1ewKyMiea4rAGOcvvbc6u1CE6CLbK7oJaX7qQtHLC8C
0Q8tbnpuVonY+mrGqLBEeRTXqGE9hrVJ/UI4mtdtuTlRgcYArbEDLFNvJhXzb085
X3rRMz8wzhOgCGBhGvHk9ZP9bKo08JttTOzxl9AHbGVAe/Xfh817/Z7ENY3nrBdX
6kz1f3Wba8oUTWVCby7gpG7kUI0xox/YYQANMv9VxEhvEYGOFhSzD69r+P+CEPfS
1lUGn/DOU3iBX/KM+gC7X5qD1MlRsDzIRnorYqwBw0Qq7Yp1oqagFEc1d5ci3wfa
bsO0tJNPG4QXRw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 14:52:21 2024 by rpki-client on console-ams.rpki-client.org