Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
File:                     rbNlrPb5GEmXB92hPwM-LNYRAwg.mft (raw, json)
Hash identifier:          bZVtlN6ndYzOqA+YB7uoZcjtEzJUdpMknV9fxSA1lTA=
Subject key identifier:   25:73:42:9E:8F:73:9A:42:0E:EA:54:35:BD:E2:6C:3D:43:4A:6F:C0
Authority key identifier: AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
Certificate issuer:       /CN=adb365acf6f918499707dda13f033e2cd6110308
Certificate serial:       0193587701898FF70E9739EC1F5CE7AC6253
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 10:00:14 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:14 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:14 +0000
Files and hashes:         1: AF86ctvxfEoXhtJ2G77F8mRIZ9M.roa (hash: uGbOVc2coLS6yXqtRsOkPmkA1VvnrFkhJeb3EuZ7Wac=)
                          2: rbNlrPb5GEmXB92hPwM-LNYRAwg.crl (hash: /2xUkMkKhW/AWecHNzFl/T+jR+zUzBfzl7LGhYg/q2g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:01:89:8f:f7:0e:97:39:ec:1f:5c:e7:ac:62:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adb365acf6f918499707dda13f033e2cd6110308
        Validity
            Not Before: Nov 23 10:00:14 2024 GMT
            Not After : Nov 24 10:00:14 2024 GMT
        Subject: CN=2573429e8f739a420eea5435bde26c3d434a6fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e7:4c:03:1d:21:03:a1:26:7d:c6:cf:d9:45:
                    a8:22:a0:8a:13:cd:fe:b1:c2:a3:67:15:a4:b4:38:
                    d7:84:d4:1d:cd:bc:70:6e:f1:81:73:f0:6a:af:4b:
                    cd:4b:d7:cb:d4:f7:d1:e7:ed:58:a1:ba:79:22:db:
                    30:bd:8e:1a:95:b2:88:24:3f:06:d0:40:06:53:26:
                    e9:b4:65:57:91:d5:78:97:4f:40:6e:4c:d4:04:26:
                    b1:f2:dc:f7:f8:1a:bc:7d:0b:b5:c3:05:25:24:73:
                    91:49:7b:1f:57:a8:1b:b9:bd:6a:a7:81:fd:43:b8:
                    0b:77:20:81:a7:d6:c6:78:30:12:35:8f:48:d3:53:
                    a5:41:b2:d7:52:aa:61:c4:77:83:6a:bb:49:1e:1e:
                    e2:50:af:c5:a0:e5:25:fe:f1:94:eb:fe:75:8f:15:
                    29:5c:15:81:5c:fd:b7:de:42:ed:40:ab:ae:28:6b:
                    d5:61:26:9f:aa:a4:49:d2:ec:a8:7d:dc:bf:18:61:
                    8d:c2:d1:b6:06:e1:31:1d:1d:ac:d9:91:95:70:6f:
                    2e:a8:62:24:b8:5f:37:74:b0:ba:08:03:27:7e:03:
                    b7:74:4c:2e:a6:cb:a9:ed:1a:67:6b:12:bf:6a:de:
                    2d:ce:94:0d:b7:57:bc:52:4b:24:42:41:07:72:a1:
                    d8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:73:42:9E:8F:73:9A:42:0E:EA:54:35:BD:E2:6C:3D:43:4A:6F:C0
            X509v3 Authority Key Identifier:
                keyid:AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:27:85:45:55:fe:41:f2:53:b9:02:4e:31:d8:c0:a2:0d:ff:
         ff:ef:4d:f4:2b:92:1b:a8:ec:c6:98:28:f9:d3:a0:9e:99:18:
         c9:33:b7:92:b0:0d:62:99:8a:1a:be:97:52:64:55:dd:08:c1:
         17:fb:61:ca:a7:55:bf:23:ef:5e:14:97:83:81:62:a2:24:39:
         a9:21:77:1d:36:28:e4:e7:8c:61:b1:24:f4:bf:c1:4e:83:9c:
         31:19:f8:8e:6c:aa:de:b3:39:0d:94:07:91:0d:6c:73:14:80:
         56:cd:c1:97:f5:63:17:1b:e4:7e:9f:2f:69:bc:25:91:4b:98:
         f2:a0:e8:58:06:8b:06:20:7a:b7:be:93:09:cd:bb:9f:21:69:
         47:ee:a5:8e:95:78:d6:ef:0a:92:fd:75:b7:25:63:ed:34:1b:
         00:b0:68:b9:2c:1f:f0:be:cc:b5:a8:1f:e5:34:d5:e5:23:ed:
         e2:6c:e7:55:07:a8:77:2f:04:f5:1b:8b:3d:70:11:72:89:c2:
         0d:9c:4a:30:05:ad:91:48:0e:d5:73:8d:47:ef:bc:0e:0b:9c:
         be:20:fd:e5:b2:e9:67:52:f5:cf:26:fd:60:52:55:86:4b:f5:
         04:ee:fa:5d:d7:12:17:4c:db:1f:fd:fe:ec:51:0e:c2:36:1c:
         71:d5:a4:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYdwGJj/cOlznsH1znrGJTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYjM2NWFjZjZmOTE4NDk5NzA3ZGRhMTNmMDMzZTJjZDYx
MTAzMDgwHhcNMjQxMTIzMTAwMDE0WhcNMjQxMTI0MTAwMDE0WjAzMTEwLwYDVQQD
EygyNTczNDI5ZThmNzM5YTQyMGVlYTU0MzViZGUyNmMzZDQzNGE2ZmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwudMAx0hA6EmfcbP2UWoIqCKE83+
scKjZxWktDjXhNQdzbxwbvGBc/Bqr0vNS9fL1PfR5+1Yobp5ItswvY4albKIJD8G
0EAGUybptGVXkdV4l09AbkzUBCax8tz3+Bq8fQu1wwUlJHORSXsfV6gbub1qp4H9
Q7gLdyCBp9bGeDASNY9I01OlQbLXUqphxHeDartJHh7iUK/FoOUl/vGU6/51jxUp
XBWBXP233kLtQKuuKGvVYSafqqRJ0uyofdy/GGGNwtG2BuExHR2s2ZGVcG8uqGIk
uF83dLC6CAMnfgO3dEwupsup7RpnaxK/at4tzpQNt1e8UkskQkEHcqHYowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVzQp6Pc5pCDupUNb3ibD1DSm/AMB8GA1UdIwQY
MBaAFK2zZaz2+RhJlwfdoT8DPizWEQMIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hNjgzODctODYxYS00YjkzLWEzZmMt
YWRhZGQ2Mjk1ODIyLzEvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hNjgzODctODYxYS00YjkzLWEzZmMtYWRhZGQ2Mjk1ODIy
LzEvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbSeFRVX+
QfJTuQJOMdjAog3//+9N9CuSG6jsxpgo+dOgnpkYyTO3krANYpmKGr6XUmRV3QjB
F/thyqdVvyPvXhSXg4FioiQ5qSF3HTYo5OeMYbEk9L/BToOcMRn4jmyq3rM5DZQH
kQ1scxSAVs3Bl/VjFxvkfp8vabwlkUuY8qDoWAaLBiB6t76TCc27nyFpR+6ljpV4
1u8Kkv11tyVj7TQbALBouSwf8L7Mtagf5TTV5SPt4mznVQeody8E9RuLPXARconC
DZxKMAWtkUgO1XONR++8DgucviD95bLpZ1L1zyb9YFJVhkv1BO76XdcSF0zbH/3+
7FEOwjYccdWkdg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:01:40 2024 by rpki-client on console-fra.rpki-client.org