Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
File:                     DIZmK3UsijvnLoVEOU_5JvaPv34.mft (raw, json)
Hash identifier:          oC8x4prMaQTHxPWVB+XSwLZ0T/tNcwpyTLQgZUuAsh0=
Subject key identifier:   B2:6E:D6:FA:BD:5A:1D:4D:02:15:66:16:0D:6A:B3:00:FD:CE:57:3A
Authority key identifier: 0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
Certificate issuer:       /CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Certificate serial:       019352ADCA6914ABAB15CDFF26D0B92C780C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
Manifest number:          1302
Signing time:             Fri 22 Nov 2024 07:02:21 +0000
Manifest this update:     Fri 22 Nov 2024 07:02:21 +0000
Manifest next update:     Sat 23 Nov 2024 07:02:21 +0000
Files and hashes:         1: DIZmK3UsijvnLoVEOU_5JvaPv34.crl (hash: WqWkqIP7SD7s9wQdbsu2evffkor3RZXDtlXgi5cGq+Q=)
                          2: JYGXULfvbcui9pHXWUg9Q7ZSr68.roa (hash: aK8ykfzhntBWZ6jsQK5N8rKXOe9HETpguVmArlvmrhU=)
                          3: gj0rhPuRH8j5fxrYyL6X73wIg54.roa (hash: EtGZJw9ZMgo1oqImeB6LRjLqkkL8+NBOTpHvq4nhE1U=)
                          4: otKuOrCHqCGuWhhqjXZc0xag20E.roa (hash: WCcAMuZ9IFXFybGMUJf4Z+22XtM/gncwSMkYkd1NbTc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:ca:69:14:ab:ab:15:cd:ff:26:d0:b9:2c:78:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
        Validity
            Not Before: Nov 22 07:02:21 2024 GMT
            Not After : Nov 23 07:02:21 2024 GMT
        Subject: CN=b26ed6fabd5a1d4d021566160d6ab300fdce573a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:57:08:b2:f3:e4:70:6d:8f:d8:ab:c6:7b:0f:
                    89:36:f6:9c:82:77:12:5f:6f:d7:18:42:ee:06:52:
                    17:41:c3:33:42:ec:09:26:9b:c1:fd:02:20:4b:a7:
                    8b:72:5d:6b:49:1e:0c:da:61:16:6d:a1:18:a9:49:
                    95:61:64:f9:ad:7f:d5:70:ec:8d:cb:86:ee:79:33:
                    d0:42:fc:67:d9:a6:c2:27:5a:42:95:06:e6:3d:8d:
                    04:82:70:99:d0:4e:f6:e0:cb:f6:72:03:eb:17:12:
                    ea:79:77:fc:92:68:c1:d9:16:0a:79:6a:86:4d:26:
                    20:11:51:66:87:1a:15:0b:8a:97:97:d3:18:bd:64:
                    b4:9b:b9:29:2b:af:10:62:73:d9:77:be:01:19:81:
                    4a:0a:ab:42:08:0c:0f:48:3e:0a:2c:45:a8:dd:12:
                    a6:d5:56:e7:9e:85:9c:7a:de:84:0d:f0:20:c6:04:
                    6a:95:b6:d1:a4:79:36:53:9c:84:ea:1d:09:cd:4b:
                    fe:db:81:c8:fb:73:8e:db:d0:11:56:79:f6:d0:7f:
                    f8:28:7e:89:af:e2:7b:c8:24:65:1a:66:08:47:bc:
                    d4:77:95:32:99:b5:cc:c4:8e:5c:56:3b:c9:d3:1e:
                    b8:43:bb:e7:4e:71:1e:be:c2:2b:69:3b:1e:24:af:
                    b0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6E:D6:FA:BD:5A:1D:4D:02:15:66:16:0D:6A:B3:00:FD:CE:57:3A
            X509v3 Authority Key Identifier:
                keyid:0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:29:e1:51:88:a5:ef:bd:c2:15:61:b3:5e:33:cc:cc:d1:0d:
         57:9c:5f:98:d1:ce:57:42:b3:d1:e0:72:ea:ca:bb:90:a1:e7:
         1c:8e:91:4b:f5:0c:9a:cf:3e:c3:8f:9e:78:f8:3d:03:a7:62:
         c1:72:c3:7e:8a:0d:94:28:90:0c:f5:c4:4c:61:b2:00:0d:e2:
         61:9b:7a:c8:f0:a9:9c:9c:73:7b:a2:36:3c:df:0f:39:86:1f:
         0f:a3:49:f9:ff:96:07:99:83:bf:c2:d4:c7:7e:4d:0d:68:a7:
         e8:a8:aa:06:2c:6a:00:a2:53:55:65:4c:93:64:b2:0c:12:21:
         35:f8:0a:89:5e:ba:6b:12:d0:94:91:ef:78:99:94:93:94:dc:
         65:a2:9f:89:b4:a2:36:40:85:1f:7c:df:c3:46:2f:b4:1d:26:
         68:10:1b:5a:2a:b6:ef:39:19:f7:f0:c2:c7:00:b0:79:e0:55:
         85:03:93:81:d0:1e:e9:99:6b:06:20:75:f0:80:bc:f9:46:a3:
         a2:83:c5:6b:c5:16:8a:51:ff:92:c3:5c:16:5c:b5:d7:8d:7f:
         2e:fb:89:dd:0c:6b:46:e5:d6:80:30:b5:01:9a:f7:98:2f:fa:
         d3:bf:03:9d:45:e8:f2:87:84:c6:14:7a:35:cc:aa:e5:38:e2:
         48:c1:03:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSrcppFKurFc3/JtC5LHgMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjODY2NjJiNzUyYzhhM2JlNzJlODU0NDM5NGZmOTI2ZjY4
ZmJmN2UwHhcNMjQxMTIyMDcwMjIxWhcNMjQxMTIzMDcwMjIxWjAzMTEwLwYDVQQD
EyhiMjZlZDZmYWJkNWExZDRkMDIxNTY2MTYwZDZhYjMwMGZkY2U1NzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlcIsvPkcG2P2KvGew+JNvacgncS
X2/XGELuBlIXQcMzQuwJJpvB/QIgS6eLcl1rSR4M2mEWbaEYqUmVYWT5rX/VcOyN
y4bueTPQQvxn2abCJ1pClQbmPY0EgnCZ0E724Mv2cgPrFxLqeXf8kmjB2RYKeWqG
TSYgEVFmhxoVC4qXl9MYvWS0m7kpK68QYnPZd74BGYFKCqtCCAwPSD4KLEWo3RKm
1VbnnoWcet6EDfAgxgRqlbbRpHk2U5yE6h0JzUv+24HI+3OO29ARVnn20H/4KH6J
r+J7yCRlGmYIR7zUd5UymbXMxI5cVjvJ0x64Q7vnTnEevsIraTseJK+wtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJu1vq9Wh1NAhVmFg1qswD9zlc6MB8GA1UdIwQY
MBaAFAyGZit1LIo75y6FRDlP+Sb2j79+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRElabUszVXNpanZuTG9WRU9VXzVKdmFQdjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wOWM0YjItNDZhOS00Zjg4LTk5Yjgt
MWNjYzljMjk1ZThlLzEvRElabUszVXNpanZuTG9WRU9VXzVKdmFQdjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8wOWM0YjItNDZhOS00Zjg4LTk5YjgtMWNjYzljMjk1ZThl
LzEvRElabUszVXNpanZuTG9WRU9VXzVKdmFQdjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdCnhUYil
773CFWGzXjPMzNENV5xfmNHOV0Kz0eBy6sq7kKHnHI6RS/UMms8+w4+eePg9A6di
wXLDfooNlCiQDPXETGGyAA3iYZt6yPCpnJxze6I2PN8POYYfD6NJ+f+WB5mDv8LU
x35NDWin6KiqBixqAKJTVWVMk2SyDBIhNfgKiV66axLQlJHveJmUk5TcZaKfibSi
NkCFH3zfw0YvtB0maBAbWiq27zkZ9/DCxwCweeBVhQOTgdAe6ZlrBiB18IC8+Uaj
ooPFa8UWilH/ksNcFly1141/LvuJ3QxrRuXWgDC1AZr3mC/6078DnUXo8oeExhR6
Ncyq5TjiSMEDSQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:18:18 2024 by rpki-client on console-fra.rpki-client.org