Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft
File:                     1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft (raw, json)
Hash identifier:          y59cZjlMkurbxXp1Gh27v2khj1NXuvohjJvB40gJxSI=
Subject key identifier:   FF:71:BD:C8:30:EA:D8:FF:65:BF:B1:34:61:3C:6C:04:3C:C6:F1:0B
Authority key identifier: D4:C7:C4:EA:B5:C0:79:48:CB:F4:4A:8A:01:C6:A8:27:FD:AE:93:41
Certificate issuer:       /CN=d4c7c4eab5c07948cbf44a8a01c6a827fdae9341
Certificate serial:       01935689A4F3EC5573BD97D5E36C5576A8B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft
Manifest number:          1375
Signing time:             Sat 23 Nov 2024 01:01:21 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:21 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:21 +0000
Files and hashes:         1: 1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl (hash: sJs65nIMBIWRTWv2zsmFErER5nl9zGhZDr6df3uhf0w=)
                          2: WfnvqYLR-IhpVsIB249sEVNv0ck.roa (hash: m81sYPj0mBJoYQo6cFyiKcl1GQ17VlcYBiFkpRNc0/Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:a4:f3:ec:55:73:bd:97:d5:e3:6c:55:76:a8:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4c7c4eab5c07948cbf44a8a01c6a827fdae9341
        Validity
            Not Before: Nov 23 01:01:21 2024 GMT
            Not After : Nov 24 01:01:21 2024 GMT
        Subject: CN=ff71bdc830ead8ff65bfb134613c6c043cc6f10b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c9:07:fd:69:65:bb:2a:3e:2c:f8:e1:24:31:
                    c4:fe:65:cd:67:21:82:eb:e8:27:b8:73:64:3b:12:
                    48:4f:58:41:28:15:f0:44:9b:16:ce:29:72:ff:6e:
                    af:58:43:26:c2:b1:53:a3:7c:74:95:85:6c:a3:0a:
                    da:50:97:85:de:46:ed:cb:c6:f7:b2:8f:c6:64:08:
                    d6:1b:e2:bb:f4:ea:6e:c4:e3:29:21:c6:a1:c7:16:
                    fa:e2:34:94:a8:e3:ef:ca:fa:82:72:7f:db:ad:22:
                    3d:9d:19:10:ff:b2:3f:06:92:22:4c:32:2f:2e:e1:
                    a6:e7:62:54:2e:59:6d:cd:9d:6c:81:b5:4a:bf:30:
                    cf:1b:ab:c7:45:15:33:51:66:fb:3c:9f:05:e2:81:
                    9d:a6:15:a2:34:df:bd:cb:5a:17:f0:46:18:b9:77:
                    03:17:32:8b:fd:39:d6:5c:0d:66:8f:10:c0:70:f9:
                    2c:44:b3:e3:b4:e0:7e:ab:63:a2:96:3d:54:b4:ff:
                    10:28:a7:cd:35:e3:f4:7f:f3:38:03:cd:f8:51:8a:
                    e7:49:15:b9:73:ac:b9:2b:24:bd:78:c9:74:0e:38:
                    a0:f4:65:a7:1d:ba:95:ed:11:eb:ce:37:69:e4:39:
                    52:cb:4b:bd:9d:16:e6:52:9c:84:e8:df:35:60:ff:
                    f8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:71:BD:C8:30:EA:D8:FF:65:BF:B1:34:61:3C:6C:04:3C:C6:F1:0B
            X509v3 Authority Key Identifier:
                keyid:D4:C7:C4:EA:B5:C0:79:48:CB:F4:4A:8A:01:C6:A8:27:FD:AE:93:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:92:05:3e:df:2d:be:17:c9:ab:d7:86:85:e1:cb:c7:d4:70:
         c5:0f:75:06:b6:33:41:a3:15:e1:b9:d4:54:d2:cb:93:df:e3:
         b1:2d:b7:2d:da:96:fc:c2:84:83:b5:77:0d:89:26:75:36:7c:
         de:15:90:6e:97:e4:53:88:a3:a9:e5:37:df:63:66:a7:21:3d:
         0f:7e:87:ba:81:98:c6:e4:91:09:78:d9:9e:3b:91:0c:8c:26:
         bc:8d:fe:36:68:da:cb:fe:65:8c:df:ba:10:b7:97:71:4f:66:
         13:a9:d1:dd:4d:2a:da:3b:23:7b:4a:dc:52:8a:82:24:43:2a:
         0f:9c:bb:d1:68:ca:95:ab:df:e8:3e:83:ef:24:ff:57:77:1a:
         e8:ed:9e:26:2f:fd:42:2c:77:20:23:57:08:d0:aa:d1:82:53:
         7b:9d:91:44:ca:a2:e7:c5:04:96:b2:e8:6b:c5:a7:ed:01:1d:
         ed:e5:fb:d1:3d:e4:42:b8:4a:e9:c6:74:03:bf:ab:c3:dd:b3:
         44:7d:5f:4a:59:9e:ba:48:0e:ac:f6:d6:e2:4c:3f:a2:4f:23:
         c0:5e:1d:6e:b2:7d:ce:83:d3:5e:7c:fa:ad:14:d6:af:a8:6c:
         5b:61:f0:2b:2c:0e:18:0e:e6:5f:c6:3b:03:11:0e:2d:5d:c4:
         84:f3:ca:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiaTz7FVzvZfV42xVdqi1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YzdjNGVhYjVjMDc5NDhjYmY0NGE4YTAxYzZhODI3ZmRh
ZTkzNDEwHhcNMjQxMTIzMDEwMTIxWhcNMjQxMTI0MDEwMTIxWjAzMTEwLwYDVQQD
EyhmZjcxYmRjODMwZWFkOGZmNjViZmIxMzQ2MTNjNmMwNDNjYzZmMTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwskH/Wlluyo+LPjhJDHE/mXNZyGC
6+gnuHNkOxJIT1hBKBXwRJsWzily/26vWEMmwrFTo3x0lYVsowraUJeF3kbty8b3
so/GZAjWG+K79OpuxOMpIcahxxb64jSUqOPvyvqCcn/brSI9nRkQ/7I/BpIiTDIv
LuGm52JULlltzZ1sgbVKvzDPG6vHRRUzUWb7PJ8F4oGdphWiNN+9y1oX8EYYuXcD
FzKL/TnWXA1mjxDAcPksRLPjtOB+q2Oilj1UtP8QKKfNNeP0f/M4A834UYrnSRW5
c6y5KyS9eMl0Djig9GWnHbqV7RHrzjdp5DlSy0u9nRbmUpyE6N81YP/46wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9xvcgw6tj/Zb+xNGE8bAQ8xvELMB8GA1UdIwQY
MBaAFNTHxOq1wHlIy/RKigHGqCf9rpNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU1mRTZyWEFlVWpMOUVxS0FjYW9KXzJ1azBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81ODYzZWEtNDE5YS00YzI5LThlM2Ut
OGQ1MjVhNTYzZTYxLzEvMU1mRTZyWEFlVWpMOUVxS0FjYW9KXzJ1azBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81ODYzZWEtNDE5YS00YzI5LThlM2UtOGQ1MjVhNTYzZTYx
LzEvMU1mRTZyWEFlVWpMOUVxS0FjYW9KXzJ1azBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArJIFPt8t
vhfJq9eGheHLx9RwxQ91BrYzQaMV4bnUVNLLk9/jsS23LdqW/MKEg7V3DYkmdTZ8
3hWQbpfkU4ijqeU332NmpyE9D36HuoGYxuSRCXjZnjuRDIwmvI3+Nmjay/5ljN+6
ELeXcU9mE6nR3U0q2jsje0rcUoqCJEMqD5y70WjKlavf6D6D7yT/V3ca6O2eJi/9
Qix3ICNXCNCq0YJTe52RRMqi58UElrLoa8Wn7QEd7eX70T3kQrhK6cZ0A7+rw92z
RH1fSlmeukgOrPbW4kw/ok8jwF4dbrJ9zoPTXnz6rRTWr6hsW2HwKywOGA7mX8Y7
AxEOLV3EhPPKAQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:34 2024 by rpki-client on console-fra.rpki-client.org