Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
File:                     IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft (raw, json)
Hash identifier:          lE98qjFjlCPfvLim/gEZqSOH6YT/gFXRRoGpMLKUhLY=
Subject key identifier:   40:9D:03:05:94:72:65:DE:37:DC:27:B9:68:52:5F:B7:49:2B:06:02
Authority key identifier: 21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
Certificate issuer:       /CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Certificate serial:       0193523E17910200582155440FE8926E1A9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
Manifest number:          0C57
Signing time:             Fri 22 Nov 2024 05:00:21 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:21 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:21 +0000
Files and hashes:         1: HO9kjgkyYNBz2zCAwYWaHLiMXeY.roa (hash: BsNB48b6dfafnMvBJJPQCGBHwogCYwQm7oqsEfHLjjk=)
                          2: IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl (hash: /tPtIdcflIAxtxIdngaq1xf7HkOdZ2dOuVkMFhauWhs=)
                          3: Po9z6F8EN7evZEh_gqKvVT3Fb-g.roa (hash: gwIFzxhBT64J+H38Ti9vHJEwO0I/0SMVApJsBnRDV5Y=)
                          4: j7oAqr_sqPOoJmUBIMKMvlBTWiU.roa (hash: aziZya9QE2kOrTg98LUABKgzgYRUrRVJT+kmkhWLCD8=)
                          5: oqIOPeEL72RgFbkOgqCLKUIE9no.roa (hash: WNw7Z0WwWhkNKxPwMrbf/UnhhApuzJ+bvtPKuLbOu7E=)
                          6: zyUVruQXxAD7_mFlYZEvcdr00mU.roa (hash: dU0mqZqPQqyj4Bx04Ts8T1TOd99wL2FT6Eqrd1DIawc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3e:17:91:02:00:58:21:55:44:0f:e8:92:6e:1a:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
        Validity
            Not Before: Nov 22 05:00:21 2024 GMT
            Not After : Nov 23 05:00:21 2024 GMT
        Subject: CN=409d0305947265de37dc27b968525fb7492b0602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b9:09:df:23:82:5f:c3:27:73:79:12:4d:41:
                    e5:8b:7a:8c:d4:df:65:8c:15:13:3e:a0:89:cf:72:
                    e5:75:b6:96:55:5c:4e:01:74:a3:73:1e:27:f5:49:
                    73:00:31:3e:28:24:43:d9:bf:44:37:2a:92:ee:19:
                    d1:10:5f:aa:18:a0:97:b6:87:ba:52:fd:10:12:75:
                    2d:18:f7:55:59:ee:88:ca:41:81:5d:1f:21:8d:b8:
                    2d:34:75:49:2f:47:b2:31:7b:7e:9c:55:19:9f:24:
                    89:e9:fd:73:f1:33:9b:fc:05:fb:be:52:48:70:3d:
                    57:95:22:b8:76:e9:f2:6a:e0:9f:6d:8a:c7:b9:92:
                    1e:52:07:42:36:5f:1c:ac:d9:26:2a:d5:33:47:3b:
                    e9:2c:dc:4d:f8:d3:fe:3d:e1:9f:af:da:98:bd:68:
                    3e:4d:20:79:74:21:9e:e9:3f:2d:18:0d:03:da:ff:
                    f3:70:b9:73:66:75:b9:5a:c5:42:c3:c4:ad:ba:93:
                    17:c1:61:12:00:0f:71:ce:1e:73:c2:1c:28:9a:51:
                    1a:d8:e7:86:1e:88:e6:79:a8:a6:7d:db:74:6d:34:
                    ad:8b:e1:a5:41:7f:7c:4e:0a:76:8f:2c:f5:47:04:
                    b5:0d:9b:39:da:c3:8a:3e:d6:e0:61:2a:63:ef:2e:
                    47:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:9D:03:05:94:72:65:DE:37:DC:27:B9:68:52:5F:B7:49:2B:06:02
            X509v3 Authority Key Identifier:
                keyid:21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:03:1b:db:5f:2d:39:b0:42:9b:c1:f7:97:dd:f7:7f:65:d0:
         bd:ae:b4:08:c2:2b:be:86:ad:44:ed:63:f5:95:c5:77:34:98:
         ea:01:41:27:28:36:65:11:1e:52:ea:b3:28:57:68:6b:0c:78:
         02:c1:e8:cd:35:6c:e2:67:b5:3d:f3:68:13:7d:45:7e:a6:28:
         31:a5:12:4d:12:1f:88:62:5f:05:3c:83:c4:66:0e:57:4e:f9:
         f9:be:26:83:9c:e8:cb:e0:a7:71:4e:6d:bd:9f:9c:ed:f4:3b:
         e3:b0:12:73:c5:fe:e8:42:6f:23:4f:db:d0:00:b0:b4:1a:3d:
         39:5c:dc:99:ea:92:00:ea:be:a0:11:59:13:ad:15:e3:1b:37:
         95:eb:a0:60:6c:5e:8b:34:7c:a6:97:ad:d1:99:af:2a:c8:72:
         58:75:24:7b:bd:37:08:b9:d5:f9:21:c4:9e:4b:9c:d9:35:6a:
         de:8e:b4:32:d8:c5:74:fe:d6:0c:e7:b2:3a:b9:fa:ee:05:b8:
         28:6b:8d:f4:99:60:c4:ae:d9:4d:37:c5:2b:a0:cf:1a:0d:59:
         3a:a0:ac:eb:d9:da:a6:fb:78:83:aa:5c:38:64:c3:6c:21:47:
         13:08:78:c1:e6:c7:b6:58:37:ea:30:85:2c:a7:0e:b3:e9:61:
         19:f5:17:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSPheRAgBYIVVED+iSbhqaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYzE2NzJkYmJiZjcxNjVhNmE4M2IzMjI3YTcxMTlmMGQz
MWU4ZWUwHhcNMjQxMTIyMDUwMDIxWhcNMjQxMTIzMDUwMDIxWjAzMTEwLwYDVQQD
Eyg0MDlkMDMwNTk0NzI2NWRlMzdkYzI3Yjk2ODUyNWZiNzQ5MmIwNjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLkJ3yOCX8Mnc3kSTUHli3qM1N9l
jBUTPqCJz3LldbaWVVxOAXSjcx4n9UlzADE+KCRD2b9ENyqS7hnREF+qGKCXtoe6
Uv0QEnUtGPdVWe6IykGBXR8hjbgtNHVJL0eyMXt+nFUZnySJ6f1z8TOb/AX7vlJI
cD1XlSK4dunyauCfbYrHuZIeUgdCNl8crNkmKtUzRzvpLNxN+NP+PeGfr9qYvWg+
TSB5dCGe6T8tGA0D2v/zcLlzZnW5WsVCw8StupMXwWESAA9xzh5zwhwomlEa2OeG
Hojmeaimfdt0bTSti+GlQX98Tgp2jyz1RwS1DZs52sOKPtbgYSpj7y5H+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECdAwWUcmXeN9wnuWhSX7dJKwYCMB8GA1UdIwQY
MBaAFCHBZy27v3Flpqg7MienEZ8NMejuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWNGbkxidV9jV1dtcURzeUo2Y1JudzB4Nk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jMDVkNGMtOTZkMy00YjU3LWFlMzQt
MzQ3N2M3ZmNkNGQ5LzEvSWNGbkxidV9jV1dtcURzeUo2Y1JudzB4Nk80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9jMDVkNGMtOTZkMy00YjU3LWFlMzQtMzQ3N2M3ZmNkNGQ5
LzEvSWNGbkxidV9jV1dtcURzeUo2Y1JudzB4Nk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABgMb218t
ObBCm8H3l933f2XQva60CMIrvoatRO1j9ZXFdzSY6gFBJyg2ZREeUuqzKFdoawx4
AsHozTVs4me1PfNoE31FfqYoMaUSTRIfiGJfBTyDxGYOV075+b4mg5zoy+CncU5t
vZ+c7fQ747ASc8X+6EJvI0/b0ACwtBo9OVzcmeqSAOq+oBFZE60V4xs3leugYGxe
izR8ppet0ZmvKshyWHUke703CLnV+SHEnkuc2TVq3o60MtjFdP7WDOeyOrn67gW4
KGuN9JlgxK7ZTTfFK6DPGg1ZOqCs69napvt4g6pcOGTDbCFHEwh4webHtlg36jCF
LKcOs+lhGfUXqQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:42:54 2024 by rpki-client on console-ams.rpki-client.org