Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.mft
File:                     fujoTNwPSdrCk637XgSkkQjO1kY.mft (raw, json)
Hash identifier:          AKm8OeSJ4U5IbBtFegYBY9WHo1Id+d2b7ks683FgCZg=
Subject key identifier:   D8:F6:2D:E1:50:E2:BA:E1:C6:C4:D5:07:FB:C5:84:D9:99:FE:35:17
Authority key identifier: 7E:E8:E8:4C:DC:0F:49:DA:C2:93:AD:FB:5E:04:A4:91:08:CE:D6:46
Certificate issuer:       /CN=7ee8e84cdc0f49dac293adfb5e04a49108ced646
Certificate serial:       0193576461D2C6B506CFEA63E3DEA4A7F338
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fujoTNwPSdrCk637XgSkkQjO1kY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.mft
Manifest number:          034F
Signing time:             Sat 23 Nov 2024 05:00:16 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:16 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:16 +0000
Files and hashes:         1: fujoTNwPSdrCk637XgSkkQjO1kY.crl (hash: Ta3q814bOAmJBPLBvDj9ra+reQg7GNokAAjc5OdfYog=)
                          2: m8631QWZ7mSlBp8tWI_Gvw3XbFo.roa (hash: IZmzSZrXyFhDwomRReK5l+IVES1IetQdFuqn6O38p1E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fujoTNwPSdrCk637XgSkkQjO1kY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:61:d2:c6:b5:06:cf:ea:63:e3:de:a4:a7:f3:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee8e84cdc0f49dac293adfb5e04a49108ced646
        Validity
            Not Before: Nov 23 05:00:16 2024 GMT
            Not After : Nov 24 05:00:16 2024 GMT
        Subject: CN=d8f62de150e2bae1c6c4d507fbc584d999fe3517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:13:1e:36:12:46:3e:0b:e7:1c:59:6b:28:8e:
                    a8:55:c2:3e:7e:98:ea:fe:8e:d0:15:1b:49:1b:bf:
                    8d:61:a9:3f:f9:73:f7:39:c8:01:25:88:ad:93:12:
                    7b:d0:82:e6:d8:e3:22:db:4e:a7:12:0d:62:46:0d:
                    11:03:7f:b0:07:93:89:34:a6:84:6a:f8:59:94:8c:
                    5f:2b:70:f9:7b:da:d4:10:4a:92:8c:bc:88:6c:74:
                    4a:86:5c:29:ea:fb:67:c3:e5:db:9a:f8:4e:c3:fc:
                    f4:e1:2e:22:10:41:14:9c:a0:c3:eb:79:75:60:0d:
                    65:78:90:de:2c:3f:1e:2d:5f:68:1d:04:b1:2b:9d:
                    0d:d8:9d:b3:c0:18:dd:c6:ad:d9:fe:dd:08:62:f9:
                    ba:63:77:5c:7a:c9:05:fa:74:de:71:7b:eb:b6:f3:
                    c6:af:91:6f:db:44:df:77:65:a1:e3:00:98:48:55:
                    ea:13:ae:23:da:c1:e3:b9:a4:f8:86:41:0c:f1:03:
                    c6:ed:e9:4d:fc:f8:3d:24:8b:4f:80:be:90:6f:4b:
                    a2:e7:47:3b:4a:6c:69:39:42:52:65:61:ed:82:0d:
                    ff:c0:60:36:63:05:0b:cf:48:9e:0c:cc:ac:17:ac:
                    90:17:bf:82:30:94:f0:81:79:e6:b6:15:77:bc:65:
                    c5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F6:2D:E1:50:E2:BA:E1:C6:C4:D5:07:FB:C5:84:D9:99:FE:35:17
            X509v3 Authority Key Identifier:
                keyid:7E:E8:E8:4C:DC:0F:49:DA:C2:93:AD:FB:5E:04:A4:91:08:CE:D6:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fujoTNwPSdrCk637XgSkkQjO1kY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ef:13:85:6f:f7:92:0e:b0:07:b9:e5:fb:dc:11:9d:65:af:
         66:03:d8:9f:4a:52:18:c4:02:aa:40:b6:3e:3c:24:83:b3:b5:
         11:88:96:74:0a:8f:70:5a:03:71:31:5d:93:47:4c:a7:06:80:
         ce:41:37:eb:be:87:75:3f:e0:33:b3:43:ed:1c:7d:31:cd:5b:
         ed:f9:46:e4:ef:5b:05:4e:de:56:f3:a8:43:02:95:89:c1:9c:
         2a:b1:db:76:65:33:f6:e1:0b:4b:40:22:ec:14:d1:b6:20:43:
         5a:6a:f6:26:39:e5:22:cd:5e:3b:18:c7:47:ae:9c:58:c9:cd:
         35:df:78:26:4b:a4:01:17:47:2f:02:fc:50:7d:60:d6:ca:e5:
         a1:ac:87:6e:a1:1e:2e:5b:e6:9d:9b:d3:60:59:26:c1:79:21:
         74:71:e0:49:17:d6:65:a5:63:92:dd:2f:85:2a:2c:ba:6d:5b:
         38:a9:20:6f:77:fc:88:44:69:78:00:e1:c7:44:95:09:9e:b9:
         89:c8:e1:5f:34:62:a1:af:58:11:83:a5:fd:4b:a9:fd:eb:fc:
         a0:5a:bf:53:72:45:7d:4f:40:bd:d2:e9:08:a6:82:2d:8c:dc:
         86:8b:fc:a9:54:69:e8:70:ee:18:3b:77:50:be:34:4e:32:a1:
         c1:16:c7:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZGHSxrUGz+pj496kp/M4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZThlODRjZGMwZjQ5ZGFjMjkzYWRmYjVlMDRhNDkxMDhj
ZWQ2NDYwHhcNMjQxMTIzMDUwMDE2WhcNMjQxMTI0MDUwMDE2WjAzMTEwLwYDVQQD
EyhkOGY2MmRlMTUwZTJiYWUxYzZjNGQ1MDdmYmM1ODRkOTk5ZmUzNTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhMeNhJGPgvnHFlrKI6oVcI+fpjq
/o7QFRtJG7+NYak/+XP3OcgBJYitkxJ70ILm2OMi206nEg1iRg0RA3+wB5OJNKaE
avhZlIxfK3D5e9rUEEqSjLyIbHRKhlwp6vtnw+XbmvhOw/z04S4iEEEUnKDD63l1
YA1leJDeLD8eLV9oHQSxK50N2J2zwBjdxq3Z/t0IYvm6Y3dceskF+nTecXvrtvPG
r5Fv20Tfd2Wh4wCYSFXqE64j2sHjuaT4hkEM8QPG7elN/Pg9JItPgL6Qb0ui50c7
SmxpOUJSZWHtgg3/wGA2YwULz0ieDMysF6yQF7+CMJTwgXnmthV3vGXFJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNj2LeFQ4rrhxsTVB/vFhNmZ/jUXMB8GA1UdIwQY
MBaAFH7o6EzcD0nawpOt+14EpJEIztZGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnVqb1ROd1BTZHJDazYzN1hnU2trUWpPMWtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9hZDgwN2QtZjk4NC00ZjFiLWI4NDct
MGU3NjJlMDZmMjFjLzEvZnVqb1ROd1BTZHJDazYzN1hnU2trUWpPMWtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9hZDgwN2QtZjk4NC00ZjFiLWI4NDctMGU3NjJlMDZmMjFj
LzEvZnVqb1ROd1BTZHJDazYzN1hnU2trUWpPMWtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMu8ThW/3
kg6wB7nl+9wRnWWvZgPYn0pSGMQCqkC2Pjwkg7O1EYiWdAqPcFoDcTFdk0dMpwaA
zkE3676HdT/gM7ND7Rx9Mc1b7flG5O9bBU7eVvOoQwKVicGcKrHbdmUz9uELS0Ai
7BTRtiBDWmr2JjnlIs1eOxjHR66cWMnNNd94JkukARdHLwL8UH1g1srloayHbqEe
LlvmnZvTYFkmwXkhdHHgSRfWZaVjkt0vhSosum1bOKkgb3f8iERpeADhx0SVCZ65
icjhXzRioa9YEYOl/Uup/ev8oFq/U3JFfU9AvdLpCKaCLYzchov8qVRp6HDuGDt3
UL40TjKhwRbHzA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:01:15 2024 by rpki-client on console-fra.rpki-client.org