Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c5b5d9-0ae7-4629-a01b-fbad637c4142/1/JXjmbXV_leptaTqn-E_LJ0l1yLs.mft
File:                     JXjmbXV_leptaTqn-E_LJ0l1yLs.mft (raw, json)
Hash identifier:          ceXiBOygYKv7LUKw3B9yiUSx89OprQiVO7NoOtJ1g5o=
Subject key identifier:   61:1C:14:98:98:E2:EF:9C:20:D1:06:21:2C:F1:8A:B2:5E:44:ED:6C
Authority key identifier: 25:78:E6:6D:75:7F:95:EA:6D:69:3A:A7:F8:4F:CB:27:49:75:C8:BB
Certificate issuer:       /CN=2578e66d757f95ea6d693aa7f84fcb274975c8bb
Certificate serial:       0193568B33AF4A801099000A4CAE33C10B91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JXjmbXV_leptaTqn-E_LJ0l1yLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/c5b5d9-0ae7-4629-a01b-fbad637c4142/1/JXjmbXV_leptaTqn-E_LJ0l1yLs.mft
Manifest number:          040C
Signing time:             Sat 23 Nov 2024 01:03:03 +0000
Manifest this update:     Sat 23 Nov 2024 01:03:03 +0000
Manifest next update:     Sun 24 Nov 2024 01:03:03 +0000
Files and hashes:         1: GRfVBjrJLnubBwWhGZP8OVvcevE.roa (hash: vb+9pbqSTR5+93SWk6MF7nGFcG3F6GBLS6WtV2uOiR0=)
                          2: JXjmbXV_leptaTqn-E_LJ0l1yLs.crl (hash: 6ExHxIqnp14Cvne4rDOle98bQWM6tmwPgy4zV/e+a2w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/c5b5d9-0ae7-4629-a01b-fbad637c4142/1/JXjmbXV_leptaTqn-E_LJ0l1yLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/c5b5d9-0ae7-4629-a01b-fbad637c4142/1/JXjmbXV_leptaTqn-E_LJ0l1yLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JXjmbXV_leptaTqn-E_LJ0l1yLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:33:af:4a:80:10:99:00:0a:4c:ae:33:c1:0b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2578e66d757f95ea6d693aa7f84fcb274975c8bb
        Validity
            Not Before: Nov 23 01:03:03 2024 GMT
            Not After : Nov 24 01:03:03 2024 GMT
        Subject: CN=611c149898e2ef9c20d106212cf18ab25e44ed6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a0:2c:28:6d:2d:b4:96:d5:35:86:1d:f5:af:
                    bf:e5:c7:67:5e:18:d5:df:b6:f5:79:ef:06:3f:b3:
                    b1:5c:22:52:ef:38:a6:da:b9:72:35:2e:15:4e:3e:
                    e1:a3:04:64:74:b0:a8:4c:76:94:47:f8:b7:3d:50:
                    e8:17:e1:dd:17:6b:15:dc:8e:33:bf:65:9e:96:91:
                    1c:57:d5:97:bd:77:bb:1b:1f:ef:2d:7c:61:3c:1a:
                    53:be:6e:6f:39:a4:ea:d8:ca:f1:a2:af:d8:e8:6a:
                    93:9a:26:c8:10:82:f4:1e:3e:29:9f:27:6e:d8:8b:
                    48:78:1f:0b:02:a8:3b:c6:81:01:7b:41:81:4f:62:
                    9b:f3:d2:24:4b:82:35:fe:c2:c4:63:2b:65:0e:69:
                    35:cd:e7:08:ee:1c:7d:43:e8:b7:25:0f:39:51:f0:
                    3a:5f:19:a4:e3:83:9b:bb:85:69:19:31:10:8d:3d:
                    41:22:bc:ed:8b:ee:d8:dd:76:29:3b:a0:51:98:d7:
                    7f:c2:5e:eb:d9:af:a4:68:33:19:50:7e:f7:a5:2b:
                    57:9f:db:e5:15:32:e5:3f:a6:c7:4e:69:b2:dc:49:
                    79:79:23:02:db:ad:fa:95:1f:e8:93:4d:2a:72:12:
                    5a:6b:c2:37:88:41:dd:81:a4:6a:ab:34:b8:ec:3d:
                    f3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1C:14:98:98:E2:EF:9C:20:D1:06:21:2C:F1:8A:B2:5E:44:ED:6C
            X509v3 Authority Key Identifier:
                keyid:25:78:E6:6D:75:7F:95:EA:6D:69:3A:A7:F8:4F:CB:27:49:75:C8:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXjmbXV_leptaTqn-E_LJ0l1yLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c5b5d9-0ae7-4629-a01b-fbad637c4142/1/JXjmbXV_leptaTqn-E_LJ0l1yLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c5b5d9-0ae7-4629-a01b-fbad637c4142/1/JXjmbXV_leptaTqn-E_LJ0l1yLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:e9:ca:6a:6d:51:dd:37:12:37:31:a1:be:a7:48:05:e5:2f:
         67:a3:74:ca:05:47:6c:72:40:be:e3:3d:aa:7d:93:04:e6:56:
         d3:73:03:9a:b9:7a:11:45:27:71:77:6e:91:e3:c1:3c:32:32:
         c4:54:c2:f3:9d:2e:26:f9:8d:dd:60:67:8f:a0:19:68:b3:c1:
         58:09:68:31:5c:a2:83:ba:5d:4b:90:12:d7:f8:90:6f:b4:29:
         ff:94:9b:dc:95:96:26:f6:cf:3c:ea:58:c8:c5:8a:9b:81:b6:
         5a:21:e3:5e:9c:52:e9:6a:df:4a:f3:3c:30:eb:5d:6f:b1:50:
         12:09:8f:d6:34:4d:9d:e5:54:a0:a2:9a:72:fc:a1:1e:1a:4a:
         55:f6:40:94:2c:d0:ab:f8:db:34:b5:c2:46:76:c6:ed:7e:6d:
         14:b7:c6:14:17:73:1b:62:a7:87:7b:bf:41:a2:40:34:36:77:
         8d:f5:f9:4c:ff:64:14:72:0d:fd:c5:90:00:e7:1a:8d:96:61:
         33:c1:b9:b4:b4:99:47:af:a2:4e:23:d8:a7:c0:f4:6f:10:3d:
         9f:c7:0e:9c:2c:90:05:00:01:e5:f4:05:f4:8c:bb:87:a2:56:
         3e:98:30:40:4d:77:86:fe:83:46:57:48:e3:a0:43:86:04:71:
         54:6f:b8:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWizOvSoAQmQAKTK4zwQuRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NzhlNjZkNzU3Zjk1ZWE2ZDY5M2FhN2Y4NGZjYjI3NDk3
NWM4YmIwHhcNMjQxMTIzMDEwMzAzWhcNMjQxMTI0MDEwMzAzWjAzMTEwLwYDVQQD
Eyg2MTFjMTQ5ODk4ZTJlZjljMjBkMTA2MjEyY2YxOGFiMjVlNDRlZDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qAsKG0ttJbVNYYd9a+/5cdnXhjV
37b1ee8GP7OxXCJS7zim2rlyNS4VTj7howRkdLCoTHaUR/i3PVDoF+HdF2sV3I4z
v2WelpEcV9WXvXe7Gx/vLXxhPBpTvm5vOaTq2Mrxoq/Y6GqTmibIEIL0Hj4pnydu
2ItIeB8LAqg7xoEBe0GBT2Kb89IkS4I1/sLEYytlDmk1zecI7hx9Q+i3JQ85UfA6
Xxmk44Obu4VpGTEQjT1BIrzti+7Y3XYpO6BRmNd/wl7r2a+kaDMZUH73pStXn9vl
FTLlP6bHTmmy3El5eSMC2636lR/ok00qchJaa8I3iEHdgaRqqzS47D3zwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEcFJiY4u+cINEGISzxirJeRO1sMB8GA1UdIwQY
MBaAFCV45m11f5XqbWk6p/hPyydJdci7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlhqbWJYVl9sZXB0YVRxbi1FX0xKMGwxeUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jNWI1ZDktMGFlNy00NjI5LWEwMWIt
ZmJhZDYzN2M0MTQyLzEvSlhqbWJYVl9sZXB0YVRxbi1FX0xKMGwxeUxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jNWI1ZDktMGFlNy00NjI5LWEwMWItZmJhZDYzN2M0MTQy
LzEvSlhqbWJYVl9sZXB0YVRxbi1FX0xKMGwxeUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+nKam1R
3TcSNzGhvqdIBeUvZ6N0ygVHbHJAvuM9qn2TBOZW03MDmrl6EUUncXdukePBPDIy
xFTC850uJvmN3WBnj6AZaLPBWAloMVyig7pdS5AS1/iQb7Qp/5Sb3JWWJvbPPOpY
yMWKm4G2WiHjXpxS6WrfSvM8MOtdb7FQEgmP1jRNneVUoKKacvyhHhpKVfZAlCzQ
q/jbNLXCRnbG7X5tFLfGFBdzG2Knh3u/QaJANDZ3jfX5TP9kFHIN/cWQAOcajZZh
M8G5tLSZR6+iTiPYp8D0bxA9n8cOnCyQBQAB5fQF9Iy7h6JWPpgwQE13hv6DRldI
46BDhgRxVG+4nA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:24:06 2024 by rpki-client on console-fra.rpki-client.org