Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft
File:                     7PQndr5TK9BXUzKFXYxCxJUu2TE.mft (raw, json)
Hash identifier:          kpVf1Wq7V9424ShfB4zvQ49obfWqxMGb+PW0xS5JmbA=
Subject key identifier:   69:7E:02:1A:8B:64:7A:94:9E:05:F6:48:E8:72:26:2C:21:67:01:D7
Authority key identifier: EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31
Certificate issuer:       /CN=ecf42776be532bd0575332855d8c42c4952ed931
Certificate serial:       019353BEBEFE3B061860892B201B90F42695
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 12:00:29 +0000
Manifest this update:     Fri 22 Nov 2024 12:00:29 +0000
Manifest next update:     Sat 23 Nov 2024 12:00:29 +0000
Files and hashes:         1: 7PQndr5TK9BXUzKFXYxCxJUu2TE.crl (hash: aRBrFdtDCmqKmRWE6zmq3biszVYMBQ6KDmRWzNny9R8=)
                          2: AmCavsB7sXrk2Lh_QqZeMx0oG6c.roa (hash: Z+ukCeYILz6Mg6vOM9y/O3LVWyGWtAxioJPt02Qnjk0=)
                          3: UGWZytFXBSTiJgNKNCCarirukKc.roa (hash: 3ZLhMwlpW668mhfvkUGZf0jI6WrEGECOTuhia2dkomI=)
                          4: iGq_HkflsuGXVBXMxRJvYVrCKt4.roa (hash: 5J3usOiq41wbspvKlkZhj3AzoYRZs/6wTi+fyILvEV8=)
                          5: tMJC2H5hC42J_zoGhjAgaRp_axo.roa (hash: 2C56hQaxT9FBBlRHSzwTV2lWteS44CS7E0813hBve8I=)
                          6: uaIRUdhpeBrihz5_tKPya0l1HQA.roa (hash: nXStrXqy+W1GQyxvaukh3YEfHw2Y+Etye5wsJybgLMU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:be:be:fe:3b:06:18:60:89:2b:20:1b:90:f4:26:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecf42776be532bd0575332855d8c42c4952ed931
        Validity
            Not Before: Nov 22 12:00:29 2024 GMT
            Not After : Nov 23 12:00:29 2024 GMT
        Subject: CN=697e021a8b647a949e05f648e872262c216701d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fb:19:5b:f2:8c:d0:51:30:30:81:a7:42:95:
                    e0:cd:ea:1a:76:9b:e0:70:2b:40:bf:07:12:cd:46:
                    b0:b8:a5:cf:0b:5e:e5:0c:39:08:2e:77:e8:f4:0a:
                    bb:b4:5a:c4:51:f4:e0:6c:63:54:3a:8b:c1:e8:74:
                    05:2d:32:ec:9b:44:36:a3:75:10:d3:ec:6f:e4:76:
                    05:7b:0e:3a:e1:53:79:dc:2c:ae:43:37:b0:b5:cf:
                    2f:20:a4:9d:e0:98:57:20:fd:dc:e3:5b:77:87:fd:
                    1c:3c:f3:dc:fc:fd:ac:ac:ff:c4:7e:14:7a:f4:ae:
                    1c:03:26:8e:43:c8:17:dd:53:5e:5d:3c:6e:5f:f3:
                    03:82:56:8b:2d:a3:44:f3:0e:ce:b9:a0:36:5c:5d:
                    e4:93:76:4c:62:db:7b:ac:52:b8:fe:fe:af:d4:01:
                    a5:1d:17:1f:c6:0d:0f:1b:f4:16:d6:f8:14:16:bc:
                    7a:d3:2c:3a:e3:d9:20:23:a3:de:4c:a6:7a:05:2e:
                    2c:8d:ef:61:bd:78:7d:2f:5e:4a:b5:b7:c9:63:19:
                    ae:9e:76:8c:dd:43:1f:d0:b9:53:37:de:a8:d3:a4:
                    78:02:56:78:89:f8:22:15:fa:89:0c:49:d3:1b:71:
                    d4:27:34:1f:71:43:da:4c:d1:6a:ce:55:b3:6a:33:
                    50:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7E:02:1A:8B:64:7A:94:9E:05:F6:48:E8:72:26:2C:21:67:01:D7
            X509v3 Authority Key Identifier:
                keyid:EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:5e:26:70:a7:ac:f6:24:4a:8a:f6:c0:4f:dc:7a:b4:9d:e8:
         76:1b:f6:ff:08:59:d8:51:1c:44:e8:f2:64:22:d4:79:dc:1b:
         8a:b6:33:a4:58:ee:25:2f:c4:10:1a:d7:a0:e1:87:e0:c0:09:
         0c:9e:39:fe:51:80:25:61:25:83:43:85:96:82:8b:ef:82:52:
         7d:13:ad:09:86:d5:33:16:92:09:e6:40:6f:82:e9:15:b6:a6:
         16:23:32:b5:85:6e:72:5c:64:dc:bb:bb:a1:e9:56:8f:98:d7:
         ee:39:e6:ad:86:41:a5:ec:93:ee:5a:23:d0:bf:f9:c4:9b:82:
         4b:ab:96:29:63:1d:82:cf:a7:e6:fe:74:7e:60:d6:60:12:12:
         15:c0:a9:c2:b1:66:c4:13:ed:f1:30:21:60:7d:f3:69:ea:bd:
         e4:8a:57:9f:1c:14:9c:45:45:5c:66:05:33:42:53:bc:36:58:
         f7:88:93:5e:1f:cb:0d:a4:e3:91:5e:8b:ac:ce:d2:75:6c:33:
         a1:77:52:ed:60:81:31:25:d5:3b:50:36:35:ee:ae:01:77:81:
         54:82:e5:81:a1:36:2b:b9:3e:2c:a0:cc:1c:41:a2:e0:c0:91:
         26:fb:02:bf:6f:5e:fa:3d:2e:a7:83:de:b9:5d:d3:8d:31:1b:
         43:0f:76:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNTvr7+OwYYYIkrIBuQ9CaVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZjQyNzc2YmU1MzJiZDA1NzUzMzI4NTVkOGM0MmM0OTUy
ZWQ5MzEwHhcNMjQxMTIyMTIwMDI5WhcNMjQxMTIzMTIwMDI5WjAzMTEwLwYDVQQD
Eyg2OTdlMDIxYThiNjQ3YTk0OWUwNWY2NDhlODcyMjYyYzIxNjcwMWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/sZW/KM0FEwMIGnQpXgzeoadpvg
cCtAvwcSzUawuKXPC17lDDkILnfo9Aq7tFrEUfTgbGNUOovB6HQFLTLsm0Q2o3UQ
0+xv5HYFew464VN53CyuQzewtc8vIKSd4JhXIP3c41t3h/0cPPPc/P2srP/EfhR6
9K4cAyaOQ8gX3VNeXTxuX/MDglaLLaNE8w7OuaA2XF3kk3ZMYtt7rFK4/v6v1AGl
HRcfxg0PG/QW1vgUFrx60yw649kgI6PeTKZ6BS4sje9hvXh9L15KtbfJYxmunnaM
3UMf0LlTN96o06R4AlZ4ifgiFfqJDEnTG3HUJzQfcUPaTNFqzlWzajNQbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGl+AhqLZHqUngX2SOhyJiwhZwHXMB8GA1UdIwQY
MBaAFOz0J3a+UyvQV1MyhV2MQsSVLtkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1BRbmRyNVRLOUJYVXpLRlhZeEN4SlV1MlRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9lYmQ0OWYtZjU2OS00MTUyLWIwYjgt
NWU1M2MyM2I1NWIwLzEvN1BRbmRyNVRLOUJYVXpLRlhZeEN4SlV1MlRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9lYmQ0OWYtZjU2OS00MTUyLWIwYjgtNWU1M2MyM2I1NWIw
LzEvN1BRbmRyNVRLOUJYVXpLRlhZeEN4SlV1MlRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPF4mcKes
9iRKivbAT9x6tJ3odhv2/whZ2FEcROjyZCLUedwbirYzpFjuJS/EEBrXoOGH4MAJ
DJ45/lGAJWElg0OFloKL74JSfROtCYbVMxaSCeZAb4LpFbamFiMytYVuclxk3Lu7
oelWj5jX7jnmrYZBpeyT7loj0L/5xJuCS6uWKWMdgs+n5v50fmDWYBISFcCpwrFm
xBPt8TAhYH3zaeq95IpXnxwUnEVFXGYFM0JTvDZY94iTXh/LDaTjkV6LrM7SdWwz
oXdS7WCBMSXVO1A2Ne6uAXeBVILlgaE2K7k+LKDMHEGi4MCRJvsCv29e+j0up4Pe
uV3TjTEbQw92KQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:12:44 2024 by rpki-client on console-ams.rpki-client.org