Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft
File:                     98sUpB-NnmKNroj0dSgi_Hff7AI.mft (raw, json)
Hash identifier:          liwm6jBoO7sTOy092ZqJQmSgDYDV0zB7K8DcboVCsqo=
Subject key identifier:   40:8A:09:AC:A9:98:7D:14:4A:8C:45:5F:05:23:A0:0D:0B:CF:82:9C
Authority key identifier: F7:CB:14:A4:1F:8D:9E:62:8D:AE:88:F4:75:28:22:FC:77:DF:EC:02
Certificate issuer:       /CN=f7cb14a41f8d9e628dae88f4752822fc77dfec02
Certificate serial:       0193568A77D87CA80EF5DE1C56FBBEE5C2C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft
Manifest number:          1377
Signing time:             Sat 23 Nov 2024 01:02:15 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:15 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:15 +0000
Files and hashes:         1: 0lHEC7WwqxWN6J_7IaZldwErvkU.roa (hash: Nz5G0RIpUZODc6xxLEkXRKv3WSHJ4knYosk1o/sPFzk=)
                          2: 6wuAI4nEDbuYP1rgqayuHFheCAk.roa (hash: VTvGDVJNA4JSdggP4PVzDBqdPWytHEdnH+JcpL3rWbE=)
                          3: 98sUpB-NnmKNroj0dSgi_Hff7AI.crl (hash: XMxKHVbTFU8IlrKk5RdDj43r01vAT0B3IKt2NnHhtXg=)
                          4: rb5WaVK7ZimrNSUOJv8wEGb18f0.roa (hash: g5XYxcTP8DA9mgA8mve6qv7vZVAMmltuxo2yKM70qpM=)
                          5: wXj6IUJ1kq-K2Ey-l8nz4NZSrZQ.roa (hash: wolWfhpTTuqLBBKMl5sWhGeyQSwuTfDC1DyG8mOnyzc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:77:d8:7c:a8:0e:f5:de:1c:56:fb:be:e5:c2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7cb14a41f8d9e628dae88f4752822fc77dfec02
        Validity
            Not Before: Nov 23 01:02:15 2024 GMT
            Not After : Nov 24 01:02:15 2024 GMT
        Subject: CN=408a09aca9987d144a8c455f0523a00d0bcf829c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:58:55:72:c3:a8:26:35:44:ca:58:d0:54:9d:
                    b7:e3:e0:4f:99:20:2c:2a:fe:a4:76:ff:b7:6b:09:
                    48:2f:6c:1c:c0:8a:fb:86:63:e2:29:59:7c:83:bf:
                    97:0a:6c:0c:dd:8f:84:59:c0:8a:2d:07:94:0f:c8:
                    2c:53:24:9a:6c:14:be:26:28:18:c7:73:aa:76:6d:
                    30:77:6e:2d:62:76:00:73:9d:c2:29:07:24:e2:c6:
                    75:b4:92:79:0f:39:75:2a:48:34:5a:f2:07:df:51:
                    a8:30:3d:e7:c3:6f:cf:7c:b3:6b:3e:68:a2:44:3c:
                    a0:9c:a4:a8:a4:9c:f0:94:c5:6d:dc:04:2d:42:60:
                    6b:a3:6e:e9:05:b1:3e:f9:86:80:f1:87:84:e8:50:
                    da:ce:c2:c4:35:ac:d2:24:c1:3b:58:8a:fb:5d:49:
                    3b:fe:32:88:16:a4:0e:95:d7:e7:f3:6c:f7:2a:39:
                    cb:e8:3a:48:fe:e0:da:8a:45:9d:b0:59:51:e2:26:
                    39:3f:25:33:47:16:5a:ca:3d:86:ea:41:65:d8:35:
                    1f:8d:f0:db:8b:fd:ad:91:00:52:e7:62:7c:0c:99:
                    7d:c0:c1:f7:10:98:54:8a:21:e4:4d:a0:f6:eb:a7:
                    3a:36:d8:4e:d6:af:1b:21:d4:c7:8e:1a:96:90:3f:
                    88:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:8A:09:AC:A9:98:7D:14:4A:8C:45:5F:05:23:A0:0D:0B:CF:82:9C
            X509v3 Authority Key Identifier:
                keyid:F7:CB:14:A4:1F:8D:9E:62:8D:AE:88:F4:75:28:22:FC:77:DF:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:33:d2:8a:c6:93:93:2f:64:4b:42:75:86:be:49:a1:50:78:
         60:3b:43:94:91:67:31:97:93:62:1c:d2:68:4e:fd:96:d6:e6:
         04:d1:27:d2:10:95:65:9e:ff:e5:97:e2:ae:39:46:9a:4a:a8:
         4a:3d:d0:a2:0c:9c:04:a5:4d:08:45:76:df:63:fd:6a:8f:d0:
         d1:d8:31:71:4c:89:7a:d9:77:59:6c:43:c2:c6:96:5a:50:fc:
         e6:ec:5c:3c:73:64:0a:e7:01:64:b9:b2:93:33:21:1d:da:8c:
         4d:55:51:76:d5:b8:54:79:bf:e4:50:78:84:76:91:7f:0c:a6:
         ec:1b:7b:c5:d5:a6:16:56:6d:be:c8:c9:bb:bf:3e:f3:62:7a:
         90:d1:28:98:c5:17:73:4c:65:e5:b0:cf:66:a7:a8:6a:40:dd:
         67:9e:44:09:f2:1a:fb:a6:de:3b:2a:91:d5:3d:4e:a4:93:da:
         c3:88:f1:92:69:8e:d6:2a:dc:76:1d:99:5b:66:31:ab:95:c5:
         dd:83:dc:3c:e1:95:23:10:a3:87:0c:e4:33:82:64:5f:b8:d0:
         38:05:8f:1d:e0:db:05:68:89:78:e2:e6:24:ec:58:aa:1a:de:
         be:c9:9f:eb:33:be:03:77:2d:1b:c4:13:28:f6:79:e5:4d:cb:
         7c:8e:2a:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWinfYfKgO9d4cVvu+5cLFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3Y2IxNGE0MWY4ZDllNjI4ZGFlODhmNDc1MjgyMmZjNzdk
ZmVjMDIwHhcNMjQxMTIzMDEwMjE1WhcNMjQxMTI0MDEwMjE1WjAzMTEwLwYDVQQD
Eyg0MDhhMDlhY2E5OTg3ZDE0NGE4YzQ1NWYwNTIzYTAwZDBiY2Y4MjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVhVcsOoJjVEyljQVJ234+BPmSAs
Kv6kdv+3awlIL2wcwIr7hmPiKVl8g7+XCmwM3Y+EWcCKLQeUD8gsUySabBS+JigY
x3Oqdm0wd24tYnYAc53CKQck4sZ1tJJ5Dzl1Kkg0WvIH31GoMD3nw2/PfLNrPmii
RDygnKSopJzwlMVt3AQtQmBro27pBbE++YaA8YeE6FDazsLENazSJME7WIr7XUk7
/jKIFqQOldfn82z3KjnL6DpI/uDaikWdsFlR4iY5PyUzRxZayj2G6kFl2DUfjfDb
i/2tkQBS52J8DJl9wMH3EJhUiiHkTaD266c6NthO1q8bIdTHjhqWkD+IrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECKCaypmH0USoxFXwUjoA0Lz4KcMB8GA1UdIwQY
MBaAFPfLFKQfjZ5ija6I9HUoIvx33+wCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOThzVXBCLU5ubUtOcm9qMGRTZ2lfSGZmN0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84OTAzMTEtNDhlZS00ODZkLTkzNTkt
ZTdlZTRlNzVkM2FmLzEvOThzVXBCLU5ubUtOcm9qMGRTZ2lfSGZmN0FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC84OTAzMTEtNDhlZS00ODZkLTkzNTktZTdlZTRlNzVkM2Fm
LzEvOThzVXBCLU5ubUtOcm9qMGRTZ2lfSGZmN0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzPSisaT
ky9kS0J1hr5JoVB4YDtDlJFnMZeTYhzSaE79ltbmBNEn0hCVZZ7/5ZfirjlGmkqo
Sj3QogycBKVNCEV232P9ao/Q0dgxcUyJetl3WWxDwsaWWlD85uxcPHNkCucBZLmy
kzMhHdqMTVVRdtW4VHm/5FB4hHaRfwym7Bt7xdWmFlZtvsjJu78+82J6kNEomMUX
c0xl5bDPZqeoakDdZ55ECfIa+6beOyqR1T1OpJPaw4jxkmmO1ircdh2ZW2Yxq5XF
3YPcPOGVIxCjhwzkM4JkX7jQOAWPHeDbBWiJeOLmJOxYqhrevsmf6zO+A3ctG8QT
KPZ55U3LfI4qDg==
-----END CERTIFICATE-----