Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft
File:                     uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft (raw, json)
Hash identifier:          hsSn7/py2dfpJyFko6TFn+LYMWUFcIEdhteyK6ToGCw=
Subject key identifier:   AE:AB:42:4A:BB:2B:29:D5:7D:E3:BD:FD:F5:5D:B9:84:D7:AC:2B:C8
Authority key identifier: BB:2C:F1:ED:10:5C:5C:1D:C5:27:BC:D0:F1:49:FE:94:49:EB:D3:26
Certificate issuer:       /CN=bb2cf1ed105c5c1dc527bcd0f149fe9449ebd326
Certificate serial:       019356BF9B955A9F7C7589D00D6D3C0E6C8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft
Manifest number:          1298
Signing time:             Sat 23 Nov 2024 02:00:17 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:17 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:17 +0000
Files and hashes:         1: ikn_nNlPdznv9YT9p3g00QTdxaA.roa (hash: cMI6oEXh8fP/eS4yW6G71zexLr9ybWtXeEl0oDEzedI=)
                          2: uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl (hash: H7CyeMhE09be9TLQi9ILaZ0beZEcwO1cOkVHsu2NSP0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:9b:95:5a:9f:7c:75:89:d0:0d:6d:3c:0e:6c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb2cf1ed105c5c1dc527bcd0f149fe9449ebd326
        Validity
            Not Before: Nov 23 02:00:17 2024 GMT
            Not After : Nov 24 02:00:17 2024 GMT
        Subject: CN=aeab424abb2b29d57de3bdfdf55db984d7ac2bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:78:97:d0:3e:5f:90:a9:33:fd:3b:77:5f:7b:
                    3b:a7:55:1a:b5:13:3f:36:a8:51:d5:9b:08:b7:ef:
                    bc:d4:69:8a:5e:05:fa:e4:6d:41:65:9e:8d:6e:dd:
                    51:cd:39:b2:b7:b6:64:03:8f:a4:3c:74:d4:16:2e:
                    58:fd:b4:db:4c:64:c5:cf:7f:8c:9e:95:57:ae:12:
                    ce:3c:4e:af:73:bc:06:fc:08:21:19:c0:77:9d:05:
                    73:ac:fd:fb:f9:5c:84:ec:55:26:e1:c3:bc:17:8f:
                    55:b1:db:1a:df:34:33:ff:31:9d:76:c1:5e:d6:b5:
                    03:0c:fc:90:8a:40:a0:38:28:c1:a3:19:d1:7a:24:
                    bc:5a:0d:d6:c9:05:2c:b7:44:04:d7:a2:0c:ea:6a:
                    e8:1b:6f:7e:a9:2b:9a:07:9a:e5:2b:b9:17:1e:08:
                    d8:33:9e:8f:3d:7b:09:55:dc:36:bb:86:c7:a4:03:
                    f5:83:37:c0:e2:f2:7f:aa:67:16:1f:8e:30:c5:15:
                    72:db:4a:ef:58:4c:e1:ca:57:0b:f7:79:b2:ed:a0:
                    7b:e9:2c:27:22:77:54:5b:d0:e1:ac:5a:64:7e:24:
                    3c:8a:74:4b:e4:0c:54:52:0e:71:1f:97:16:cd:6c:
                    07:cb:17:c8:7e:d5:c9:2f:81:ca:c7:24:2e:96:1b:
                    05:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AB:42:4A:BB:2B:29:D5:7D:E3:BD:FD:F5:5D:B9:84:D7:AC:2B:C8
            X509v3 Authority Key Identifier:
                keyid:BB:2C:F1:ED:10:5C:5C:1D:C5:27:BC:D0:F1:49:FE:94:49:EB:D3:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:9e:02:11:a2:36:b9:81:16:c4:ac:45:91:03:d8:55:b8:43:
         2f:82:ee:da:d9:5e:1a:8a:6e:f1:74:0f:42:a6:fd:8d:a4:43:
         8b:c2:6d:cf:89:4d:38:f8:0b:28:3f:ca:44:f8:bb:6d:f4:3e:
         21:16:49:02:47:b6:c2:3a:58:42:dd:1e:99:ce:30:c7:ed:c1:
         6d:09:91:82:a7:4c:77:e0:8d:87:7e:54:98:df:89:1c:2e:93:
         2c:0d:36:73:c9:d1:91:97:f7:86:11:63:bd:a3:0b:35:9d:a9:
         83:6f:88:17:a2:05:1c:8c:aa:06:cb:29:3b:10:8c:9c:4d:c7:
         e7:7a:61:bd:3a:fb:66:06:5f:4e:5b:7f:e3:87:67:f2:ef:85:
         3b:5f:62:58:71:11:1f:62:c3:ea:5f:e6:f1:d4:37:68:cf:39:
         4b:5f:26:e0:f3:6f:e6:7c:73:55:47:c4:74:6b:77:d3:6a:23:
         14:88:08:3c:38:f4:ef:75:da:21:82:a7:10:32:3d:ee:3b:01:
         91:49:eb:4d:19:aa:bb:67:4e:61:bb:c8:dd:8f:84:c1:41:24:
         0e:98:ef:d6:46:8d:7f:c3:b7:d8:92:84:81:38:12:60:37:f0:
         7f:17:be:18:46:d2:84:e7:2a:bf:03:1c:c9:c2:4b:0b:b8:c9:
         bd:1f:29:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWv5uVWp98dYnQDW08DmyNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMmNmMWVkMTA1YzVjMWRjNTI3YmNkMGYxNDlmZTk0NDll
YmQzMjYwHhcNMjQxMTIzMDIwMDE3WhcNMjQxMTI0MDIwMDE3WjAzMTEwLwYDVQQD
EyhhZWFiNDI0YWJiMmIyOWQ1N2RlM2JkZmRmNTVkYjk4NGQ3YWMyYmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1niX0D5fkKkz/Tt3X3s7p1UatRM/
NqhR1ZsIt++81GmKXgX65G1BZZ6Nbt1RzTmyt7ZkA4+kPHTUFi5Y/bTbTGTFz3+M
npVXrhLOPE6vc7wG/AghGcB3nQVzrP37+VyE7FUm4cO8F49Vsdsa3zQz/zGddsFe
1rUDDPyQikCgOCjBoxnReiS8Wg3WyQUst0QE16IM6mroG29+qSuaB5rlK7kXHgjY
M56PPXsJVdw2u4bHpAP1gzfA4vJ/qmcWH44wxRVy20rvWEzhylcL93my7aB76Swn
IndUW9DhrFpkfiQ8inRL5AxUUg5xH5cWzWwHyxfIftXJL4HKxyQulhsFZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6rQkq7KynVfeO9/fVduYTXrCvIMB8GA1UdIwQY
MBaAFLss8e0QXFwdxSe80PFJ/pRJ69MmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXl6eDdSQmNYQjNGSjd6UThVbi1sRW5yMHlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8yNDFiNGItZmVkNi00NWU5LWI2ZWMt
NzUxYzc0ZTY3ZDM4LzEvdXl6eDdSQmNYQjNGSjd6UThVbi1sRW5yMHlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8yNDFiNGItZmVkNi00NWU5LWI2ZWMtNzUxYzc0ZTY3ZDM4
LzEvdXl6eDdSQmNYQjNGSjd6UThVbi1sRW5yMHlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZ4CEaI2
uYEWxKxFkQPYVbhDL4Lu2tleGopu8XQPQqb9jaRDi8Jtz4lNOPgLKD/KRPi7bfQ+
IRZJAke2wjpYQt0emc4wx+3BbQmRgqdMd+CNh35UmN+JHC6TLA02c8nRkZf3hhFj
vaMLNZ2pg2+IF6IFHIyqBsspOxCMnE3H53phvTr7ZgZfTlt/44dn8u+FO19iWHER
H2LD6l/m8dQ3aM85S18m4PNv5nxzVUfEdGt302ojFIgIPDj073XaIYKnEDI97jsB
kUnrTRmqu2dOYbvI3Y+EwUEkDpjv1kaNf8O32JKEgTgSYDfwfxe+GEbShOcqvwMc
ycJLC7jJvR8pVg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:43:57 2024 by rpki-client on console-ams.rpki-client.org