Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
File:                     fxiK2rW1UggeysghybCQOUhzsxU.mft (raw, json)
Hash identifier:          SYkqBCZapvKce5QLI0lYD5d5IrIPCZ4lrldEL8DGmlk=
Subject key identifier:   62:AF:6D:CA:31:9B:06:2C:78:C2:EF:E5:0F:20:F2:1D:9E:07:EB:64
Authority key identifier: 7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15
Certificate issuer:       /CN=7f188adab5b552081ecac821c9b090394873b315
Certificate serial:       019368C63F08A92A578F2E3014C090E25A0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
Manifest number:          0DE9
Signing time:             Tue 26 Nov 2024 14:00:42 +0000
Manifest this update:     Tue 26 Nov 2024 14:00:42 +0000
Manifest next update:     Wed 27 Nov 2024 14:00:42 +0000
Files and hashes:         1: ZUXaWRnpfH9iI3UAzKMBPJF-z9E.roa (hash: sZRzFQSDYOa9JnwDa3fgl7efOc16Hql41Z8+L3YpmQ8=)
                          2: fxiK2rW1UggeysghybCQOUhzsxU.crl (hash: Tzr/hgrpQs+/zk5mvmwK7riWh7zq98uM4cfTQ/tf/KY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:c6:3f:08:a9:2a:57:8f:2e:30:14:c0:90:e2:5a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f188adab5b552081ecac821c9b090394873b315
        Validity
            Not Before: Nov 26 14:00:42 2024 GMT
            Not After : Nov 27 14:00:42 2024 GMT
        Subject: CN=62af6dca319b062c78c2efe50f20f21d9e07eb64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ef:19:03:f9:89:c5:e2:04:66:87:f0:5b:c4:
                    6c:5c:8e:8b:b2:e3:55:4d:a1:a8:a5:9f:21:2c:15:
                    ef:27:1c:5a:42:0c:e8:6a:42:56:2b:fc:a9:76:55:
                    e5:b7:71:96:93:34:4c:4b:69:18:11:d0:9e:39:f0:
                    e8:02:65:94:8a:3c:89:ba:51:d1:5d:db:dc:31:14:
                    1a:b5:af:f4:75:d9:d7:d6:92:a4:0a:5c:d8:3d:d8:
                    f7:e6:40:35:19:c5:7d:ff:01:f4:17:ce:01:45:a0:
                    c9:b3:a4:95:65:0a:56:b6:cc:b4:ed:1f:53:bc:08:
                    e9:39:d7:85:3a:6b:bb:32:8e:ab:cc:2a:9a:2a:08:
                    76:03:6e:a6:5f:d1:e4:0c:34:e9:f6:25:75:51:25:
                    f9:e1:56:2d:76:25:14:f9:91:79:4c:1a:7b:82:9a:
                    13:5f:81:9c:a9:ca:5f:d4:e6:fc:2c:5c:e6:3f:7e:
                    06:20:1a:14:e0:3c:a5:76:77:0e:a6:c8:b2:a5:a4:
                    0d:83:e5:60:48:af:65:91:11:c0:ff:7e:35:0f:e9:
                    32:32:7d:cf:00:e4:db:75:40:8c:f5:cc:fe:27:96:
                    b9:2c:8c:77:e0:88:63:a4:e6:ed:85:d1:1f:84:5d:
                    c0:87:37:66:fb:01:6b:4d:ba:3b:77:6b:0e:56:a0:
                    02:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AF:6D:CA:31:9B:06:2C:78:C2:EF:E5:0F:20:F2:1D:9E:07:EB:64
            X509v3 Authority Key Identifier:
                keyid:7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:a2:b2:eb:55:0d:8d:12:3c:e2:c8:83:25:c0:d2:59:79:03:
         d2:ba:ac:a0:bd:c4:6e:23:67:f8:d1:24:0d:a8:8f:93:36:3a:
         68:b6:56:b2:42:30:df:8d:a9:b6:13:a8:a3:0a:64:f7:f4:38:
         6e:c6:8d:fc:f6:f6:3f:b1:a9:68:b6:f6:4f:59:32:14:3f:e1:
         34:b5:e4:c9:58:93:e0:c1:73:6f:e7:31:d8:84:ef:c5:a9:55:
         b1:b8:8d:97:e9:bc:f4:e2:5e:f7:1a:77:e8:65:29:dd:31:4e:
         5d:a4:29:bb:e9:78:4e:58:11:c4:86:ec:5a:8f:da:3e:6c:ed:
         89:84:3f:39:91:43:ac:cc:da:a2:04:24:ac:7b:1e:a1:5c:83:
         88:b7:de:bf:76:0f:97:2f:00:cc:13:ed:3c:ee:f6:c2:28:71:
         d4:f6:18:3c:48:9f:24:ce:d6:8b:47:05:87:5e:0a:c8:21:e3:
         5a:96:3a:28:bb:12:4d:a3:e0:34:fe:31:85:39:e6:37:95:63:
         cb:73:e2:14:b8:a5:37:b8:47:f9:6a:20:39:1a:42:de:5e:48:
         cb:3f:4f:a5:b0:f3:26:b6:ea:11:96:85:e0:f7:1f:06:31:3d:
         d6:2e:5d:3d:45:82:ca:d2:ed:8e:0f:37:6c:f2:3f:bf:bf:4f:
         ec:ba:32:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNoxj8IqSpXjy4wFMCQ4loKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMTg4YWRhYjViNTUyMDgxZWNhYzgyMWM5YjA5MDM5NDg3
M2IzMTUwHhcNMjQxMTI2MTQwMDQyWhcNMjQxMTI3MTQwMDQyWjAzMTEwLwYDVQQD
Eyg2MmFmNmRjYTMxOWIwNjJjNzhjMmVmZTUwZjIwZjIxZDllMDdlYjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu8ZA/mJxeIEZofwW8RsXI6LsuNV
TaGopZ8hLBXvJxxaQgzoakJWK/ypdlXlt3GWkzRMS2kYEdCeOfDoAmWUijyJulHR
XdvcMRQata/0ddnX1pKkClzYPdj35kA1GcV9/wH0F84BRaDJs6SVZQpWtsy07R9T
vAjpOdeFOmu7Mo6rzCqaKgh2A26mX9HkDDTp9iV1USX54VYtdiUU+ZF5TBp7gpoT
X4Gcqcpf1Ob8LFzmP34GIBoU4DyldncOpsiypaQNg+VgSK9lkRHA/341D+kyMn3P
AOTbdUCM9cz+J5a5LIx34IhjpObthdEfhF3Ahzdm+wFrTbo7d2sOVqAC0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKvbcoxmwYseMLv5Q8g8h2eB+tkMB8GA1UdIwQY
MBaAFH8Yitq1tVIIHsrIIcmwkDlIc7MVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnhpSzJyVzFVZ2dleXNnaHliQ1FPVWh6c3hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9hNjU1MjItZjdjNS00ODdiLWI3Yjgt
MmU0NjE0MTQxYWE0LzEvZnhpSzJyVzFVZ2dleXNnaHliQ1FPVWh6c3hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9hNjU1MjItZjdjNS00ODdiLWI3YjgtMmU0NjE0MTQxYWE0
LzEvZnhpSzJyVzFVZ2dleXNnaHliQ1FPVWh6c3hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsqKy61UN
jRI84siDJcDSWXkD0rqsoL3EbiNn+NEkDaiPkzY6aLZWskIw342pthOoowpk9/Q4
bsaN/Pb2P7GpaLb2T1kyFD/hNLXkyViT4MFzb+cx2ITvxalVsbiNl+m89OJe9xp3
6GUp3TFOXaQpu+l4TlgRxIbsWo/aPmztiYQ/OZFDrMzaogQkrHseoVyDiLfev3YP
ly8AzBPtPO72wihx1PYYPEifJM7Wi0cFh14KyCHjWpY6KLsSTaPgNP4xhTnmN5Vj
y3PiFLilN7hH+WogORpC3l5Iyz9PpbDzJrbqEZaF4PcfBjE91i5dPUWCytLtjg83
bPI/v79P7Loy2w==
-----END CERTIFICATE-----
Generated at Tue Nov 26 21:15:50 2024 by rpki-client on console-fra.rpki-client.org