Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
File:                     MFMuPcNxjy4bVWppRwsec53TkCI.mft (raw, json)
Hash identifier:          kqqviwJ7mWyo5I4hKRRr8Jdbe+q80MVDtTMV97D+m98=
Subject key identifier:   C6:D1:28:5B:64:4E:79:7F:E1:0A:7C:F9:B7:33:B9:B0:B9:D4:C6:BE
Authority key identifier: 30:53:2E:3D:C3:71:8F:2E:1B:55:6A:69:47:0B:1E:73:9D:D3:90:22
Certificate issuer:       /CN=30532e3dc3718f2e1b556a69470b1e739dd39022
Certificate serial:       019358780441A8B3495DD393DA903AAF962D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
Manifest number:          0913
Signing time:             Sat 23 Nov 2024 10:01:20 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:20 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:20 +0000
Files and hashes:         1: MFMuPcNxjy4bVWppRwsec53TkCI.crl (hash: ZVcq+HlFcfD+BS3W1DQukwAhYt6tZZbqlrQQb1i9eOs=)
                          2: bFHXBYbvbNSOTRMC7gzVpM2dFos.roa (hash: NahV0YZn7xgt2wHpJR1/t9AB8+eJSiYRSd4wbas4KvI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:04:41:a8:b3:49:5d:d3:93:da:90:3a:af:96:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30532e3dc3718f2e1b556a69470b1e739dd39022
        Validity
            Not Before: Nov 23 10:01:20 2024 GMT
            Not After : Nov 24 10:01:20 2024 GMT
        Subject: CN=c6d1285b644e797fe10a7cf9b733b9b0b9d4c6be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d3:8b:03:ad:40:3d:01:38:3b:c5:10:64:9b:
                    f7:7a:06:aa:42:cd:c1:77:57:9b:0b:21:5a:df:29:
                    45:62:04:41:56:2e:18:54:5e:d3:35:f3:b7:43:00:
                    8c:ac:60:cd:1e:44:11:81:ee:9d:64:1a:6d:95:6e:
                    b9:ee:e8:f1:42:95:b5:47:03:e2:ab:31:01:a8:6e:
                    78:fa:e8:ea:81:12:6c:b2:c2:38:e6:2b:a3:06:68:
                    8a:72:13:a5:95:81:16:43:9d:01:fe:d4:37:2f:75:
                    85:18:62:f9:29:f2:6a:5f:b3:14:88:7b:36:2b:7b:
                    04:97:3f:dc:4f:77:ca:8b:1a:a6:22:02:cc:65:c7:
                    99:83:5c:66:1f:d9:11:08:8a:b5:0e:8d:f8:8f:59:
                    93:87:a8:e3:97:06:6e:e2:4f:2e:d1:0b:95:1c:48:
                    c4:25:c4:15:20:65:8b:6a:48:34:91:c7:9f:77:ff:
                    78:da:bb:6a:ef:6a:1d:65:56:d2:4a:04:d5:53:90:
                    17:51:24:48:32:6c:33:c5:46:19:ab:ea:e9:46:e6:
                    a2:5f:cb:3d:a8:3e:68:d4:70:48:23:18:59:86:11:
                    89:81:60:4d:6e:dd:26:3c:9f:b0:6f:b0:54:da:0a:
                    e3:86:84:ff:8e:da:c4:fe:f7:f9:61:59:c9:22:2f:
                    a5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D1:28:5B:64:4E:79:7F:E1:0A:7C:F9:B7:33:B9:B0:B9:D4:C6:BE
            X509v3 Authority Key Identifier:
                keyid:30:53:2E:3D:C3:71:8F:2E:1B:55:6A:69:47:0B:1E:73:9D:D3:90:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:7b:20:99:f2:b6:3d:5c:20:6a:73:1d:70:f5:80:49:4d:8f:
         10:40:ca:48:7d:1d:d5:c6:f4:27:7f:b6:72:a1:ec:6c:ed:2e:
         60:ff:3a:4c:b7:31:65:59:a6:28:39:df:ad:dc:63:0c:a7:85:
         36:b6:0f:9f:d3:e7:e3:6a:58:77:36:dd:78:e5:7d:24:20:64:
         eb:c4:a3:75:66:e4:10:49:51:42:76:70:3e:c2:6e:96:65:bf:
         2b:a7:fd:95:9a:b3:23:92:b2:88:f6:3b:e2:e9:22:a1:e1:3f:
         e0:ed:e5:3b:09:1f:e1:bd:2a:05:54:a7:f7:1d:22:ff:9b:bd:
         cc:85:15:8a:b1:e3:db:f6:f8:94:ad:75:df:6a:72:8e:a3:16:
         d6:a2:f2:f0:38:b0:26:b5:08:56:7f:f6:8e:5a:7b:6b:42:39:
         46:ea:a9:37:8b:8d:e6:ba:f3:0a:fe:9d:0e:a9:10:15:3e:80:
         c1:44:e5:06:93:5c:1a:4f:06:3d:26:e0:d1:53:89:b6:6b:ec:
         1d:c8:ed:29:bb:21:1e:5c:c7:8e:6d:d4:78:f2:8f:6f:be:ef:
         cd:4e:39:a8:d9:69:ec:81:3d:75:69:2d:70:fc:a7:33:cf:19:
         0b:8e:94:e1:4d:5c:97:53:52:4c:e0:8b:69:b0:6c:26:63:3f:
         5b:e9:26:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYeARBqLNJXdOT2pA6r5YtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNTMyZTNkYzM3MThmMmUxYjU1NmE2OTQ3MGIxZTczOWRk
MzkwMjIwHhcNMjQxMTIzMTAwMTIwWhcNMjQxMTI0MTAwMTIwWjAzMTEwLwYDVQQD
EyhjNmQxMjg1YjY0NGU3OTdmZTEwYTdjZjliNzMzYjliMGI5ZDRjNmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NOLA61APQE4O8UQZJv3egaqQs3B
d1ebCyFa3ylFYgRBVi4YVF7TNfO3QwCMrGDNHkQRge6dZBptlW657ujxQpW1RwPi
qzEBqG54+ujqgRJsssI45iujBmiKchOllYEWQ50B/tQ3L3WFGGL5KfJqX7MUiHs2
K3sElz/cT3fKixqmIgLMZceZg1xmH9kRCIq1Do34j1mTh6jjlwZu4k8u0QuVHEjE
JcQVIGWLakg0kcefd/942rtq72odZVbSSgTVU5AXUSRIMmwzxUYZq+rpRuaiX8s9
qD5o1HBIIxhZhhGJgWBNbt0mPJ+wb7BU2grjhoT/jtrE/vf5YVnJIi+lPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbRKFtkTnl/4Qp8+bczubC51Ma+MB8GA1UdIwQY
MBaAFDBTLj3DcY8uG1VqaUcLHnOd05AiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUZNdVBjTnhqeTRiVldwcFJ3c2VjNTNUa0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny85NzJkNzEtNWU3Zi00Y2M5LWFmODct
NjZhZDFkYzg3MzYzLzEvTUZNdVBjTnhqeTRiVldwcFJ3c2VjNTNUa0NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny85NzJkNzEtNWU3Zi00Y2M5LWFmODctNjZhZDFkYzg3MzYz
LzEvTUZNdVBjTnhqeTRiVldwcFJ3c2VjNTNUa0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhnsgmfK2
PVwganMdcPWASU2PEEDKSH0d1cb0J3+2cqHsbO0uYP86TLcxZVmmKDnfrdxjDKeF
NrYPn9Pn42pYdzbdeOV9JCBk68SjdWbkEElRQnZwPsJulmW/K6f9lZqzI5KyiPY7
4ukioeE/4O3lOwkf4b0qBVSn9x0i/5u9zIUVirHj2/b4lK1132pyjqMW1qLy8Diw
JrUIVn/2jlp7a0I5RuqpN4uN5rrzCv6dDqkQFT6AwUTlBpNcGk8GPSbg0VOJtmvs
HcjtKbshHlzHjm3UePKPb77vzU45qNlp7IE9dWktcPynM88ZC46U4U1cl1NSTOCL
abBsJmM/W+km0g==
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:03:33 2024 by rpki-client on console-fra.rpki-client.org