Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft
File:                     FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft (raw, json)
Hash identifier:          WDB7/jQCM3spaC67OQJHbh8MYKHTpy3nqkfmWVrFQdk=
Subject key identifier:   2C:B2:AF:E9:D2:8E:09:63:55:1A:C3:12:D2:EE:D3:2C:92:1D:B0:C6
Authority key identifier: 16:09:20:63:A2:A7:DC:60:9E:2B:6F:9C:C0:DA:F0:4F:1E:98:B9:ED
Certificate issuer:       /CN=16092063a2a7dc609e2b6f9cc0daf04f1e98b9ed
Certificate serial:       0193598A268972F8BCCB80C47C62CF22F214
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 15:00:46 +0000
Manifest this update:     Sat 23 Nov 2024 15:00:46 +0000
Manifest next update:     Sun 24 Nov 2024 15:00:46 +0000
Files and hashes:         1: FgkgY6Kn3GCeK2-cwNrwTx6Yue0.crl (hash: pkLO5mYzjAazA9FGnNzar9kNs2rIr+BX6/BIn18sIio=)
                          2: kmZEuaMu8qSRPRVNeaqE9h0Ygb8.roa (hash: RC9nXpAESkiOpUAaFvO40Ngjc7dEYqbnWsuvTu9RjKU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:8a:26:89:72:f8:bc:cb:80:c4:7c:62:cf:22:f2:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16092063a2a7dc609e2b6f9cc0daf04f1e98b9ed
        Validity
            Not Before: Nov 23 15:00:46 2024 GMT
            Not After : Nov 24 15:00:46 2024 GMT
        Subject: CN=2cb2afe9d28e0963551ac312d2eed32c921db0c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:25:21:90:03:e2:55:97:bb:a3:74:d7:e8:59:
                    11:4c:78:54:41:97:44:fe:96:e0:fe:dd:95:0f:d0:
                    07:78:c9:46:cf:e7:c7:de:71:a2:55:dc:4a:9e:c7:
                    01:4c:1c:ec:b8:f2:bd:c8:4c:0c:f2:86:b5:6a:fb:
                    ee:23:3b:9d:82:ad:68:5c:4d:dc:ce:91:fa:6f:36:
                    ed:c8:cd:bc:28:15:b2:bf:cb:d1:22:52:a4:f8:b6:
                    e9:28:7e:3e:cc:32:31:dc:d6:71:c7:af:14:b8:07:
                    18:03:b4:a5:0f:5c:ec:de:02:13:f9:f1:8a:be:6f:
                    77:8d:15:57:9c:5b:ab:17:02:29:d4:a2:a2:0a:e0:
                    63:d1:6e:49:34:b5:29:9a:6e:70:42:92:bf:16:88:
                    c4:ed:d9:cc:dd:9c:3b:7e:25:ed:8e:f1:c8:a5:4b:
                    88:95:25:b7:0d:2a:c4:80:48:c0:cd:29:37:f6:e3:
                    57:7a:16:13:8d:a0:0d:24:c6:e9:4a:eb:4d:e2:b0:
                    c1:1d:1b:3a:28:c8:40:59:08:89:2d:08:3d:99:f2:
                    db:f0:9d:f8:f7:9f:7f:7e:67:0a:ae:39:0c:13:d0:
                    50:96:5c:5e:46:52:f0:e9:4e:4a:38:40:c5:40:ed:
                    71:02:06:58:a9:ca:eb:29:0b:d7:e0:bb:00:f2:e3:
                    35:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B2:AF:E9:D2:8E:09:63:55:1A:C3:12:D2:EE:D3:2C:92:1D:B0:C6
            X509v3 Authority Key Identifier:
                keyid:16:09:20:63:A2:A7:DC:60:9E:2B:6F:9C:C0:DA:F0:4F:1E:98:B9:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:58:db:7c:2e:03:74:24:1e:1f:8e:86:78:3c:23:31:9d:4f:
         66:a9:43:da:41:51:3e:1b:95:c9:93:72:56:d3:61:2c:ea:7a:
         04:cc:b2:a7:b6:41:11:55:3f:66:1a:5d:8a:21:f2:f7:a4:17:
         ba:d2:4a:d2:2c:d5:02:91:75:80:5e:0b:8c:42:f9:89:a0:32:
         e2:63:a3:e4:9a:3e:6e:19:35:13:d3:d9:7b:92:f5:19:af:73:
         7f:3a:79:15:4f:fc:d7:78:96:ae:cf:ee:0b:f0:b1:95:44:e0:
         a2:6d:c2:24:0e:56:d2:ac:b6:14:bd:73:d0:64:b3:04:73:1b:
         3b:99:05:e5:b2:70:bc:20:68:91:94:9a:9f:55:33:7b:fb:87:
         b4:60:03:8a:a9:41:8d:41:c7:6b:91:79:cf:3e:2a:80:61:7f:
         b6:6e:20:7a:ef:5b:1f:4e:8d:68:de:49:37:66:e3:76:c3:2e:
         ba:13:0d:e1:f5:35:df:3c:42:bc:d9:c8:a5:00:6d:9b:ce:ee:
         c4:cc:b6:54:3a:64:62:bf:fb:aa:cf:4a:de:94:12:b9:e3:3f:
         a8:e1:d4:45:ac:d4:35:c0:4a:e8:69:d9:62:94:80:9d:6b:77:
         16:01:62:ad:2d:dc:a0:38:59:2c:52:7d:55:20:09:78:72:3c:
         06:a5:ce:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNZiiaJcvi8y4DEfGLPIvIUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MDkyMDYzYTJhN2RjNjA5ZTJiNmY5Y2MwZGFmMDRmMWU5
OGI5ZWQwHhcNMjQxMTIzMTUwMDQ2WhcNMjQxMTI0MTUwMDQ2WjAzMTEwLwYDVQQD
EygyY2IyYWZlOWQyOGUwOTYzNTUxYWMzMTJkMmVlZDMyYzkyMWRiMGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiUhkAPiVZe7o3TX6FkRTHhUQZdE
/pbg/t2VD9AHeMlGz+fH3nGiVdxKnscBTBzsuPK9yEwM8oa1avvuIzudgq1oXE3c
zpH6bzbtyM28KBWyv8vRIlKk+LbpKH4+zDIx3NZxx68UuAcYA7SlD1zs3gIT+fGK
vm93jRVXnFurFwIp1KKiCuBj0W5JNLUpmm5wQpK/FojE7dnM3Zw7fiXtjvHIpUuI
lSW3DSrEgEjAzSk39uNXehYTjaANJMbpSutN4rDBHRs6KMhAWQiJLQg9mfLb8J34
959/fmcKrjkME9BQllxeRlLw6U5KOEDFQO1xAgZYqcrrKQvX4LsA8uM1PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyyr+nSjgljVRrDEtLu0yySHbDGMB8GA1UdIwQY
MBaAFBYJIGOip9xgnitvnMDa8E8emLntMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmdrZ1k2S24zR0NlSzItY3dOcndUeDZZdWUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83YzM2M2EtOWJhNy00ZDQ1LTgzYjct
NjBkM2ZlMTljM2JjLzEvRmdrZ1k2S24zR0NlSzItY3dOcndUeDZZdWUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy83YzM2M2EtOWJhNy00ZDQ1LTgzYjctNjBkM2ZlMTljM2Jj
LzEvRmdrZ1k2S24zR0NlSzItY3dOcndUeDZZdWUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmVjbfC4D
dCQeH46GeDwjMZ1PZqlD2kFRPhuVyZNyVtNhLOp6BMyyp7ZBEVU/ZhpdiiHy96QX
utJK0izVApF1gF4LjEL5iaAy4mOj5Jo+bhk1E9PZe5L1Ga9zfzp5FU/813iWrs/u
C/CxlUTgom3CJA5W0qy2FL1z0GSzBHMbO5kF5bJwvCBokZSan1Uze/uHtGADiqlB
jUHHa5F5zz4qgGF/tm4geu9bH06NaN5JN2bjdsMuuhMN4fU13zxCvNnIpQBtm87u
xMy2VDpkYr/7qs9K3pQSueM/qOHURazUNcBK6GnZYpSAnWt3FgFirS3coDhZLFJ9
VSAJeHI8BqXOnA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:12:29 2024 by rpki-client on console-ams.rpki-client.org