Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
File:                     2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft (raw, json)
Hash identifier:          4wd4O+YLQDBiQXYRjEo8GaMZO05EdUtv0TsETK+i/Gg=
Subject key identifier:   D3:45:BC:14:F4:C5:B9:DA:3D:09:89:28:71:CE:15:22:0A:89:6A:6A
Authority key identifier: DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
Certificate issuer:       /CN=daaec597d1b379ea83236312c6f8b2bce7439773
Certificate serial:       019357D2940D0E070D31FA20C62D38C42100
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
Manifest number:          040C
Signing time:             Sat 23 Nov 2024 07:00:38 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:38 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:38 +0000
Files and hashes:         1: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl (hash: NCocyTnBZlLpu03PRIKyxJkw0Yv+EO2hMT8U5RoICew=)
                          2: 6BS-pMV_G3R5J5zA61nX3-qCpto.roa (hash: 2/kv7khAcLVIWM8ZeASORdY5NNtR0/DyrL2RT5dZ3ig=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:94:0d:0e:07:0d:31:fa:20:c6:2d:38:c4:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daaec597d1b379ea83236312c6f8b2bce7439773
        Validity
            Not Before: Nov 23 07:00:38 2024 GMT
            Not After : Nov 24 07:00:38 2024 GMT
        Subject: CN=d345bc14f4c5b9da3d09892871ce15220a896a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4f:1c:d7:65:3c:39:e7:f5:04:e2:e2:71:97:
                    ab:2e:60:b5:5d:65:a7:ff:eb:eb:d7:07:10:50:c4:
                    ae:2e:b4:c4:0f:d4:50:9d:70:75:2d:39:7b:25:70:
                    b6:67:bf:61:be:19:74:17:25:cc:fb:b9:21:13:f8:
                    2f:de:7a:1a:bf:e3:9f:3d:9c:cd:2e:62:ed:d5:64:
                    2f:5b:1f:a6:94:5d:05:60:ad:87:8b:eb:47:8b:fc:
                    a2:44:72:ac:0b:65:59:22:31:67:31:ad:4e:ab:eb:
                    64:65:d9:8b:df:aa:c8:ff:cc:b5:3d:48:8a:de:c5:
                    07:6d:46:2e:d1:ea:3c:64:e4:ad:fc:8c:ec:b3:aa:
                    55:68:03:ec:9d:50:61:56:98:90:72:78:57:ae:34:
                    3c:5a:c2:c9:0d:4d:0f:82:40:39:4f:58:4e:b8:4b:
                    1d:ef:57:da:0c:25:85:69:df:42:89:52:9d:87:7d:
                    35:bb:ba:3e:df:21:15:df:b8:cc:e3:8d:6f:64:5d:
                    62:0a:a5:f9:ca:ff:f3:83:47:0b:d3:8a:b2:ae:c7:
                    a3:16:bd:d5:c9:5f:b6:1b:f4:b6:66:bd:f9:c9:d7:
                    f6:39:94:93:63:1b:f6:05:30:5c:ee:ee:6f:c4:3c:
                    79:36:f7:6f:2e:c9:da:c0:d8:bc:ab:28:64:a8:3f:
                    57:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:45:BC:14:F4:C5:B9:DA:3D:09:89:28:71:CE:15:22:0A:89:6A:6A
            X509v3 Authority Key Identifier:
                keyid:DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:6b:44:e8:b7:0f:02:63:39:d6:d9:ea:35:d0:18:56:0f:c2:
         5c:87:80:fc:24:b9:3c:11:94:b4:93:e6:59:a2:d3:99:7f:16:
         6f:cd:0d:5b:c9:80:54:3e:b7:49:32:61:ca:75:c7:9b:13:31:
         e1:62:f0:dc:20:f9:14:28:b2:39:52:4d:9a:48:42:93:d5:60:
         b5:88:e6:a8:a5:a2:9f:80:4f:0b:c0:a4:a1:19:ad:fa:a7:e6:
         54:81:37:bf:7a:7f:d0:48:af:e1:0c:72:d6:60:e0:7f:79:23:
         fc:48:29:22:0d:c1:f7:a3:1b:fb:85:49:25:15:cd:2b:69:5e:
         45:77:c2:01:3a:1b:fb:a2:1c:69:54:0b:34:85:33:3b:77:61:
         92:72:ac:18:e3:b3:84:31:9a:87:90:47:3d:25:1d:89:7f:7a:
         02:cf:48:fa:7f:17:79:6f:b7:72:77:1a:bb:5b:b1:ce:2d:1b:
         3d:96:58:2f:3f:a9:30:5c:a2:56:33:cb:2d:3b:b2:b0:bf:81:
         8d:01:1d:01:16:61:dd:05:c3:64:0d:73:12:d8:69:b0:68:94:
         06:27:60:ee:03:cc:1e:96:b1:2e:e1:03:1f:59:51:e1:5e:46:
         03:e5:10:be:e9:8e:31:90:bc:fc:6d:8d:5f:95:6a:c9:a3:2b:
         6f:b8:1a:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0pQNDgcNMfogxi04xCEAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWVjNTk3ZDFiMzc5ZWE4MzIzNjMxMmM2ZjhiMmJjZTc0
Mzk3NzMwHhcNMjQxMTIzMDcwMDM4WhcNMjQxMTI0MDcwMDM4WjAzMTEwLwYDVQQD
EyhkMzQ1YmMxNGY0YzViOWRhM2QwOTg5Mjg3MWNlMTUyMjBhODk2YTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz08c12U8Oef1BOLicZerLmC1XWWn
/+vr1wcQUMSuLrTED9RQnXB1LTl7JXC2Z79hvhl0FyXM+7khE/gv3noav+OfPZzN
LmLt1WQvWx+mlF0FYK2Hi+tHi/yiRHKsC2VZIjFnMa1Oq+tkZdmL36rI/8y1PUiK
3sUHbUYu0eo8ZOSt/Izss6pVaAPsnVBhVpiQcnhXrjQ8WsLJDU0PgkA5T1hOuEsd
71faDCWFad9CiVKdh301u7o+3yEV37jM441vZF1iCqX5yv/zg0cL04qyrsejFr3V
yV+2G/S2Zr35ydf2OZSTYxv2BTBc7u5vxDx5NvdvLsnawNi8qyhkqD9XoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNFvBT0xbnaPQmJKHHOFSIKiWpqMB8GA1UdIwQY
MBaAFNquxZfRs3nqgyNjEsb4srznQ5dzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE3Rmw5R3plZXFESTJNU3h2aXl2T2REbDNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yZDhlZmMtYjlmYS00MzJjLTk3Mjct
OGI4NWIyOGZiYjc5LzEvMnE3Rmw5R3plZXFESTJNU3h2aXl2T2REbDNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8yZDhlZmMtYjlmYS00MzJjLTk3MjctOGI4NWIyOGZiYjc5
LzEvMnE3Rmw5R3plZXFESTJNU3h2aXl2T2REbDNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy2tE6LcP
AmM51tnqNdAYVg/CXIeA/CS5PBGUtJPmWaLTmX8Wb80NW8mAVD63STJhynXHmxMx
4WLw3CD5FCiyOVJNmkhCk9VgtYjmqKWin4BPC8CkoRmt+qfmVIE3v3p/0Eiv4Qxy
1mDgf3kj/EgpIg3B96Mb+4VJJRXNK2leRXfCATob+6IcaVQLNIUzO3dhknKsGOOz
hDGah5BHPSUdiX96As9I+n8XeW+3cncau1uxzi0bPZZYLz+pMFyiVjPLLTuysL+B
jQEdARZh3QXDZA1zEthpsGiUBidg7gPMHpaxLuEDH1lR4V5GA+UQvumOMZC8/G2N
X5VqyaMrb7gaOw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:12:09 2024 by rpki-client on console-ams.rpki-client.org