Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
File:                     dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft (raw, json)
Hash identifier:          e9G+pY9jVhx51G/N+87HBHCrFNirP8j4WvFjnU3mgZ0=
Subject key identifier:   2E:89:C5:A9:C9:1B:BB:29:47:7A:10:0E:62:20:F6:A8:49:34:D4:32
Authority key identifier: 75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC
Certificate issuer:       /CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc
Certificate serial:       01935689B962CC20BC2C9CA2BE741183A79D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
Manifest number:          1374
Signing time:             Sat 23 Nov 2024 01:01:26 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:26 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:26 +0000
Files and hashes:         1: A-83ltbO_Zu7XHu2mZxcn4j-NTw.roa (hash: rEHLpLJSO7XMifKtekD/Y1RkhaQQiNzTkBuErIhyrz4=)
                          2: dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl (hash: s8j7Cag2z4JwqM5cZW+CuetdQscuTABQ7x7BOst3I/s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:b9:62:cc:20:bc:2c:9c:a2:be:74:11:83:a7:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc
        Validity
            Not Before: Nov 23 01:01:26 2024 GMT
            Not After : Nov 24 01:01:26 2024 GMT
        Subject: CN=2e89c5a9c91bbb29477a100e6220f6a84934d432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f0:92:b3:d0:26:13:0a:ce:f7:a4:d9:66:8a:
                    55:ca:d3:6e:d6:b5:c8:c4:90:ea:91:2a:14:ea:b0:
                    0a:a9:bc:98:65:3d:d7:db:ad:d5:2a:9d:6a:a8:32:
                    c4:72:09:06:1f:be:1f:cb:3f:d1:e8:62:83:ca:a4:
                    4b:ed:57:b4:8e:cb:af:9a:b8:3c:27:f8:78:a6:1e:
                    8a:a0:84:e9:cf:a9:32:d0:73:63:ad:1b:f5:21:b6:
                    44:56:a6:61:05:e3:37:a1:b7:58:f3:37:06:43:4d:
                    ee:0d:87:60:0f:be:5a:65:e8:b0:65:0a:ae:7e:b3:
                    f8:23:51:b7:35:d7:77:f0:ac:d5:97:9e:f6:72:e8:
                    0f:28:02:8c:11:2a:3f:2d:f5:6e:c3:d1:b0:22:d7:
                    20:de:31:42:f3:6d:5b:91:34:d6:d0:a9:cb:17:47:
                    ee:f8:97:5e:4e:4e:40:fa:d6:55:60:99:f6:a4:ef:
                    1d:d8:c9:ae:c5:1f:b3:c0:44:fa:00:19:31:c8:06:
                    6b:42:68:54:af:af:49:17:45:79:20:ac:4b:f6:b6:
                    fa:ce:b2:45:bf:57:5d:17:e0:c6:a5:53:dc:8b:18:
                    2d:c3:ae:8d:6e:7c:81:89:96:bb:4e:13:14:d1:76:
                    bb:97:01:4e:99:50:f4:01:24:1f:ab:b9:67:fd:28:
                    7f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:89:C5:A9:C9:1B:BB:29:47:7A:10:0E:62:20:F6:A8:49:34:D4:32
            X509v3 Authority Key Identifier:
                keyid:75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:a8:f3:d5:e1:7b:94:26:b6:56:c8:71:a4:04:d3:61:0f:6d:
         32:14:eb:59:88:a5:6b:11:06:ce:b6:50:44:45:06:fb:43:20:
         75:76:99:31:47:1a:29:d6:55:7a:d0:fb:d2:89:b3:99:cf:1d:
         b5:09:e1:33:43:e0:d5:0f:9c:31:40:be:ae:22:1d:a2:1f:57:
         75:95:b3:2b:2e:b8:d2:00:b8:d5:f0:0c:a7:4b:c7:97:7f:bc:
         ce:d0:c5:59:d8:60:4b:c4:e6:f3:30:29:fa:7e:ac:3b:d9:a7:
         a1:39:ff:69:d8:53:22:cb:40:71:a9:df:f4:f8:e9:cf:36:cf:
         29:8e:fb:c8:a4:61:d2:56:b8:11:a7:c8:d6:0d:96:56:35:81:
         0b:e0:ea:da:24:e2:79:67:4c:46:96:90:1f:ad:f0:46:63:a0:
         24:35:00:80:6e:6a:21:4c:51:51:b2:9f:e9:6c:94:8d:60:9e:
         2d:5e:e6:92:9e:d6:f5:96:e8:9f:70:7b:1c:ee:e3:77:ac:37:
         2e:40:a1:a6:19:28:94:3f:3b:c7:56:be:16:32:95:3d:57:67:
         27:16:42:fc:30:c4:07:e9:6f:51:db:09:a5:e8:a8:d0:7b:b2:
         07:bd:ae:c5:8c:e2:93:44:b1:61:ce:3b:5b:d2:81:d5:43:b7:
         25:72:1e:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiblizCC8LJyivnQRg6edMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1OGU4MjNjZjI3NGQzODEwY2UwNWMxZDFiZjVlZWY5NWNi
MjExZGMwHhcNMjQxMTIzMDEwMTI2WhcNMjQxMTI0MDEwMTI2WjAzMTEwLwYDVQQD
EygyZTg5YzVhOWM5MWJiYjI5NDc3YTEwMGU2MjIwZjZhODQ5MzRkNDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/CSs9AmEwrO96TZZopVytNu1rXI
xJDqkSoU6rAKqbyYZT3X263VKp1qqDLEcgkGH74fyz/R6GKDyqRL7Ve0jsuvmrg8
J/h4ph6KoITpz6ky0HNjrRv1IbZEVqZhBeM3obdY8zcGQ03uDYdgD75aZeiwZQqu
frP4I1G3Ndd38KzVl572cugPKAKMESo/LfVuw9GwItcg3jFC821bkTTW0KnLF0fu
+JdeTk5A+tZVYJn2pO8d2MmuxR+zwET6ABkxyAZrQmhUr69JF0V5IKxL9rb6zrJF
v1ddF+DGpVPcixgtw66NbnyBiZa7ThMU0Xa7lwFOmVD0ASQfq7ln/Sh/XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6JxanJG7spR3oQDmIg9qhJNNQyMB8GA1UdIwQY
MBaAFHWOgjzydNOBDOBcHRv17vlcshHcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFk2Q1BQSjAwNEVNNEZ3ZEdfWHUtVnl5RWR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80M2Q2OWUtYjY4ZC00MTQ5LThiMjkt
MDNkYjhiMzZkMzE5LzEvZFk2Q1BQSjAwNEVNNEZ3ZEdfWHUtVnl5RWR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy80M2Q2OWUtYjY4ZC00MTQ5LThiMjktMDNkYjhiMzZkMzE5
LzEvZFk2Q1BQSjAwNEVNNEZ3ZEdfWHUtVnl5RWR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxajz1eF7
lCa2VshxpATTYQ9tMhTrWYilaxEGzrZQREUG+0MgdXaZMUcaKdZVetD70omzmc8d
tQnhM0Pg1Q+cMUC+riIdoh9XdZWzKy640gC41fAMp0vHl3+8ztDFWdhgS8Tm8zAp
+n6sO9mnoTn/adhTIstAcanf9PjpzzbPKY77yKRh0la4EafI1g2WVjWBC+Dq2iTi
eWdMRpaQH63wRmOgJDUAgG5qIUxRUbKf6WyUjWCeLV7mkp7W9Zbon3B7HO7jd6w3
LkChphkolD87x1a+FjKVPVdnJxZC/DDEB+lvUdsJpeio0HuyB72uxYzik0SxYc47
W9KB1UO3JXIe+w==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:52:52 2024 by rpki-client on console-ams.rpki-client.org