Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/848274-493f-484d-9c48-a8ef33ff5bb0/1/eZSkPeadFPsUR0JOLK3lT5kiuq8.mft
File:                     eZSkPeadFPsUR0JOLK3lT5kiuq8.mft (raw, json)
Hash identifier:          mrxDOqPmuLxotcYcPvbThtKESf18iUkTIb6q7yJ+eg8=
Subject key identifier:   F4:8F:ED:08:DC:19:7B:0D:71:9B:D5:61:7A:81:F1:CB:A1:16:91:F2
Authority key identifier: 79:94:A4:3D:E6:9D:14:FB:14:47:42:4E:2C:AD:E5:4F:99:22:BA:AF
Certificate issuer:       /CN=7994a43de69d14fb1447424e2cade54f9922baaf
Certificate serial:       01923549B75F687774629CF7F3734DC4B738
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZSkPeadFPsUR0JOLK3lT5kiuq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/848274-493f-484d-9c48-a8ef33ff5bb0/1/eZSkPeadFPsUR0JOLK3lT5kiuq8.mft
Manifest number:          09C1
Signing time:             Fri 27 Sep 2024 21:01:16 +0000
Manifest this update:     Fri 27 Sep 2024 21:01:16 +0000
Manifest next update:     Sat 28 Sep 2024 21:01:16 +0000
Files and hashes:         1: IkqtoV6esQBAhFDU-jTUxe7ULVk.roa (hash: qwiiu8bA7LyMfzy7R3cjgDhecRSxZ/IDJMG05EHKVvk=)
                          2: eZSkPeadFPsUR0JOLK3lT5kiuq8.crl (hash: Cs+CiYTm8Z6Wd/iq3bl0lAIW4QrB9hRM2KVqIa91+EU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/848274-493f-484d-9c48-a8ef33ff5bb0/1/eZSkPeadFPsUR0JOLK3lT5kiuq8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/848274-493f-484d-9c48-a8ef33ff5bb0/1/eZSkPeadFPsUR0JOLK3lT5kiuq8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZSkPeadFPsUR0JOLK3lT5kiuq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 19:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:35:49:b7:5f:68:77:74:62:9c:f7:f3:73:4d:c4:b7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7994a43de69d14fb1447424e2cade54f9922baaf
        Validity
            Not Before: Sep 27 21:01:16 2024 GMT
            Not After : Sep 28 21:01:16 2024 GMT
        Subject: CN=f48fed08dc197b0d719bd5617a81f1cba11691f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d6:b8:67:70:be:7b:1e:1b:b6:63:0f:56:92:
                    45:81:ae:2d:2a:3e:b6:6d:29:4d:e6:2a:fe:0e:fe:
                    a7:cb:59:da:e0:c0:79:53:af:50:f4:df:20:d4:5b:
                    f2:52:d7:8f:cb:d8:d4:dd:71:d6:b0:cb:d6:99:ec:
                    cc:2a:8b:23:af:68:81:d5:11:a7:1a:50:85:f1:5e:
                    4a:4e:98:bd:09:b4:8c:6f:c9:70:d4:6a:51:2f:88:
                    b0:a6:05:bb:5c:83:45:b3:3c:4d:5d:54:92:e4:ca:
                    7f:8d:c9:42:09:fc:ee:5d:64:f6:ed:4c:92:b7:d0:
                    38:65:07:74:2c:79:aa:24:0d:4a:eb:39:f2:6b:f1:
                    a7:fc:16:23:70:4c:6a:23:bf:9d:8c:18:18:1c:c0:
                    21:a9:b5:37:11:19:6d:62:a2:a5:ea:1e:86:0e:62:
                    1a:cf:76:95:3f:b0:02:e7:6c:c2:af:b8:a7:54:80:
                    5b:4f:bc:af:07:41:f5:7b:6e:49:c5:02:1c:c0:e5:
                    db:ae:19:18:af:e6:f2:0d:fe:84:03:9a:a8:ab:2c:
                    a1:bb:99:91:35:be:7e:ca:8f:02:64:75:a0:5b:5e:
                    fc:27:43:e9:48:ed:79:2d:68:9f:fe:05:bb:ab:6a:
                    a5:10:c2:2c:76:cb:90:16:8e:02:9a:78:54:fa:f0:
                    f7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8F:ED:08:DC:19:7B:0D:71:9B:D5:61:7A:81:F1:CB:A1:16:91:F2
            X509v3 Authority Key Identifier:
                keyid:79:94:A4:3D:E6:9D:14:FB:14:47:42:4E:2C:AD:E5:4F:99:22:BA:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZSkPeadFPsUR0JOLK3lT5kiuq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/848274-493f-484d-9c48-a8ef33ff5bb0/1/eZSkPeadFPsUR0JOLK3lT5kiuq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/848274-493f-484d-9c48-a8ef33ff5bb0/1/eZSkPeadFPsUR0JOLK3lT5kiuq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:fa:1c:30:69:43:65:be:e7:44:eb:bc:60:bd:62:d5:94:47:
         6e:6e:0c:16:90:34:20:ad:6f:2e:3a:df:6a:99:32:fa:c3:d4:
         7b:94:af:77:1e:7d:bb:95:6e:e0:6d:0e:ac:11:62:04:23:f2:
         52:39:ed:37:ef:99:67:ef:fd:d9:57:cd:42:8f:7f:90:a0:5b:
         b7:a5:d0:1e:59:54:d1:35:b3:52:b2:da:18:f0:a5:d7:fb:b1:
         1e:e0:55:e6:36:b1:af:9c:ab:c7:fb:71:9b:2c:56:8f:22:e9:
         62:64:9e:f7:ac:be:34:18:c8:f9:05:bb:5c:f6:68:d8:5d:26:
         f9:87:5b:8c:88:ad:9c:7f:e8:15:0d:d0:f7:ab:15:a9:c9:cd:
         54:23:2c:40:9c:89:a4:04:04:f5:02:33:cb:1d:c5:e2:dd:d6:
         bd:10:a1:13:b9:a2:bd:9b:70:72:21:fe:a5:00:6f:c6:18:5d:
         b6:1c:5b:2c:30:d1:cc:89:85:e1:8b:1d:7e:fb:6a:11:7d:07:
         ce:fd:f9:dc:6d:99:bc:d9:53:13:38:39:6d:da:f1:8d:e1:a1:
         67:7e:38:c5:58:80:c5:db:71:ab:17:0a:f9:3e:09:9c:94:56:
         1f:89:06:a4:f9:47:c3:cd:96:ed:1c:41:9c:36:5b:c7:f5:d9:
         04:57:56:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI1SbdfaHd0Ypz383NNxLc4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OTRhNDNkZTY5ZDE0ZmIxNDQ3NDI0ZTJjYWRlNTRmOTky
MmJhYWYwHhcNMjQwOTI3MjEwMTE2WhcNMjQwOTI4MjEwMTE2WjAzMTEwLwYDVQQD
EyhmNDhmZWQwOGRjMTk3YjBkNzE5YmQ1NjE3YTgxZjFjYmExMTY5MWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxda4Z3C+ex4btmMPVpJFga4tKj62
bSlN5ir+Dv6ny1na4MB5U69Q9N8g1FvyUtePy9jU3XHWsMvWmezMKosjr2iB1RGn
GlCF8V5KTpi9CbSMb8lw1GpRL4iwpgW7XINFszxNXVSS5Mp/jclCCfzuXWT27UyS
t9A4ZQd0LHmqJA1K6znya/Gn/BYjcExqI7+djBgYHMAhqbU3ERltYqKl6h6GDmIa
z3aVP7AC52zCr7inVIBbT7yvB0H1e25JxQIcwOXbrhkYr+byDf6EA5qoqyyhu5mR
Nb5+yo8CZHWgW178J0PpSO15LWif/gW7q2qlEMIsdsuQFo4CmnhU+vD3lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSP7QjcGXsNcZvVYXqB8cuhFpHyMB8GA1UdIwQY
MBaAFHmUpD3mnRT7FEdCTiyt5U+ZIrqvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVpTa1BlYWRGUHNVUjBKT0xLM2xUNWtpdXE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84NDgyNzQtNDkzZi00ODRkLTljNDgt
YThlZjMzZmY1YmIwLzEvZVpTa1BlYWRGUHNVUjBKT0xLM2xUNWtpdXE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi84NDgyNzQtNDkzZi00ODRkLTljNDgtYThlZjMzZmY1YmIw
LzEvZVpTa1BlYWRGUHNVUjBKT0xLM2xUNWtpdXE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEfocMGlD
Zb7nROu8YL1i1ZRHbm4MFpA0IK1vLjrfapky+sPUe5Svdx59u5Vu4G0OrBFiBCPy
UjntN++ZZ+/92VfNQo9/kKBbt6XQHllU0TWzUrLaGPCl1/uxHuBV5jaxr5yrx/tx
myxWjyLpYmSe96y+NBjI+QW7XPZo2F0m+YdbjIitnH/oFQ3Q96sVqcnNVCMsQJyJ
pAQE9QIzyx3F4t3WvRChE7mivZtwciH+pQBvxhhdthxbLDDRzImF4YsdfvtqEX0H
zv353G2ZvNlTEzg5bdrxjeGhZ344xViAxdtxqxcK+T4JnJRWH4kGpPlHw82W7RxB
nDZbx/XZBFdWag==
-----END CERTIFICATE-----
Generated at Fri Sep 27 23:51:22 2024 by rpki-client on console-ams.rpki-client.org