Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft
File:                     OXMtzQw1QmFE-fAmdUF5366-iVg.mft (raw, json)
Hash identifier:          lAtzK67d26ekoTZtJeU+9ObB1uitRSPZkE4IX5QV/xM=
Subject key identifier:   90:3F:3E:D6:38:58:E7:DB:A0:7B:66:F3:15:93:6A:26:D0:16:28:0F
Authority key identifier: 39:73:2D:CD:0C:35:42:61:44:F9:F0:26:75:41:79:DF:AE:BE:89:58
Certificate issuer:       /CN=39732dcd0c35426144f9f026754179dfaebe8958
Certificate serial:       019356F6B978CF59DCD44FCB76F6C64965B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft
Manifest number:          1361
Signing time:             Sat 23 Nov 2024 03:00:30 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:30 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:30 +0000
Files and hashes:         1: 0HH_EbAi-PZBQduCLr56RDFpRu8.roa (hash: Dtkq5g7TyEESRr2tLb8sw+anUS95X8d+KVIbTG4bFMI=)
                          2: 77LOUy6j2cIEWICrNczLZLaV_FM.roa (hash: wi+Hh1QbfgZzBkuoDy/nvQB/ufP5s6yS7BaEZc5X6jg=)
                          3: OXMtzQw1QmFE-fAmdUF5366-iVg.crl (hash: +PPSOSzGe/si+jRWamBy6VVSI0PiFnCFMQQ35WPfIs0=)
                          4: P_-kwzCE4fBoh51QhMqPxHoQgTg.roa (hash: 4kKYboqp3k/rQMHMyuoewXvYk9M7bk7vFJOm8xZOfjs=)
                          5: T69N_b0L0wKbZKMRP_ZJiBSmaKQ.roa (hash: 8DnUh9ZR7s+dOEE8WxNCq7H0/ouMTlBbawvw6YbOc8U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:b9:78:cf:59:dc:d4:4f:cb:76:f6:c6:49:65:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39732dcd0c35426144f9f026754179dfaebe8958
        Validity
            Not Before: Nov 23 03:00:30 2024 GMT
            Not After : Nov 24 03:00:30 2024 GMT
        Subject: CN=903f3ed63858e7dba07b66f315936a26d016280f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:09:a8:7c:a9:b5:b6:3e:64:8c:43:fd:51:1b:
                    9a:d5:4a:9f:5e:b4:5b:50:8b:9e:b2:22:0d:56:a5:
                    51:28:bc:c8:d7:50:34:d2:53:91:e9:db:ae:1a:0d:
                    f2:d0:04:32:04:22:cb:87:12:fb:ae:10:31:4d:f3:
                    41:bf:e0:eb:29:4b:6d:22:c6:b5:57:08:e7:25:35:
                    94:af:fb:e4:e6:01:8a:44:40:f6:c8:ec:67:00:5f:
                    62:3b:68:5f:5f:dc:de:09:03:49:ca:57:70:fe:4b:
                    07:f9:32:cb:3d:a7:b5:4e:6d:12:56:7c:57:30:b6:
                    f9:cb:e3:9d:dc:40:4d:25:20:65:72:a9:54:8f:90:
                    74:40:10:4d:4a:95:9d:73:59:7c:8b:08:a4:74:d3:
                    ec:65:e2:c6:f6:06:51:06:da:06:07:41:a3:b1:1d:
                    b7:0e:ad:b4:6b:87:86:0b:52:ce:a5:fa:be:ec:cb:
                    8b:d6:b4:f2:8c:66:30:6d:89:13:11:62:27:bf:58:
                    d4:df:7a:78:38:6b:50:58:db:9a:58:11:c9:87:bb:
                    26:3b:09:72:20:06:a1:93:68:79:6e:13:bc:f8:e2:
                    6f:b1:17:0c:cc:d9:5b:e9:59:e6:5a:31:f0:f2:c6:
                    2b:d7:6c:db:11:dc:3e:2a:b4:30:93:6b:78:ba:91:
                    41:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3F:3E:D6:38:58:E7:DB:A0:7B:66:F3:15:93:6A:26:D0:16:28:0F
            X509v3 Authority Key Identifier:
                keyid:39:73:2D:CD:0C:35:42:61:44:F9:F0:26:75:41:79:DF:AE:BE:89:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:fd:b5:14:17:e7:dc:6e:6b:c4:30:bc:85:49:b6:73:0a:a5:
         47:4a:84:75:58:f6:fa:59:b3:8e:9c:50:e5:a7:4e:a0:66:2b:
         f7:74:21:0d:29:3f:28:77:50:16:ba:7e:11:ff:db:d1:1d:54:
         ad:f2:ad:18:e0:d3:92:25:e8:4a:03:79:47:0e:66:3b:ca:0c:
         3d:9b:78:d4:30:a1:c4:7a:9a:fd:0f:c0:f0:ec:c9:ae:34:7f:
         90:e9:e4:5f:21:c8:e9:32:94:62:1f:da:0f:cb:a9:9c:4a:e7:
         7c:d3:63:8e:0c:92:4a:47:ff:fd:23:1d:e0:b4:6f:46:d5:5d:
         1a:1e:85:65:3b:0e:16:ad:79:5d:5a:5d:36:3b:32:4b:2a:a4:
         f3:04:36:12:fc:7f:6f:2d:27:7a:00:75:9a:8c:da:81:c4:f8:
         0d:d0:8f:30:3e:fc:54:f3:56:6c:e0:87:f0:52:43:3c:e0:15:
         fe:56:16:ca:2e:23:b3:be:3f:51:d3:3a:bd:7b:ac:1a:a6:12:
         4b:11:20:99:89:92:f2:7e:7f:c8:1b:b2:a9:96:3b:a5:57:db:
         69:8c:10:d3:5e:6b:38:6c:79:5d:95:e5:b0:22:31:ee:12:3a:
         fe:cc:d6:0d:cd:e4:2f:8c:14:61:ba:ea:11:02:c3:96:40:c0:
         d7:bf:4d:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9rl4z1nc1E/LdvbGSWW1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NzMyZGNkMGMzNTQyNjE0NGY5ZjAyNjc1NDE3OWRmYWVi
ZTg5NTgwHhcNMjQxMTIzMDMwMDMwWhcNMjQxMTI0MDMwMDMwWjAzMTEwLwYDVQQD
Eyg5MDNmM2VkNjM4NThlN2RiYTA3YjY2ZjMxNTkzNmEyNmQwMTYyODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgmofKm1tj5kjEP9URua1UqfXrRb
UIuesiINVqVRKLzI11A00lOR6duuGg3y0AQyBCLLhxL7rhAxTfNBv+DrKUttIsa1
VwjnJTWUr/vk5gGKRED2yOxnAF9iO2hfX9zeCQNJyldw/ksH+TLLPae1Tm0SVnxX
MLb5y+Od3EBNJSBlcqlUj5B0QBBNSpWdc1l8iwikdNPsZeLG9gZRBtoGB0GjsR23
Dq20a4eGC1LOpfq+7MuL1rTyjGYwbYkTEWInv1jU33p4OGtQWNuaWBHJh7smOwly
IAahk2h5bhO8+OJvsRcMzNlb6VnmWjHw8sYr12zbEdw+KrQwk2t4upFBVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJA/PtY4WOfboHtm8xWTaibQFigPMB8GA1UdIwQY
MBaAFDlzLc0MNUJhRPnwJnVBed+uvolYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1hNdHpRdzFRbUZFLWZBbWRVRjUzNjYtaVZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMzcxMDYtZDA4ZC00YWEwLWFjODIt
ZjYwYWYyYTgyMDYwLzEvT1hNdHpRdzFRbUZFLWZBbWRVRjUzNjYtaVZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8yMzcxMDYtZDA4ZC00YWEwLWFjODItZjYwYWYyYTgyMDYw
LzEvT1hNdHpRdzFRbUZFLWZBbWRVRjUzNjYtaVZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlf21FBfn
3G5rxDC8hUm2cwqlR0qEdVj2+lmzjpxQ5adOoGYr93QhDSk/KHdQFrp+Ef/b0R1U
rfKtGODTkiXoSgN5Rw5mO8oMPZt41DChxHqa/Q/A8OzJrjR/kOnkXyHI6TKUYh/a
D8upnErnfNNjjgySSkf//SMd4LRvRtVdGh6FZTsOFq15XVpdNjsySyqk8wQ2Evx/
by0negB1mozagcT4DdCPMD78VPNWbOCH8FJDPOAV/lYWyi4js74/UdM6vXusGqYS
SxEgmYmS8n5/yBuyqZY7pVfbaYwQ015rOGx5XZXlsCIx7hI6/szWDc3kL4wUYbrq
EQLDlkDA179N3Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:13:20 2024 by rpki-client on console-fra.rpki-client.org