Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
File:                     h19M6ROWIYHPfJN236taIl1uWuo.mft (raw, json)
Hash identifier:          nEvRW1CM37sO9pfDmET/WgNbXM2f/8UKhgDjfTGM4FE=
Subject key identifier:   D1:52:E1:FF:DE:83:A9:45:06:29:86:34:D4:3B:A6:3C:A2:DB:14:3E
Authority key identifier: 87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
Certificate issuer:       /CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Certificate serial:       01936A4688E3F449D13AA7F509AA2A2D16A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
Manifest number:          0703
Signing time:             Tue 26 Nov 2024 21:00:27 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:27 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:27 +0000
Files and hashes:         1: h19M6ROWIYHPfJN236taIl1uWuo.crl (hash: vhDZWGVyHCtuzls5Cet09FPl1ToBp0TdTV4ZgLGtV+w=)
                          2: y2d5m2PkTV-QHXUvbgi3rialUnM.roa (hash: yV8bncUwYZuVWMFFAhnBDyVmfkdzesyblIsmaRbwq1Y=)
                          3: zpBs9fu8j4zmTtAS9arcLjOW2Sw.roa (hash: XADnaW/z7agGU3eGC/gw+4TKQC3nbMfjitnjbXK8J4M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:88:e3:f4:49:d1:3a:a7:f5:09:aa:2a:2d:16:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
        Validity
            Not Before: Nov 26 21:00:27 2024 GMT
            Not After : Nov 27 21:00:27 2024 GMT
        Subject: CN=d152e1ffde83a94506298634d43ba63ca2db143e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:50:32:f6:dd:aa:b6:79:b7:78:57:31:c7:e5:
                    de:a0:f5:4b:53:0d:c3:10:cf:bc:0f:a2:8a:46:4e:
                    28:cc:e1:71:88:64:47:56:ec:36:56:22:1e:3b:44:
                    5a:4c:e5:04:20:de:10:92:7a:21:1d:d0:b5:08:dc:
                    07:97:a5:17:25:67:9b:35:cc:1d:a4:1c:af:a2:93:
                    d3:16:29:94:66:33:3a:d2:bf:d4:24:84:19:b9:51:
                    6e:fe:08:8f:59:f5:1f:14:9f:57:ed:ea:7c:c3:44:
                    2d:14:0e:3d:75:a9:12:28:97:f5:6a:69:b0:cf:0a:
                    9f:8f:ae:a8:35:da:7d:ac:16:e2:30:d7:1b:d2:fc:
                    30:99:15:73:bb:79:a2:3a:97:a3:2b:4c:ed:2f:c2:
                    59:22:a6:fc:b7:67:60:c4:4a:0a:9c:da:85:cf:e1:
                    6b:fe:7a:ab:3e:c2:3e:ab:33:c3:e5:5a:9a:20:b2:
                    43:61:aa:57:47:e1:ec:d7:0b:b4:a7:fd:cc:a0:84:
                    51:ff:44:84:ff:0d:2c:3e:5d:43:89:0a:5d:62:c2:
                    d6:17:d1:8a:1a:fb:20:01:8b:5d:70:03:98:4e:c4:
                    4b:3e:7c:f8:a8:a3:c2:9f:c4:02:e5:9b:cd:51:a0:
                    14:a1:17:5d:af:88:d8:88:a4:16:d8:10:a3:4d:b5:
                    00:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:52:E1:FF:DE:83:A9:45:06:29:86:34:D4:3B:A6:3C:A2:DB:14:3E
            X509v3 Authority Key Identifier:
                keyid:87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:64:af:fd:22:7a:03:f5:b7:67:17:35:7f:71:0e:56:39:9c:
         77:b0:c2:44:98:75:92:66:76:da:43:ee:bc:5c:d8:79:cf:7a:
         8d:98:d7:7f:27:7d:0c:31:68:0e:c3:8f:d0:17:8b:c9:24:a1:
         fe:8a:8e:4b:0c:e5:5a:08:f6:41:db:a8:b7:be:03:9f:03:32:
         19:80:2c:1f:bc:12:56:9a:7c:e4:41:81:44:ec:9a:68:1d:ef:
         b7:ad:f1:ac:b7:18:f2:4e:c4:28:ba:7a:64:d4:3c:76:4a:3f:
         06:ca:34:c8:78:b0:0f:96:8a:f9:c4:09:d1:8d:78:fa:db:50:
         6e:57:55:08:35:ea:dd:96:0d:4b:a7:32:8f:44:27:e0:bc:90:
         df:c3:c1:c9:7a:bf:4e:4a:b4:d1:7e:8d:9a:89:c1:df:0f:99:
         60:03:21:ab:95:7f:2c:8f:10:0b:63:3c:92:18:e4:0f:82:03:
         1b:b2:3d:3f:ff:9a:8d:f0:85:dd:48:91:2e:fa:00:0d:b4:c1:
         02:46:e3:ec:39:9b:35:c0:9e:86:57:90:63:c5:9d:c2:05:c6:
         2d:23:77:35:a4:a6:38:90:a9:e3:c7:96:9f:00:6b:fb:7d:76:
         83:15:24:74:4f:99:22:09:81:6c:00:dd:4d:ce:14:ad:4d:1e:
         72:5d:c5:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqRojj9EnROqf1CaoqLRahMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NWY0Y2U5MTM5NjIxODFjZjdjOTM3NmRmYWI1YTIyNWQ2
ZTVhZWEwHhcNMjQxMTI2MjEwMDI3WhcNMjQxMTI3MjEwMDI3WjAzMTEwLwYDVQQD
EyhkMTUyZTFmZmRlODNhOTQ1MDYyOTg2MzRkNDNiYTYzY2EyZGIxNDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1Ay9t2qtnm3eFcxx+XeoPVLUw3D
EM+8D6KKRk4ozOFxiGRHVuw2ViIeO0RaTOUEIN4QknohHdC1CNwHl6UXJWebNcwd
pByvopPTFimUZjM60r/UJIQZuVFu/giPWfUfFJ9X7ep8w0QtFA49dakSKJf1ammw
zwqfj66oNdp9rBbiMNcb0vwwmRVzu3miOpejK0ztL8JZIqb8t2dgxEoKnNqFz+Fr
/nqrPsI+qzPD5VqaILJDYapXR+Hs1wu0p/3MoIRR/0SE/w0sPl1DiQpdYsLWF9GK
GvsgAYtdcAOYTsRLPnz4qKPCn8QC5ZvNUaAUoRddr4jYiKQW2BCjTbUA7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFS4f/eg6lFBimGNNQ7pjyi2xQ+MB8GA1UdIwQY
MBaAFIdfTOkTliGBz3yTdt+rWiJdblrqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDE5TTZST1dJWUhQZkpOMjM2dGFJbDF1V3VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84NzYwN2UtNWM5YS00M2E2LThkOGEt
MzhkZmVhZjJiNzEwLzEvaDE5TTZST1dJWUhQZkpOMjM2dGFJbDF1V3VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS84NzYwN2UtNWM5YS00M2E2LThkOGEtMzhkZmVhZjJiNzEw
LzEvaDE5TTZST1dJWUhQZkpOMjM2dGFJbDF1V3VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWSv/SJ6
A/W3Zxc1f3EOVjmcd7DCRJh1kmZ22kPuvFzYec96jZjXfyd9DDFoDsOP0BeLySSh
/oqOSwzlWgj2Qduot74DnwMyGYAsH7wSVpp85EGBROyaaB3vt63xrLcY8k7EKLp6
ZNQ8dko/Bso0yHiwD5aK+cQJ0Y14+ttQbldVCDXq3ZYNS6cyj0Qn4LyQ38PByXq/
Tkq00X6NmonB3w+ZYAMhq5V/LI8QC2M8khjkD4IDG7I9P/+ajfCF3UiRLvoADbTB
Akbj7DmbNcCehleQY8WdwgXGLSN3NaSmOJCp48eWnwBr+312gxUkdE+ZIgmBbADd
Tc4UrU0ecl3Fmg==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:32:28 2024 by rpki-client on console-ams.rpki-client.org