Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
File:                     T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft (raw, json)
Hash identifier:          LwyYq0hJLFBBcfCoOVHwMwrEyCm/xPTOq7VrCc8B0qU=
Subject key identifier:   7A:EA:87:9B:E6:19:49:95:55:FB:6A:5C:5B:5E:0B:00:27:1D:0D:00
Authority key identifier: 4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
Certificate issuer:       /CN=4fbb63df06de00c843da63977349595471e51a26
Certificate serial:       01923738014D0954844DCE8BC577358B4571
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
Manifest number:          12DB
Signing time:             Sat 28 Sep 2024 06:01:10 +0000
Manifest this update:     Sat 28 Sep 2024 06:01:10 +0000
Manifest next update:     Sun 29 Sep 2024 06:01:10 +0000
Files and hashes:         1: MdIomRixP_0L0F31-wyVMKjDzjs.roa (hash: DP8WKfBDSRC8lAHD8Rgk9q035Tuksauz+z9xzGQoZeU=)
                          2: T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl (hash: gZm1aw7+SNyAKZNI2oKUax+zaTUp6y9Dwehwa4YKX00=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 06:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:37:38:01:4d:09:54:84:4d:ce:8b:c5:77:35:8b:45:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fbb63df06de00c843da63977349595471e51a26
        Validity
            Not Before: Sep 28 06:01:10 2024 GMT
            Not After : Sep 29 06:01:10 2024 GMT
        Subject: CN=7aea879be619499555fb6a5c5b5e0b00271d0d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8b:90:82:8b:50:65:d0:f9:28:b4:39:a8:1d:
                    34:56:c6:fa:30:45:eb:61:8d:bc:ba:e0:3a:31:8f:
                    18:a4:8a:50:dd:35:6d:3c:15:ad:f7:bd:b9:99:6e:
                    a5:85:36:cb:cb:82:f8:d0:39:a2:98:21:6b:9e:7b:
                    38:76:cb:1d:8c:7f:55:ee:ce:aa:b9:37:52:0d:95:
                    9b:2c:c5:e7:65:cb:9e:4d:35:d1:7f:4c:a6:a0:89:
                    07:b1:63:53:22:e7:79:23:df:db:36:ad:57:93:2d:
                    30:36:c8:91:b4:ee:ea:75:25:41:a5:1d:8d:25:87:
                    89:0c:5a:28:ed:dd:67:62:52:f4:16:48:c6:90:a2:
                    91:7d:44:0e:bd:77:40:ae:32:ae:f9:62:10:eb:88:
                    3f:55:f2:90:66:50:05:bb:b3:e8:fe:41:e5:c7:c8:
                    ce:73:ce:10:da:24:0c:fb:1f:1a:73:b5:e3:e4:83:
                    18:63:2f:85:85:0a:7a:17:d8:88:cf:31:fc:85:69:
                    e6:ad:fe:d5:a6:1c:20:86:1b:77:10:72:47:5b:e0:
                    08:69:e3:2b:12:2e:3e:f5:64:1a:34:91:5e:22:08:
                    e6:91:b9:97:98:29:fa:5c:a4:d8:3c:2c:32:57:62:
                    35:e6:93:56:4b:d6:85:93:8c:9e:8b:be:26:44:0b:
                    08:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EA:87:9B:E6:19:49:95:55:FB:6A:5C:5B:5E:0B:00:27:1D:0D:00
            X509v3 Authority Key Identifier:
                keyid:4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:1c:b5:b8:83:be:19:5b:4c:70:1a:1c:52:9e:6d:bf:9b:e6:
         47:8c:3b:d6:ad:f4:8c:97:65:c8:24:18:35:c8:50:53:f5:42:
         67:c0:a7:cc:a3:f6:fa:6a:2c:9b:b0:89:e7:ab:d0:d6:89:35:
         ba:20:f6:dd:df:19:f8:bf:b7:50:b1:ca:8c:57:b1:d2:bc:61:
         09:43:f6:54:37:06:83:b0:88:16:f4:63:c2:97:40:ec:82:e1:
         da:e6:9a:3e:ce:8c:44:7b:63:0a:a9:ed:b3:f9:3a:3a:eb:a7:
         f0:88:4b:4b:d0:5e:9a:97:cc:12:8e:aa:54:1c:99:da:6a:26:
         18:b3:bc:c1:46:4a:0e:97:bd:5f:f9:3a:1a:70:e9:72:eb:62:
         d8:44:44:75:5f:5d:eb:03:87:28:b0:62:ef:ef:db:b8:db:85:
         7f:ae:33:f0:38:cf:9a:63:35:10:9a:0f:15:86:2b:dc:5d:d3:
         c4:95:7b:7a:25:d8:5b:c1:db:5f:e4:71:e5:33:e6:aa:fd:6a:
         da:e6:eb:e4:27:ce:f6:93:8a:26:0c:4e:af:8f:10:7d:89:ab:
         5a:78:7e:a1:0f:b8:9d:9e:49:94:be:73:7d:03:9c:eb:32:8f:
         64:fb:04:8d:4d:47:08:1e:b0:13:28:74:a2:8f:ca:20:88:6d:
         f7:8e:e2:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI3OAFNCVSETc6LxXc1i0VxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmI2M2RmMDZkZTAwYzg0M2RhNjM5NzczNDk1OTU0NzFl
NTFhMjYwHhcNMjQwOTI4MDYwMTEwWhcNMjQwOTI5MDYwMTEwWjAzMTEwLwYDVQQD
Eyg3YWVhODc5YmU2MTk0OTk1NTVmYjZhNWM1YjVlMGIwMDI3MWQwZDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4uQgotQZdD5KLQ5qB00Vsb6MEXr
YY28uuA6MY8YpIpQ3TVtPBWt9725mW6lhTbLy4L40DmimCFrnns4dssdjH9V7s6q
uTdSDZWbLMXnZcueTTXRf0ymoIkHsWNTIud5I9/bNq1Xky0wNsiRtO7qdSVBpR2N
JYeJDFoo7d1nYlL0FkjGkKKRfUQOvXdArjKu+WIQ64g/VfKQZlAFu7Po/kHlx8jO
c84Q2iQM+x8ac7Xj5IMYYy+FhQp6F9iIzzH8hWnmrf7Vphwghht3EHJHW+AIaeMr
Ei4+9WQaNJFeIgjmkbmXmCn6XKTYPCwyV2I15pNWS9aFk4yei74mRAsINQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrqh5vmGUmVVftqXFteCwAnHQ0AMB8GA1UdIwQY
MBaAFE+7Y98G3gDIQ9pjl3NJWVRx5RomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDd0ajN3YmVBTWhEMm1PWGMwbFpWSEhsR2lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hNTllZTktMzNjZC00N2RmLTg0MDMt
Yjk0NzJhMmM1YjNlLzEvVDd0ajN3YmVBTWhEMm1PWGMwbFpWSEhsR2lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9hNTllZTktMzNjZC00N2RmLTg0MDMtYjk0NzJhMmM1YjNl
LzEvVDd0ajN3YmVBTWhEMm1PWGMwbFpWSEhsR2lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxhy1uIO+
GVtMcBocUp5tv5vmR4w71q30jJdlyCQYNchQU/VCZ8CnzKP2+mosm7CJ56vQ1ok1
uiD23d8Z+L+3ULHKjFex0rxhCUP2VDcGg7CIFvRjwpdA7ILh2uaaPs6MRHtjCqnt
s/k6Ouun8IhLS9BempfMEo6qVByZ2momGLO8wUZKDpe9X/k6GnDpcuti2EREdV9d
6wOHKLBi7+/buNuFf64z8DjPmmM1EJoPFYYr3F3TxJV7eiXYW8HbX+Rx5TPmqv1q
2ubr5CfO9pOKJgxOr48QfYmrWnh+oQ+4nZ5JlL5zfQOc6zKPZPsEjU1HCB6wEyh0
oo/KIIht947ipQ==
-----END CERTIFICATE-----
Generated at Sat Sep 28 08:17:37 2024 by rpki-client on console-fra.rpki-client.org