Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
File:                     oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft (raw, json)
Hash identifier:          OUUW30WB4M5qwC1XwAwHRzYKSjCKvFEEhEuvKgh6nVE=
Subject key identifier:   86:52:D7:7B:86:B4:2E:96:5C:DE:7E:21:42:4E:EF:77:1F:FD:B3:FF
Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
Certificate issuer:       /CN=a10c73530bb684fd569dfc432704675704183429
Certificate serial:       0193557642E7C57CDB65DFF520A3002EDBA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 20:00:33 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:33 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:33 +0000
Files and hashes:         1: 1rDJj6F-K-RX1kTkQ6a0E_zwiRo.roa (hash: 7lKsnQQvw+MIMVSXztdEghlL0g44hAPTYlZQRg8r0w8=)
                          2: gwN_qmX_SNDyl_quw7xVA8oqgWk.roa (hash: JV/BbFL+N6YrVp9W1YDf4a1LpZWPefMxgjn2pzcrrS4=)
                          3: oCMThH5lWuSWPw9EwURzDp5SGoc.roa (hash: dN3Ae2PCCrjKGgySk54rtbe2SynvdLhKBKCaGyQ+XHQ=)
                          4: oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl (hash: ++PmGg3kQ8dFa8vHThCC+ifzwHW28MlUs9X8ilYk4h0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:42:e7:c5:7c:db:65:df:f5:20:a3:00:2e:db:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a10c73530bb684fd569dfc432704675704183429
        Validity
            Not Before: Nov 22 20:00:33 2024 GMT
            Not After : Nov 23 20:00:33 2024 GMT
        Subject: CN=8652d77b86b42e965cde7e21424eef771ffdb3ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:30:d1:3f:a3:9e:19:6c:cb:ea:86:e8:7e:b8:
                    03:53:87:6c:9c:23:f2:d5:c1:ad:01:d5:49:99:ed:
                    a5:ac:35:72:13:fe:95:46:cf:ce:fe:c8:5a:7e:71:
                    50:94:69:89:ff:eb:d1:3e:ca:5b:d0:08:e7:93:d0:
                    f5:b8:b3:5d:9a:e0:ba:64:c4:75:ee:6d:d3:a0:35:
                    26:79:e8:02:49:7c:99:23:68:71:0c:b6:97:85:fe:
                    c3:cd:27:7b:ee:06:b3:b7:d1:ab:09:3b:fc:dc:91:
                    65:e3:f4:6a:b5:0b:bd:42:66:72:94:48:b7:3e:a2:
                    c0:22:b7:72:17:4d:d7:9a:a4:91:75:60:f7:22:a5:
                    6d:f9:96:54:88:4b:1f:d9:3d:16:73:de:02:39:0a:
                    60:b1:f3:90:ef:14:56:84:cb:20:8c:71:30:67:d5:
                    96:e3:3f:6f:a6:61:c2:32:b5:ce:23:bc:18:6d:20:
                    07:f2:52:cf:28:c4:3d:bd:38:d7:fc:c1:d8:78:6c:
                    5f:c4:bf:d2:25:b4:07:05:03:91:f7:7c:1d:fc:87:
                    e8:ce:43:8b:b1:e8:d3:3d:18:f7:be:6b:be:50:31:
                    9d:23:b8:cc:4b:27:3f:b3:35:15:aa:91:9d:7a:b7:
                    bf:52:4e:0f:44:fa:e2:8f:d9:d8:0e:b0:06:1f:a0:
                    6a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:52:D7:7B:86:B4:2E:96:5C:DE:7E:21:42:4E:EF:77:1F:FD:B3:FF
            X509v3 Authority Key Identifier:
                keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ee:f5:da:1b:2b:7c:7f:7c:ac:7b:82:17:43:01:97:48:c4:
         4a:fe:e3:5f:20:2b:74:11:37:e3:6d:27:60:fd:2c:08:91:e5:
         25:0f:14:e8:1e:a8:43:4c:c9:c0:a7:d8:73:f7:53:39:c3:a6:
         54:12:25:51:14:d3:94:6f:50:ae:c6:0c:f8:20:61:79:0b:11:
         17:d8:2a:c6:b1:52:f2:82:03:f7:d7:5c:52:76:27:db:55:9d:
         24:79:1b:67:41:bc:bf:3f:a3:26:b0:4b:47:bf:bd:7b:09:a8:
         f0:15:ba:1e:2e:40:69:ea:b1:1f:14:8f:cd:b6:a4:21:d1:04:
         3a:b1:48:ae:18:29:ba:4d:99:f3:1a:27:d2:1c:23:68:1a:91:
         4d:b0:18:13:9d:13:60:c7:7c:8f:58:1a:66:fa:2a:63:c9:c0:
         7c:8b:e8:89:42:ed:35:70:35:e0:02:cc:f7:bb:b2:a1:f3:81:
         d7:7e:0d:72:bc:84:30:22:66:82:7f:1a:cd:3d:f4:3f:d0:e5:
         e5:eb:48:10:e8:26:cb:82:82:62:8a:32:84:6d:cd:56:e8:57:
         40:48:67:b8:1b:35:57:9d:65:dc:d0:54:61:e5:29:99:e2:69:
         23:f2:9d:ac:da:bc:ca:8f:0c:dc:33:98:19:6b:b4:1e:84:b8:
         fe:49:c9:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVdkLnxXzbZd/1IKMALtumMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMGM3MzUzMGJiNjg0ZmQ1NjlkZmM0MzI3MDQ2NzU3MDQx
ODM0MjkwHhcNMjQxMTIyMjAwMDMzWhcNMjQxMTIzMjAwMDMzWjAzMTEwLwYDVQQD
Eyg4NjUyZDc3Yjg2YjQyZTk2NWNkZTdlMjE0MjRlZWY3NzFmZmRiM2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTDRP6OeGWzL6obofrgDU4dsnCPy
1cGtAdVJme2lrDVyE/6VRs/O/shafnFQlGmJ/+vRPspb0Ajnk9D1uLNdmuC6ZMR1
7m3ToDUmeegCSXyZI2hxDLaXhf7DzSd77gazt9GrCTv83JFl4/RqtQu9QmZylEi3
PqLAIrdyF03XmqSRdWD3IqVt+ZZUiEsf2T0Wc94COQpgsfOQ7xRWhMsgjHEwZ9WW
4z9vpmHCMrXOI7wYbSAH8lLPKMQ9vTjX/MHYeGxfxL/SJbQHBQOR93wd/IfozkOL
sejTPRj3vmu+UDGdI7jMSyc/szUVqpGdere/Uk4PRPrij9nYDrAGH6BqsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZS13uGtC6WXN5+IUJO73cf/bP/MB8GA1UdIwQY
MBaAFKEMc1MLtoT9Vp38QycEZ1cEGDQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lZDE3YzgtYWJkNC00MTRmLWJjMzAt
N2QwODI5MWE3NjYyLzEvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9lZDE3YzgtYWJkNC00MTRmLWJjMzAtN2QwODI5MWE3NjYy
LzEvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVe712hsr
fH98rHuCF0MBl0jESv7jXyArdBE3420nYP0sCJHlJQ8U6B6oQ0zJwKfYc/dTOcOm
VBIlURTTlG9QrsYM+CBheQsRF9gqxrFS8oID99dcUnYn21WdJHkbZ0G8vz+jJrBL
R7+9ewmo8BW6Hi5AaeqxHxSPzbakIdEEOrFIrhgpuk2Z8xon0hwjaBqRTbAYE50T
YMd8j1gaZvoqY8nAfIvoiULtNXA14ALM97uyofOB134NcryEMCJmgn8azT30P9Dl
5etIEOgmy4KCYooyhG3NVuhXQEhnuBs1V51l3NBUYeUpmeJpI/KdrNq8yo8M3DOY
GWu0HoS4/knJ5Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:19:46 2024 by rpki-client on console-ams.rpki-client.org