Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
File:                     E0QDZgB-tW8Q6fmelSBNMwUIubA.mft (raw, json)
Hash identifier:          1TWQsLtyk8f9qVjCTXTsRM9BJ5BKxfBMJjQlCgcQsFs=
Subject key identifier:   E7:5C:40:1B:F5:CC:4D:06:58:05:E2:9A:EF:6B:42:08:8F:C6:C7:8A
Authority key identifier: 13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
Certificate issuer:       /CN=13440366007eb56f10e9f99e95204d330508b9b0
Certificate serial:       01935508801B6FEF28BC272EFFA9D157B4B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
Manifest number:          0B02
Signing time:             Fri 22 Nov 2024 18:00:40 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:40 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:40 +0000
Files and hashes:         1: E0QDZgB-tW8Q6fmelSBNMwUIubA.crl (hash: 7HZkiEtcfKSfAES/uGRPYhN+nYpWwannFVzX4w02ZGc=)
                          2: aG4mP6U0zIcJHtB1fyacKSJPtfg.roa (hash: 9W7FX+ymN0EOdBTGXU8AfRbc/P8pPVuwDhlV8ig62ao=)
                          3: rr2tSpga1SsUR9tvASbwO3cEj5A.roa (hash: CoP8A8C0XHyyQKd+MN7TKRkA1n0TQaC6b4s982sLtME=)
                          4: s0B0ymurnPOmBK3gvwnIrbVXrjY.roa (hash: pjLsdfdtTAdq1E4TxCZ/whvkQKjiGztAbPkyCI3miM4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:80:1b:6f:ef:28:bc:27:2e:ff:a9:d1:57:b4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13440366007eb56f10e9f99e95204d330508b9b0
        Validity
            Not Before: Nov 22 18:00:40 2024 GMT
            Not After : Nov 23 18:00:40 2024 GMT
        Subject: CN=e75c401bf5cc4d065805e29aef6b42088fc6c78a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:38:5a:01:70:e7:30:aa:04:07:ea:6b:ad:61:
                    12:18:17:a2:95:0c:83:08:45:f0:c0:a5:63:46:4f:
                    44:e9:30:33:7e:35:8a:8b:ae:7f:38:ac:a2:d1:42:
                    53:62:50:95:69:5c:b7:94:9e:44:00:2f:d2:da:71:
                    b6:0d:20:73:82:88:de:4d:01:5c:08:bd:05:3a:74:
                    b9:fa:8b:7d:2a:cb:de:31:b3:c1:6c:83:db:31:7c:
                    ce:ce:e8:7d:82:13:32:ed:2c:cc:09:7d:37:d7:01:
                    9a:97:b2:50:20:b0:d6:0a:fb:68:0c:72:5f:34:6d:
                    20:fd:16:3c:70:dd:ea:57:f5:fe:27:9c:78:48:fd:
                    0f:3e:62:ec:73:c4:73:92:b3:74:ba:72:68:12:b6:
                    a6:fe:cd:05:32:c5:ff:bf:1e:ea:6c:c2:1e:bc:4b:
                    01:29:e8:98:0e:fa:de:9a:da:f8:ea:79:db:d8:ee:
                    67:84:6a:03:f5:11:b3:3c:37:c3:ae:a3:19:29:f0:
                    01:b6:04:5c:af:df:34:5d:46:eb:f4:2e:5e:10:3f:
                    a9:c1:ec:17:9e:84:31:d4:bf:7b:f4:71:84:25:f4:
                    8f:ad:23:b9:ec:62:92:8d:bc:07:e1:92:4d:49:76:
                    78:f5:65:dc:6a:ea:0e:cd:eb:24:65:5b:0f:94:c1:
                    bd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5C:40:1B:F5:CC:4D:06:58:05:E2:9A:EF:6B:42:08:8F:C6:C7:8A
            X509v3 Authority Key Identifier:
                keyid:13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:5c:23:55:bb:86:c5:a0:a2:78:17:54:42:e0:85:a9:f6:6b:
         87:df:4d:60:50:6b:5a:d4:e4:d5:5e:c5:f7:b0:87:07:eb:d7:
         cf:db:f3:e8:99:87:d4:26:d3:52:94:47:c5:ce:8e:51:2b:24:
         80:91:c5:59:f3:71:df:73:37:a5:41:b5:05:73:0c:63:50:a6:
         c6:30:2f:06:08:57:91:02:a6:0f:fe:b1:d1:91:5e:4c:5e:91:
         25:92:9b:c6:02:fb:e2:31:26:28:17:ae:e6:a0:93:c6:89:a7:
         61:6e:56:29:e3:16:c1:26:b6:42:3b:3d:a7:10:30:7c:01:91:
         1f:35:3f:fe:d9:ee:25:f0:1e:10:68:17:f9:b5:63:13:29:d5:
         37:6e:7e:79:64:87:9e:17:3f:6e:54:1d:17:a8:6b:e6:89:62:
         ef:67:91:3e:50:9d:20:74:f0:6f:d1:56:7b:96:1e:72:36:73:
         30:36:57:da:ca:0c:37:af:28:75:cf:b7:ed:2b:7b:08:94:1d:
         70:de:f2:36:f1:21:36:a1:22:ea:5f:ef:4e:15:fd:2a:4f:35:
         ff:67:19:ba:5b:f2:72:a1:0e:34:51:e4:78:24:c9:d9:60:82:
         ca:9b:46:de:eb:06:2f:44:60:fc:f9:9a:a7:2e:ae:2c:e0:35:
         0d:4e:cd:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVCIAbb+8ovCcu/6nRV7S1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNDQwMzY2MDA3ZWI1NmYxMGU5Zjk5ZTk1MjA0ZDMzMDUw
OGI5YjAwHhcNMjQxMTIyMTgwMDQwWhcNMjQxMTIzMTgwMDQwWjAzMTEwLwYDVQQD
EyhlNzVjNDAxYmY1Y2M0ZDA2NTgwNWUyOWFlZjZiNDIwODhmYzZjNzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDhaAXDnMKoEB+prrWESGBeilQyD
CEXwwKVjRk9E6TAzfjWKi65/OKyi0UJTYlCVaVy3lJ5EAC/S2nG2DSBzgojeTQFc
CL0FOnS5+ot9KsveMbPBbIPbMXzOzuh9ghMy7SzMCX031wGal7JQILDWCvtoDHJf
NG0g/RY8cN3qV/X+J5x4SP0PPmLsc8RzkrN0unJoEram/s0FMsX/vx7qbMIevEsB
KeiYDvremtr46nnb2O5nhGoD9RGzPDfDrqMZKfABtgRcr980XUbr9C5eED+pwewX
noQx1L979HGEJfSPrSO57GKSjbwH4ZJNSXZ49WXcauoOzeskZVsPlMG9DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdcQBv1zE0GWAXimu9rQgiPxseKMB8GA1UdIwQY
MBaAFBNEA2YAfrVvEOn5npUgTTMFCLmwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTBRRFpnQi10VzhRNmZtZWxTQk5Nd1VJdWJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wYjAyODAtOTYyMy00NGJhLThkZGYt
NDRjMWE0ZWI5NjljLzEvRTBRRFpnQi10VzhRNmZtZWxTQk5Nd1VJdWJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8wYjAyODAtOTYyMy00NGJhLThkZGYtNDRjMWE0ZWI5Njlj
LzEvRTBRRFpnQi10VzhRNmZtZWxTQk5Nd1VJdWJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ1wjVbuG
xaCieBdUQuCFqfZrh99NYFBrWtTk1V7F97CHB+vXz9vz6JmH1CbTUpRHxc6OUSsk
gJHFWfNx33M3pUG1BXMMY1CmxjAvBghXkQKmD/6x0ZFeTF6RJZKbxgL74jEmKBeu
5qCTxomnYW5WKeMWwSa2Qjs9pxAwfAGRHzU//tnuJfAeEGgX+bVjEynVN25+eWSH
nhc/blQdF6hr5oli72eRPlCdIHTwb9FWe5YecjZzMDZX2soMN68odc+37St7CJQd
cN7yNvEhNqEi6l/vThX9Kk81/2cZulvycqEONFHkeCTJ2WCCyptG3usGL0Rg/Pma
py6uLOA1DU7NiA==
-----END CERTIFICATE-----