Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
File:                     D6vrbvgg09UvBTciM8VB7ksU82E.mft (raw, json)
Hash identifier:          8OcFb81KTqpdE7SeAqBnGYlpqOMcT9s9PrwOl9EohIw=
Subject key identifier:   D8:D5:FE:36:43:36:59:49:7A:EF:09:27:AB:4E:04:F5:B0:50:7D:8B
Authority key identifier: 0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61
Certificate issuer:       /CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
Certificate serial:       0193568A47408C710EFC80B7E225DF5FE9A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 01:02:02 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:02 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:02 +0000
Files and hashes:         1: D6vrbvgg09UvBTciM8VB7ksU82E.crl (hash: Xb/PIW2HlsL2PuDHSGIS7uZuuoI4iAvLfiRvkHYFTiQ=)
                          2: z3sfCaCrVYowOLMqU83svc0_e88.roa (hash: tXmcQddBFp9h9uEZGIi82JzUDcZAdC/peB+oOKJxAQ4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:47:40:8c:71:0e:fc:80:b7:e2:25:df:5f:e9:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
        Validity
            Not Before: Nov 23 01:02:02 2024 GMT
            Not After : Nov 24 01:02:02 2024 GMT
        Subject: CN=d8d5fe36433659497aef0927ab4e04f5b0507d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e7:a4:d0:45:47:8e:3b:e1:df:60:6d:1f:88:
                    e0:92:ca:eb:94:79:16:04:2d:a4:ce:07:9a:76:bb:
                    31:36:ff:f1:0f:da:f5:66:7e:be:ec:ed:39:ba:76:
                    6d:92:f5:7b:22:93:9f:b4:51:7b:4f:b8:46:e1:a3:
                    07:6f:6a:34:90:9c:74:96:08:50:be:95:46:4d:49:
                    8c:71:64:12:0b:f1:4a:f9:3d:83:a9:df:f4:6b:59:
                    c0:08:a5:65:fd:e2:a5:be:40:63:11:be:30:f8:c3:
                    66:30:16:d3:f9:33:9d:2b:2a:ce:d5:56:ca:9c:49:
                    d3:bc:cc:7d:cd:6a:66:ee:08:ed:e5:eb:2f:c3:f5:
                    8f:ce:41:b9:b4:61:fd:6b:1c:48:82:21:ab:21:e8:
                    44:ac:ed:14:33:e6:f4:8e:ef:dd:8d:3d:82:a1:28:
                    af:54:0b:9c:16:e0:ea:09:84:c0:20:a4:3b:65:10:
                    9f:9f:01:9f:4d:e0:04:2d:9f:24:8a:99:fa:24:c1:
                    b5:bf:07:d0:54:dc:e1:6a:47:5d:57:af:39:22:85:
                    36:0b:70:9c:28:93:38:53:8b:2b:88:9d:9d:87:97:
                    e5:3f:f0:5f:d0:13:34:82:3e:0c:1a:63:08:de:68:
                    86:9d:1b:4c:48:a1:ff:6d:30:92:9c:71:a4:3a:25:
                    a6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D5:FE:36:43:36:59:49:7A:EF:09:27:AB:4E:04:F5:B0:50:7D:8B
            X509v3 Authority Key Identifier:
                keyid:0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:eb:63:52:c4:12:43:13:aa:9e:d9:94:4e:55:03:00:27:3a:
         6d:f0:a1:ea:92:9f:e1:e4:56:92:38:89:e1:6b:32:8c:bb:a0:
         69:ac:a9:79:59:de:4d:07:1c:72:4a:c2:97:c2:e2:3d:7c:27:
         e6:9a:d8:53:47:0e:5d:09:92:b9:f2:02:ab:46:b4:c0:10:69:
         04:c3:95:d9:63:20:c5:35:9f:6a:a3:72:9e:8f:bb:bf:85:24:
         94:5d:8e:1d:bb:7a:f5:86:86:85:8e:37:07:05:e4:03:d5:b0:
         8d:6d:30:12:ec:3d:f9:1e:2b:f1:75:2c:ca:8d:38:c8:30:df:
         66:20:cc:a5:66:37:3a:0d:44:70:da:6c:9e:5b:0b:fb:e7:cf:
         3f:3e:60:4f:e6:3f:b4:cb:5b:99:d9:1d:ca:17:03:3c:a5:18:
         17:58:46:13:74:b3:6a:4d:16:28:03:29:c3:89:e8:39:af:0f:
         89:8b:42:8d:15:de:30:86:80:72:af:21:f0:5f:dd:26:aa:82:
         19:db:62:d9:ce:24:dc:4c:c0:16:02:6e:62:09:97:69:c0:68:
         16:52:2e:78:d1:db:af:f2:4f:a4:fa:15:41:a9:f8:77:eb:58:
         75:1a:9a:52:00:15:56:20:13:18:7d:74:94:e5:37:1f:0e:4a:
         d5:18:79:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWikdAjHEO/IC34iXfX+mkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYWJlYjZlZjgyMGQzZDUyZjA1MzcyMjMzYzU0MWVlNGIx
NGYzNjEwHhcNMjQxMTIzMDEwMjAyWhcNMjQxMTI0MDEwMjAyWjAzMTEwLwYDVQQD
EyhkOGQ1ZmUzNjQzMzY1OTQ5N2FlZjA5MjdhYjRlMDRmNWIwNTA3ZDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+ek0EVHjjvh32BtH4jgksrrlHkW
BC2kzgeadrsxNv/xD9r1Zn6+7O05unZtkvV7IpOftFF7T7hG4aMHb2o0kJx0lghQ
vpVGTUmMcWQSC/FK+T2Dqd/0a1nACKVl/eKlvkBjEb4w+MNmMBbT+TOdKyrO1VbK
nEnTvMx9zWpm7gjt5esvw/WPzkG5tGH9axxIgiGrIehErO0UM+b0ju/djT2CoSiv
VAucFuDqCYTAIKQ7ZRCfnwGfTeAELZ8kipn6JMG1vwfQVNzhakddV685IoU2C3Cc
KJM4U4sriJ2dh5flP/Bf0BM0gj4MGmMI3miGnRtMSKH/bTCSnHGkOiWmcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjV/jZDNllJeu8JJ6tOBPWwUH2LMB8GA1UdIwQY
MBaAFA+r6274INPVLwU3IjPFQe5LFPNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDZ2cmJ2Z2cwOVV2QlRjaU04VkI3a3NVODJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mM2Q4MzQtY2VlZC00YmJkLWFiZTEt
NWEzNzEyNjcwNWFkLzEvRDZ2cmJ2Z2cwOVV2QlRjaU04VkI3a3NVODJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9mM2Q4MzQtY2VlZC00YmJkLWFiZTEtNWEzNzEyNjcwNWFk
LzEvRDZ2cmJ2Z2cwOVV2QlRjaU04VkI3a3NVODJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADetjUsQS
QxOqntmUTlUDACc6bfCh6pKf4eRWkjiJ4WsyjLugaaypeVneTQccckrCl8LiPXwn
5prYU0cOXQmSufICq0a0wBBpBMOV2WMgxTWfaqNyno+7v4UklF2OHbt69YaGhY43
BwXkA9WwjW0wEuw9+R4r8XUsyo04yDDfZiDMpWY3Og1EcNpsnlsL++fPPz5gT+Y/
tMtbmdkdyhcDPKUYF1hGE3Szak0WKAMpw4noOa8PiYtCjRXeMIaAcq8h8F/dJqqC
Gdti2c4k3EzAFgJuYgmXacBoFlIueNHbr/JPpPoVQan4d+tYdRqaUgAVViATGH10
lOU3Hw5K1Rh5eg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:15 2024 by rpki-client on console-ams.rpki-client.org