Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.mft
File:                     1UCrGFzzmd5s2zykXe0pa2vmj-o.mft (raw, json)
Hash identifier:          iSchD9+qUvsyJlBgLtrVBCw6LIQn//Df/ha9O+qYERw=
Subject key identifier:   0E:B1:1E:56:F0:C7:B9:6B:56:C3:83:5D:64:06:53:D1:D7:F8:02:E1
Authority key identifier: D5:40:AB:18:5C:F3:99:DE:6C:DB:3C:A4:5D:ED:29:6B:6B:E6:8F:EA
Certificate issuer:       /CN=d540ab185cf399de6cdb3ca45ded296b6be68fea
Certificate serial:       0193531A1890D5EB807F90DD4DA3E7651DFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1UCrGFzzmd5s2zykXe0pa2vmj-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 09:00:39 +0000
Manifest this update:     Fri 22 Nov 2024 09:00:39 +0000
Manifest next update:     Sat 23 Nov 2024 09:00:39 +0000
Files and hashes:         1: 1UCrGFzzmd5s2zykXe0pa2vmj-o.crl (hash: Cu9J/bQzC+zz8c493vQkNJihbKZ5RCpy+h6hsZnCQIs=)
                          2: jjkTGGrZ9OrIIN0QyyAPSHol1VU.roa (hash: 7kFrIBuCevjIVXmdsSwm3j7J6/1XLoAZWOVm6zPhP/I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1UCrGFzzmd5s2zykXe0pa2vmj-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:1a:18:90:d5:eb:80:7f:90:dd:4d:a3:e7:65:1d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d540ab185cf399de6cdb3ca45ded296b6be68fea
        Validity
            Not Before: Nov 22 09:00:39 2024 GMT
            Not After : Nov 23 09:00:39 2024 GMT
        Subject: CN=0eb11e56f0c7b96b56c3835d640653d1d7f802e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4c:ab:11:11:68:e3:91:56:0f:5e:0a:a7:d3:
                    94:9c:9d:d8:47:5d:c8:16:f7:e9:7e:53:c1:d8:61:
                    df:ea:a2:81:7e:31:70:1e:c2:91:37:3d:0e:46:2d:
                    a5:b7:94:bd:a8:17:c8:e4:75:56:28:55:4a:e9:66:
                    1d:a5:61:13:d0:30:62:f1:ad:99:ba:04:2b:13:cc:
                    f5:43:dc:40:0c:6c:59:ca:f7:31:39:f9:58:6f:6c:
                    85:1b:18:84:b1:ab:00:a0:3c:6a:b6:1f:3f:de:08:
                    e7:7e:16:b7:0d:34:1a:40:e0:0c:25:51:b5:96:45:
                    ab:43:b4:f7:b6:5d:8b:f4:ea:04:9d:2b:8c:e2:d5:
                    65:e2:4f:43:cb:46:e7:3e:5a:c8:39:17:2a:1f:22:
                    d2:63:4e:87:ee:c0:c2:50:c8:ae:c8:db:75:f9:15:
                    8e:36:76:49:84:05:ec:c1:06:56:b7:eb:c7:1a:db:
                    e6:17:c7:72:e5:ac:49:57:b4:5f:ab:9e:91:21:d5:
                    65:18:f0:4f:38:7f:ae:06:1c:66:03:f8:c6:61:39:
                    78:61:16:2f:96:5d:03:db:5f:3c:59:cb:55:5e:10:
                    89:8e:9a:ce:12:1e:69:66:bd:91:8d:6f:2c:5b:47:
                    52:c7:5c:be:82:a0:5a:0a:18:76:66:12:82:24:5e:
                    5c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B1:1E:56:F0:C7:B9:6B:56:C3:83:5D:64:06:53:D1:D7:F8:02:E1
            X509v3 Authority Key Identifier:
                keyid:D5:40:AB:18:5C:F3:99:DE:6C:DB:3C:A4:5D:ED:29:6B:6B:E6:8F:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UCrGFzzmd5s2zykXe0pa2vmj-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:8f:7b:3c:69:7b:b0:92:89:a0:6e:7a:56:f4:af:68:5a:b8:
         60:e4:24:df:0d:17:88:fd:fb:07:a7:cc:8e:29:64:ae:4c:b7:
         26:83:6a:f3:8f:79:1b:07:23:c4:c6:59:14:8e:6c:c1:01:d2:
         ec:76:5c:70:31:50:f0:2c:82:8e:85:56:f5:d9:76:ec:ce:f3:
         6f:59:97:ee:a6:cf:3e:74:3c:00:c8:f3:e8:33:e9:76:2f:da:
         5d:c7:e7:c9:81:5a:34:05:c2:f9:65:40:c5:82:bd:fa:c6:50:
         37:94:b1:6e:69:ad:30:ec:e8:0f:67:f5:70:84:14:61:13:38:
         0d:3a:2a:13:70:0a:b8:8a:5a:42:2e:0e:e6:96:d9:9f:57:d9:
         74:a3:4d:6a:29:3d:9b:a4:fc:8e:06:c1:d2:ab:79:8d:4d:e2:
         c9:af:bf:8e:76:87:fa:56:08:45:21:9a:e2:2f:a7:6b:46:0a:
         a2:c1:0a:47:88:63:4b:61:3c:88:bc:59:61:25:32:5c:d8:8c:
         47:e7:a5:9a:55:a1:80:e6:88:c7:20:ae:44:46:7e:ad:4e:2f:
         3a:98:67:4f:d2:75:84:a9:9f:d2:e8:ab:5b:4b:8d:a4:43:91:
         b2:d0:11:a9:90:ec:35:15:5a:cf:ca:ac:f9:d3:77:97:d6:b8:
         e5:f7:ea:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNTGhiQ1euAf5DdTaPnZR39MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NDBhYjE4NWNmMzk5ZGU2Y2RiM2NhNDVkZWQyOTZiNmJl
NjhmZWEwHhcNMjQxMTIyMDkwMDM5WhcNMjQxMTIzMDkwMDM5WjAzMTEwLwYDVQQD
EygwZWIxMWU1NmYwYzdiOTZiNTZjMzgzNWQ2NDA2NTNkMWQ3ZjgwMmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEyrERFo45FWD14Kp9OUnJ3YR13I
FvfpflPB2GHf6qKBfjFwHsKRNz0ORi2lt5S9qBfI5HVWKFVK6WYdpWET0DBi8a2Z
ugQrE8z1Q9xADGxZyvcxOflYb2yFGxiEsasAoDxqth8/3gjnfha3DTQaQOAMJVG1
lkWrQ7T3tl2L9OoEnSuM4tVl4k9Dy0bnPlrIORcqHyLSY06H7sDCUMiuyNt1+RWO
NnZJhAXswQZWt+vHGtvmF8dy5axJV7Rfq56RIdVlGPBPOH+uBhxmA/jGYTl4YRYv
ll0D2188WctVXhCJjprOEh5pZr2RjW8sW0dSx1y+gqBaChh2ZhKCJF5cUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6xHlbwx7lrVsODXWQGU9HX+ALhMB8GA1UdIwQY
MBaAFNVAqxhc85nebNs8pF3tKWtr5o/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVVDckdGenptZDVzMnp5a1hlMHBhMnZtai1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8xYWFmNWQtNGU2Zi00OTc0LWJmZTQt
YzU3MmNmODY3Y2JmLzEvMVVDckdGenptZDVzMnp5a1hlMHBhMnZtai1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8xYWFmNWQtNGU2Zi00OTc0LWJmZTQtYzU3MmNmODY3Y2Jm
LzEvMVVDckdGenptZDVzMnp5a1hlMHBhMnZtai1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe497PGl7
sJKJoG56VvSvaFq4YOQk3w0XiP37B6fMjilkrky3JoNq8495GwcjxMZZFI5swQHS
7HZccDFQ8CyCjoVW9dl27M7zb1mX7qbPPnQ8AMjz6DPpdi/aXcfnyYFaNAXC+WVA
xYK9+sZQN5SxbmmtMOzoD2f1cIQUYRM4DToqE3AKuIpaQi4O5pbZn1fZdKNNaik9
m6T8jgbB0qt5jU3iya+/jnaH+lYIRSGa4i+na0YKosEKR4hjS2E8iLxZYSUyXNiM
R+elmlWhgOaIxyCuREZ+rU4vOphnT9J1hKmf0uirW0uNpEORstARqZDsNRVaz8qs
+dN3l9a45ffqJg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:04:15 2024 by rpki-client on console-ams.rpki-client.org