Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
File:                     hUavGPcHiqwAwvzSymf5MoAhfhU.mft (raw, json)
Hash identifier:          8g+oP1BTKIC999h8Oy1GvpcQ5d+EWVTWx8qILSW9BK0=
Subject key identifier:   6E:FE:FF:7E:AC:C1:CB:E7:BB:F1:1C:A9:67:13:28:BD:5B:37:2A:4C
Authority key identifier: 85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
Certificate issuer:       /CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Certificate serial:       01936BC79C762A601318D0589F0468186EEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
Manifest number:          130D
Signing time:             Wed 27 Nov 2024 04:01:04 +0000
Manifest this update:     Wed 27 Nov 2024 04:01:04 +0000
Manifest next update:     Thu 28 Nov 2024 04:01:04 +0000
Files and hashes:         1: TMU3yyVqBpcm-SueLtMjBMmrOGM.roa (hash: MrGqP3N2SUuR2zsJEziUimKULBlboWtxiNL31qOGtBk=)
                          2: hUavGPcHiqwAwvzSymf5MoAhfhU.crl (hash: +lbk9dm6fl9BSdUxRcsmKa+cbexAlX8Z6c7RpItlrnM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Nov 2024 04:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:c7:9c:76:2a:60:13:18:d0:58:9f:04:68:18:6e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8546af18f7078aac00c2fcd2ca67f93280217e15
        Validity
            Not Before: Nov 27 04:01:04 2024 GMT
            Not After : Nov 28 04:01:04 2024 GMT
        Subject: CN=6efeff7eacc1cbe7bbf11ca9671328bd5b372a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4d:fd:8e:53:70:10:34:9a:fb:40:0d:52:42:
                    52:69:e2:19:ad:d0:6b:74:40:ec:fa:c1:bd:a5:26:
                    fc:10:f5:fa:4a:62:ff:3c:46:24:3e:5f:15:a3:6a:
                    f0:92:01:62:85:8e:b2:07:8d:f6:1c:a4:27:57:04:
                    fa:c1:37:e2:ba:88:4f:ed:df:1d:4d:9a:07:7a:72:
                    d3:46:a7:af:fe:fa:12:ec:3d:3a:1c:f8:c0:4a:a7:
                    28:6c:c5:e0:75:c7:9e:d5:93:d9:fa:b4:6a:0e:cf:
                    5a:a8:44:3c:ee:56:90:c7:19:7f:9a:fe:5e:55:6c:
                    87:74:f6:c6:b8:61:73:28:45:44:22:54:03:7a:af:
                    0f:0d:76:a1:aa:c2:17:dc:8b:73:05:b8:eb:77:f8:
                    2e:b3:16:bb:42:c4:10:46:eb:2d:d4:62:58:72:cd:
                    6a:de:3d:a0:cc:13:06:d1:a7:87:0c:f0:0c:2d:89:
                    d1:94:26:f4:97:03:36:7a:5e:0e:56:a6:b9:79:53:
                    a5:fd:20:60:06:a4:4a:cc:92:00:c9:3a:c1:0d:d9:
                    d7:ad:3e:43:78:d1:97:7c:87:d8:87:de:77:e9:07:
                    03:c9:16:b1:99:c1:52:59:0c:31:57:e2:ab:97:ea:
                    a0:d1:07:d1:ab:f9:a4:cd:af:42:3e:38:2f:14:57:
                    39:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FE:FF:7E:AC:C1:CB:E7:BB:F1:1C:A9:67:13:28:BD:5B:37:2A:4C
            X509v3 Authority Key Identifier:
                keyid:85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:96:57:55:55:6e:b3:4c:59:30:c6:5a:0d:44:05:b3:c8:1f:
         ee:6c:87:f1:97:68:f9:fb:12:ad:8e:8e:84:9c:e5:b4:76:60:
         ea:2d:8b:e3:7f:66:29:25:cc:38:cd:b2:1c:67:33:ef:80:d6:
         a5:23:2b:b6:a1:a0:1b:03:47:23:44:85:12:98:01:4b:95:21:
         f2:6a:00:14:1d:3b:b8:c6:41:c3:b3:f3:e6:91:ad:c1:70:fe:
         a1:a9:b3:3f:cf:7c:48:f2:c3:76:bb:9b:2c:c2:e7:d8:f5:3a:
         38:39:d8:2d:dd:d3:50:9a:4e:90:63:76:f3:27:ea:a9:0b:1e:
         1a:2f:62:7c:00:9a:78:09:ca:f8:b7:73:29:90:dc:6e:b1:27:
         08:7a:78:4b:73:e1:4f:23:ab:e5:14:76:8b:b3:2c:86:4e:49:
         fd:31:97:f6:ca:ff:77:bb:d4:d5:30:1b:27:f9:e8:f6:d6:19:
         ee:79:42:0e:2e:33:bf:67:84:13:cd:50:45:bd:cc:a5:e7:7e:
         2c:f1:e6:94:09:57:2c:bb:94:44:43:ef:a5:57:ea:9a:8c:ae:
         82:87:3c:e8:7c:bf:c2:ac:c8:ea:84:9a:57:8b:d8:a2:b4:46:
         f5:60:6e:46:17:3f:ee:40:46:39:25:15:3c:f3:ab:53:6b:36:
         17:12:b7:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNrx5x2KmATGNBYnwRoGG7rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NDZhZjE4ZjcwNzhhYWMwMGMyZmNkMmNhNjdmOTMyODAy
MTdlMTUwHhcNMjQxMTI3MDQwMTA0WhcNMjQxMTI4MDQwMTA0WjAzMTEwLwYDVQQD
Eyg2ZWZlZmY3ZWFjYzFjYmU3YmJmMTFjYTk2NzEzMjhiZDViMzcyYTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU39jlNwEDSa+0ANUkJSaeIZrdBr
dEDs+sG9pSb8EPX6SmL/PEYkPl8Vo2rwkgFihY6yB432HKQnVwT6wTfiuohP7d8d
TZoHenLTRqev/voS7D06HPjASqcobMXgdcee1ZPZ+rRqDs9aqEQ87laQxxl/mv5e
VWyHdPbGuGFzKEVEIlQDeq8PDXahqsIX3ItzBbjrd/gusxa7QsQQRust1GJYcs1q
3j2gzBMG0aeHDPAMLYnRlCb0lwM2el4OVqa5eVOl/SBgBqRKzJIAyTrBDdnXrT5D
eNGXfIfYh9536QcDyRaxmcFSWQwxV+Krl+qg0QfRq/mkza9CPjgvFFc5hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7+/36swcvnu/EcqWcTKL1bNypMMB8GA1UdIwQY
MBaAFIVGrxj3B4qsAML80spn+TKAIX4VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFVhdkdQY0hpcXdBd3Z6U3ltZjVNb0FoZmhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYTY4ODgtYjlhZC00YjgxLWI5MzUt
NmJlYWVlNWI1OGEzLzEvaFVhdkdQY0hpcXdBd3Z6U3ltZjVNb0FoZmhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xYTY4ODgtYjlhZC00YjgxLWI5MzUtNmJlYWVlNWI1OGEz
LzEvaFVhdkdQY0hpcXdBd3Z6U3ltZjVNb0FoZmhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5ZXVVVu
s0xZMMZaDUQFs8gf7myH8Zdo+fsSrY6OhJzltHZg6i2L439mKSXMOM2yHGcz74DW
pSMrtqGgGwNHI0SFEpgBS5Uh8moAFB07uMZBw7Pz5pGtwXD+oamzP898SPLDdrub
LMLn2PU6ODnYLd3TUJpOkGN28yfqqQseGi9ifACaeAnK+LdzKZDcbrEnCHp4S3Ph
TyOr5RR2i7Mshk5J/TGX9sr/d7vU1TAbJ/no9tYZ7nlCDi4zv2eEE81QRb3Mped+
LPHmlAlXLLuUREPvpVfqmoyugoc86Hy/wqzI6oSaV4vYorRG9WBuRhc/7kBGOSUV
PPOrU2s2FxK3Nw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 10:40:45 2024 by rpki-client on console-fra.rpki-client.org