Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
File:                     Hox3M21m97AjjmwYTGT6TyTQnwE.mft (raw, json)
Hash identifier:          zlekUx+KAr45A0AhjZJJOkZsT0miUSdFjs2kbLXS8Yc=
Subject key identifier:   D8:25:B9:DE:DC:BC:64:36:31:82:80:71:4B:06:35:C4:57:02:38:FD
Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
Certificate issuer:       /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Certificate serial:       01935689560CD9F6B75CA7695499559153D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
Manifest number:          1305
Signing time:             Sat 23 Nov 2024 01:01:01 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:01 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:01 +0000
Files and hashes:         1: FoQRgM8BnpzoZHF8ZymmbE_DzuI.roa (hash: VtgFeGz98uhmpWtZ/9J00fC8b236yzM8nS+m1C/NI6A=)
                          2: Hox3M21m97AjjmwYTGT6TyTQnwE.crl (hash: LX0rtdKAXJVbhUO0ffaFVsnkQ+2zMhXaKU10vnyCbJE=)
                          3: UPuik-ow8ItaTzb_W4LHg2dMNIM.roa (hash: SIZCE3igrb5N8MZ80UtQhJ9QI2nmdHpGelrfxXnj5l4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:56:0c:d9:f6:b7:5c:a7:69:54:99:55:91:53:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
        Validity
            Not Before: Nov 23 01:01:01 2024 GMT
            Not After : Nov 24 01:01:01 2024 GMT
        Subject: CN=d825b9dedcbc6436318280714b0635c4570238fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:55:2b:df:45:79:78:38:ed:62:f8:c0:f1:eb:
                    23:a6:e1:5c:cd:c0:b9:8d:84:4e:4d:d0:4d:f1:37:
                    f0:65:87:be:5b:0d:3a:20:3e:5f:ec:95:26:db:62:
                    76:d9:10:71:26:89:a6:86:ba:dc:25:a5:66:59:38:
                    60:a2:9e:be:38:90:b7:f4:56:af:7d:ae:26:93:b8:
                    6b:17:7d:cf:06:62:c9:29:57:d1:f3:aa:05:77:9e:
                    c5:5a:1a:48:a0:c5:8c:76:25:09:35:83:5e:17:86:
                    f4:a3:5f:f2:a4:87:64:16:95:e7:5c:79:0e:84:aa:
                    09:59:4c:0b:fa:42:33:69:c4:70:c1:36:46:ac:e9:
                    92:47:4b:f3:0b:50:c4:f5:c6:25:ba:33:fa:6c:82:
                    b0:6a:6f:83:69:94:fd:dc:4e:a5:68:e1:c1:33:b6:
                    9f:fe:01:a7:cb:08:43:18:4e:2f:a0:58:ae:fd:e5:
                    46:33:2d:4f:3a:bd:a2:70:64:53:c7:fa:78:7a:16:
                    04:c9:04:1b:ca:df:82:50:f9:c3:af:02:45:19:ad:
                    df:e1:15:82:61:18:fd:72:40:3c:7d:e0:36:fc:af:
                    91:08:4d:fb:0c:fd:d5:e4:36:91:5b:04:13:f2:b8:
                    4a:8e:e7:8d:9b:2b:8a:da:78:60:a3:fd:6e:6b:61:
                    9e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:25:B9:DE:DC:BC:64:36:31:82:80:71:4B:06:35:C4:57:02:38:FD
            X509v3 Authority Key Identifier:
                keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:e5:be:28:b0:46:f8:01:b0:20:e8:74:04:8a:92:63:9d:e2:
         b4:63:a9:0f:70:ad:d5:14:c3:7e:74:26:24:5c:3c:50:3a:39:
         31:94:14:32:21:8d:79:0e:89:10:65:73:3e:87:e4:45:07:3b:
         11:e3:28:11:72:24:74:56:17:ab:de:e8:49:b5:93:37:bf:b1:
         d1:45:7c:15:98:4f:3b:1b:e6:45:90:1b:e4:33:26:cd:55:50:
         9e:f6:1c:93:77:e8:1f:b9:46:8e:36:bf:57:f6:50:1f:ea:8f:
         a0:1b:1c:89:40:a3:d9:a2:e4:f0:31:3c:c6:22:25:db:69:d7:
         01:3f:58:89:c8:98:ee:c3:ee:85:c0:7e:0e:19:ad:5e:42:0d:
         f7:c8:ac:a8:c4:d1:29:a8:1e:33:ba:78:3d:70:db:44:d9:3a:
         62:f9:e2:42:36:d5:86:45:d8:29:b4:84:e0:3a:7d:81:87:04:
         35:7e:d9:a5:71:02:5f:3d:f3:b0:ed:45:24:22:5b:f6:ab:0b:
         9a:f6:b6:dd:da:78:45:14:ce:b6:8b:36:98:54:71:13:22:96:
         69:64:ac:aa:69:ca:c4:b4:a9:2f:fc:2d:ce:93:9a:be:bb:c4:
         d1:c0:55:36:ac:f9:e2:97:47:a8:6b:d2:6a:a3:ed:c1:06:3b:
         ad:18:8b:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiVYM2fa3XKdpVJlVkVPSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOGM3NzMzNmQ2NmY3YjAyMzhlNmMxODRjNjRmYTRmMjRk
MDlmMDEwHhcNMjQxMTIzMDEwMTAxWhcNMjQxMTI0MDEwMTAxWjAzMTEwLwYDVQQD
EyhkODI1YjlkZWRjYmM2NDM2MzE4MjgwNzE0YjA2MzVjNDU3MDIzOGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VUr30V5eDjtYvjA8esjpuFczcC5
jYROTdBN8TfwZYe+Ww06ID5f7JUm22J22RBxJommhrrcJaVmWThgop6+OJC39Fav
fa4mk7hrF33PBmLJKVfR86oFd57FWhpIoMWMdiUJNYNeF4b0o1/ypIdkFpXnXHkO
hKoJWUwL+kIzacRwwTZGrOmSR0vzC1DE9cYlujP6bIKwam+DaZT93E6laOHBM7af
/gGnywhDGE4voFiu/eVGMy1POr2icGRTx/p4ehYEyQQbyt+CUPnDrwJFGa3f4RWC
YRj9ckA8feA2/K+RCE37DP3V5DaRWwQT8rhKjueNmyuK2nhgo/1ua2GeZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNglud7cvGQ2MYKAcUsGNcRXAjj9MB8GA1UdIwQY
MBaAFB6MdzNtZvewI45sGExk+k8k0J8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC83ZGE3OWQtNjBmNC00N2E4LTgxM2Et
OTk5NTdkZjQ5OTdlLzEvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC83ZGE3OWQtNjBmNC00N2E4LTgxM2EtOTk5NTdkZjQ5OTdl
LzEvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuW+KLBG
+AGwIOh0BIqSY53itGOpD3Ct1RTDfnQmJFw8UDo5MZQUMiGNeQ6JEGVzPofkRQc7
EeMoEXIkdFYXq97oSbWTN7+x0UV8FZhPOxvmRZAb5DMmzVVQnvYck3foH7lGjja/
V/ZQH+qPoBsciUCj2aLk8DE8xiIl22nXAT9YiciY7sPuhcB+DhmtXkIN98isqMTR
KageM7p4PXDbRNk6YvniQjbVhkXYKbSE4Dp9gYcENX7ZpXECXz3zsO1FJCJb9qsL
mva23dp4RRTOtos2mFRxEyKWaWSsqmnKxLSpL/wtzpOavrvE0cBVNqz54pdHqGvS
aqPtwQY7rRiLvg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:46:02 2024 by rpki-client on console-ams.rpki-client.org