Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
File:                     1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft (raw, json)
Hash identifier:          GLArZ1RVjKaQPMzANjFZwxyLEvEY+3aRVKxjwnU7JrM=
Subject key identifier:   8E:C6:90:68:35:F9:B3:C7:3E:A1:0C:5A:85:A2:24:D7:0E:58:28:C6
Authority key identifier: FB:48:0C:73:35:43:05:CC:40:F8:FA:BA:9E:54:02:EF:37:DE:2E:AA
Certificate issuer:       /CN=fb480c73354305cc40f8faba9e5402ef37de2eaa
Certificate serial:       0193568A0E9BC73D857D14D8817F6BC90127
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 01:01:48 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:48 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:48 +0000
Files and hashes:         1: 1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl (hash: KAmS6L0b86kQKIl0VqkqmHDR9eo4tJTPkjKrAVn4gWk=)
                          2: g4MgD88t8-z1Z_DioI03S8s4SF0.roa (hash: oYKdTMSlQcqqmJ+ZFi6SGw3LvYYJ6r4rKS91JQMqT+k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:0e:9b:c7:3d:85:7d:14:d8:81:7f:6b:c9:01:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb480c73354305cc40f8faba9e5402ef37de2eaa
        Validity
            Not Before: Nov 23 01:01:48 2024 GMT
            Not After : Nov 24 01:01:48 2024 GMT
        Subject: CN=8ec6906835f9b3c73ea10c5a85a224d70e5828c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3b:03:e9:e8:bd:a9:ff:f3:28:1e:ff:2e:3b:
                    2f:04:6d:83:d5:2c:08:85:d5:c1:13:cd:6c:7a:a8:
                    80:b4:8a:36:c2:0f:0a:54:23:86:09:8e:7a:e4:f0:
                    0c:37:bb:8a:68:b4:11:0c:92:de:54:31:57:99:13:
                    9f:67:17:0a:2f:73:7a:f9:ce:d6:be:8a:54:ea:b3:
                    77:55:bc:6a:a1:e6:48:f1:7a:cc:d5:e2:7b:ed:eb:
                    a6:e9:e0:01:66:54:02:0d:d3:3b:e4:32:ea:5f:d4:
                    ef:aa:01:39:ea:a8:e3:2c:91:67:4d:c7:4d:17:4b:
                    a2:0d:8b:a7:21:23:39:7d:94:df:82:45:7e:79:d7:
                    f0:0a:1f:2d:01:46:3c:b5:0b:34:df:b7:cb:8d:57:
                    55:b5:f7:5a:d1:c4:eb:5b:41:c5:49:e1:58:f5:40:
                    7e:ce:c6:53:91:3c:4d:6c:f1:1f:8c:50:24:55:36:
                    93:e4:4e:38:7b:2f:e7:91:05:f4:61:25:b6:7a:fe:
                    6d:24:e4:a2:c2:22:d1:e7:c8:8c:d8:cd:a4:72:9a:
                    73:6f:dd:c3:90:db:20:a0:66:15:88:08:a6:6c:7b:
                    b6:f4:cd:c7:a0:c6:96:04:de:f6:dd:31:32:41:3d:
                    92:42:54:3c:a7:56:8d:c7:00:49:55:40:4f:07:25:
                    3b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C6:90:68:35:F9:B3:C7:3E:A1:0C:5A:85:A2:24:D7:0E:58:28:C6
            X509v3 Authority Key Identifier:
                keyid:FB:48:0C:73:35:43:05:CC:40:F8:FA:BA:9E:54:02:EF:37:DE:2E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:42:2c:3d:e7:e5:74:5f:51:3e:be:d7:52:a3:f4:8a:7f:33:
         7b:06:51:c0:9e:a9:df:10:22:7e:7a:ea:fc:1f:07:6b:5f:88:
         a7:88:85:d8:16:5c:4d:96:b2:6e:b6:bf:7f:74:50:84:0a:12:
         0b:51:35:5a:3a:9f:8b:8a:fb:55:6f:e7:d3:6d:51:06:34:cc:
         fc:52:43:21:84:f2:38:94:ce:ce:12:48:23:6b:aa:08:14:18:
         a4:7a:4e:d8:e1:b0:26:c0:1a:39:93:4d:15:ea:ea:c4:db:f3:
         2d:c7:cc:69:a9:a5:cf:96:3f:14:a3:cd:0e:77:6b:70:be:0c:
         f3:46:f1:ff:0a:8a:f2:80:7d:0e:ef:f3:69:46:15:b0:96:4d:
         6a:ee:dd:1b:46:79:7c:16:b6:2c:68:64:5a:cb:a4:7f:46:63:
         dd:f4:c9:06:fb:bd:21:ae:b7:3a:a0:81:21:ab:1b:cb:00:92:
         cd:b5:e0:8b:1c:e1:c3:9f:ea:ae:ee:62:bd:e0:bc:18:0a:34:
         2e:5e:09:52:98:cd:ef:38:1b:f7:2b:7e:8c:27:ae:49:5a:32:
         ab:83:ae:c7:9c:6f:39:d6:8e:b3:48:25:3c:be:ca:0e:68:aa:
         d5:49:9e:fb:c6:55:6d:d8:c4:82:d0:d8:37:59:81:53:a7:f6:
         2f:29:da:88
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZNWig6bxz2FfRTYgX9ryQEnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNDgwYzczMzU0MzA1Y2M0MGY4ZmFiYTllNTQwMmVmMzdk
ZTJlYWEwHhcNMjQxMTIzMDEwMTQ4WhcNMjQxMTI0MDEwMTQ4WjAzMTEwLwYDVQQD
Eyg4ZWM2OTA2ODM1ZjliM2M3M2VhMTBjNWE4NWEyMjRkNzBlNTgyOGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzsD6ei9qf/zKB7/LjsvBG2D1SwI
hdXBE81seqiAtIo2wg8KVCOGCY565PAMN7uKaLQRDJLeVDFXmROfZxcKL3N6+c7W
vopU6rN3VbxqoeZI8XrM1eJ77eum6eABZlQCDdM75DLqX9TvqgE56qjjLJFnTcdN
F0uiDYunISM5fZTfgkV+edfwCh8tAUY8tQs037fLjVdVtfda0cTrW0HFSeFY9UB+
zsZTkTxNbPEfjFAkVTaT5E44ey/nkQX0YSW2ev5tJOSiwiLR58iM2M2kcppzb93D
kNsgoGYViAimbHu29M3HoMaWBN723TEyQT2SQlQ8p1aNxwBJVUBPByU7EwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFI7GkGg1+bPHPqEMWoWiJNcOWCjGMB8GA1UdIwQY
MBaAFPtIDHM1QwXMQPj6up5UAu833i6qMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0wZ01jelZEQmN4QS1QcTZubFFDN3pmZUxxby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvMGRjNDg5LWUwMjgtNGYzNy1hOTcy
LTUwOWY0NGU5MjAyMi8xLzEtMGdNY3pWREJjeEEtUHE2bmxRQzd6ZmVMcW8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M1LzBkYzQ4OS1lMDI4LTRmMzctYTk3Mi01MDlmNDRlOTIw
MjIvMS8xLTBnTWN6VkRCY3hBLVBxNm5sUUM3emZlTHFvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0Is
PefldF9RPr7XUqP0in8zewZRwJ6p3xAifnrq/B8Ha1+Ip4iF2BZcTZaybra/f3RQ
hAoSC1E1Wjqfi4r7VW/n021RBjTM/FJDIYTyOJTOzhJII2uqCBQYpHpO2OGwJsAa
OZNNFerqxNvzLcfMaamlz5Y/FKPNDndrcL4M80bx/wqK8oB9Du/zaUYVsJZNau7d
G0Z5fBa2LGhkWsukf0Zj3fTJBvu9Ia63OqCBIasbywCSzbXgixzhw5/qru5iveC8
GAo0Ll4JUpjN7zgb9yt+jCeuSVoyq4Oux5xvOdaOs0glPL7KDmiq1Ume+8ZVbdjE
gtDYN1mBU6f2LynaiA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:17 2024 by rpki-client on console-fra.rpki-client.org