Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
File:                     dYeEkqBny1o-35aVpv0lifMnOqc.mft (raw, json)
Hash identifier:          bXpEI+M20ZuWUmaa9RX0+rX+Q44bYnEjLDwshCktDmk=
Subject key identifier:   1C:87:70:AE:B2:96:43:69:8D:F9:D6:A0:95:52:52:7C:92:08:57:96
Authority key identifier: 75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
Certificate issuer:       /CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Certificate serial:       019356F73818D955A4E6FCD53B947DD9743B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
Manifest number:          0329
Signing time:             Sat 23 Nov 2024 03:01:02 +0000
Manifest this update:     Sat 23 Nov 2024 03:01:02 +0000
Manifest next update:     Sun 24 Nov 2024 03:01:02 +0000
Files and hashes:         1: VMLmv6_KQOMYqpT9GJsdJ_JRNnk.roa (hash: v1uGCoEjm/ouB+1ArHuT5FJOKFxID208UwFTeKOmFrU=)
                          2: dYeEkqBny1o-35aVpv0lifMnOqc.crl (hash: jcny2UN7/VzhgfrvkhSVp1w7QnPKoKmj8cK2y2CiWTc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:38:18:d9:55:a4:e6:fc:d5:3b:94:7d:d9:74:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
        Validity
            Not Before: Nov 23 03:01:02 2024 GMT
            Not After : Nov 24 03:01:02 2024 GMT
        Subject: CN=1c8770aeb29643698df9d6a09552527c92085796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d2:b3:8d:a7:4b:a6:2c:2b:71:c6:04:b9:29:
                    8e:78:ca:15:9b:98:9c:3a:ce:f9:2e:c7:7d:3c:6c:
                    d1:c7:0d:55:0f:9c:bd:40:ee:6a:1e:98:53:ed:7e:
                    89:1c:de:12:1f:49:6b:38:04:fe:44:42:b4:70:9b:
                    b7:20:c9:b6:49:e9:f0:08:86:cc:2a:b3:96:70:80:
                    c6:6f:ee:a7:3a:b5:06:ea:c0:02:e2:92:9e:94:65:
                    02:ec:af:87:b8:b0:1b:09:82:07:5a:7e:80:83:03:
                    f4:07:53:c4:47:7c:1a:b6:69:69:9f:65:48:f0:fe:
                    b7:f5:c8:2b:a2:ec:71:5f:8e:63:c6:a8:76:92:91:
                    2f:f2:ad:63:5c:90:c1:97:cd:87:48:63:ca:a7:31:
                    f2:8f:db:b1:87:ea:0a:b3:d6:e4:83:10:95:da:86:
                    3b:b9:25:a6:1f:ac:ec:40:2b:02:87:ad:f7:54:f0:
                    4b:75:f2:17:48:6f:f3:3f:a6:82:e3:ce:8f:02:93:
                    a8:9d:13:75:e4:b7:7d:d3:36:b5:a2:89:c4:39:b0:
                    85:57:d9:75:63:13:51:cf:e1:dd:82:6a:8b:2f:f3:
                    0c:6f:83:82:66:98:4a:2b:96:24:dc:17:6e:76:26:
                    dc:10:77:55:53:06:1d:f2:20:a0:f7:fd:fc:de:9a:
                    09:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:87:70:AE:B2:96:43:69:8D:F9:D6:A0:95:52:52:7C:92:08:57:96
            X509v3 Authority Key Identifier:
                keyid:75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:7b:f4:7c:57:40:47:fd:6f:46:e3:6c:c0:d0:9d:69:23:a6:
         f6:0f:80:44:a4:d8:7f:6a:2e:5e:63:f0:4a:07:b0:92:de:73:
         1b:d5:2c:50:29:56:96:93:61:bd:f7:a1:5f:dd:f5:a6:b5:b7:
         f0:41:a1:dd:8a:d4:d5:cb:70:c6:11:9b:94:65:dd:69:67:2a:
         0f:b9:eb:a8:49:62:27:ab:2b:45:de:3a:df:91:bb:e7:46:b5:
         05:1d:1f:74:f0:90:67:14:02:79:94:bd:59:1c:99:4b:b8:e0:
         92:ca:5a:cc:3b:86:d1:f3:e7:bc:bd:e9:96:ce:04:c4:10:1b:
         d4:65:16:98:c1:f3:1d:06:b7:a4:fa:a9:02:6f:1b:4d:b4:c9:
         3b:ee:8b:39:d5:47:36:f3:ee:93:a7:81:20:a2:af:a3:f2:ed:
         2e:28:a1:42:7f:f9:bf:0e:7c:6e:af:62:d6:d4:73:b0:2f:1a:
         fa:78:0b:55:63:22:7d:18:c3:2d:d9:3c:4e:55:32:1e:4e:68:
         8c:7c:f1:89:ca:a5:4c:71:67:1d:0e:8c:ec:5f:bb:9a:3e:7d:
         1f:e5:ee:26:93:a5:5d:02:88:44:2d:48:e7:cd:6e:c4:77:21:
         62:0f:3c:2b:1f:a9:dc:4e:92:25:84:0f:ff:f1:77:d4:d7:7d:
         fa:ee:0f:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9zgY2VWk5vzVO5R92XQ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ODc4NDkyYTA2N2NiNWEzZWRmOTY5NWE2ZmQyNTg5ZjMy
NzNhYTcwHhcNMjQxMTIzMDMwMTAyWhcNMjQxMTI0MDMwMTAyWjAzMTEwLwYDVQQD
EygxYzg3NzBhZWIyOTY0MzY5OGRmOWQ2YTA5NTUyNTI3YzkyMDg1Nzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9KzjadLpiwrccYEuSmOeMoVm5ic
Os75Lsd9PGzRxw1VD5y9QO5qHphT7X6JHN4SH0lrOAT+REK0cJu3IMm2SenwCIbM
KrOWcIDGb+6nOrUG6sAC4pKelGUC7K+HuLAbCYIHWn6AgwP0B1PER3watmlpn2VI
8P639cgrouxxX45jxqh2kpEv8q1jXJDBl82HSGPKpzHyj9uxh+oKs9bkgxCV2oY7
uSWmH6zsQCsCh633VPBLdfIXSG/zP6aC486PApOonRN15Ld90za1oonEObCFV9l1
YxNRz+HdgmqLL/MMb4OCZphKK5Yk3BdudibcEHdVUwYd8iCg9/383poJXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByHcK6ylkNpjfnWoJVSUnySCFeWMB8GA1UdIwQY
MBaAFHWHhJKgZ8taPt+Wlab9JYnzJzqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFllRWtxQm55MW8tMzVhVnB2MGxpZk1uT3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mMWJlNzctZTg3OC00NmU4LWE4NzUt
ZDA5ZmVlMDljY2IxLzEvZFllRWtxQm55MW8tMzVhVnB2MGxpZk1uT3FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9mMWJlNzctZTg3OC00NmU4LWE4NzUtZDA5ZmVlMDljY2Ix
LzEvZFllRWtxQm55MW8tMzVhVnB2MGxpZk1uT3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHv0fFdA
R/1vRuNswNCdaSOm9g+ARKTYf2ouXmPwSgewkt5zG9UsUClWlpNhvfehX931prW3
8EGh3YrU1ctwxhGblGXdaWcqD7nrqEliJ6srRd4635G750a1BR0fdPCQZxQCeZS9
WRyZS7jgkspazDuG0fPnvL3pls4ExBAb1GUWmMHzHQa3pPqpAm8bTbTJO+6LOdVH
NvPuk6eBIKKvo/LtLiihQn/5vw58bq9i1tRzsC8a+ngLVWMifRjDLdk8TlUyHk5o
jHzxicqlTHFnHQ6M7F+7mj59H+XuJpOlXQKIRC1I581uxHchYg88Kx+p3E6SJYQP
//F31Nd9+u4PbA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:46:17 2024 by rpki-client on console-ams.rpki-client.org