Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
File:                     VsihcTx0duAO0rd_2Y_YkzA2XYc.mft (raw, json)
Hash identifier:          +90DmtQmRzOS8JWvuM0Prf4AYwAdBSUWMtBNCG2lsOo=
Subject key identifier:   05:17:99:1D:99:A6:7C:A6:44:DE:72:B3:F6:40:CF:DA:87:0D:09:DD
Authority key identifier: 56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
Certificate issuer:       /CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Certificate serial:       0193553F1EFEAE85C0D26EA4EF1B8063BA7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
Manifest number:          1374
Signing time:             Fri 22 Nov 2024 19:00:20 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:20 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:20 +0000
Files and hashes:         1: 1-syBacrDkNtm4raZphc0D-KPtYg.roa (hash: oCnM5SV5wEpzxcBs7L/pXdosl4Y14Fl1VQHaejHfRU0=)
                          2: 6K_qLhpSQxpeIk1YtdGv_X3U2Tg.roa (hash: RyGcAynXiPfKoh8TzwYjALhgv/uULsVOUmUsqTi2lpo=)
                          3: Qzw3QMKklDVTV524qlcJCbTkjXY.roa (hash: QKVSwwGLYqYZ4oA09EQdxh6e4vjhtWOIa6EXv/vGtBA=)
                          4: TatXbfw9QQ8wNOuK4aKxqejxdVo.roa (hash: 2StpZ4EHrplGHPpKXgWk4RNLcp+XmG/Q+u05KR45N8s=)
                          5: VsihcTx0duAO0rd_2Y_YkzA2XYc.crl (hash: USvshf8eHoQ7+LoTW977L3pX2Owc/k1SoJdJ+efk+d0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:1e:fe:ae:85:c0:d2:6e:a4:ef:1b:80:63:ba:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
        Validity
            Not Before: Nov 22 19:00:20 2024 GMT
            Not After : Nov 23 19:00:20 2024 GMT
        Subject: CN=0517991d99a67ca644de72b3f640cfda870d09dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:61:35:64:7a:86:16:71:6c:fc:d2:56:7b:9e:
                    7c:b4:9d:83:00:a0:b0:fd:4c:be:5b:26:a2:ac:eb:
                    ac:7b:8b:2f:ea:bc:d0:d5:70:c7:98:8b:a9:52:26:
                    c9:8a:76:19:86:2c:cf:be:95:f2:b6:65:f7:60:e5:
                    d4:0f:bb:29:2d:91:d7:72:7f:02:99:8b:70:1f:53:
                    d4:d2:6e:e2:b2:c7:a9:e2:4e:e8:fd:05:f2:6a:8d:
                    f1:23:88:0f:a1:9f:89:8f:70:38:9a:55:5d:34:cd:
                    a0:07:bb:b3:64:ec:12:c3:a0:ae:26:89:fb:bc:77:
                    70:d4:7a:90:76:d0:02:4a:54:08:a7:62:fe:ff:92:
                    44:37:e7:93:8d:d1:1b:7b:f0:da:c4:d7:36:9e:3a:
                    a9:5b:7f:22:39:78:c4:1d:0b:08:a2:fe:d7:75:2d:
                    7c:04:be:47:a2:8a:02:31:c5:8f:9c:83:84:f6:18:
                    b3:58:ab:50:2c:86:0b:6d:01:04:e0:b7:d4:d6:33:
                    cc:98:8c:b7:56:50:4e:4d:1b:1f:f4:74:66:c1:a5:
                    2e:24:9e:0d:79:48:01:1d:a5:18:3a:16:f5:66:1b:
                    ae:a9:7f:40:86:f7:be:28:b1:6f:3b:ee:29:c6:a4:
                    fd:95:6a:79:85:cb:24:98:a1:f3:3a:e0:2a:f1:40:
                    d5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:17:99:1D:99:A6:7C:A6:44:DE:72:B3:F6:40:CF:DA:87:0D:09:DD
            X509v3 Authority Key Identifier:
                keyid:56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:cc:1f:81:bb:d8:77:26:59:68:3d:02:4b:f4:2e:39:2a:fb:
         6d:bf:cb:1a:44:72:d4:32:a9:3f:53:9b:39:a2:e6:e8:b4:7e:
         4c:58:56:c3:b5:bf:40:b2:4c:09:ca:9d:15:ca:08:7e:8f:3b:
         ce:ba:ce:74:1a:cd:7d:0f:03:8c:8f:28:bb:cb:b9:af:c7:33:
         72:76:ac:fb:d6:05:22:2a:53:b9:99:1a:63:8b:29:4f:32:18:
         57:e3:4f:4f:f4:76:1c:d0:4f:f1:0c:f5:82:f1:64:c1:1f:91:
         87:e2:a9:ab:57:89:4e:11:88:bd:1b:c7:1b:97:ef:80:0b:0c:
         f5:f1:37:8a:7f:5e:4a:25:d0:f5:94:55:70:11:c6:b4:37:f4:
         68:b7:16:f4:d9:e9:9f:5c:fa:bc:ec:bb:41:79:1c:7b:04:38:
         57:f9:29:e4:ee:4f:52:be:76:56:26:a3:50:99:7c:10:39:88:
         67:9b:4a:ff:91:5b:5b:23:2a:9c:ae:02:60:f1:62:a2:5c:47:
         4f:63:b7:5c:47:16:e3:37:f3:35:fd:7e:d8:b2:e6:8e:c4:58:
         cb:13:e2:34:38:6c:fc:50:d5:fb:57:6b:c7:72:56:d3:29:46:
         0d:dc:bc:81:8d:52:ea:4e:c4:4b:54:6a:0e:4c:0d:5d:27:26:
         64:a6:ad:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVPx7+roXA0m6k7xuAY7p6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YzhhMTcxM2M3NDc2ZTAwZWQyYjc3ZmQ5OGZkODkzMzAz
NjVkODcwHhcNMjQxMTIyMTkwMDIwWhcNMjQxMTIzMTkwMDIwWjAzMTEwLwYDVQQD
EygwNTE3OTkxZDk5YTY3Y2E2NDRkZTcyYjNmNjQwY2ZkYTg3MGQwOWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2E1ZHqGFnFs/NJWe558tJ2DAKCw
/Uy+WyairOuse4sv6rzQ1XDHmIupUibJinYZhizPvpXytmX3YOXUD7spLZHXcn8C
mYtwH1PU0m7issep4k7o/QXyao3xI4gPoZ+Jj3A4mlVdNM2gB7uzZOwSw6CuJon7
vHdw1HqQdtACSlQIp2L+/5JEN+eTjdEbe/DaxNc2njqpW38iOXjEHQsIov7XdS18
BL5HoooCMcWPnIOE9hizWKtQLIYLbQEE4LfU1jPMmIy3VlBOTRsf9HRmwaUuJJ4N
eUgBHaUYOhb1ZhuuqX9Ahve+KLFvO+4pxqT9lWp5hcskmKHzOuAq8UDV+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAUXmR2ZpnymRN5ys/ZAz9qHDQndMB8GA1UdIwQY
MBaAFFbIoXE8dHbgDtK3f9mP2JMwNl2HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnNpaGNUeDBkdUFPMHJkXzJZX1lrekEyWFljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8yM2Q1MjUtODI5Ni00ZjljLTlkZTQt
OTFlMzJjNTE3MTUyLzEvVnNpaGNUeDBkdUFPMHJkXzJZX1lrekEyWFljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8yM2Q1MjUtODI5Ni00ZjljLTlkZTQtOTFlMzJjNTE3MTUy
LzEvVnNpaGNUeDBkdUFPMHJkXzJZX1lrekEyWFljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOMwfgbvY
dyZZaD0CS/QuOSr7bb/LGkRy1DKpP1ObOaLm6LR+TFhWw7W/QLJMCcqdFcoIfo87
zrrOdBrNfQ8DjI8ou8u5r8czcnas+9YFIipTuZkaY4spTzIYV+NPT/R2HNBP8Qz1
gvFkwR+Rh+Kpq1eJThGIvRvHG5fvgAsM9fE3in9eSiXQ9ZRVcBHGtDf0aLcW9Nnp
n1z6vOy7QXkcewQ4V/kp5O5PUr52ViajUJl8EDmIZ5tK/5FbWyMqnK4CYPFiolxH
T2O3XEcW4zfzNf1+2LLmjsRYyxPiNDhs/FDV+1drx3JW0ylGDdy8gY1S6k7ES1Rq
DkwNXScmZKatzw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:23:06 2024 by rpki-client on console-ams.rpki-client.org