Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
File:                     EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft (raw, json)
Hash identifier:          y8oKYPqSMtVF+bcINh1d+NNQwA/65ivtInorywmLQbg=
Subject key identifier:   A6:62:21:B3:4E:BB:3E:9C:BE:72:7A:69:3A:6A:25:4D:10:29:1E:04
Authority key identifier: 12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
Certificate issuer:       /CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Certificate serial:       019355082CA7D928487E65D1E47B90CDAE56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
Manifest number:          0569
Signing time:             Fri 22 Nov 2024 18:00:19 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:19 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:19 +0000
Files and hashes:         1: 2W9zvahFVfeQWPDmSiCnMj2P9jc.roa (hash: rV/wHq75YyvUq4eT9+GFA3dvxfhyBdTYodvgQcV/YRY=)
                          2: EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl (hash: 5cOk/hyXFhUBeSuqRBZD+nXT0pm02EjyVKKkv5jXhtc=)
                          3: mN5HvgHDSMsjQ3JQeXiqxNVw__Y.roa (hash: GzXi/yty6xfitFLpzCWCIzkQ50z5BlIdwFr66DnjJcQ=)
                          4: wYE1og_u5MCFzJ0CIxwfbIqrxPw.roa (hash: pWoha6DhUNA6GLnOPqyABvS6X7LGxB5GtKWenOmr9m0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:2c:a7:d9:28:48:7e:65:d1:e4:7b:90:cd:ae:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
        Validity
            Not Before: Nov 22 18:00:19 2024 GMT
            Not After : Nov 23 18:00:19 2024 GMT
        Subject: CN=a66221b34ebb3e9cbe727a693a6a254d10291e04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:80:74:aa:65:97:f5:32:06:f7:06:47:e1:ff:
                    d9:d6:50:71:78:ee:f8:32:c4:47:aa:ac:6b:d4:26:
                    c2:b7:da:6a:a8:42:64:53:f2:e5:f9:25:fa:f6:b8:
                    87:44:a0:b4:28:65:f3:77:08:ff:8a:3a:73:35:44:
                    da:50:dc:29:da:97:2b:a8:47:1f:77:4b:1d:43:48:
                    2a:37:c2:33:05:6d:c7:80:0e:b2:d6:5e:31:14:78:
                    37:45:d5:26:89:59:ae:75:08:6d:24:17:eb:f1:c7:
                    ed:0c:82:61:18:a3:b3:23:cf:f0:71:f8:bb:f1:52:
                    7f:8c:26:bd:e8:64:44:60:f8:18:71:06:45:a6:18:
                    db:d5:bc:66:4a:5e:8a:d8:7e:d2:f8:72:6d:0f:fd:
                    87:27:4a:3d:37:df:eb:77:87:0f:25:99:39:cd:5a:
                    ab:d0:1b:cd:2a:cd:6e:78:ac:18:72:81:3b:11:d0:
                    34:1a:ef:79:b6:23:82:ca:e5:91:47:fa:8d:6f:6e:
                    91:d2:b2:95:47:9f:90:52:fc:3f:f5:9c:50:eb:a7:
                    65:5a:18:fe:01:8a:17:d9:a2:07:19:64:6f:dc:26:
                    20:88:ca:04:87:54:92:47:f9:d8:15:8a:9b:1c:1f:
                    18:dd:6e:17:e8:8b:69:07:bb:f7:50:f6:f0:ae:1d:
                    4d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:62:21:B3:4E:BB:3E:9C:BE:72:7A:69:3A:6A:25:4D:10:29:1E:04
            X509v3 Authority Key Identifier:
                keyid:12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f3:f8:16:e1:04:79:99:b5:30:f6:f2:38:5d:31:d5:77:7e:
         63:92:9b:da:ba:26:47:af:f1:17:f6:df:af:18:7f:f7:a7:e5:
         0a:19:99:53:f1:50:ec:39:3a:a5:b3:6d:fa:f5:da:c9:5d:1e:
         11:fb:8f:26:7a:75:e6:83:db:37:63:d4:fb:fa:9c:5a:2a:a8:
         41:f8:f4:50:b3:98:82:1f:94:74:13:fe:55:32:1e:c8:ca:5f:
         45:20:ec:12:6a:ff:ea:18:17:34:2d:5c:2e:e8:b1:44:61:1c:
         5f:d3:82:44:54:53:8f:0f:08:b8:9b:0b:ed:10:dd:c6:60:bc:
         75:da:d3:4a:3a:07:ad:7b:c0:53:e5:b3:4b:d5:29:95:15:37:
         de:b3:01:6d:ed:8f:29:d6:c5:e7:04:5b:74:8d:af:70:ae:e6:
         0c:ec:8f:81:df:69:1f:96:12:ae:c2:a9:e6:20:d3:9a:69:56:
         de:5a:e7:ec:a8:c0:19:b3:19:4c:b4:77:e5:6c:c2:3d:b6:ef:
         00:df:4b:cc:38:a0:e6:e9:5b:2f:bc:05:7f:60:34:b1:61:bd:
         39:75:b2:40:27:dc:7e:c9:e9:37:6f:9e:68:b2:9c:cb:9e:f0:
         7c:5f:ab:f2:7b:7b:d9:14:14:11:e7:55:50:0a:b0:53:a9:60:
         f8:66:bf:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVCCyn2ShIfmXR5HuQza5WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyOTQ2MmQ0NWI4YWI5NWQ0YzM1YzQwMjY1YjMxYjUyYmYx
ZThkYmQwHhcNMjQxMTIyMTgwMDE5WhcNMjQxMTIzMTgwMDE5WjAzMTEwLwYDVQQD
EyhhNjYyMjFiMzRlYmIzZTljYmU3MjdhNjkzYTZhMjU0ZDEwMjkxZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4B0qmWX9TIG9wZH4f/Z1lBxeO74
MsRHqqxr1CbCt9pqqEJkU/Ll+SX69riHRKC0KGXzdwj/ijpzNUTaUNwp2pcrqEcf
d0sdQ0gqN8IzBW3HgA6y1l4xFHg3RdUmiVmudQhtJBfr8cftDIJhGKOzI8/wcfi7
8VJ/jCa96GREYPgYcQZFphjb1bxmSl6K2H7S+HJtD/2HJ0o9N9/rd4cPJZk5zVqr
0BvNKs1ueKwYcoE7EdA0Gu95tiOCyuWRR/qNb26R0rKVR5+QUvw/9ZxQ66dlWhj+
AYoX2aIHGWRv3CYgiMoEh1SSR/nYFYqbHB8Y3W4X6ItpB7v3UPbwrh1NvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZiIbNOuz6cvnJ6aTpqJU0QKR4EMB8GA1UdIwQY
MBaAFBKUYtRbirldTDXEAmWzG1K/Ho29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXBSaTFGdUt1VjFNTmNRQ1piTWJVcjhlamIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85OTk1MDktYmRjMC00ZTA3LTg3NzQt
M2EzODkzMzJmNzlmLzEvRXBSaTFGdUt1VjFNTmNRQ1piTWJVcjhlamIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85OTk1MDktYmRjMC00ZTA3LTg3NzQtM2EzODkzMzJmNzlm
LzEvRXBSaTFGdUt1VjFNTmNRQ1piTWJVcjhlamIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfP4FuEE
eZm1MPbyOF0x1Xd+Y5Kb2romR6/xF/bfrxh/96flChmZU/FQ7Dk6pbNt+vXayV0e
EfuPJnp15oPbN2PU+/qcWiqoQfj0ULOYgh+UdBP+VTIeyMpfRSDsEmr/6hgXNC1c
LuixRGEcX9OCRFRTjw8IuJsL7RDdxmC8ddrTSjoHrXvAU+WzS9UplRU33rMBbe2P
KdbF5wRbdI2vcK7mDOyPgd9pH5YSrsKp5iDTmmlW3lrn7KjAGbMZTLR35WzCPbbv
AN9LzDig5ulbL7wFf2A0sWG9OXWyQCfcfsnpN2+eaLKcy57wfF+r8nt72RQUEedV
UAqwU6lg+Ga/tw==
-----END CERTIFICATE-----