Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
File:                     4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft (raw, json)
Hash identifier:          3AwbADEimSK8FMvLauS1uwjvaUkep+MnEjixtk73Crk=
Subject key identifier:   9D:36:9B:0D:E5:61:D7:0D:52:B0:6F:2D:12:93:06:F7:FD:0D:26:D8
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Certificate issuer:       /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial:       01935274EC5D7C0DD30BEDA8BC07254E9255
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
Manifest number:          12AA
Signing time:             Fri 22 Nov 2024 06:00:14 +0000
Manifest this update:     Fri 22 Nov 2024 06:00:14 +0000
Manifest next update:     Sat 23 Nov 2024 06:00:14 +0000
Files and hashes:         1: 35f_ExqWlgA30aXvA3fAcJ_qtDA.roa (hash: c0Ivmu64VDJsn1Z/81ir/mTbfoBN5OW8ckBxfhzSoQ8=)
                          2: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl (hash: gUaXuFtSaB1q1EzNkqS5HPPsLomzzBNlAQmTGJEiE14=)
                          3: NPo03G3sJtBXFeeAHF4lFuAvnnU.roa (hash: xNV4V68e+P7LxpO+wlRNYd70f01pUhKR4+uKgV54+9I=)
                          4: RkkqaTwCEAYb60SqH02sjDsrnnE.roa (hash: FloHnO36LuADk+0QGMG2vKSbAHmERKdxjWQT3fc1fzA=)
                          5: X7uupdxUiGMOF725CcHOImVQM78.roa (hash: H5Yc1Yo3xOKH/VY7B/uFOhsTp2GIG87B6TDfyJUNI7U=)
                          6: rDqiDMFQgQtuVDMCw2Oy9-JGfO4.roa (hash: hzOvR1N2kJSP5DdPDaRCa/batoh8kSj3bxC9qXCVYP0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:74:ec:5d:7c:0d:d3:0b:ed:a8:bc:07:25:4e:92:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
        Validity
            Not Before: Nov 22 06:00:14 2024 GMT
            Not After : Nov 23 06:00:14 2024 GMT
        Subject: CN=9d369b0de561d70d52b06f2d129306f7fd0d26d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4e:77:3f:b3:51:2b:a3:24:05:19:29:0d:8c:
                    f1:92:e2:13:d6:c9:fb:e2:64:89:93:dc:67:29:a0:
                    ed:9e:90:b9:07:cf:2c:9b:28:c6:ba:c2:f7:ec:ad:
                    fe:b4:36:f7:d8:ad:75:8a:83:cf:ba:66:15:57:5b:
                    c7:d7:61:75:2e:bb:d7:c2:77:44:df:26:7a:39:89:
                    4e:9b:30:6c:ef:b8:6d:60:a2:ac:8c:9c:d7:b8:86:
                    e5:5d:42:e8:57:7a:20:21:a9:dc:03:50:b7:2e:07:
                    b6:16:54:8e:87:88:8f:37:b5:b9:9b:41:ec:20:3a:
                    45:71:9e:df:67:f7:fa:fd:c1:5f:8b:02:27:be:e0:
                    b8:ea:40:82:4d:0e:31:73:81:61:40:59:a2:85:b9:
                    2f:9b:7d:63:8d:d1:f4:0e:a8:86:d5:81:a9:7a:98:
                    8e:8e:57:c9:95:54:c7:93:07:6d:f5:53:b5:5a:0e:
                    37:27:b1:b8:84:a5:db:42:16:9b:f4:f8:41:d6:76:
                    f4:7b:8f:63:9c:47:8b:e0:c9:0a:7f:be:ad:7c:a2:
                    d9:24:26:06:1e:df:c7:0e:3d:cb:6e:2e:ec:84:fb:
                    1e:da:a0:64:6f:dc:6f:b3:08:1c:44:a6:a8:33:d9:
                    9c:6b:fc:63:5e:b8:bc:74:0f:9f:da:45:ba:8e:fd:
                    e3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:36:9B:0D:E5:61:D7:0D:52:B0:6F:2D:12:93:06:F7:FD:0D:26:D8
            X509v3 Authority Key Identifier:
                keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a4:f9:a6:28:b3:5d:f7:6c:cf:8e:04:e9:59:b1:4f:38:f0:
         e3:2d:b5:de:b6:8e:42:bf:d9:22:49:b3:78:33:88:80:b2:16:
         1e:d3:4f:d3:05:e7:29:ff:a7:2f:03:6e:43:ad:85:11:c2:5c:
         a1:64:1a:13:49:18:ff:b0:1d:ac:4b:29:14:94:9f:e0:50:0d:
         c0:52:33:61:8a:41:7e:99:38:b1:a0:ed:df:7e:3c:bc:ea:cf:
         6f:db:c9:c7:f7:12:e3:72:02:ec:2e:48:53:1b:34:74:50:9d:
         75:6e:bc:9f:69:43:8c:dc:cd:a9:63:ed:40:e6:2b:27:2d:75:
         db:90:f4:67:6c:18:a2:d2:41:65:14:9b:67:91:29:11:8e:8e:
         b5:14:51:d3:e6:0c:34:34:76:19:14:40:ad:f6:6c:6d:08:61:
         7a:8c:aa:f3:e9:82:cf:2e:58:ed:fc:1b:a3:95:54:3b:c3:7a:
         4c:c8:db:04:6b:f4:fe:c5:f4:99:dd:a5:3a:27:74:f0:7d:2a:
         f3:86:bd:81:a4:d6:76:db:c2:00:5f:d8:f1:d0:7a:f9:b8:35:
         58:8e:44:22:7c:91:e8:62:c5:3c:6c:af:71:45:fc:4e:14:a1:
         5b:a2:58:fc:21:8e:a7:01:11:c8:b1:fd:c0:17:da:47:31:5a:
         da:fa:d5:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSdOxdfA3TC+2ovAclTpJVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYjlhM2NlMGY1OTM5MTA4MTljMzI3MWUxZThkMGJkMTM3
MWE2YmUwHhcNMjQxMTIyMDYwMDE0WhcNMjQxMTIzMDYwMDE0WjAzMTEwLwYDVQQD
Eyg5ZDM2OWIwZGU1NjFkNzBkNTJiMDZmMmQxMjkzMDZmN2ZkMGQyNmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU53P7NRK6MkBRkpDYzxkuIT1sn7
4mSJk9xnKaDtnpC5B88smyjGusL37K3+tDb32K11ioPPumYVV1vH12F1LrvXwndE
3yZ6OYlOmzBs77htYKKsjJzXuIblXULoV3ogIancA1C3Lge2FlSOh4iPN7W5m0Hs
IDpFcZ7fZ/f6/cFfiwInvuC46kCCTQ4xc4FhQFmihbkvm31jjdH0DqiG1YGpepiO
jlfJlVTHkwdt9VO1Wg43J7G4hKXbQhab9PhB1nb0e49jnEeL4MkKf76tfKLZJCYG
Ht/HDj3Lbi7shPse2qBkb9xvswgcRKaoM9mca/xjXri8dA+f2kW6jv3j0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ02mw3lYdcNUrBvLRKTBvf9DSbYMB8GA1UdIwQY
MBaAFOG5o84PWTkQgZwyceHo0L0Tcaa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wZDhiZTgtYjRiNC00MzZlLTg2ZTIt
YmE0YzU2ZDhjMGNlLzEvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8wZDhiZTgtYjRiNC00MzZlLTg2ZTItYmE0YzU2ZDhjMGNl
LzEvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKKT5piiz
Xfdsz44E6VmxTzjw4y213raOQr/ZIkmzeDOIgLIWHtNP0wXnKf+nLwNuQ62FEcJc
oWQaE0kY/7AdrEspFJSf4FANwFIzYYpBfpk4saDt3348vOrPb9vJx/cS43IC7C5I
Uxs0dFCddW68n2lDjNzNqWPtQOYrJy1125D0Z2wYotJBZRSbZ5EpEY6OtRRR0+YM
NDR2GRRArfZsbQhheoyq8+mCzy5Y7fwbo5VUO8N6TMjbBGv0/sX0md2lOid08H0q
84a9gaTWdtvCAF/Y8dB6+bg1WI5EInyR6GLFPGyvcUX8ThShW6JY/CGOpwERyLH9
wBfaRzFa2vrV1g==
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:10:06 2024 by rpki-client on console-fra.rpki-client.org