Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
File:                     SHJHQsP1ThebguavjjPg2dL71NU.mft (raw, json)
Hash identifier:          4Qm5o0+qX3v4NLkDityZciVX0noE3Fw00ksdaBEXPns=
Subject key identifier:   D0:25:76:15:04:99:41:9D:65:72:D5:F9:C6:C8:DB:75:90:14:82:AE
Authority key identifier: 48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
Certificate issuer:       /CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Certificate serial:       019234DD93633DF7B698AC80CC4D97FF0E00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
Manifest number:          12DC
Signing time:             Fri 27 Sep 2024 19:03:09 +0000
Manifest this update:     Fri 27 Sep 2024 19:03:09 +0000
Manifest next update:     Sat 28 Sep 2024 19:03:09 +0000
Files and hashes:         1: SHJHQsP1ThebguavjjPg2dL71NU.crl (hash: uhbo+za0CUDD0Y+CRzReTRoJFz0YAMp4ltdp4R/aJxg=)
                          2: e1iIcFWANbDhDShh18PiCeZ-UJs.roa (hash: CYLFcen6/aEVdzDB+AQc3nL7d3Mc3YoZG1i4CjXJyLI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:34:dd:93:63:3d:f7:b6:98:ac:80:cc:4d:97:ff:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
        Validity
            Not Before: Sep 27 19:03:09 2024 GMT
            Not After : Sep 28 19:03:09 2024 GMT
        Subject: CN=d02576150499419d6572d5f9c6c8db75901482ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:47:9b:3f:d9:f3:92:dd:22:a1:15:fe:7f:b4:
                    a9:34:27:aa:d5:a2:55:e7:15:a2:e9:06:a6:fa:9e:
                    41:8a:0e:5c:92:5b:4e:69:11:8f:ce:fc:60:99:28:
                    45:c4:3a:a5:f7:16:d2:26:cf:ac:ef:e8:1e:39:e2:
                    e9:3e:6c:c4:c3:10:8f:c8:d7:eb:e3:97:49:2d:47:
                    e2:ca:5a:95:65:d0:d9:59:75:bd:f7:7d:bb:4d:6d:
                    be:32:ac:f1:77:19:de:36:7a:81:db:2a:89:64:8a:
                    0e:7f:57:9f:5f:f7:e5:95:72:6c:be:d7:a2:0d:64:
                    0e:97:43:32:9e:cf:aa:bc:ca:ce:fc:81:b0:b0:cc:
                    67:ee:62:ea:4a:b7:9b:7a:7b:6b:61:ad:c7:b5:68:
                    7c:3a:49:94:bf:5e:d7:5d:55:6f:07:d8:e2:d7:02:
                    45:69:b5:ed:00:23:d5:4d:db:01:56:f5:89:aa:ce:
                    74:3f:4e:54:df:01:ca:dd:8d:f9:f2:7f:bb:5f:dd:
                    2c:c2:45:92:32:d7:20:d3:70:aa:63:60:3e:80:de:
                    dd:80:24:a1:f4:0c:1e:1e:9a:96:ab:36:11:79:a5:
                    56:f8:ec:bc:91:b7:93:e1:43:6d:3a:4b:fa:71:24:
                    88:20:c3:1b:3c:55:fb:49:3a:f3:00:33:e6:5e:86:
                    7b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:25:76:15:04:99:41:9D:65:72:D5:F9:C6:C8:DB:75:90:14:82:AE
            X509v3 Authority Key Identifier:
                keyid:48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:65:37:f5:16:aa:29:5e:f8:0d:91:ae:3b:79:58:f6:d8:46:
         88:b4:73:fa:ce:c9:9d:83:4a:4a:d3:23:6d:4b:f0:87:92:af:
         55:73:1a:51:f0:11:3a:80:1a:1d:da:c4:0b:28:38:a7:61:cd:
         c7:2b:08:19:3e:38:f4:06:77:2f:2f:68:6a:48:40:e8:ff:e7:
         81:7b:30:2a:13:29:da:0d:60:df:ef:5b:fd:45:5b:c3:52:64:
         e4:ad:d0:d1:e3:29:8b:b2:37:56:a7:dc:06:cd:50:9e:6c:6d:
         4a:08:24:5a:51:26:0f:bb:3e:b5:1b:48:9f:5c:26:d8:d0:e7:
         be:94:ba:ec:63:55:fa:a9:84:45:e1:f4:88:ef:8f:05:39:d9:
         63:dc:0a:37:bb:3b:69:04:91:b5:11:a7:df:05:7a:d9:4f:30:
         14:7a:8d:9a:f4:28:18:94:cf:57:5c:a5:ca:74:3e:3b:84:a4:
         bc:a4:34:29:95:93:e4:4c:79:9d:6d:c6:93:42:df:c9:6f:62:
         58:e3:4f:57:6e:c2:d4:7d:ce:fd:52:ea:41:f5:52:60:04:4b:
         0b:b1:31:d1:c2:3d:4d:d3:91:fc:01:98:b6:48:83:23:2c:9a:
         3c:bd:bd:44:ee:1e:96:d1:1f:51:36:0d:fd:b6:3e:dd:19:ae:
         1d:6d:7b:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI03ZNjPfe2mKyAzE2X/w4AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NzI0NzQyYzNmNTRlMTc5YjgyZTZhZjhlMzNlMGQ5ZDJm
YmQ0ZDUwHhcNMjQwOTI3MTkwMzA5WhcNMjQwOTI4MTkwMzA5WjAzMTEwLwYDVQQD
EyhkMDI1NzYxNTA0OTk0MTlkNjU3MmQ1ZjljNmM4ZGI3NTkwMTQ4MmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskebP9nzkt0ioRX+f7SpNCeq1aJV
5xWi6Qam+p5Big5ckltOaRGPzvxgmShFxDql9xbSJs+s7+geOeLpPmzEwxCPyNfr
45dJLUfiylqVZdDZWXW99327TW2+MqzxdxneNnqB2yqJZIoOf1efX/fllXJsvtei
DWQOl0Myns+qvMrO/IGwsMxn7mLqSrebentrYa3HtWh8OkmUv17XXVVvB9ji1wJF
abXtACPVTdsBVvWJqs50P05U3wHK3Y358n+7X90swkWSMtcg03CqY2A+gN7dgCSh
9AweHpqWqzYReaVW+Oy8kbeT4UNtOkv6cSSIIMMbPFX7STrzADPmXoZ7iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAldhUEmUGdZXLV+cbI23WQFIKuMB8GA1UdIwQY
MBaAFEhyR0LD9U4Xm4Lmr44z4NnS+9TVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0hKSFFzUDFUaGViZ3VhdmpqUGcyZEw3MU5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNGY2ZWUtMDBhOC00YTRhLTg2OGMt
MzVlMDI3ODM2YmEzLzEvU0hKSFFzUDFUaGViZ3VhdmpqUGcyZEw3MU5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jNGY2ZWUtMDBhOC00YTRhLTg2OGMtMzVlMDI3ODM2YmEz
LzEvU0hKSFFzUDFUaGViZ3VhdmpqUGcyZEw3MU5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2U39Raq
KV74DZGuO3lY9thGiLRz+s7JnYNKStMjbUvwh5KvVXMaUfAROoAaHdrECyg4p2HN
xysIGT449AZ3Ly9oakhA6P/ngXswKhMp2g1g3+9b/UVbw1Jk5K3Q0eMpi7I3Vqfc
Bs1QnmxtSggkWlEmD7s+tRtIn1wm2NDnvpS67GNV+qmEReH0iO+PBTnZY9wKN7s7
aQSRtRGn3wV62U8wFHqNmvQoGJTPV1ylynQ+O4SkvKQ0KZWT5Ex5nW3Gk0LfyW9i
WONPV27C1H3O/VLqQfVSYARLC7Ex0cI9TdOR/AGYtkiDIyyaPL29RO4eltEfUTYN
/bY+3RmuHW179Q==
-----END CERTIFICATE-----
Generated at Fri Sep 27 22:14:04 2024 by rpki-client on console-ams.rpki-client.org