Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
File:                     wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft (raw, json)
Hash identifier:          6SKJCmJd6CkwDDg8J3rCxYlGnQI/LZYi8Pfz/5IBq+Y=
Subject key identifier:   8E:8F:ED:20:BF:36:04:BA:06:32:84:E7:B6:67:ED:BB:75:E3:26:51
Authority key identifier: C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C
Certificate issuer:       /CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
Certificate serial:       0193622010456B53B90CF71F20E7838E5500
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
Manifest number:          0699
Signing time:             Mon 25 Nov 2024 07:01:28 +0000
Manifest this update:     Mon 25 Nov 2024 07:01:28 +0000
Manifest next update:     Tue 26 Nov 2024 07:01:28 +0000
Files and hashes:         1: rl0hgpA5a1Zt5MsTczMo1rcn55E.roa (hash: rqPI/OPG7m+IXuK5Yny2ngJR2NX6Aoygp35Y9zLWs8k=)
                          2: wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl (hash: ao8HdQAbm7SacBndR9d6Wmtt/9oJ/L7sSROj6TrHAEo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 07:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:62:20:10:45:6b:53:b9:0c:f7:1f:20:e7:83:8e:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
        Validity
            Not Before: Nov 25 07:01:28 2024 GMT
            Not After : Nov 26 07:01:28 2024 GMT
        Subject: CN=8e8fed20bf3604ba063284e7b667edbb75e32651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a0:d7:7e:6e:36:f5:b7:be:b9:7d:76:55:f2:
                    92:db:cb:b3:c1:a1:f4:8d:a9:a9:03:0b:aa:98:6c:
                    72:23:45:55:0a:f1:e3:b2:4e:b2:76:de:48:35:95:
                    14:5a:d7:e2:38:17:e3:61:04:60:6a:d2:3b:73:63:
                    21:1a:bd:83:f4:f6:ce:9e:2f:ae:2b:01:72:23:45:
                    df:8d:51:ee:2a:e7:e6:9c:0b:81:ed:ec:6e:92:00:
                    1a:7f:52:94:32:07:d1:b7:10:c8:80:03:9c:2e:40:
                    06:1b:5c:3f:a1:4b:3e:51:28:c6:ac:dd:16:b0:00:
                    39:ea:fb:b5:90:c6:ee:35:82:c8:87:1e:6a:23:97:
                    b1:d8:63:cf:eb:fd:c6:bd:a2:fc:08:3a:d4:64:67:
                    92:1a:40:68:3e:4d:6b:a6:95:3d:16:0a:56:f6:47:
                    fd:5c:1c:f7:ea:76:41:3f:04:2c:fc:f7:ad:cc:16:
                    25:49:c0:54:4c:75:8b:5b:73:d5:79:60:36:1a:03:
                    de:f1:e3:ad:d8:67:bf:16:00:55:cc:dd:ba:aa:08:
                    a6:4b:a6:90:7f:f1:dc:a3:91:af:e5:59:1c:66:0f:
                    4b:ff:b5:67:a2:be:ee:39:72:2e:8a:d7:f3:2b:11:
                    c8:14:e2:70:df:4b:a3:b9:39:9f:45:60:1f:4f:4d:
                    2b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8F:ED:20:BF:36:04:BA:06:32:84:E7:B6:67:ED:BB:75:E3:26:51
            X509v3 Authority Key Identifier:
                keyid:C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:b6:e0:9a:d7:75:89:64:14:dc:55:c4:58:9b:43:a4:d7:a9:
         1a:2c:4d:c5:90:f2:a9:be:7d:b7:08:10:ca:90:b6:de:7d:cb:
         cc:67:69:ad:87:0a:46:b7:d7:88:c4:d5:a1:f8:5d:0a:c7:69:
         76:be:d6:02:7e:9d:fa:7e:94:fc:68:2f:b3:18:f0:b0:ea:f3:
         59:ab:cd:27:10:ae:e5:10:15:4f:7c:53:f0:50:45:75:8e:8e:
         3b:96:25:cb:06:14:57:5d:92:24:34:56:34:8a:5e:4c:c0:97:
         dd:18:48:54:b7:f4:de:b8:ba:c5:ef:7d:5e:e3:0f:fa:7f:1c:
         d0:e5:49:32:d6:af:a7:47:ea:4e:0c:02:7e:ab:35:ac:f3:04:
         3c:9a:62:39:e4:03:4c:80:39:7d:51:83:75:29:5a:00:6a:80:
         15:f0:72:ec:89:d3:06:f5:14:51:f7:77:4f:fe:84:53:52:05:
         42:c0:67:11:3e:84:d7:12:53:d2:91:33:86:05:bc:e2:98:60:
         d6:55:15:ca:92:7c:dc:48:99:3e:f7:38:6d:38:89:2a:5e:2c:
         22:db:01:2d:e6:67:ef:08:38:ca:fc:24:33:e7:99:72:4c:80:
         d4:e4:74:99:30:c3:d0:3c:38:42:aa:f6:93:b0:b8:37:2f:a4:
         cb:bc:27:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNiIBBFa1O5DPcfIOeDjlUAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMWUzMmQwNDdjNWQxYjllMjY3NzBjMzg0MDMwNGNmNjk3
MWRlMWMwHhcNMjQxMTI1MDcwMTI4WhcNMjQxMTI2MDcwMTI4WjAzMTEwLwYDVQQD
Eyg4ZThmZWQyMGJmMzYwNGJhMDYzMjg0ZTdiNjY3ZWRiYjc1ZTMyNjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqDXfm429be+uX12VfKS28uzwaH0
jampAwuqmGxyI0VVCvHjsk6ydt5INZUUWtfiOBfjYQRgatI7c2MhGr2D9PbOni+u
KwFyI0XfjVHuKufmnAuB7exukgAaf1KUMgfRtxDIgAOcLkAGG1w/oUs+USjGrN0W
sAA56vu1kMbuNYLIhx5qI5ex2GPP6/3GvaL8CDrUZGeSGkBoPk1rppU9FgpW9kf9
XBz36nZBPwQs/PetzBYlScBUTHWLW3PVeWA2GgPe8eOt2Ge/FgBVzN26qgimS6aQ
f/Hco5Gv5VkcZg9L/7Vnor7uOXIuitfzKxHIFOJw30ujuTmfRWAfT00rrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6P7SC/NgS6BjKE57Zn7bt14yZRMB8GA1UdIwQY
MBaAFMIeMtBHxdG54mdww4QDBM9pcd4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2g0eTBFZkYwYm5pWjNERGhBTUV6Mmx4M2h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8zMDBiZDQtMDM1Ni00YzQ0LTgzY2Yt
MzhlZmNmZGM0MTdiLzEvd2g0eTBFZkYwYm5pWjNERGhBTUV6Mmx4M2h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8zMDBiZDQtMDM1Ni00YzQ0LTgzY2YtMzhlZmNmZGM0MTdi
LzEvd2g0eTBFZkYwYm5pWjNERGhBTUV6Mmx4M2h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfrbgmtd1
iWQU3FXEWJtDpNepGixNxZDyqb59twgQypC23n3LzGdprYcKRrfXiMTVofhdCsdp
dr7WAn6d+n6U/GgvsxjwsOrzWavNJxCu5RAVT3xT8FBFdY6OO5YlywYUV12SJDRW
NIpeTMCX3RhIVLf03ri6xe99XuMP+n8c0OVJMtavp0fqTgwCfqs1rPMEPJpiOeQD
TIA5fVGDdSlaAGqAFfBy7InTBvUUUfd3T/6EU1IFQsBnET6E1xJT0pEzhgW84phg
1lUVypJ83EiZPvc4bTiJKl4sItsBLeZn7wg4yvwkM+eZckyA1OR0mTDD0Dw4Qqr2
k7C4Ny+ky7wnAQ==
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:34:56 2024 by rpki-client on console-fra.rpki-client.org