Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
File:                     IEmVw2J_eqzf4jkV5ELj05AGMa8.mft (raw, json)
Hash identifier:          GXs+YPEQuRSFmgDStouK1li9yb/3GzZCpMUIJ5lcHmc=
Subject key identifier:   7B:4D:3B:3A:88:6F:40:E0:4E:16:6A:A6:F8:DE:AD:34:03:F8:6B:35
Authority key identifier: 20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF
Certificate issuer:       /CN=204995c3627f7aacdfe23915e442e3d3900631af
Certificate serial:       01935878655EFA40B67A796304FF68D87978
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
Manifest number:          041F
Signing time:             Sat 23 Nov 2024 10:01:45 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:45 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:45 +0000
Files and hashes:         1: IEmVw2J_eqzf4jkV5ELj05AGMa8.crl (hash: KphfXG9Ay37Bo3+/xl6H0YCXnYdUfH/8l3r/+gIE9gI=)
                          2: veURvF7oE_Bmf9TBFcHPJO48eHM.roa (hash: uxDLH/PBZ9Keh7ug0a8BRfti/ehWGZZcOrG5kyNbILI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:65:5e:fa:40:b6:7a:79:63:04:ff:68:d8:79:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=204995c3627f7aacdfe23915e442e3d3900631af
        Validity
            Not Before: Nov 23 10:01:45 2024 GMT
            Not After : Nov 24 10:01:45 2024 GMT
        Subject: CN=7b4d3b3a886f40e04e166aa6f8dead3403f86b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:48:bc:cb:44:0f:de:7e:06:72:f2:74:c5:be:
                    38:66:16:8f:1e:26:d1:7d:d2:a6:30:ed:ad:40:a7:
                    4c:25:57:38:6c:2d:46:7c:f1:43:a6:6f:ac:8b:12:
                    70:21:40:28:0b:c1:8c:23:8e:d7:a3:d2:8a:e1:37:
                    f5:e6:f8:cb:62:5d:dc:07:a1:61:cd:55:7f:b5:83:
                    ea:e0:60:01:f6:55:ec:bf:c5:c6:f7:4f:3e:7f:01:
                    4d:fe:be:fd:f5:5b:dd:47:26:a6:3d:76:39:ca:73:
                    14:e9:0b:b9:41:2b:9f:26:70:40:b7:72:f5:c7:81:
                    d9:1d:f6:30:4d:29:51:34:86:1f:8a:49:c4:d3:42:
                    79:6c:8e:ff:5f:fa:8e:23:b6:23:22:ef:e5:8d:a4:
                    32:71:63:a3:4d:22:db:4d:b1:17:a4:7a:21:7e:aa:
                    0e:b3:f9:23:2e:3f:03:e8:c3:a5:96:cf:ad:f6:5e:
                    27:5a:72:7f:18:00:71:6a:82:7c:98:cc:91:bf:0f:
                    6c:02:5a:b2:08:67:bb:0b:d3:bc:c6:71:ea:f8:c9:
                    0b:c8:58:04:73:ac:3e:5b:57:95:39:4a:01:a4:30:
                    4c:54:e2:98:ca:8c:39:c4:9f:4c:b5:ab:54:a0:15:
                    e1:b5:21:c3:30:fa:3c:15:12:9e:d0:25:7c:cf:5d:
                    ed:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4D:3B:3A:88:6F:40:E0:4E:16:6A:A6:F8:DE:AD:34:03:F8:6B:35
            X509v3 Authority Key Identifier:
                keyid:20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:1f:2c:56:31:b2:b4:f5:09:9a:7f:25:8c:cf:88:f1:db:62:
         7b:83:08:90:63:5a:a3:7e:78:36:28:a1:b7:07:32:c2:e6:62:
         42:62:6f:91:89:99:14:5f:69:db:58:85:3c:27:8d:ff:35:f9:
         3d:1b:ca:91:4c:65:98:30:a7:0e:b4:5b:ca:4f:6d:92:94:fa:
         51:37:28:b4:db:0f:41:86:e3:c2:cc:69:5a:d8:71:02:fb:a9:
         aa:c4:c2:9f:f9:3a:b8:cf:f2:89:4f:d8:ad:95:1d:52:0f:a0:
         ae:97:25:4b:28:34:5c:20:4e:b4:67:4b:cf:97:66:0e:d0:1d:
         1d:bf:3b:a3:fe:9b:58:04:88:7a:d9:26:dc:dd:32:e6:2a:de:
         74:94:6a:50:5f:73:27:48:50:cf:2b:8f:02:27:b6:5f:27:04:
         b9:26:69:47:39:ed:e8:4f:30:18:75:9b:17:1f:4e:52:dd:6a:
         80:94:8c:08:2c:27:b4:ad:e6:3f:1c:c0:da:c7:ba:b0:c3:66:
         dd:de:12:2b:57:8f:90:56:82:8f:ca:63:f2:5d:c2:99:65:95:
         3f:21:8a:e6:60:be:e1:28:20:6f:84:c5:d4:9a:ad:f2:8a:83:
         6a:53:2e:28:6f:67:1e:9b:3b:e3:42:a5:af:99:f5:7a:06:36:
         9d:37:cb:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYeGVe+kC2enljBP9o2Hl4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNDk5NWMzNjI3ZjdhYWNkZmUyMzkxNWU0NDJlM2QzOTAw
NjMxYWYwHhcNMjQxMTIzMTAwMTQ1WhcNMjQxMTI0MTAwMTQ1WjAzMTEwLwYDVQQD
Eyg3YjRkM2IzYTg4NmY0MGUwNGUxNjZhYTZmOGRlYWQzNDAzZjg2YjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEi8y0QP3n4GcvJ0xb44ZhaPHibR
fdKmMO2tQKdMJVc4bC1GfPFDpm+sixJwIUAoC8GMI47Xo9KK4Tf15vjLYl3cB6Fh
zVV/tYPq4GAB9lXsv8XG908+fwFN/r799VvdRyamPXY5ynMU6Qu5QSufJnBAt3L1
x4HZHfYwTSlRNIYfiknE00J5bI7/X/qOI7YjIu/ljaQycWOjTSLbTbEXpHohfqoO
s/kjLj8D6MOlls+t9l4nWnJ/GABxaoJ8mMyRvw9sAlqyCGe7C9O8xnHq+MkLyFgE
c6w+W1eVOUoBpDBMVOKYyow5xJ9MtatUoBXhtSHDMPo8FRKe0CV8z13tIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtNOzqIb0DgThZqpvjerTQD+Gs1MB8GA1UdIwQY
MBaAFCBJlcNif3qs3+I5FeRC49OQBjGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUVtVncySl9lcXpmNGprVjVFTGowNUFHTWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lYWMyYWYtNGJkMy00MzkyLWI1ZjQt
NDg0NTlkMDdiNDFlLzEvSUVtVncySl9lcXpmNGprVjVFTGowNUFHTWE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9lYWMyYWYtNGJkMy00MzkyLWI1ZjQtNDg0NTlkMDdiNDFl
LzEvSUVtVncySl9lcXpmNGprVjVFTGowNUFHTWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjR8sVjGy
tPUJmn8ljM+I8dtie4MIkGNao354NiihtwcywuZiQmJvkYmZFF9p21iFPCeN/zX5
PRvKkUxlmDCnDrRbyk9tkpT6UTcotNsPQYbjwsxpWthxAvupqsTCn/k6uM/yiU/Y
rZUdUg+grpclSyg0XCBOtGdLz5dmDtAdHb87o/6bWASIetkm3N0y5iredJRqUF9z
J0hQzyuPAie2XycEuSZpRznt6E8wGHWbFx9OUt1qgJSMCCwntK3mPxzA2se6sMNm
3d4SK1ePkFaCj8pj8l3CmWWVPyGK5mC+4Sggb4TF1Jqt8oqDalMuKG9nHps740Kl
r5n1egY2nTfLVA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:05:13 2024 by rpki-client on console-fra.rpki-client.org