Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
File:                     D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft (raw, json)
Hash identifier:          ApspHF5JCFkkmkRAhSI1JjfoY5H06LH0eBnFdklqfOU=
Subject key identifier:   26:A2:11:86:4E:AF:46:E4:99:C0:E4:DC:CA:52:0F:3C:ED:37:CC:3D
Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
Certificate issuer:       /CN=0f516df64b3941b046743411ed86ea6030d72fba
Certificate serial:       019369DB00DF0A996119F4735F7740CEC015
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
Manifest number:          119D
Signing time:             Tue 26 Nov 2024 19:03:00 +0000
Manifest this update:     Tue 26 Nov 2024 19:03:00 +0000
Manifest next update:     Wed 27 Nov 2024 19:03:00 +0000
Files and hashes:         1: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl (hash: 6pu6AIkcZmAeRq+MUxTtU1iHP5kO7ffl5RZfaoOQckI=)
                          2: mbHJoB2H4sXOdibtPq7QNGEo8Wg.roa (hash: JEi6BLbzZ+JxiTGdZsw+6ctDHylQaQ9Ts7H3KV8vkfQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:db:00:df:0a:99:61:19:f4:73:5f:77:40:ce:c0:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba
        Validity
            Not Before: Nov 26 19:03:00 2024 GMT
            Not After : Nov 27 19:03:00 2024 GMT
        Subject: CN=26a211864eaf46e499c0e4dcca520f3ced37cc3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8c:d7:19:ad:3b:d3:f6:05:b8:8f:55:8e:b5:
                    37:c0:e0:0d:62:a2:13:14:2e:63:3f:c0:2e:6f:e1:
                    35:db:0f:df:3a:09:7f:74:31:28:19:54:40:07:3d:
                    1f:bc:e6:2e:46:36:73:31:fe:92:fb:c4:53:67:e3:
                    65:88:a3:c6:d1:ce:c3:9e:ab:7a:5e:99:c2:cf:d2:
                    9b:d9:df:02:80:d2:4c:fa:14:09:fc:57:21:f0:62:
                    8d:cb:5d:31:99:5f:4f:30:af:4d:6e:84:63:76:bb:
                    49:4b:7d:1a:00:42:8e:95:d9:8a:33:f4:25:c4:14:
                    04:9e:36:9b:5b:6a:82:8d:84:83:51:29:35:02:77:
                    1c:8e:05:0d:4f:68:25:89:c3:4f:3a:47:98:43:1b:
                    11:bf:3f:f0:94:24:25:c3:f7:0d:21:39:78:1f:0a:
                    36:75:01:46:9b:1e:db:b3:f8:be:37:6c:d9:5e:70:
                    83:71:a4:13:db:43:8a:1e:1d:54:21:e3:33:82:9e:
                    2c:8d:13:da:d6:2e:f0:f3:ae:2b:65:06:a6:a0:ee:
                    21:d8:17:dc:8a:76:ba:db:d9:26:50:19:9f:87:19:
                    d9:f8:7b:f8:57:ba:dc:b2:73:6e:77:14:97:32:22:
                    c8:38:b9:dc:a3:d8:2c:5b:59:96:fe:23:fa:49:c0:
                    f6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A2:11:86:4E:AF:46:E4:99:C0:E4:DC:CA:52:0F:3C:ED:37:CC:3D
            X509v3 Authority Key Identifier:
                keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:35:cf:8f:4a:a9:c9:9f:23:bd:5a:94:4b:e4:27:dd:64:82:
         09:d8:61:de:c3:dd:93:d6:6a:a5:72:1f:1f:8a:5d:5b:85:fa:
         82:3e:35:95:13:ea:be:a4:aa:bd:01:11:dd:62:1d:01:5a:e0:
         d8:0e:3e:49:31:1a:57:23:d3:81:65:07:17:93:7d:39:3d:93:
         a8:77:b4:ad:87:49:4e:d0:9b:7d:ac:b9:c3:8f:20:58:d9:5e:
         13:e7:ca:9e:ac:e5:07:4f:a6:6a:67:e6:15:7b:ba:c3:79:76:
         cd:c5:15:d1:9c:53:47:8e:0a:fb:8b:ec:a6:1f:2b:40:b5:cf:
         37:b2:29:7a:75:3e:a4:c0:e8:08:8b:ea:bd:1a:92:35:87:12:
         25:67:26:a5:ae:d5:6d:d7:14:bb:f7:37:89:2e:c4:93:23:a4:
         53:d1:15:30:2b:71:0f:a3:82:92:fa:41:82:53:73:37:bb:2e:
         7c:71:26:7a:fa:ce:e6:22:26:96:7c:fd:b0:10:98:0d:92:49:
         3a:a9:2f:47:b3:26:22:09:d3:3e:06:91:80:aa:28:28:12:0a:
         1c:18:ba:d9:0c:4b:a2:a9:38:19:ba:c1:49:92:42:11:1f:77:
         74:0f:f8:dd:2c:13:da:01:73:4d:7a:46:61:32:0c:54:98:82:
         f2:58:a9:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2wDfCplhGfRzX3dAzsAVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNTE2ZGY2NGIzOTQxYjA0Njc0MzQxMWVkODZlYTYwMzBk
NzJmYmEwHhcNMjQxMTI2MTkwMzAwWhcNMjQxMTI3MTkwMzAwWjAzMTEwLwYDVQQD
EygyNmEyMTE4NjRlYWY0NmU0OTljMGU0ZGNjYTUyMGYzY2VkMzdjYzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyozXGa070/YFuI9VjrU3wOANYqIT
FC5jP8Aub+E12w/fOgl/dDEoGVRABz0fvOYuRjZzMf6S+8RTZ+NliKPG0c7Dnqt6
XpnCz9Kb2d8CgNJM+hQJ/Fch8GKNy10xmV9PMK9NboRjdrtJS30aAEKOldmKM/Ql
xBQEnjabW2qCjYSDUSk1AnccjgUNT2glicNPOkeYQxsRvz/wlCQlw/cNITl4Hwo2
dQFGmx7bs/i+N2zZXnCDcaQT20OKHh1UIeMzgp4sjRPa1i7w864rZQamoO4h2Bfc
ina629kmUBmfhxnZ+Hv4V7rcsnNudxSXMiLIOLnco9gsW1mW/iP6ScD29QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaiEYZOr0bkmcDk3MpSDzztN8w9MB8GA1UdIwQY
MBaAFA9RbfZLOUGwRnQ0Ee2G6mAw1y+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDFGdDlrczVRYkJHZERRUjdZYnFZRERYTDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9hY2RmNGYtZjEwYS00MzIzLTg5M2Et
YmExMDJjZGIyMzk3LzEvRDFGdDlrczVRYkJHZERRUjdZYnFZRERYTDdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9hY2RmNGYtZjEwYS00MzIzLTg5M2EtYmExMDJjZGIyMzk3
LzEvRDFGdDlrczVRYkJHZERRUjdZYnFZRERYTDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTXPj0qp
yZ8jvVqUS+Qn3WSCCdhh3sPdk9ZqpXIfH4pdW4X6gj41lRPqvqSqvQER3WIdAVrg
2A4+STEaVyPTgWUHF5N9OT2TqHe0rYdJTtCbfay5w48gWNleE+fKnqzlB0+mamfm
FXu6w3l2zcUV0ZxTR44K+4vsph8rQLXPN7IpenU+pMDoCIvqvRqSNYcSJWcmpa7V
bdcUu/c3iS7EkyOkU9EVMCtxD6OCkvpBglNzN7sufHEmevrO5iImlnz9sBCYDZJJ
OqkvR7MmIgnTPgaRgKooKBIKHBi62QxLoqk4GbrBSZJCER93dA/43SwT2gFzTXpG
YTIMVJiC8lipoA==
-----END CERTIFICATE-----
Generated at Tue Nov 26 22:38:05 2024 by rpki-client on console-ams.rpki-client.org