Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
File:                     C155jbbo9XxfSkRRUJAd7oqW1eU.mft (raw, json)
Hash identifier:          3426IzQnGbAm3rZ5HtZJPR0CbnEnnb9aJK8oK4k9QAU=
Subject key identifier:   F4:9B:3C:39:0C:8A:56:11:41:74:F0:CE:5C:A2:76:7F:4B:2B:54:89
Authority key identifier: 0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5
Certificate issuer:       /CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
Certificate serial:       019369DA27AD407FEC478ACECE8D7A891615
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
Manifest number:          0968
Signing time:             Tue 26 Nov 2024 19:02:04 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:04 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:04 +0000
Files and hashes:         1: C155jbbo9XxfSkRRUJAd7oqW1eU.crl (hash: vubrPClbx07XudtI4TP61iORQ2RRxRIMUGi3XF+lV0k=)
                          2: nH1bkW5fYrec1XZWbaIW_NQr-EI.roa (hash: 41moE2WZfeAHiQcRBarbP6/AG70pQMAU5cdkkVjC8/4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:27:ad:40:7f:ec:47:8a:ce:ce:8d:7a:89:16:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
        Validity
            Not Before: Nov 26 19:02:04 2024 GMT
            Not After : Nov 27 19:02:04 2024 GMT
        Subject: CN=f49b3c390c8a56114174f0ce5ca2767f4b2b5489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:67:b8:9c:3a:3d:ea:09:d8:71:1b:19:34:cd:
                    5a:80:b8:71:b0:ad:d9:5c:ff:ae:9b:d2:96:13:9e:
                    67:a4:68:d0:36:58:09:f5:00:25:cc:dd:14:e2:f3:
                    4b:ca:8a:19:89:49:2b:ef:7a:00:89:06:be:36:f9:
                    7a:52:06:8e:91:13:d0:40:83:a4:54:12:9c:ee:a7:
                    2c:f4:13:b2:fc:98:53:84:7a:fe:93:34:1c:49:90:
                    6c:6c:6d:7c:e1:6d:a1:8a:49:04:b6:f0:32:f3:52:
                    c2:bb:a1:1a:c0:74:17:bf:84:38:46:3d:e3:c9:b1:
                    48:0c:d8:9d:48:02:16:0e:80:21:21:9f:8a:8a:a2:
                    1c:47:94:d5:a8:47:8f:89:fd:3d:ca:20:6e:f3:e3:
                    a3:59:19:57:a6:42:31:61:ef:ab:a9:20:fd:93:a7:
                    07:10:f9:70:5d:b1:be:8a:8e:e6:65:70:7c:22:89:
                    18:81:92:16:54:92:f0:c8:50:f0:c5:98:73:53:d2:
                    4c:11:d2:91:eb:7c:a2:6a:39:7c:3d:5d:a1:15:7c:
                    af:cf:f0:3f:ee:e7:65:0a:6d:03:8f:ca:0b:78:4a:
                    d1:16:79:43:99:2b:c0:45:5e:4e:ce:33:80:39:46:
                    0e:19:7d:33:46:69:06:69:28:1a:21:72:f0:94:c3:
                    29:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9B:3C:39:0C:8A:56:11:41:74:F0:CE:5C:A2:76:7F:4B:2B:54:89
            X509v3 Authority Key Identifier:
                keyid:0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:bb:a3:bf:96:46:e3:d5:00:7d:15:30:19:17:5d:23:be:93:
         22:6e:31:71:dd:a8:dc:0b:e0:ed:92:a2:bc:9a:4f:28:04:30:
         f3:a9:cc:c3:ac:3d:40:48:78:be:5e:72:57:60:c6:dd:60:f4:
         c0:ea:45:2e:94:f5:5e:a8:5e:26:42:c6:8a:bd:33:6f:02:a3:
         8b:e9:18:e5:dc:4a:b7:a8:c0:80:ee:73:ef:c1:de:cb:9b:76:
         b7:cf:4d:bf:6c:84:77:be:2f:e0:46:d3:c7:01:33:9d:90:88:
         56:4d:f0:a1:13:81:2c:00:73:90:a1:a5:e0:32:19:36:43:d0:
         1e:2d:82:3f:d2:1e:80:27:5a:60:6c:d8:28:b4:e6:79:a1:69:
         f3:67:64:5f:38:c7:6d:fe:29:3e:13:74:6f:d6:88:2c:68:92:
         d5:08:f6:52:9c:e5:17:01:69:3e:89:70:50:2f:8c:7b:67:72:
         db:4f:d9:c2:56:8a:61:5f:3c:50:cb:cd:d2:18:76:94:26:de:
         cf:ca:d9:e0:6c:52:df:a1:38:62:b1:b0:d2:7c:e0:5e:35:53:
         5d:a2:1d:f2:97:ea:1c:eb:b3:38:28:5f:57:50:d5:64:a0:97:
         61:43:bf:6c:49:ce:f1:28:62:4d:65:89:12:ce:aa:cb:ad:1c:
         c7:76:07:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2ietQH/sR4rOzo16iRYVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNWU3OThkYjZlOGY1N2M1ZjRhNDQ1MTUwOTAxZGVlOGE5
NmQ1ZTUwHhcNMjQxMTI2MTkwMjA0WhcNMjQxMTI3MTkwMjA0WjAzMTEwLwYDVQQD
EyhmNDliM2MzOTBjOGE1NjExNDE3NGYwY2U1Y2EyNzY3ZjRiMmI1NDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA82e4nDo96gnYcRsZNM1agLhxsK3Z
XP+um9KWE55npGjQNlgJ9QAlzN0U4vNLyooZiUkr73oAiQa+Nvl6UgaOkRPQQIOk
VBKc7qcs9BOy/JhThHr+kzQcSZBsbG184W2hikkEtvAy81LCu6EawHQXv4Q4Rj3j
ybFIDNidSAIWDoAhIZ+KiqIcR5TVqEePif09yiBu8+OjWRlXpkIxYe+rqSD9k6cH
EPlwXbG+io7mZXB8IokYgZIWVJLwyFDwxZhzU9JMEdKR63yiajl8PV2hFXyvz/A/
7udlCm0Dj8oLeErRFnlDmSvARV5OzjOAOUYOGX0zRmkGaSgaIXLwlMMpfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSbPDkMilYRQXTwzlyidn9LK1SJMB8GA1UdIwQY
MBaAFAteeY226PV8X0pEUVCQHe6KltXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzE1NWpiYm85WHhmU2tSUlVKQWQ3b3FXMWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kNjc5ZjItNDE0ZS00NTM4LTljNjAt
Mjk1NjExYWE3ZTkyLzEvQzE1NWpiYm85WHhmU2tSUlVKQWQ3b3FXMWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9kNjc5ZjItNDE0ZS00NTM4LTljNjAtMjk1NjExYWE3ZTky
LzEvQzE1NWpiYm85WHhmU2tSUlVKQWQ3b3FXMWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7ujv5ZG
49UAfRUwGRddI76TIm4xcd2o3Avg7ZKivJpPKAQw86nMw6w9QEh4vl5yV2DG3WD0
wOpFLpT1XqheJkLGir0zbwKji+kY5dxKt6jAgO5z78Hey5t2t89Nv2yEd74v4EbT
xwEznZCIVk3woROBLABzkKGl4DIZNkPQHi2CP9IegCdaYGzYKLTmeaFp82dkXzjH
bf4pPhN0b9aILGiS1Qj2UpzlFwFpPolwUC+Me2dy20/ZwlaKYV88UMvN0hh2lCbe
z8rZ4GxS36E4YrGw0nzgXjVTXaId8pfqHOuzOChfV1DVZKCXYUO/bEnO8ShiTWWJ
Es6qy60cx3YHlQ==
-----END CERTIFICATE-----
Generated at Tue Nov 26 21:29:21 2024 by rpki-client on console-fra.rpki-client.org