Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
File:                     t4OAtB43tXV9PU4u7N8G2TCnC50.mft (raw, json)
Hash identifier:          x0X5MKHQISY41H+Z5W+dDIfqpAbGZBelb+zI5ROJvn0=
Subject key identifier:   24:12:80:F0:3C:66:CA:C3:2C:5F:17:6E:55:0C:67:E1:D3:99:6A:5B
Authority key identifier: B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
Certificate issuer:       /CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Certificate serial:       0193572D81F50BBBF15D5695038E9905B91A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
Manifest number:          1375
Signing time:             Sat 23 Nov 2024 04:00:20 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:20 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:20 +0000
Files and hashes:         1: 5qODak81RxA7GkRyInHrkjvRHuk.roa (hash: Mzj6I15Z7NceStfcQLJHVhAuDoXsnv4Ki8EditMHeUA=)
                          2: t4OAtB43tXV9PU4u7N8G2TCnC50.crl (hash: n70v1vSzSGBjg62GOCnaqTWvzEChttY+KVzU3Gnf+z0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:81:f5:0b:bb:f1:5d:56:95:03:8e:99:05:b9:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
        Validity
            Not Before: Nov 23 04:00:20 2024 GMT
            Not After : Nov 24 04:00:20 2024 GMT
        Subject: CN=241280f03c66cac32c5f176e550c67e1d3996a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:69:02:ee:d4:37:13:b6:a1:f9:d4:81:a4:8a:
                    0a:ce:5a:87:45:13:bb:62:1c:f6:ef:72:9e:db:46:
                    f9:63:2a:3b:58:b2:47:22:a9:c4:ab:2b:5b:17:67:
                    7b:b7:02:92:57:2a:8d:b2:ff:aa:ff:f0:4b:d2:4b:
                    0f:a8:67:b8:e8:27:04:ec:4d:24:19:10:39:c8:fc:
                    a1:14:f3:47:03:e9:e6:28:ab:26:d1:3d:66:51:1c:
                    19:78:0e:44:b6:ff:0d:30:d8:0b:68:93:5b:c3:ff:
                    49:a4:79:41:58:85:e7:71:ab:c2:29:39:4a:2d:47:
                    23:f3:bb:6f:e9:0f:c1:32:64:f0:45:c9:ae:af:67:
                    58:f6:4b:af:6b:8b:9f:92:f3:76:25:fd:8c:82:c9:
                    92:aa:6e:16:36:81:6a:98:41:a7:fd:d6:09:95:0a:
                    bd:a3:6e:10:60:fd:1c:bc:67:b0:a4:56:be:e7:e2:
                    63:94:58:6e:b6:70:1a:f7:51:a5:5c:90:81:66:9e:
                    ed:3e:23:93:3b:00:ba:81:b1:a0:9a:28:7b:4f:0a:
                    7d:4b:db:41:69:13:49:40:2e:f6:45:4f:f0:a6:43:
                    8d:bc:e2:38:97:d4:2b:04:8e:76:17:8d:38:1b:04:
                    e7:d4:c9:b9:40:e0:af:7c:d8:89:0a:00:d8:b6:f1:
                    f7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:12:80:F0:3C:66:CA:C3:2C:5F:17:6E:55:0C:67:E1:D3:99:6A:5B
            X509v3 Authority Key Identifier:
                keyid:B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:f1:ac:ae:b6:6b:1c:50:9a:15:3a:fe:55:c9:6a:a6:06:df:
         5d:95:63:af:35:74:ce:78:b6:e0:0f:ef:e5:1a:5d:ee:67:38:
         68:40:9d:9d:75:70:77:f3:43:60:3a:92:98:c6:d6:f5:97:51:
         3f:c9:fc:0e:20:7a:5f:d4:d4:31:36:00:df:90:30:48:a8:0c:
         60:e1:2e:a5:ab:a8:7b:63:2e:28:dc:59:04:07:75:b2:69:96:
         66:b0:9f:ba:98:53:24:71:1b:98:f7:d8:cb:0e:53:80:36:ca:
         da:9c:ec:33:e0:4b:07:28:be:84:17:97:a0:b3:7e:76:da:b1:
         d8:13:b7:a0:d7:d0:4b:fc:68:6a:5b:64:a8:76:01:b5:fe:24:
         1a:49:33:fa:a2:7d:6b:f1:d7:a9:63:f4:29:1c:4d:2d:f5:a1:
         5e:35:dc:18:28:29:87:b3:33:3d:1a:6c:26:e4:73:59:46:00:
         90:b8:cd:dc:e7:35:e7:11:8e:7c:15:dc:1e:f8:4e:b8:f4:eb:
         ac:de:7c:ca:5c:b2:ba:43:a9:b9:94:8e:02:39:89:b3:40:3e:
         53:97:99:26:9c:14:3a:a9:c9:04:3e:01:77:5d:ce:05:91:47:
         0b:c9:8c:a5:90:ac:d6:8c:0e:75:40:c1:2b:3b:6a:de:8e:c1:
         33:63:4a:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXLYH1C7vxXVaVA46ZBbkaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ODM4MGI0MWUzN2I1NzU3ZDNkNGUyZWVjZGYwNmQ5MzBh
NzBiOWQwHhcNMjQxMTIzMDQwMDIwWhcNMjQxMTI0MDQwMDIwWjAzMTEwLwYDVQQD
EygyNDEyODBmMDNjNjZjYWMzMmM1ZjE3NmU1NTBjNjdlMWQzOTk2YTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmkC7tQ3E7ah+dSBpIoKzlqHRRO7
Yhz273Ke20b5Yyo7WLJHIqnEqytbF2d7twKSVyqNsv+q//BL0ksPqGe46CcE7E0k
GRA5yPyhFPNHA+nmKKsm0T1mURwZeA5Etv8NMNgLaJNbw/9JpHlBWIXncavCKTlK
LUcj87tv6Q/BMmTwRcmur2dY9kuva4ufkvN2Jf2MgsmSqm4WNoFqmEGn/dYJlQq9
o24QYP0cvGewpFa+5+JjlFhutnAa91GlXJCBZp7tPiOTOwC6gbGgmih7Twp9S9tB
aRNJQC72RU/wpkONvOI4l9QrBI52F404GwTn1Mm5QOCvfNiJCgDYtvH3SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQSgPA8ZsrDLF8XblUMZ+HTmWpbMB8GA1UdIwQY
MBaAFLeDgLQeN7V1fT1OLuzfBtkwpwudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRPQXRCNDN0WFY5UFU0dTdOOEcyVENuQzUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8yZTY2MTMtNDMzMi00YzE5LWFkZGYt
ZGVkYWY3OTM1NmNlLzEvdDRPQXRCNDN0WFY5UFU0dTdOOEcyVENuQzUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8yZTY2MTMtNDMzMi00YzE5LWFkZGYtZGVkYWY3OTM1NmNl
LzEvdDRPQXRCNDN0WFY5UFU0dTdOOEcyVENuQzUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUvGsrrZr
HFCaFTr+VclqpgbfXZVjrzV0zni24A/v5Rpd7mc4aECdnXVwd/NDYDqSmMbW9ZdR
P8n8DiB6X9TUMTYA35AwSKgMYOEupauoe2MuKNxZBAd1smmWZrCfuphTJHEbmPfY
yw5TgDbK2pzsM+BLByi+hBeXoLN+dtqx2BO3oNfQS/xoaltkqHYBtf4kGkkz+qJ9
a/HXqWP0KRxNLfWhXjXcGCgph7MzPRpsJuRzWUYAkLjN3Oc15xGOfBXcHvhOuPTr
rN58ylyyukOpuZSOAjmJs0A+U5eZJpwUOqnJBD4Bd13OBZFHC8mMpZCs1owOdUDB
Kztq3o7BM2NK6g==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:23 2024 by rpki-client on console-fra.rpki-client.org