Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/IpoDgXbHlupPJ2n2vjys4aNZdjQ.mft
File:                     IpoDgXbHlupPJ2n2vjys4aNZdjQ.mft (raw, json)
Hash identifier:          TiSXmKYujaAQGLq6G9yHcDkkWbe9kYMb8mrYL5iLMHg=
Subject key identifier:   04:A3:25:10:1D:78:D1:98:62:56:8B:4B:B3:57:5D:D1:CC:C2:48:01
Authority key identifier: 22:9A:03:81:76:C7:96:EA:4F:27:69:F6:BE:3C:AC:E1:A3:59:76:34
Certificate issuer:       /CN=229a038176c796ea4f2769f6be3cace1a3597634
Certificate serial:       0193579B6D5A479A65FBE58EB9BFF3DA6F94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IpoDgXbHlupPJ2n2vjys4aNZdjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/IpoDgXbHlupPJ2n2vjys4aNZdjQ.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 06:00:24 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:24 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:24 +0000
Files and hashes:         1: IpoDgXbHlupPJ2n2vjys4aNZdjQ.crl (hash: RG7TvNxISJafZ7duv6Wb9TThOJkhnIRzMFRvW0kCS5g=)
                          2: lk5kitdayoFfmhDHe2uVyUh_hA8.roa (hash: VdP75ix8vX156zPNljlPPv/HOIWCn8E2qpKt6I/+WiE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/IpoDgXbHlupPJ2n2vjys4aNZdjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/IpoDgXbHlupPJ2n2vjys4aNZdjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IpoDgXbHlupPJ2n2vjys4aNZdjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:6d:5a:47:9a:65:fb:e5:8e:b9:bf:f3:da:6f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229a038176c796ea4f2769f6be3cace1a3597634
        Validity
            Not Before: Nov 23 06:00:24 2024 GMT
            Not After : Nov 24 06:00:24 2024 GMT
        Subject: CN=04a325101d78d19862568b4bb3575dd1ccc24801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:58:eb:c7:d4:37:f7:f0:8e:ee:2b:11:4a:7a:
                    9f:7f:c1:e5:40:71:32:56:a9:47:86:77:d3:5c:e3:
                    47:77:06:b7:0c:ad:87:14:00:67:4f:a7:e8:d6:64:
                    6e:5e:1f:a1:a6:ed:c5:9c:4c:fb:b0:ec:ac:79:74:
                    a3:f6:5c:54:df:eb:79:51:41:c0:e2:0e:07:7a:92:
                    d8:45:03:62:78:a4:3a:9c:86:a6:21:6b:58:82:c5:
                    45:32:38:20:52:e9:2f:f6:28:f8:d3:a1:f6:10:64:
                    9a:44:8b:7e:78:bd:2f:fc:0e:4c:8e:1a:3c:11:a3:
                    53:65:0a:ae:2c:d3:c7:3a:c9:20:43:7e:ac:58:f6:
                    db:2e:c2:6a:b1:da:6b:a7:36:4d:cf:2a:60:8c:60:
                    60:4d:20:f7:c1:eb:99:ac:a2:aa:33:0d:cb:e9:d7:
                    ec:2c:f0:21:e2:90:f1:46:0d:66:20:d8:0e:34:cc:
                    33:73:29:85:01:54:c6:7d:dd:c1:7b:5b:c0:95:01:
                    7a:72:7a:11:73:5b:f8:39:10:da:94:7a:c3:57:bc:
                    df:02:2c:15:8e:ec:39:1a:74:7b:0c:9e:d7:c8:ec:
                    e5:b5:2a:a7:d6:0d:70:21:26:e8:90:82:ff:17:69:
                    7d:75:a8:da:18:1c:03:81:87:33:41:97:01:3c:a8:
                    43:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A3:25:10:1D:78:D1:98:62:56:8B:4B:B3:57:5D:D1:CC:C2:48:01
            X509v3 Authority Key Identifier:
                keyid:22:9A:03:81:76:C7:96:EA:4F:27:69:F6:BE:3C:AC:E1:A3:59:76:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpoDgXbHlupPJ2n2vjys4aNZdjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/IpoDgXbHlupPJ2n2vjys4aNZdjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/IpoDgXbHlupPJ2n2vjys4aNZdjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:eb:67:65:ef:3c:1c:3c:c5:ca:21:bb:27:3e:f8:5a:5c:56:
         74:88:c4:a2:72:d2:5e:65:10:ea:77:99:b8:7d:c1:22:42:fa:
         60:b9:9f:2b:1f:4b:3a:92:c8:53:30:5e:d0:af:10:ef:96:46:
         08:24:18:f0:6b:ff:d1:ba:24:06:a4:f0:a0:7c:5a:9f:c8:12:
         37:af:e3:e9:6f:65:c0:8f:09:10:0f:67:90:cb:94:ee:f2:b4:
         b3:15:2b:2a:38:d6:50:5e:ad:17:8b:3b:6f:36:44:a5:ec:a0:
         9b:d4:6f:ad:6c:9a:da:f7:f6:4a:db:1d:52:2b:ed:05:61:ca:
         61:55:d4:be:2d:05:71:64:b3:3d:a4:f1:ee:2f:6c:db:42:a1:
         7a:61:00:bc:5c:82:5c:6f:1f:59:88:eb:36:d4:f9:94:2e:60:
         cb:a6:40:58:cb:18:5d:b2:04:d1:a6:8c:ea:2d:53:ee:67:49:
         f6:81:ac:ae:66:57:30:5f:4f:19:72:76:2b:a1:f7:8b:d5:b6:
         8d:5b:06:1e:94:31:e0:fc:2d:89:f1:c4:0e:e6:59:11:1e:ef:
         8e:93:50:bb:3a:44:77:5e:a1:93:0c:07:2b:c7:79:c5:81:03:
         b9:6d:12:9f:5e:4a:c9:fc:7e:32:ca:91:54:92:55:06:98:70:
         a6:b3:3c:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXm21aR5pl++WOub/z2m+UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyOWEwMzgxNzZjNzk2ZWE0ZjI3NjlmNmJlM2NhY2UxYTM1
OTc2MzQwHhcNMjQxMTIzMDYwMDI0WhcNMjQxMTI0MDYwMDI0WjAzMTEwLwYDVQQD
EygwNGEzMjUxMDFkNzhkMTk4NjI1NjhiNGJiMzU3NWRkMWNjYzI0ODAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ljrx9Q39/CO7isRSnqff8HlQHEy
VqlHhnfTXONHdwa3DK2HFABnT6fo1mRuXh+hpu3FnEz7sOyseXSj9lxU3+t5UUHA
4g4HepLYRQNieKQ6nIamIWtYgsVFMjggUukv9ij406H2EGSaRIt+eL0v/A5Mjho8
EaNTZQquLNPHOskgQ36sWPbbLsJqsdprpzZNzypgjGBgTSD3weuZrKKqMw3L6dfs
LPAh4pDxRg1mINgONMwzcymFAVTGfd3Be1vAlQF6cnoRc1v4ORDalHrDV7zfAiwV
juw5GnR7DJ7XyOzltSqn1g1wISbokIL/F2l9dajaGBwDgYczQZcBPKhDvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASjJRAdeNGYYlaLS7NXXdHMwkgBMB8GA1UdIwQY
MBaAFCKaA4F2x5bqTydp9r48rOGjWXY0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXBvRGdYYkhsdXBQSjJuMnZqeXM0YU5aZGpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zYjVmNGUtOTNmZi00ZGZiLWIwMmQt
ZGMyMzAxZmJiYjdjLzEvSXBvRGdYYkhsdXBQSjJuMnZqeXM0YU5aZGpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8zYjVmNGUtOTNmZi00ZGZiLWIwMmQtZGMyMzAxZmJiYjdj
LzEvSXBvRGdYYkhsdXBQSjJuMnZqeXM0YU5aZGpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWOtnZe88
HDzFyiG7Jz74WlxWdIjEonLSXmUQ6neZuH3BIkL6YLmfKx9LOpLIUzBe0K8Q75ZG
CCQY8Gv/0bokBqTwoHxan8gSN6/j6W9lwI8JEA9nkMuU7vK0sxUrKjjWUF6tF4s7
bzZEpeygm9RvrWya2vf2StsdUivtBWHKYVXUvi0FcWSzPaTx7i9s20KhemEAvFyC
XG8fWYjrNtT5lC5gy6ZAWMsYXbIE0aaM6i1T7mdJ9oGsrmZXMF9PGXJ2K6H3i9W2
jVsGHpQx4PwtifHEDuZZER7vjpNQuzpEd16hkwwHK8d5xYEDuW0Sn15Kyfx+MsqR
VJJVBphwprM8KA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:33 2024 by rpki-client on console-ams.rpki-client.org