Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
File:                     dyktxjcY7rxwSrAC7LgdPVLU0cM.mft (raw, json)
Hash identifier:          h8/2wGqCuPOdgtUNEMG7JfC+4dIAr7lTIlddwwWy48M=
Subject key identifier:   60:BE:BF:F7:11:18:82:1B:FC:CA:67:6D:F3:9B:B8:CA:EF:80:91:11
Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
Certificate issuer:       /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Certificate serial:       0193553F76FFC25D1F61FC3311E2969873B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
Manifest number:          1306
Signing time:             Fri 22 Nov 2024 19:00:42 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:42 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:42 +0000
Files and hashes:         1: by_SZNcpR0i-I5Z-Q1D6tF5jGRA.roa (hash: F4BXoqT1mhlVmss7SbYRNk6c0UdZ0OW4oill4GIp0DQ=)
                          2: dyktxjcY7rxwSrAC7LgdPVLU0cM.crl (hash: NT6q0s9gL40UvIVN/8Zy5b3F+HxMjpJG/aVU/nQ/kZw=)
                          3: h-ft-4t29hmmaMUxW24HeOfbGmk.roa (hash: rDp8Ff3AXQQQZSH2kyBleEEZefgAAaAAkXLIevEp32g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:76:ff:c2:5d:1f:61:fc:33:11:e2:96:98:73:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
        Validity
            Not Before: Nov 22 19:00:42 2024 GMT
            Not After : Nov 23 19:00:42 2024 GMT
        Subject: CN=60bebff71118821bfcca676df39bb8caef809111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e1:41:34:f5:bf:ef:41:78:8e:52:d9:9a:55:
                    38:f6:25:a1:8e:60:f1:8b:0a:ed:4d:e0:5d:13:4c:
                    08:ca:0b:a6:bd:37:41:0d:c9:9e:4d:31:3d:c0:6f:
                    d4:55:91:a2:69:72:72:63:f5:7d:da:b2:bc:67:63:
                    fb:74:18:5d:fd:04:56:f9:5a:70:6c:95:5d:74:76:
                    34:2a:86:a0:b7:47:f1:0d:af:6a:be:78:ea:c8:6b:
                    e3:9c:d5:8e:21:6a:68:31:4e:db:35:47:2e:4b:cf:
                    08:40:26:96:34:f7:4b:29:0d:8f:e7:61:fc:15:ca:
                    14:cb:81:1f:57:d5:d9:43:19:3a:95:05:a7:6c:46:
                    a8:73:49:54:ab:87:ab:95:b3:3a:dd:01:06:ed:f7:
                    a3:ae:3d:ba:fe:1e:98:6b:63:57:c6:05:23:ca:6a:
                    aa:3c:b5:6f:93:dd:0a:c3:8f:02:56:95:dc:b2:29:
                    d1:12:35:66:32:81:ca:de:ed:b4:fb:c6:0f:7d:34:
                    92:e9:2d:44:10:17:2c:db:f5:9f:68:53:97:6b:76:
                    96:67:1d:5e:4f:fe:25:2d:17:5b:a9:07:8b:e8:f3:
                    06:62:4a:61:dc:26:fc:2e:82:22:60:62:3f:e9:b7:
                    0b:7e:db:e5:4b:75:da:d7:89:2a:73:ac:fa:c7:d1:
                    d7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BE:BF:F7:11:18:82:1B:FC:CA:67:6D:F3:9B:B8:CA:EF:80:91:11
            X509v3 Authority Key Identifier:
                keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:34:31:c9:69:0f:de:9c:17:39:78:52:f6:b8:9f:b1:86:61:
         fb:a5:5d:79:8b:27:69:ae:ce:1a:bf:b0:5d:70:68:f9:db:18:
         70:34:1d:18:b1:96:bb:b1:79:21:65:e7:d2:db:5a:59:f0:a6:
         cf:5f:48:53:9b:ff:9b:5d:23:f6:4d:a7:a0:a9:76:af:59:ef:
         b8:f5:3a:04:2e:79:ea:c2:6e:f9:57:34:96:72:33:be:be:84:
         4a:00:81:61:34:b0:0a:2b:34:93:c6:21:bb:a4:d2:23:84:3e:
         92:3b:55:8e:1b:11:4f:d0:29:e1:68:60:39:c7:96:ba:16:3d:
         5b:1f:28:51:77:bc:ed:db:fe:9a:53:3f:bd:af:41:36:a6:46:
         1b:c5:c8:a5:97:91:82:ae:3b:81:a7:36:b1:26:79:27:80:26:
         36:e3:fb:71:a1:1f:d3:dd:56:06:37:b3:96:60:74:c2:26:3c:
         e5:73:ca:c9:bb:85:ec:ef:6e:0b:fd:a6:ec:c4:aa:85:e2:6b:
         db:34:e7:8f:65:86:38:ab:68:41:97:ae:81:2a:ad:78:4c:ec:
         51:d6:be:f1:12:8b:5a:30:9d:a9:e3:c3:d0:98:ba:05:60:88:
         df:55:7e:d2:db:2f:83:20:05:27:e4:55:7e:f0:16:ea:9b:4a:
         94:e3:45:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVP3b/wl0fYfwzEeKWmHO0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MjkyZGM2MzcxOGVlYmM3MDRhYjAwMmVjYjgxZDNkNTJk
NGQxYzMwHhcNMjQxMTIyMTkwMDQyWhcNMjQxMTIzMTkwMDQyWjAzMTEwLwYDVQQD
Eyg2MGJlYmZmNzExMTg4MjFiZmNjYTY3NmRmMzliYjhjYWVmODA5MTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleFBNPW/70F4jlLZmlU49iWhjmDx
iwrtTeBdE0wIygumvTdBDcmeTTE9wG/UVZGiaXJyY/V92rK8Z2P7dBhd/QRW+Vpw
bJVddHY0Koagt0fxDa9qvnjqyGvjnNWOIWpoMU7bNUcuS88IQCaWNPdLKQ2P52H8
FcoUy4EfV9XZQxk6lQWnbEaoc0lUq4erlbM63QEG7fejrj26/h6Ya2NXxgUjymqq
PLVvk90Kw48CVpXcsinREjVmMoHK3u20+8YPfTSS6S1EEBcs2/WfaFOXa3aWZx1e
T/4lLRdbqQeL6PMGYkph3Cb8LoIiYGI/6bcLftvlS3Xa14kqc6z6x9HXfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGC+v/cRGIIb/MpnbfObuMrvgJERMB8GA1UdIwQY
MBaAFHcpLcY3GO68cEqwAuy4HT1S1NHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82NTc2NGEtZGQ4ZS00MDFiLWI3MzEt
ZDljNWQyNjQxOWIyLzEvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS82NTc2NGEtZGQ4ZS00MDFiLWI3MzEtZDljNWQyNjQxOWIy
LzEvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOjQxyWkP
3pwXOXhS9rifsYZh+6VdeYsnaa7OGr+wXXBo+dsYcDQdGLGWu7F5IWXn0ttaWfCm
z19IU5v/m10j9k2noKl2r1nvuPU6BC556sJu+Vc0lnIzvr6ESgCBYTSwCis0k8Yh
u6TSI4Q+kjtVjhsRT9Ap4WhgOceWuhY9Wx8oUXe87dv+mlM/va9BNqZGG8XIpZeR
gq47gac2sSZ5J4AmNuP7caEf091WBjezlmB0wiY85XPKybuF7O9uC/2m7MSqheJr
2zTnj2WGOKtoQZeugSqteEzsUda+8RKLWjCdqePD0Ji6BWCI31V+0tsvgyAFJ+RV
fvAW6ptKlONFpA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:24:43 2024 by rpki-client on console-ams.rpki-client.org