Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
File:                     4Gkduvo6jeBwsHAi3prfdDQftPI.mft (raw, json)
Hash identifier:          lMYauMBVXNY3xAzmI+jKRx54xZdrTGItghGEjX59RhA=
Subject key identifier:   FA:44:39:E8:A5:7F:D4:D6:4D:AE:D9:1A:F6:9F:EF:63:EC:97:4A:70
Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
Certificate issuer:       /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Certificate serial:       019352AE4C962DC43AA5474F4B9E450B410A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
Manifest number:          0C2D
Signing time:             Fri 22 Nov 2024 07:02:54 +0000
Manifest this update:     Fri 22 Nov 2024 07:02:54 +0000
Manifest next update:     Sat 23 Nov 2024 07:02:54 +0000
Files and hashes:         1: 4Gkduvo6jeBwsHAi3prfdDQftPI.crl (hash: wgliOxrb1QFPg8qeRDk3auhYjrYJ4u8/Wd6CrY9ueAo=)
                          2: JAj9CljS7zHkXT3iBvtztkHE5bE.roa (hash: XFjXSdac7UTfyBfCKqoUoqv40UtDiRPZ6DMHLBfOe/U=)
                          3: KYwcGAjfxYnsp_bTy-AWwKHEB_k.roa (hash: PN9FlS5v1JShactkdJEjMs7RzvDZg9NaKuIk9cKsh7k=)
                          4: jjhjUDTOjqJ29QXaj_RIibB9zCM.roa (hash: xadVelQD7a6YtxLkLO0Ak5TyfVXFyLbZU4BNCai6WI8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ae:4c:96:2d:c4:3a:a5:47:4f:4b:9e:45:0b:41:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
        Validity
            Not Before: Nov 22 07:02:54 2024 GMT
            Not After : Nov 23 07:02:54 2024 GMT
        Subject: CN=fa4439e8a57fd4d64daed91af69fef63ec974a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ad:ec:5b:cd:11:c6:1b:f4:ef:6b:ff:a2:39:
                    73:8f:b4:2d:19:a3:01:2c:6c:7f:00:20:43:c0:8f:
                    16:44:1b:3b:b5:c8:6e:3f:ab:80:b5:8d:ae:60:b2:
                    34:e5:a7:7e:73:59:fa:e5:7e:fe:eb:0a:c9:29:5e:
                    aa:6b:09:e8:45:fb:7a:e9:a0:99:f7:04:e0:a9:c9:
                    c5:cf:c8:ef:38:e1:32:cd:9c:ba:6f:32:07:68:17:
                    60:b9:42:c5:4c:1f:c0:23:49:ff:78:0d:a9:d8:4b:
                    a5:e3:47:34:3b:a0:2b:76:39:6c:ac:92:76:85:e8:
                    21:f3:fe:48:e1:51:75:51:10:e8:ed:73:52:dd:a2:
                    c9:7a:a0:39:20:45:dc:01:30:31:55:00:e3:37:bf:
                    1d:55:e8:08:80:7e:ff:82:f5:57:ce:39:36:ed:e2:
                    3b:4a:96:4c:3c:ce:93:52:c0:d1:fb:f6:f1:e8:82:
                    ef:72:52:88:1b:8e:59:96:f1:3c:a8:7b:22:fb:2c:
                    2c:68:4d:66:26:c5:e3:c8:6e:ec:31:18:d6:94:7c:
                    17:ae:b6:b4:de:b0:cd:5b:8f:b9:f3:76:69:0a:e4:
                    46:70:17:51:2f:72:44:ba:d5:ae:83:6f:8a:04:07:
                    e5:0f:73:b8:a1:83:bc:1e:3d:7f:65:27:55:0b:72:
                    64:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:44:39:E8:A5:7F:D4:D6:4D:AE:D9:1A:F6:9F:EF:63:EC:97:4A:70
            X509v3 Authority Key Identifier:
                keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:37:bd:35:bc:76:5a:ba:00:25:0b:89:f1:e5:ef:0b:64:ed:
         bb:f8:d2:83:87:d4:86:52:8a:ec:f1:fa:d0:1d:ce:92:9d:fb:
         8e:6f:68:3c:98:6f:c9:c1:ac:70:89:c0:1e:c5:15:fc:9a:d7:
         e3:57:a3:48:e2:59:12:99:17:d0:b7:3d:8a:ed:6e:b1:56:49:
         e8:80:ae:2f:11:1c:df:15:aa:8c:7f:77:5b:a0:e7:d9:90:c7:
         6c:6c:90:2a:24:07:c1:a7:32:b8:18:8b:12:f7:8f:42:b7:1d:
         5f:a9:24:ec:28:2c:a6:7f:b8:c7:10:a7:11:73:b6:1d:1c:4d:
         a8:53:dd:c8:ed:f8:6f:50:7a:c5:ea:05:98:97:50:61:49:03:
         dc:d3:fc:ca:e4:6f:11:01:f1:61:78:40:6b:6b:4b:6f:99:5b:
         9a:db:17:85:e8:b6:5e:74:8a:a9:dc:ba:1c:c4:03:9c:43:f7:
         bd:9c:e9:65:fb:9a:98:55:ab:02:e7:8c:fe:33:92:99:ac:93:
         0b:38:9e:3d:68:4b:7f:b3:bf:6b:ee:10:50:69:34:1d:7e:c7:
         bb:e3:dc:4a:60:93:8d:42:17:48:44:44:9d:09:f0:94:9b:ef:
         4f:71:1c:b8:bf:68:f4:dc:e9:5c:a7:62:ed:9e:30:05:cf:d7:
         ff:2c:de:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSrkyWLcQ6pUdPS55FC0EKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjkxZGJhZmEzYThkZTA3MGIwNzAyMmRlOWFkZjc0MzQx
ZmI0ZjIwHhcNMjQxMTIyMDcwMjU0WhcNMjQxMTIzMDcwMjU0WjAzMTEwLwYDVQQD
EyhmYTQ0MzllOGE1N2ZkNGQ2NGRhZWQ5MWFmNjlmZWY2M2VjOTc0YTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr63sW80Rxhv072v/ojlzj7QtGaMB
LGx/ACBDwI8WRBs7tchuP6uAtY2uYLI05ad+c1n65X7+6wrJKV6qawnoRft66aCZ
9wTgqcnFz8jvOOEyzZy6bzIHaBdguULFTB/AI0n/eA2p2Eul40c0O6ArdjlsrJJ2
hegh8/5I4VF1URDo7XNS3aLJeqA5IEXcATAxVQDjN78dVegIgH7/gvVXzjk27eI7
SpZMPM6TUsDR+/bx6ILvclKIG45ZlvE8qHsi+ywsaE1mJsXjyG7sMRjWlHwXrra0
3rDNW4+583ZpCuRGcBdRL3JEutWug2+KBAflD3O4oYO8Hj1/ZSdVC3Jk1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpEOeilf9TWTa7ZGvaf72Psl0pwMB8GA1UdIwQY
MBaAFOBpHbr6Oo3gcLBwIt6a33Q0H7TyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mNzVjN2QtZTViMy00NDJmLWEwODQt
ZmQ0OWViM2YxOWIxLzEvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9mNzVjN2QtZTViMy00NDJmLWEwODQtZmQ0OWViM2YxOWIx
LzEvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAETe9Nbx2
WroAJQuJ8eXvC2Ttu/jSg4fUhlKK7PH60B3Okp37jm9oPJhvycGscInAHsUV/JrX
41ejSOJZEpkX0Lc9iu1usVZJ6ICuLxEc3xWqjH93W6Dn2ZDHbGyQKiQHwacyuBiL
EvePQrcdX6kk7Cgspn+4xxCnEXO2HRxNqFPdyO34b1B6xeoFmJdQYUkD3NP8yuRv
EQHxYXhAa2tLb5lbmtsXhei2XnSKqdy6HMQDnEP3vZzpZfuamFWrAueM/jOSmayT
CziePWhLf7O/a+4QUGk0HX7Hu+PcSmCTjUIXSEREnQnwlJvvT3EcuL9o9NzpXKdi
7Z4wBc/X/yzelQ==
-----END CERTIFICATE-----