Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
File:                     rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft (raw, json)
Hash identifier:          ADTO8ndzUBMJG0MbxV1xSGfawc3eghGkAosxImyKbaw=
Subject key identifier:   E3:1E:4A:93:A9:57:9B:6E:9B:B4:A0:C7:45:95:F6:A9:3C:3B:87:EA
Authority key identifier: AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
Certificate issuer:       /CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Certificate serial:       019358792B5AA4ECE24E81560C2DB36F70ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 10:02:36 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:36 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:36 +0000
Files and hashes:         1: gqUxW_fCX9l4f8uRff1iNA5lIO4.roa (hash: 1SEvkCdT+4nRzDrgcRlOoElA+ubuB06w+UaXzbWNyV0=)
                          2: rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl (hash: Jv8eGI9pWxxkq4jpL/EdoYXmHeg4FSGvYQAh8FHAKQY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 10:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:2b:5a:a4:ec:e2:4e:81:56:0c:2d:b3:6f:70:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
        Validity
            Not Before: Nov 23 10:02:36 2024 GMT
            Not After : Nov 24 10:02:36 2024 GMT
        Subject: CN=e31e4a93a9579b6e9bb4a0c74595f6a93c3b87ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0a:96:67:93:f6:86:43:64:5f:bd:df:3b:4d:
                    dd:de:4b:12:d2:4d:aa:ff:d1:6e:c7:1f:8e:d4:1e:
                    5c:da:bb:1e:3f:9b:35:94:82:be:9a:fb:76:a4:7f:
                    df:60:39:ef:d8:15:a1:31:75:db:d0:b4:07:35:cf:
                    0b:20:d4:13:4a:32:f7:e1:4c:22:d7:4b:01:78:f9:
                    1e:3b:ff:1b:32:0b:d4:e0:40:cc:2b:72:bc:be:78:
                    c4:f8:c8:18:f9:90:b7:18:47:29:db:eb:3e:6a:e4:
                    99:55:fc:8b:37:ba:cd:ce:95:72:ee:f7:b1:34:f5:
                    be:8e:6f:ec:d0:a3:dc:32:ee:e9:67:0f:1b:1c:67:
                    28:a4:fb:c5:53:63:fb:b6:cd:d7:4f:b9:6e:42:49:
                    47:25:6a:76:4c:3c:8c:c5:0e:27:f5:e6:d5:0a:d6:
                    5e:a9:18:37:32:9f:1e:44:04:5f:53:68:60:cd:e3:
                    0d:22:7a:fc:a2:50:00:4f:55:e5:16:8a:fa:0c:91:
                    4e:8a:44:f5:0e:d8:ed:4c:68:31:fe:1f:96:72:78:
                    a7:56:bf:41:cf:c4:0a:ea:59:9e:fc:92:30:2e:aa:
                    a3:7f:7e:51:8a:39:86:2e:97:be:40:e7:5a:5c:93:
                    d6:54:08:90:06:56:5e:ec:66:1f:24:64:96:01:83:
                    96:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1E:4A:93:A9:57:9B:6E:9B:B4:A0:C7:45:95:F6:A9:3C:3B:87:EA
            X509v3 Authority Key Identifier:
                keyid:AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:bd:66:75:e0:e7:91:3e:00:fd:8f:f1:23:fb:66:94:68:e4:
         04:1b:47:04:f2:b1:57:2c:21:c4:36:35:7e:89:09:0e:04:aa:
         b3:91:86:46:a7:21:e4:2e:0d:4a:79:98:a6:49:a7:8c:59:08:
         f6:43:3f:1c:a8:7f:d0:13:7e:77:1f:ce:b9:ac:af:75:4f:86:
         9b:6d:2d:2e:a1:5a:c1:15:47:85:bb:d0:e8:ef:ed:7d:d2:c8:
         ec:39:6a:be:af:28:8d:06:2a:38:c0:f3:45:65:bf:3e:b3:5f:
         ac:98:26:47:b4:3d:34:9f:0d:d7:44:92:d0:e5:a5:cc:3a:67:
         6d:73:30:91:73:40:67:9b:01:25:e5:3d:86:f0:9d:2e:c2:98:
         36:55:9f:4e:b4:ad:59:74:83:38:62:71:f6:cd:c0:f0:dc:84:
         23:df:4e:4b:f9:cc:c6:a6:33:34:3b:ed:12:55:dd:16:39:7c:
         c6:13:23:6f:91:3c:6b:03:cd:83:b2:3a:96:0d:0d:2a:48:d0:
         ed:37:9e:bb:1f:b3:46:a8:f9:e3:d7:33:3e:b7:42:84:9c:22:
         30:9a:8f:83:b0:bf:b6:a2:69:51:f6:b5:e2:04:ea:ae:eb:55:
         f8:0d:5a:46:55:65:2d:08:02:0f:bf:8a:f0:7e:bb:3c:cc:6a:
         68:25:b3:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYeStapOziToFWDC2zb3DtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNTZhYWRjNDI0MTEyYzRmYzg5ODljMGFlZTI1NDliYmFm
NTY1NjgwHhcNMjQxMTIzMTAwMjM2WhcNMjQxMTI0MTAwMjM2WjAzMTEwLwYDVQQD
EyhlMzFlNGE5M2E5NTc5YjZlOWJiNGEwYzc0NTk1ZjZhOTNjM2I4N2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAqWZ5P2hkNkX73fO03d3ksS0k2q
/9Fuxx+O1B5c2rseP5s1lIK+mvt2pH/fYDnv2BWhMXXb0LQHNc8LINQTSjL34Uwi
10sBePkeO/8bMgvU4EDMK3K8vnjE+MgY+ZC3GEcp2+s+auSZVfyLN7rNzpVy7vex
NPW+jm/s0KPcMu7pZw8bHGcopPvFU2P7ts3XT7luQklHJWp2TDyMxQ4n9ebVCtZe
qRg3Mp8eRARfU2hgzeMNInr8olAAT1XlFor6DJFOikT1DtjtTGgx/h+WcninVr9B
z8QK6lme/JIwLqqjf35RijmGLpe+QOdaXJPWVAiQBlZe7GYfJGSWAYOWswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMeSpOpV5tum7Sgx0WV9qk8O4fqMB8GA1UdIwQY
MBaAFKxWqtxCQRLE/ImJwK7iVJu69WVoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckZhcTNFSkJFc1Q4aVluQXJ1SlVtN3IxWldnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iMDMzZDMtZWU5Ni00YzBkLWE3MGUt
MDI3NGY0NDZkMzMxLzEvckZhcTNFSkJFc1Q4aVluQXJ1SlVtN3IxWldnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9iMDMzZDMtZWU5Ni00YzBkLWE3MGUtMDI3NGY0NDZkMzMx
LzEvckZhcTNFSkJFc1Q4aVluQXJ1SlVtN3IxWldnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjL1mdeDn
kT4A/Y/xI/tmlGjkBBtHBPKxVywhxDY1fokJDgSqs5GGRqch5C4NSnmYpkmnjFkI
9kM/HKh/0BN+dx/OuayvdU+Gm20tLqFawRVHhbvQ6O/tfdLI7Dlqvq8ojQYqOMDz
RWW/PrNfrJgmR7Q9NJ8N10SS0OWlzDpnbXMwkXNAZ5sBJeU9hvCdLsKYNlWfTrSt
WXSDOGJx9s3A8NyEI99OS/nMxqYzNDvtElXdFjl8xhMjb5E8awPNg7I6lg0NKkjQ
7Teeux+zRqj549czPrdChJwiMJqPg7C/tqJpUfa14gTqrutV+A1aRlVlLQgCD7+K
8H67PMxqaCWzrw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 19:21:42 2024 by rpki-client on console-fra.rpki-client.org