Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
File:                     TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft (raw, json)
Hash identifier:          CfX34S861r0JEH8OmVIWR+dcma8LnU4cvIIrBKWHT54=
Subject key identifier:   30:D1:FC:9F:D5:BA:2E:4B:3F:25:6C:D8:F4:B8:74:16:58:48:E6:E4
Authority key identifier: 4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
Certificate issuer:       /CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Certificate serial:       0193640F865205D1947B6C310A87B0870D9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
Manifest number:          050C
Signing time:             Mon 25 Nov 2024 16:02:39 +0000
Manifest this update:     Mon 25 Nov 2024 16:02:39 +0000
Manifest next update:     Tue 26 Nov 2024 16:02:39 +0000
Files and hashes:         1: TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl (hash: 6xLICIhYJE/zGJIKEZXL1DEKrLOJ1iUnk48ByMPp8T4=)
                          2: w008FFpCKKyWnX6n81SnBhdArSA.roa (hash: i2WouBVtg5FWSxOAGODGzRm4PVsn3xlAhSpFRCYJ1UE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:0f:86:52:05:d1:94:7b:6c:31:0a:87:b0:87:0d:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
        Validity
            Not Before: Nov 25 16:02:39 2024 GMT
            Not After : Nov 26 16:02:39 2024 GMT
        Subject: CN=30d1fc9fd5ba2e4b3f256cd8f4b874165848e6e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:52:b1:6b:d8:47:36:f2:02:b3:ef:fa:74:a4:
                    44:7a:9e:94:90:81:c0:f1:5f:67:97:ab:38:84:c5:
                    6f:a7:78:69:07:92:96:ec:ee:09:16:3e:74:62:05:
                    fd:41:f9:34:cf:e1:36:84:d9:00:f5:09:0b:9d:32:
                    a4:75:d8:ba:7f:b2:ec:86:89:d1:5a:f5:c4:06:f0:
                    f4:ff:c9:c0:b0:f8:39:b0:ca:96:4f:0a:28:25:b1:
                    56:29:5c:ee:66:ee:7a:1b:5a:29:68:b4:ed:d6:8c:
                    95:76:4e:dd:93:f1:b7:f8:79:69:d7:27:fe:67:fe:
                    42:3f:31:8f:c7:10:90:6e:8a:94:c6:84:41:ed:02:
                    ec:b8:4b:a2:9c:14:53:fb:a6:95:21:dc:91:92:73:
                    2a:6a:e1:c9:c0:2f:fc:1f:47:c1:21:af:60:95:5b:
                    f7:78:77:48:e7:c8:4f:ac:c8:f3:81:1a:49:e5:4f:
                    e9:0e:4b:79:15:31:b5:f7:71:5d:46:f3:19:ab:4d:
                    48:f2:b3:87:36:1f:95:0c:dc:94:8d:f3:97:0a:3f:
                    32:bf:e3:44:0a:b5:33:6f:ca:78:82:8c:5f:7a:9f:
                    6b:43:9b:a5:65:59:0d:bc:5c:39:f5:27:cd:f6:35:
                    33:ce:14:c5:c7:c8:aa:0c:45:1e:94:8a:5e:25:7f:
                    89:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D1:FC:9F:D5:BA:2E:4B:3F:25:6C:D8:F4:B8:74:16:58:48:E6:E4
            X509v3 Authority Key Identifier:
                keyid:4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:30:0f:48:12:ac:de:44:8e:68:b5:e3:10:dd:eb:22:20:4b:
         40:82:26:0f:f4:41:7d:b8:02:86:c6:aa:ca:79:2f:38:7a:7e:
         94:db:43:c3:25:1f:71:33:81:1a:a3:64:3c:83:61:d8:9f:35:
         e6:95:62:5e:a3:58:de:b2:40:96:3e:28:4f:68:9f:1a:f3:40:
         95:1e:f4:25:96:77:36:20:b0:f2:30:82:8f:76:70:59:e0:26:
         86:d7:2e:18:ae:a0:b2:1e:86:4b:a4:7c:5d:d9:e6:95:4a:68:
         bc:3f:5e:6b:69:83:78:d0:bc:3c:73:d1:90:6b:33:9c:9f:52:
         81:c4:92:f7:74:81:89:c2:56:9d:44:85:d1:01:3c:2e:54:3b:
         20:29:50:68:70:9e:bd:09:e0:5f:66:83:42:6b:a8:7a:53:45:
         22:cb:14:b6:af:f5:26:fa:62:ee:58:81:30:fa:cc:81:e7:88:
         9d:37:c1:f1:b3:1d:62:e0:20:ba:f7:bf:14:77:5f:0f:89:9e:
         56:3e:19:78:7c:94:8e:b0:e1:8f:fa:93:cb:37:9f:c4:9f:e4:
         46:1f:fd:91:12:24:e6:72:99:39:c1:72:cf:76:c2:30:45:eb:
         65:4e:f1:ed:d2:81:00:59:56:fd:9a:92:f8:f1:e1:01:5a:13:
         f0:e7:4d:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNkD4ZSBdGUe2wxCoewhw2eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjM2I4OGNkYjEzZjNlYjEyYTliZTU0YWIxOWJhYTkwNTU5
YjM5NmEwHhcNMjQxMTI1MTYwMjM5WhcNMjQxMTI2MTYwMjM5WjAzMTEwLwYDVQQD
EygzMGQxZmM5ZmQ1YmEyZTRiM2YyNTZjZDhmNGI4NzQxNjU4NDhlNmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslKxa9hHNvICs+/6dKREep6UkIHA
8V9nl6s4hMVvp3hpB5KW7O4JFj50YgX9Qfk0z+E2hNkA9QkLnTKkddi6f7LshonR
WvXEBvD0/8nAsPg5sMqWTwooJbFWKVzuZu56G1opaLTt1oyVdk7dk/G3+Hlp1yf+
Z/5CPzGPxxCQboqUxoRB7QLsuEuinBRT+6aVIdyRknMqauHJwC/8H0fBIa9glVv3
eHdI58hPrMjzgRpJ5U/pDkt5FTG193FdRvMZq01I8rOHNh+VDNyUjfOXCj8yv+NE
CrUzb8p4goxfep9rQ5ulZVkNvFw59SfN9jUzzhTFx8iqDEUelIpeJX+JEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDR/J/Vui5LPyVs2PS4dBZYSObkMB8GA1UdIwQY
MBaAFEw7iM2xPz6xKpvlSrGbqpBVmzlqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVER1SXpiRV9QckVxbS1WS3NadXFrRldiT1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lYzU1ODQtNjYxOC00YjEyLWExMWMt
MzA1NWNiNzI5YmNmLzEvVER1SXpiRV9QckVxbS1WS3NadXFrRldiT1dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9lYzU1ODQtNjYxOC00YjEyLWExMWMtMzA1NWNiNzI5YmNm
LzEvVER1SXpiRV9QckVxbS1WS3NadXFrRldiT1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAljAPSBKs
3kSOaLXjEN3rIiBLQIImD/RBfbgChsaqynkvOHp+lNtDwyUfcTOBGqNkPINh2J81
5pViXqNY3rJAlj4oT2ifGvNAlR70JZZ3NiCw8jCCj3ZwWeAmhtcuGK6gsh6GS6R8
XdnmlUpovD9ea2mDeNC8PHPRkGsznJ9SgcSS93SBicJWnUSF0QE8LlQ7IClQaHCe
vQngX2aDQmuoelNFIssUtq/1Jvpi7liBMPrMgeeInTfB8bMdYuAguve/FHdfD4me
Vj4ZeHyUjrDhj/qTyzefxJ/kRh/9kRIk5nKZOcFyz3bCMEXrZU7x7dKBAFlW/ZqS
+PHhAVoT8OdNdg==
-----END CERTIFICATE-----
Generated at Tue Nov 26 00:58:29 2024 by rpki-client on console-ams.rpki-client.org