Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
File:                     9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft (raw, json)
Hash identifier:          CsFRSG3ijXLVpTLV7uvJtuYOjkjtjVIqLuc8Un3E+Y0=
Subject key identifier:   B5:4B:32:DC:79:6E:55:95:5B:E0:6B:0D:58:84:38:2C:BB:4C:C9:0D
Authority key identifier: F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
Certificate issuer:       /CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Certificate serial:       01936BC84F19F4805A09A1DDF98F6DEB54E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
Manifest number:          03DF
Signing time:             Wed 27 Nov 2024 04:01:49 +0000
Manifest this update:     Wed 27 Nov 2024 04:01:49 +0000
Manifest next update:     Thu 28 Nov 2024 04:01:49 +0000
Files and hashes:         1: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl (hash: 8u2pcYCgllcnccF9Ntr0TTMsYP4nwP30schVcdEfXbA=)
                          2: lafIxv08ZBU1kMg4vU91qV80Yh0.roa (hash: LCpr7695QWq1Dm7ylhu4ajKQ06op85kmAw0/20WE5uU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 23:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:c8:4f:19:f4:80:5a:09:a1:dd:f9:8f:6d:eb:54:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
        Validity
            Not Before: Nov 27 04:01:49 2024 GMT
            Not After : Nov 28 04:01:49 2024 GMT
        Subject: CN=b54b32dc796e55955be06b0d5884382cbb4cc90d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:08:d1:b3:44:62:01:41:f2:ae:6d:43:76:35:
                    55:2e:8d:14:3d:28:c4:c8:05:54:af:8f:08:bd:ee:
                    ee:4e:f8:af:d8:cd:c4:a5:69:d4:ce:71:2d:c5:86:
                    28:0a:7f:c6:7c:09:34:47:1b:e8:1c:b4:e1:c1:4f:
                    6d:39:97:57:33:fa:e6:64:25:76:d3:81:a8:8c:4e:
                    dd:48:99:7e:cc:00:b2:64:c3:99:a0:78:0b:2d:fe:
                    42:53:ed:5b:eb:d3:83:60:64:b4:3a:3c:84:53:42:
                    a3:f7:54:ba:e7:e5:9c:d2:64:94:85:c8:cd:67:da:
                    09:d4:ec:31:b4:9a:59:84:ac:f3:b6:4b:09:ac:82:
                    25:5a:4f:21:77:d3:b8:4e:d1:43:fc:67:93:29:40:
                    5b:55:3f:7c:15:eb:15:9d:23:18:bf:13:57:e8:32:
                    ba:e4:3e:b9:10:dc:84:ad:67:88:de:41:41:ea:85:
                    32:27:4a:2c:2e:85:9e:d4:fc:65:99:86:d1:cd:f5:
                    3b:8d:0b:40:19:da:20:57:9e:26:64:6b:2e:86:d2:
                    99:7c:5a:54:7a:ba:73:14:62:10:8e:03:59:6e:6f:
                    0d:fd:de:67:7e:b7:4c:8e:cd:00:7a:2c:19:8c:c7:
                    05:f9:ab:2a:33:ae:13:43:2b:40:52:57:e9:1b:87:
                    08:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4B:32:DC:79:6E:55:95:5B:E0:6B:0D:58:84:38:2C:BB:4C:C9:0D
            X509v3 Authority Key Identifier:
                keyid:F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:20:1d:b7:97:19:eb:63:6a:3a:c4:fe:98:52:a7:18:5d:b0:
         f5:5b:b0:eb:9b:56:15:27:19:72:52:d7:fb:5c:fc:97:96:51:
         e1:bc:37:27:1a:8e:5e:3a:ba:12:2f:91:5a:88:73:3d:c2:2e:
         c7:61:da:a1:d9:89:1f:1a:62:8f:f4:b4:f1:ac:4c:df:b3:ad:
         2e:5e:b5:fa:fa:f0:80:bd:f3:2a:d4:78:3a:57:2d:e1:ba:16:
         b4:6b:61:5c:00:b6:36:ae:6b:fa:d2:b7:e3:e0:22:19:c9:b9:
         b1:27:d1:4b:6b:13:37:9d:4a:84:71:ef:6b:35:83:8c:35:7e:
         31:5e:b0:1b:be:f8:33:67:b0:41:e9:89:f2:c3:5b:8a:65:10:
         2c:ff:60:2a:e3:55:92:24:60:89:81:a1:be:0e:7d:18:bf:07:
         d7:cf:b4:81:d4:ad:8e:7c:bb:da:9f:37:82:3c:95:87:74:ad:
         6f:f7:cb:5c:60:b6:75:ec:da:bd:ca:23:6e:be:07:b6:44:0d:
         36:dd:18:12:85:b3:67:bd:72:8d:2c:b6:62:8a:f3:37:b0:0e:
         b0:8e:82:34:cd:65:5e:c6:68:61:a9:ac:7c:b4:4d:5d:20:72:
         51:73:f5:c7:9e:38:98:59:9d:94:f8:ce:10:2e:79:65:51:f1:
         c8:cb:38:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNryE8Z9IBaCaHd+Y9t61ThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MmU5YTA0M2YzMTI4MzM2ZTNjOTdjMjU0MjU3NGM4YWQ5
MjlhYzkwHhcNMjQxMTI3MDQwMTQ5WhcNMjQxMTI4MDQwMTQ5WjAzMTEwLwYDVQQD
EyhiNTRiMzJkYzc5NmU1NTk1NWJlMDZiMGQ1ODg0MzgyY2JiNGNjOTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwjRs0RiAUHyrm1DdjVVLo0UPSjE
yAVUr48Ive7uTviv2M3EpWnUznEtxYYoCn/GfAk0RxvoHLThwU9tOZdXM/rmZCV2
04GojE7dSJl+zACyZMOZoHgLLf5CU+1b69ODYGS0OjyEU0Kj91S65+Wc0mSUhcjN
Z9oJ1OwxtJpZhKzztksJrIIlWk8hd9O4TtFD/GeTKUBbVT98FesVnSMYvxNX6DK6
5D65ENyErWeI3kFB6oUyJ0osLoWe1PxlmYbRzfU7jQtAGdogV54mZGsuhtKZfFpU
erpzFGIQjgNZbm8N/d5nfrdMjs0AeiwZjMcF+asqM64TQytAUlfpG4cI1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVLMtx5blWVW+BrDViEOCy7TMkNMB8GA1UdIwQY
MBaAFPUumgQ/MSgzbjyXwlQldMitkprJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mYjNlOTgtZDAwZi00NWRkLWJkMTkt
ZWZmOGI5NWQyMGM1LzEvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mYjNlOTgtZDAwZi00NWRkLWJkMTktZWZmOGI5NWQyMGM1
LzEvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeCAdt5cZ
62NqOsT+mFKnGF2w9Vuw65tWFScZclLX+1z8l5ZR4bw3JxqOXjq6Ei+RWohzPcIu
x2HaodmJHxpij/S08axM37OtLl61+vrwgL3zKtR4Olct4boWtGthXAC2Nq5r+tK3
4+AiGcm5sSfRS2sTN51KhHHvazWDjDV+MV6wG774M2ewQemJ8sNbimUQLP9gKuNV
kiRgiYGhvg59GL8H18+0gdStjny72p83gjyVh3Stb/fLXGC2dezavcojbr4HtkQN
Nt0YEoWzZ71yjSy2YorzN7AOsI6CNM1lXsZoYamsfLRNXSByUXP1x544mFmdlPjO
EC55ZVHxyMs4eQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 06:06:03 2024 by rpki-client on console-fra.rpki-client.org