Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
File:                     ASkuA6cxeW4dexSLHdI10UQ1L10.mft (raw, json)
Hash identifier:          yljqhxqhM/kDR5BgAjhDmrYyXBmrf5fdCWaQcsXVLTM=
Subject key identifier:   87:5F:92:1A:A1:C3:DC:10:97:EE:B3:EF:71:C7:33:0C:FE:16:D7:89
Authority key identifier: 01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D
Certificate issuer:       /CN=01292e03a731796e1d7b148b1dd235d144352f5d
Certificate serial:       0193674593D0EDE7F8BBF7BCA6EE6D34FFBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
Manifest number:          0C51
Signing time:             Tue 26 Nov 2024 07:00:33 +0000
Manifest this update:     Tue 26 Nov 2024 07:00:33 +0000
Manifest next update:     Wed 27 Nov 2024 07:00:33 +0000
Files and hashes:         1: 3Q-fRC3mcMCjO-XzNDaI8p6NXQY.roa (hash: A2LrEGEFNDMylOdD3M9/KzlVIw+oUrv9pD8QraMoyIo=)
                          2: ASkuA6cxeW4dexSLHdI10UQ1L10.crl (hash: Z75yReGOT/IbAyknvo9hzgGmWnA/QUGIwrejQEC2Pgc=)
                          3: CpLkKYBksC8zUs6zYeEVCwei3V8.roa (hash: Fb/va4I7uYZ+1AwJX0iZb5/VG6/T6uSRO9R6/17i+OQ=)
                          4: bLNpMNkvk0YXTrsGo_sbVIrjvs4.roa (hash: qOsCKvOUAPO0FC1itc1nzqHCocvbz7tnf4bTEnR4tzY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:45:93:d0:ed:e7:f8:bb:f7:bc:a6:ee:6d:34:ff:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01292e03a731796e1d7b148b1dd235d144352f5d
        Validity
            Not Before: Nov 26 07:00:33 2024 GMT
            Not After : Nov 27 07:00:33 2024 GMT
        Subject: CN=875f921aa1c3dc1097eeb3ef71c7330cfe16d789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7c:98:e2:95:b1:c0:00:e9:54:a4:90:ef:79:
                    e6:a6:59:1f:83:51:79:12:70:37:a7:b0:b5:cf:06:
                    11:33:be:d6:b7:a6:e0:26:2b:9a:20:b2:61:b7:ff:
                    8b:da:ce:0b:50:3c:70:bd:de:e6:3a:bd:3f:49:92:
                    0d:fb:7f:a7:0c:37:85:36:9c:dd:47:4a:c1:c0:04:
                    99:03:83:86:b6:77:57:f6:8e:20:7a:aa:52:a3:97:
                    a0:cb:9f:ba:55:d1:d0:96:4d:d5:aa:62:d1:99:0d:
                    7e:dd:26:07:5b:c4:4c:d1:7f:34:62:23:b7:63:7e:
                    4b:37:ea:25:20:ff:b6:1d:92:91:f8:47:7e:f9:fd:
                    ec:40:0c:60:4c:bc:22:77:21:16:4d:8f:2f:37:6c:
                    e3:ae:3e:7f:16:2d:80:8b:e2:b5:de:55:13:75:b5:
                    f2:03:c1:d1:80:f4:3e:50:e4:84:b6:a9:e8:dd:6e:
                    4e:18:22:b6:2b:3d:a9:3e:cb:6a:c2:80:28:24:49:
                    96:69:37:e2:1d:41:73:09:d8:bc:0e:96:15:d0:cc:
                    75:20:83:80:62:56:88:26:69:13:b7:7d:4c:18:e3:
                    ab:d9:e5:6a:ed:76:3d:e1:55:46:46:c4:2d:7c:47:
                    88:7b:d4:38:fb:2a:88:1a:d3:2d:50:a2:b4:40:ed:
                    1f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:5F:92:1A:A1:C3:DC:10:97:EE:B3:EF:71:C7:33:0C:FE:16:D7:89
            X509v3 Authority Key Identifier:
                keyid:01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:5d:4f:c0:39:bd:ae:60:85:28:3a:c5:41:60:86:e8:20:5a:
         9f:71:bf:79:97:44:b1:ff:3c:f9:57:62:8c:44:d5:a0:6f:67:
         b4:1f:9b:69:9f:8a:71:4a:b2:e5:de:a8:4b:cd:f6:29:bf:8c:
         c9:59:92:d4:3e:54:22:d0:04:f6:d8:25:d4:92:c9:f7:4b:d9:
         91:9c:11:a5:90:b3:b9:e1:37:c3:73:a8:a7:fe:0c:db:fb:71:
         c0:bb:f7:09:f7:48:83:2a:33:7b:b6:2a:61:a8:aa:1b:7e:f0:
         00:41:82:fb:b7:85:c4:6a:96:48:cb:66:d0:cb:42:ea:2d:56:
         8e:61:64:18:4d:90:44:e0:bb:c4:38:ce:bd:70:74:86:ed:7a:
         4b:c8:8c:6c:cf:2f:93:12:05:9a:e1:ff:2e:0f:5c:47:22:73:
         98:98:7e:33:b3:79:5f:31:c5:92:dd:26:b9:69:e9:b1:8e:fc:
         71:ec:f1:bf:fd:79:3d:7a:69:db:23:c5:09:11:f9:96:6e:80:
         ce:bb:04:ce:8a:c9:c2:7f:46:dc:b4:85:04:dc:9e:1b:2f:2c:
         f3:1b:cc:f0:c7:e0:ae:d3:c0:87:ab:c7:59:0e:3d:03:52:8e:
         77:cb:c4:d0:5c:1b:c0:03:c7:a7:54:c0:04:6a:f3:30:a4:83:
         e7:5f:20:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNnRZPQ7ef4u/e8pu5tNP+7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMjkyZTAzYTczMTc5NmUxZDdiMTQ4YjFkZDIzNWQxNDQz
NTJmNWQwHhcNMjQxMTI2MDcwMDMzWhcNMjQxMTI3MDcwMDMzWjAzMTEwLwYDVQQD
Eyg4NzVmOTIxYWExYzNkYzEwOTdlZWIzZWY3MWM3MzMwY2ZlMTZkNzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13yY4pWxwADpVKSQ73nmplkfg1F5
EnA3p7C1zwYRM77Wt6bgJiuaILJht/+L2s4LUDxwvd7mOr0/SZIN+3+nDDeFNpzd
R0rBwASZA4OGtndX9o4geqpSo5egy5+6VdHQlk3VqmLRmQ1+3SYHW8RM0X80YiO3
Y35LN+olIP+2HZKR+Ed++f3sQAxgTLwidyEWTY8vN2zjrj5/Fi2Ai+K13lUTdbXy
A8HRgPQ+UOSEtqno3W5OGCK2Kz2pPstqwoAoJEmWaTfiHUFzCdi8DpYV0Mx1IIOA
YlaIJmkTt31MGOOr2eVq7XY94VVGRsQtfEeIe9Q4+yqIGtMtUKK0QO0f2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdfkhqhw9wQl+6z73HHMwz+FteJMB8GA1UdIwQY
MBaAFAEpLgOnMXluHXsUix3SNdFENS9dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVNrdUE2Y3hlVzRkZXhTTEhkSTEwVVExTDEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zYWEwZjUtZWFlNS00OWEzLThlZTkt
MGRmN2RmNGQ1YjAxLzEvQVNrdUE2Y3hlVzRkZXhTTEhkSTEwVVExTDEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zYWEwZjUtZWFlNS00OWEzLThlZTktMGRmN2RmNGQ1YjAx
LzEvQVNrdUE2Y3hlVzRkZXhTTEhkSTEwVVExTDEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjV1PwDm9
rmCFKDrFQWCG6CBan3G/eZdEsf88+VdijETVoG9ntB+baZ+KcUqy5d6oS832Kb+M
yVmS1D5UItAE9tgl1JLJ90vZkZwRpZCzueE3w3Oop/4M2/txwLv3CfdIgyoze7Yq
YaiqG37wAEGC+7eFxGqWSMtm0MtC6i1WjmFkGE2QROC7xDjOvXB0hu16S8iMbM8v
kxIFmuH/Lg9cRyJzmJh+M7N5XzHFkt0muWnpsY78cezxv/15PXpp2yPFCRH5lm6A
zrsEzorJwn9G3LSFBNyeGy8s8xvM8MfgrtPAh6vHWQ49A1KOd8vE0FwbwAPHp1TA
BGrzMKSD518gcw==
-----END CERTIFICATE-----