Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
File:                     S11Foqu5YNK851js5zOxJtyn5xs.mft (raw, json)
Hash identifier:          2CuV5uvoLb03bI3F1vTCVAfb/YegPIR4BTGWVOvMNbE=
Subject key identifier:   4B:B5:33:F2:AD:12:D1:E1:E6:F1:4E:60:F8:8D:FE:85:DD:5A:3C:C5
Authority key identifier: 4B:5D:45:A2:AB:B9:60:D2:BC:E7:58:EC:E7:33:B1:26:DC:A7:E7:1B
Certificate issuer:       /CN=4b5d45a2abb960d2bce758ece733b126dca7e71b
Certificate serial:       019234371697398B7D555CC6FD5F13AC8834
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
Manifest number:          11A4
Signing time:             Fri 27 Sep 2024 16:01:18 +0000
Manifest this update:     Fri 27 Sep 2024 16:01:18 +0000
Manifest next update:     Sat 28 Sep 2024 16:01:18 +0000
Files and hashes:         1: GkXZBllQ4GO0CiGlTFqYJlhIxcU.roa (hash: 4jKsz0aaQLkIhRXwDr/RrS3nLa4pQgYKzO7xgrFTUTs=)
                          2: S11Foqu5YNK851js5zOxJtyn5xs.crl (hash: +PBMeTDfyeSNWXbplJKyPHm7G4FYCJ6WW1YZk1zZkLs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:34:37:16:97:39:8b:7d:55:5c:c6:fd:5f:13:ac:88:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b5d45a2abb960d2bce758ece733b126dca7e71b
        Validity
            Not Before: Sep 27 16:01:18 2024 GMT
            Not After : Sep 28 16:01:18 2024 GMT
        Subject: CN=4bb533f2ad12d1e1e6f14e60f88dfe85dd5a3cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8f:fc:cc:1a:62:c0:60:7e:e9:f0:00:8f:16:
                    05:ed:e0:75:77:88:b8:c0:4e:bd:96:c1:ed:6b:36:
                    b1:2c:fc:83:2e:d3:c7:b3:d1:46:9d:73:21:5a:b2:
                    97:d7:ae:52:ba:83:c8:29:6a:d7:53:1c:7d:41:9b:
                    5c:cc:6e:70:13:dd:89:e5:05:68:e2:5f:be:9d:10:
                    6e:9f:cc:af:40:6f:a8:97:e1:fd:61:6d:4a:de:30:
                    96:c8:cb:9e:c5:5d:67:38:de:cc:40:d9:c1:26:dc:
                    00:0d:18:f5:20:ee:a7:da:2b:a0:d3:f4:b2:5f:32:
                    f4:1b:80:24:a8:98:01:84:57:f2:65:7c:01:1d:9d:
                    76:c4:23:d6:3a:59:bb:0f:5c:30:96:54:c8:e8:3c:
                    55:55:bf:61:ea:18:1e:ab:7b:a0:91:48:cd:3c:9e:
                    54:c8:a9:eb:78:f7:0b:81:91:ec:14:28:5d:16:d4:
                    1f:9a:7c:ed:eb:d3:45:4f:cd:8b:c9:6d:c1:0a:6a:
                    c2:7f:b1:f5:b9:f6:69:92:28:cd:7d:a7:c9:21:ec:
                    01:d1:10:70:e7:3f:92:5a:8c:34:f6:4f:1f:d2:c1:
                    49:ea:32:9c:b8:3c:d9:b9:a5:c8:15:4f:e2:4f:a2:
                    d2:48:4f:7e:06:fa:45:5c:81:20:05:bb:b2:b3:9b:
                    1a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B5:33:F2:AD:12:D1:E1:E6:F1:4E:60:F8:8D:FE:85:DD:5A:3C:C5
            X509v3 Authority Key Identifier:
                keyid:4B:5D:45:A2:AB:B9:60:D2:BC:E7:58:EC:E7:33:B1:26:DC:A7:E7:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e4:49:bd:ec:e1:98:f0:b8:7c:5b:bc:2b:ca:47:80:1b:e4:
         08:c0:8c:54:cd:66:4b:97:58:32:1d:82:0d:bc:5e:cb:e0:4d:
         d7:20:bf:31:05:dc:19:fd:be:e5:ef:46:5a:2c:c0:be:63:1a:
         71:dc:cb:ad:21:cd:09:0e:1d:3f:7e:05:6e:4a:ad:97:e1:75:
         d4:64:e6:c2:41:04:1a:ff:94:2e:fc:f6:fe:59:2b:4f:b6:a9:
         03:55:28:fe:14:87:33:b8:45:33:30:e0:64:ff:7b:74:90:0a:
         31:f6:6d:07:15:84:0d:e3:2c:5c:89:8d:04:f9:e4:dc:d5:58:
         1f:cf:27:78:90:66:44:44:cc:55:06:b5:dc:25:a7:2b:38:14:
         70:1a:c7:9b:98:1b:07:23:35:9b:14:2b:53:77:4b:81:92:7a:
         e3:14:1d:eb:60:ee:ab:89:7d:23:70:a0:63:da:a8:4d:f3:af:
         e9:79:19:56:56:ab:51:25:27:47:51:d1:80:ef:80:9d:81:61:
         f0:2d:3d:29:73:de:e2:f7:49:7f:ac:74:66:f0:d2:70:0e:9e:
         68:a1:10:10:93:f5:b7:cc:eb:85:03:6f:86:ac:2f:d9:21:ed:
         b2:67:53:90:a5:62:33:d0:17:81:37:4e:bc:55:2b:e7:ec:4a:
         00:d8:c2:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI0NxaXOYt9VVzG/V8TrIg0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNWQ0NWEyYWJiOTYwZDJiY2U3NThlY2U3MzNiMTI2ZGNh
N2U3MWIwHhcNMjQwOTI3MTYwMTE4WhcNMjQwOTI4MTYwMTE4WjAzMTEwLwYDVQQD
Eyg0YmI1MzNmMmFkMTJkMWUxZTZmMTRlNjBmODhkZmU4NWRkNWEzY2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4/8zBpiwGB+6fAAjxYF7eB1d4i4
wE69lsHtazaxLPyDLtPHs9FGnXMhWrKX165SuoPIKWrXUxx9QZtczG5wE92J5QVo
4l++nRBun8yvQG+ol+H9YW1K3jCWyMuexV1nON7MQNnBJtwADRj1IO6n2iug0/Sy
XzL0G4AkqJgBhFfyZXwBHZ12xCPWOlm7D1wwllTI6DxVVb9h6hgeq3ugkUjNPJ5U
yKnrePcLgZHsFChdFtQfmnzt69NFT82LyW3BCmrCf7H1ufZpkijNfafJIewB0RBw
5z+SWow09k8f0sFJ6jKcuDzZuaXIFU/iT6LSSE9+BvpFXIEgBbuys5sa2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEu1M/KtEtHh5vFOYPiN/oXdWjzFMB8GA1UdIwQY
MBaAFEtdRaKruWDSvOdY7OczsSbcp+cbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzExRm9xdTVZTks4NTFqczV6T3hKdHluNXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9hOTA1ZTktZjkzYi00ZDYwLTgxMDgt
ODEwYjlmNWNjNDE1LzEvUzExRm9xdTVZTks4NTFqczV6T3hKdHluNXhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9hOTA1ZTktZjkzYi00ZDYwLTgxMDgtODEwYjlmNWNjNDE1
LzEvUzExRm9xdTVZTks4NTFqczV6T3hKdHluNXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVORJvezh
mPC4fFu8K8pHgBvkCMCMVM1mS5dYMh2CDbxey+BN1yC/MQXcGf2+5e9GWizAvmMa
cdzLrSHNCQ4dP34Fbkqtl+F11GTmwkEEGv+ULvz2/lkrT7apA1Uo/hSHM7hFMzDg
ZP97dJAKMfZtBxWEDeMsXImNBPnk3NVYH88neJBmRETMVQa13CWnKzgUcBrHm5gb
ByM1mxQrU3dLgZJ64xQd62Duq4l9I3CgY9qoTfOv6XkZVlarUSUnR1HRgO+AnYFh
8C09KXPe4vdJf6x0ZvDScA6eaKEQEJP1t8zrhQNvhqwv2SHtsmdTkKViM9AXgTdO
vFUr5+xKANjC6A==
-----END CERTIFICATE-----
Generated at Fri Sep 27 22:17:08 2024 by rpki-client on console-ams.rpki-client.org