Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
File:                     hbhx1pOVYQRld5MjuRs05pv89bU.mft (raw, json)
Hash identifier:          eylsFGlZBRMm4kSyZG8dVwW0h5NySUz4LqElWBTXYJ8=
Subject key identifier:   38:9E:D6:86:13:BB:C3:A7:95:CC:A0:46:E6:50:FC:C1:E3:3B:AA:94
Authority key identifier: 85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
Certificate issuer:       /CN=85b871d69395610465779323b91b34e69bfcf5b5
Certificate serial:       019369D98F27E63623D254576A79C6D5C671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
Manifest number:          0268
Signing time:             Tue 26 Nov 2024 19:01:25 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:25 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:25 +0000
Files and hashes:         1: YXRb0O3ZdTSv45hLE-gPKHVB4qc.roa (hash: XczFpXy0dgzeEV02IPabBqjfOunnj24CRlo8D1ar/MA=)
                          2: hbhx1pOVYQRld5MjuRs05pv89bU.crl (hash: omSyVXJrstmJD0OXy0rdFc4quhO2dilDkCpvLcXfVZM=)
                          3: ye9q6fBOtBdrJ1biqlaut0364-Q.roa (hash: 4YzAhPcVJzz/MQADUtuzGNrCv3yG7g5ZPI7upePcINU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:8f:27:e6:36:23:d2:54:57:6a:79:c6:d5:c6:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85b871d69395610465779323b91b34e69bfcf5b5
        Validity
            Not Before: Nov 26 19:01:25 2024 GMT
            Not After : Nov 27 19:01:25 2024 GMT
        Subject: CN=389ed68613bbc3a795cca046e650fcc1e33baa94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:02:95:47:7a:81:99:e6:c1:f8:32:47:b6:c1:
                    56:7a:51:3e:ee:c7:1a:12:f2:c6:30:d6:4e:1a:e5:
                    c0:9a:d5:e7:4a:c9:c2:16:11:3a:9f:ec:2e:17:84:
                    8b:4f:41:90:11:f7:bc:b5:b3:49:37:f1:2e:6d:44:
                    97:3e:41:e0:fb:3a:d5:2f:25:26:09:79:30:da:9a:
                    6a:81:d3:42:d4:5f:92:ed:84:7c:cf:cf:be:21:f3:
                    47:45:44:ce:80:c1:76:e3:4d:ce:1f:3d:cf:a7:b6:
                    5e:7a:d2:12:9e:f9:37:37:df:63:8d:e2:54:3c:53:
                    bf:06:e9:5e:50:75:e3:6b:d4:8e:4d:31:e7:7d:e7:
                    53:f9:34:9a:fa:6f:75:ec:00:d8:2a:7e:1a:f2:67:
                    8f:3f:47:04:93:0d:c3:9d:c1:1d:0a:ee:e6:51:bb:
                    8d:d5:93:9b:c7:d6:6d:fc:e6:5c:e4:8f:c5:51:07:
                    e4:88:ef:2d:74:29:8f:cc:2f:5b:d1:47:c4:bf:6a:
                    1e:85:fd:4f:ec:6f:af:ce:27:bb:53:97:bd:b7:4f:
                    9b:86:06:d1:e7:a4:ab:fd:68:20:20:41:2a:22:1c:
                    e3:3a:67:bf:ca:db:0e:a6:24:bc:57:cb:7a:4f:ba:
                    c5:3c:ce:3a:12:58:a1:58:22:fc:de:c6:01:04:b5:
                    95:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9E:D6:86:13:BB:C3:A7:95:CC:A0:46:E6:50:FC:C1:E3:3B:AA:94
            X509v3 Authority Key Identifier:
                keyid:85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:59:91:bd:71:5b:07:2e:be:18:d7:95:ee:20:67:b1:29:96:
         ec:8d:be:cb:8b:da:ab:21:65:7d:f9:cc:36:97:4e:44:94:0d:
         13:45:ba:5a:8e:4f:24:79:9b:0e:fa:a0:dc:f8:8d:da:c9:1d:
         37:fb:0d:aa:da:c5:f2:14:af:2a:cb:1f:01:ea:0f:4a:fa:51:
         b7:19:b5:64:72:80:67:b5:b0:40:70:c7:3e:c9:96:27:fb:c5:
         b6:8f:bc:66:b7:d9:05:fb:da:f2:0e:e3:ad:49:8f:91:13:9f:
         e4:50:92:77:e3:85:78:55:59:85:72:61:16:52:75:a2:3f:1f:
         fd:22:14:cc:3d:fd:86:a8:40:12:9c:98:d5:2a:14:39:c9:50:
         e3:9f:37:54:83:97:18:67:8c:44:75:2a:a8:2f:cf:a3:90:74:
         17:3a:88:31:48:1c:63:2a:8d:62:57:7e:b3:c5:ad:ce:18:9b:
         de:01:a7:88:da:ae:1c:3a:1f:f9:0f:63:43:40:c1:c8:58:67:
         59:53:c1:4e:86:b3:2c:64:92:4d:66:55:5a:b0:0d:bf:4a:25:
         1b:f1:c0:29:30:e2:64:33:c1:5f:0e:7a:7f:20:82:7d:74:9f:
         e2:00:a2:26:21:92:04:88:1c:63:5d:6c:ac:a0:30:2c:09:a5:
         6d:f2:6a:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2Y8n5jYj0lRXannG1cZxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1Yjg3MWQ2OTM5NTYxMDQ2NTc3OTMyM2I5MWIzNGU2OWJm
Y2Y1YjUwHhcNMjQxMTI2MTkwMTI1WhcNMjQxMTI3MTkwMTI1WjAzMTEwLwYDVQQD
EygzODllZDY4NjEzYmJjM2E3OTVjY2EwNDZlNjUwZmNjMWUzM2JhYTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwKVR3qBmebB+DJHtsFWelE+7sca
EvLGMNZOGuXAmtXnSsnCFhE6n+wuF4SLT0GQEfe8tbNJN/EubUSXPkHg+zrVLyUm
CXkw2ppqgdNC1F+S7YR8z8++IfNHRUTOgMF2403OHz3Pp7ZeetISnvk3N99jjeJU
PFO/BuleUHXja9SOTTHnfedT+TSa+m917ADYKn4a8mePP0cEkw3DncEdCu7mUbuN
1ZObx9Zt/OZc5I/FUQfkiO8tdCmPzC9b0UfEv2oehf1P7G+vzie7U5e9t0+bhgbR
56Sr/WggIEEqIhzjOme/ytsOpiS8V8t6T7rFPM46ElihWCL83sYBBLWVzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDie1oYTu8OnlcygRuZQ/MHjO6qUMB8GA1UdIwQY
MBaAFIW4cdaTlWEEZXeTI7kbNOab/PW1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGJoeDFwT1ZZUVJsZDVNanVSczA1cHY4OWJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82NzQ0YWMtOWExYy00MDEzLWJlMDAt
MjZhMGI4ZGVmMGMzLzEvaGJoeDFwT1ZZUVJsZDVNanVSczA1cHY4OWJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS82NzQ0YWMtOWExYy00MDEzLWJlMDAtMjZhMGI4ZGVmMGMz
LzEvaGJoeDFwT1ZZUVJsZDVNanVSczA1cHY4OWJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOlmRvXFb
By6+GNeV7iBnsSmW7I2+y4vaqyFlffnMNpdORJQNE0W6Wo5PJHmbDvqg3PiN2skd
N/sNqtrF8hSvKssfAeoPSvpRtxm1ZHKAZ7WwQHDHPsmWJ/vFto+8ZrfZBfva8g7j
rUmPkROf5FCSd+OFeFVZhXJhFlJ1oj8f/SIUzD39hqhAEpyY1SoUOclQ4583VIOX
GGeMRHUqqC/Po5B0FzqIMUgcYyqNYld+s8Wtzhib3gGniNquHDof+Q9jQ0DByFhn
WVPBToazLGSSTWZVWrANv0olG/HAKTDiZDPBXw56fyCCfXSf4gCiJiGSBIgcY11s
rKAwLAmlbfJqdQ==
-----END CERTIFICATE-----