Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft
File:                     TLIktT7JyLF_MYlbFqjUVx8OaXA.mft (raw, json)
Hash identifier:          uXdq4bwBUzP9NDvltjUGqJW/Yqb7ET94LSPKtjd+f1g=
Subject key identifier:   DF:9F:92:45:1C:0F:B7:F2:7B:C2:B0:DD:08:56:97:53:84:37:C0:DC
Authority key identifier: 4C:B2:24:B5:3E:C9:C8:B1:7F:31:89:5B:16:A8:D4:57:1F:0E:69:70
Certificate issuer:       /CN=4cb224b53ec9c8b17f31895b16a8d4571f0e6970
Certificate serial:       019358E5111A2BD97F8DDA1D4BF00280DAD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft
Manifest number:          010C
Signing time:             Sat 23 Nov 2024 12:00:27 +0000
Manifest this update:     Sat 23 Nov 2024 12:00:27 +0000
Manifest next update:     Sun 24 Nov 2024 12:00:27 +0000
Files and hashes:         1: 7L9Bk7RPBjRGmpTBp_ULQJeVjnE.roa (hash: 7rqf2J+X5tuaBE99eXsDlX7DZ6AjyGGh8rI0JpB0N7w=)
                          2: TLIktT7JyLF_MYlbFqjUVx8OaXA.crl (hash: yeZN+1UV0Sy+XxCiRBjwwGspGVyHJkfBIwI2of/aiCA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:e5:11:1a:2b:d9:7f:8d:da:1d:4b:f0:02:80:da:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cb224b53ec9c8b17f31895b16a8d4571f0e6970
        Validity
            Not Before: Nov 23 12:00:27 2024 GMT
            Not After : Nov 24 12:00:27 2024 GMT
        Subject: CN=df9f92451c0fb7f27bc2b0dd085697538437c0dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a0:28:0f:32:85:0c:36:87:0b:b3:5b:9d:0e:
                    b0:6d:ae:c2:72:6f:73:9d:ed:3c:b6:11:88:5f:33:
                    bc:94:e0:f7:8b:e0:d6:a1:b2:e7:40:03:a2:10:2c:
                    eb:1a:bc:e9:c5:6e:57:9f:66:16:7a:88:54:f9:bf:
                    7b:c5:97:82:6d:20:a7:42:df:3e:a8:7e:f0:44:57:
                    80:ee:03:58:50:4b:83:8f:8c:1d:8e:70:90:21:49:
                    60:07:65:98:5e:87:15:ce:c7:64:91:9a:e0:f5:a4:
                    b3:9c:1a:03:99:ef:0a:eb:97:d1:ee:27:37:86:a4:
                    16:64:51:b2:f1:b8:00:89:72:e9:ad:fd:b0:5c:49:
                    bf:46:69:dc:6d:f1:81:6b:6f:c8:a0:c8:95:e4:40:
                    90:ca:12:67:c0:6b:72:11:cb:63:90:56:13:fc:81:
                    3f:52:e3:8f:55:88:59:29:07:38:60:dc:e5:b1:4e:
                    84:f5:d5:b9:51:26:05:fe:8a:87:2e:7d:12:21:12:
                    67:69:cb:6b:51:c1:75:8f:ca:ef:64:54:1c:14:4e:
                    0b:22:ec:75:88:bc:ef:d1:0b:ed:be:70:a7:97:1f:
                    f0:2c:57:7c:41:ca:ed:0a:17:0c:95:f5:a9:5d:4b:
                    93:e6:00:86:e9:19:24:f2:ff:a1:0c:da:4d:b0:33:
                    54:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9F:92:45:1C:0F:B7:F2:7B:C2:B0:DD:08:56:97:53:84:37:C0:DC
            X509v3 Authority Key Identifier:
                keyid:4C:B2:24:B5:3E:C9:C8:B1:7F:31:89:5B:16:A8:D4:57:1F:0E:69:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:79:37:0a:3c:2d:32:dd:8d:0c:fe:c0:66:6b:6f:94:f6:e8:
         e8:b7:71:30:97:73:ff:6f:e9:cf:51:3b:80:79:2c:94:b9:6f:
         cd:5d:12:d0:98:ec:4f:4e:75:1c:b4:4a:c9:ee:c9:c0:36:d3:
         25:c2:15:ea:00:38:8f:ec:80:6a:2b:cf:32:6a:98:5f:1c:2b:
         a5:58:88:aa:86:8b:6d:87:fe:4f:b5:d0:f1:99:f8:94:41:09:
         8c:c6:eb:c7:4e:0b:cb:5c:fc:70:f3:98:5d:da:2d:da:5b:bf:
         91:13:12:6d:b5:33:67:a4:39:e6:98:79:62:4d:d6:39:d2:fe:
         b8:75:c9:78:87:fb:48:59:62:8d:fa:da:52:c1:01:2c:51:1b:
         2a:be:3e:0d:f0:12:30:09:c2:5a:b4:28:39:99:a1:47:63:b9:
         71:d9:a4:22:c1:87:1e:0e:8b:0d:08:71:a6:35:b5:a9:eb:0e:
         1a:f2:d4:73:d8:36:80:ad:b8:0c:b8:fc:dd:3a:df:a1:6d:50:
         14:08:45:46:65:34:38:5d:4b:39:20:cb:84:72:e2:4e:cd:f0:
         48:dd:0f:aa:fe:73:a7:fe:05:c6:26:ec:fa:ad:56:a7:12:01:
         40:2d:f2:ff:27:ce:6b:40:69:14:e7:e4:b4:f0:7e:a3:ce:01:
         e2:ce:82:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNY5REaK9l/jdodS/ACgNrSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYjIyNGI1M2VjOWM4YjE3ZjMxODk1YjE2YThkNDU3MWYw
ZTY5NzAwHhcNMjQxMTIzMTIwMDI3WhcNMjQxMTI0MTIwMDI3WjAzMTEwLwYDVQQD
EyhkZjlmOTI0NTFjMGZiN2YyN2JjMmIwZGQwODU2OTc1Mzg0MzdjMGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6AoDzKFDDaHC7NbnQ6wba7Ccm9z
ne08thGIXzO8lOD3i+DWobLnQAOiECzrGrzpxW5Xn2YWeohU+b97xZeCbSCnQt8+
qH7wRFeA7gNYUEuDj4wdjnCQIUlgB2WYXocVzsdkkZrg9aSznBoDme8K65fR7ic3
hqQWZFGy8bgAiXLprf2wXEm/RmncbfGBa2/IoMiV5ECQyhJnwGtyEctjkFYT/IE/
UuOPVYhZKQc4YNzlsU6E9dW5USYF/oqHLn0SIRJnactrUcF1j8rvZFQcFE4LIux1
iLzv0QvtvnCnlx/wLFd8QcrtChcMlfWpXUuT5gCG6Rkk8v+hDNpNsDNU8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+fkkUcD7fye8Kw3QhWl1OEN8DcMB8GA1UdIwQY
MBaAFEyyJLU+ycixfzGJWxao1FcfDmlwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVExJa3RUN0p5TEZfTVlsYkZxalVWeDhPYVhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9lMmFhYzUtYzA0ZC00YWUwLThiZjMt
OWUzZDg5ZDllNjE3LzEvVExJa3RUN0p5TEZfTVlsYkZxalVWeDhPYVhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9lMmFhYzUtYzA0ZC00YWUwLThiZjMtOWUzZDg5ZDllNjE3
LzEvVExJa3RUN0p5TEZfTVlsYkZxalVWeDhPYVhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARnk3Cjwt
Mt2NDP7AZmtvlPbo6LdxMJdz/2/pz1E7gHkslLlvzV0S0JjsT051HLRKye7JwDbT
JcIV6gA4j+yAaivPMmqYXxwrpViIqoaLbYf+T7XQ8Zn4lEEJjMbrx04Ly1z8cPOY
Xdot2lu/kRMSbbUzZ6Q55ph5Yk3WOdL+uHXJeIf7SFlijfraUsEBLFEbKr4+DfAS
MAnCWrQoOZmhR2O5cdmkIsGHHg6LDQhxpjW1qesOGvLUc9g2gK24DLj83TrfoW1Q
FAhFRmU0OF1LOSDLhHLiTs3wSN0Pqv5zp/4Fxibs+q1WpxIBQC3y/yfOa0BpFOfk
tPB+o84B4s6CbA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 14:55:34 2024 by rpki-client on console-ams.rpki-client.org