Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
File:                     448QoseS0NNlZ4o2yn9_FAnKOv0.mft (raw, json)
Hash identifier:          Cv78ooKs6TGd3/4wL/6gvI1YEl/8x1BkAy+C/dotrjY=
Subject key identifier:   FC:B4:BA:23:CD:19:47:25:C3:B6:40:5A:85:DC:C8:5B:5A:F0:AD:84
Authority key identifier: E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
Certificate issuer:       /CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Certificate serial:       0193572DA1A7BA8D18A36558AAFF4E4CA7A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 04:00:28 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:28 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:28 +0000
Files and hashes:         1: 448QoseS0NNlZ4o2yn9_FAnKOv0.crl (hash: Zt5RbRCshOakyCk/93BHRj3Q3HDMZa5C5cVjI17rMdE=)
                          2: InxReL7uJlPszmJ-svuoM4a5NxE.roa (hash: HVWUl84d23dPqIR0rkHwTHtI0+vKvKlpIOWa57FLaXc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:a1:a7:ba:8d:18:a3:65:58:aa:ff:4e:4c:a7:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
        Validity
            Not Before: Nov 23 04:00:28 2024 GMT
            Not After : Nov 24 04:00:28 2024 GMT
        Subject: CN=fcb4ba23cd194725c3b6405a85dcc85b5af0ad84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7e:aa:f1:7a:06:9b:d0:6b:1a:8d:37:8d:3b:
                    37:9d:df:99:0e:2b:b4:4f:d9:17:81:50:38:0e:cf:
                    d1:3a:d5:84:21:85:40:9c:aa:13:5c:b0:b5:a2:9b:
                    fe:4d:36:93:9e:7e:2f:40:c1:28:6f:6d:b3:6a:80:
                    e7:b4:a4:66:62:e0:4e:0e:83:cf:2e:0b:e0:59:da:
                    ab:7b:3b:41:15:84:7d:a5:cb:94:7a:92:91:42:52:
                    5a:91:6b:8b:1a:3f:56:39:ec:d7:2d:1b:68:f4:9d:
                    bb:49:9f:2c:22:93:43:b1:48:8d:82:45:a8:34:b7:
                    65:da:24:c1:f4:00:4c:e1:38:25:b0:22:90:d4:d1:
                    f7:c9:87:6b:a6:42:84:17:bf:98:b4:b7:ea:3a:d0:
                    7e:55:e2:62:9b:3d:9a:eb:11:45:f1:bd:d0:d3:bc:
                    a5:23:cf:3e:88:b1:2b:2c:4b:db:57:32:e4:3c:94:
                    fd:9c:5f:27:03:66:f0:a8:6f:37:8f:b8:2a:f0:5a:
                    2b:35:76:12:57:da:2f:f3:79:eb:35:d2:50:41:f8:
                    6f:aa:7b:e5:6a:59:d5:d4:13:b3:2b:91:09:3a:48:
                    d2:cd:12:59:f6:04:dc:89:85:36:d6:00:79:14:7d:
                    32:2b:26:2b:49:af:5d:75:13:b5:c2:54:00:b9:78:
                    c7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B4:BA:23:CD:19:47:25:C3:B6:40:5A:85:DC:C8:5B:5A:F0:AD:84
            X509v3 Authority Key Identifier:
                keyid:E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:10:49:90:5e:ea:07:b7:0d:d6:ea:92:10:d9:74:d6:45:fd:
         01:c4:93:c3:21:25:48:60:25:6e:02:a9:c9:3c:9f:99:af:04:
         5a:d5:60:5d:5e:a6:8c:d3:f6:86:97:41:2b:22:29:0f:f2:d4:
         30:87:41:54:3b:04:e4:52:aa:2b:cb:93:8d:16:90:ec:52:2f:
         a3:47:7e:f2:87:6d:2f:09:14:b7:2c:e5:2b:e8:03:29:93:d8:
         05:03:41:af:26:57:20:8f:5b:80:63:86:18:ba:c6:00:c7:b9:
         28:18:7f:4f:24:ba:5d:01:a9:63:0c:57:37:65:20:1d:a8:3f:
         8a:1b:74:c5:e4:cf:0f:3d:48:ab:a1:21:0b:b0:ad:10:d1:fc:
         31:07:9b:88:a8:9b:13:7f:e9:ca:1e:13:db:c1:e4:15:19:d0:
         b8:64:48:b7:59:f2:8c:7f:79:08:b8:61:ab:82:37:06:1c:2e:
         db:8c:ba:cc:e7:eb:ae:58:f4:d6:eb:dd:79:f1:36:e9:61:e9:
         2b:1e:7d:54:09:09:12:90:17:96:7c:17:8c:98:9d:21:dd:31:
         a7:28:2d:a2:50:82:8e:36:c8:c2:75:1a:5c:7a:ac:79:9e:ee:
         d0:74:23:a9:3c:6c:77:f6:2f:d2:a4:78:e6:e4:21:1f:07:f3:
         fb:9f:3e:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXLaGnuo0Yo2VYqv9OTKeiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOGYxMGEyYzc5MmQwZDM2NTY3OGEzNmNhN2Y3ZjE0MDlj
YTNhZmQwHhcNMjQxMTIzMDQwMDI4WhcNMjQxMTI0MDQwMDI4WjAzMTEwLwYDVQQD
EyhmY2I0YmEyM2NkMTk0NzI1YzNiNjQwNWE4NWRjYzg1YjVhZjBhZDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo36q8XoGm9BrGo03jTs3nd+ZDiu0
T9kXgVA4Ds/ROtWEIYVAnKoTXLC1opv+TTaTnn4vQMEob22zaoDntKRmYuBODoPP
LgvgWdqreztBFYR9pcuUepKRQlJakWuLGj9WOezXLRto9J27SZ8sIpNDsUiNgkWo
NLdl2iTB9ABM4TglsCKQ1NH3yYdrpkKEF7+YtLfqOtB+VeJimz2a6xFF8b3Q07yl
I88+iLErLEvbVzLkPJT9nF8nA2bwqG83j7gq8ForNXYSV9ov83nrNdJQQfhvqnvl
alnV1BOzK5EJOkjSzRJZ9gTciYU21gB5FH0yKyYrSa9ddRO1wlQAuXjHcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPy0uiPNGUclw7ZAWoXcyFta8K2EMB8GA1UdIwQY
MBaAFOOPEKLHktDTZWeKNsp/fxQJyjr9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDQ4UW9zZVMwTk5sWjRvMnluOV9GQW5LT3YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81MzM1ZTItMTU5OC00ODIyLTgyMjct
ODM1M2FhNDBiYWViLzEvNDQ4UW9zZVMwTk5sWjRvMnluOV9GQW5LT3YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81MzM1ZTItMTU5OC00ODIyLTgyMjctODM1M2FhNDBiYWVi
LzEvNDQ4UW9zZVMwTk5sWjRvMnluOV9GQW5LT3YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACRBJkF7q
B7cN1uqSENl01kX9AcSTwyElSGAlbgKpyTyfma8EWtVgXV6mjNP2hpdBKyIpD/LU
MIdBVDsE5FKqK8uTjRaQ7FIvo0d+8odtLwkUtyzlK+gDKZPYBQNBryZXII9bgGOG
GLrGAMe5KBh/TyS6XQGpYwxXN2UgHag/iht0xeTPDz1Iq6EhC7CtENH8MQebiKib
E3/pyh4T28HkFRnQuGRIt1nyjH95CLhhq4I3Bhwu24y6zOfrrlj01uvdefE26WHp
Kx59VAkJEpAXlnwXjJidId0xpygtolCCjjbIwnUaXHqseZ7u0HQjqTxsd/Yv0qR4
5uQhHwfz+58+Wg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:36 2024 by rpki-client on console-ams.rpki-client.org