Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
File:                     Anes0RLxxsgzvsIvi1PMcNI5CHY.mft (raw, json)
Hash identifier:          nEWWiNSXtUnWhxOw0zUhZ7J2k+MKEtcj0wXRqJB2TKc=
Subject key identifier:   7D:F0:1E:50:DC:4C:BF:DF:51:73:C1:F0:F2:AA:1D:C8:C4:3F:07:21
Authority key identifier: 02:77:AC:D1:12:F1:C6:C8:33:BE:C2:2F:8B:53:CC:70:D2:39:08:76
Certificate issuer:       /CN=0277acd112f1c6c833bec22f8b53cc70d2390876
Certificate serial:       019352ACE9AA7E6CD92939DEFBEAEF90F4CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 07:01:23 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:23 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:23 +0000
Files and hashes:         1: 67eoqG91uPb0qKs6o9u8iWmBu5E.roa (hash: X7PdsI+8Vqe/sn1k4eouy9G8VQENViluqcMCKu1b5rk=)
                          2: Anes0RLxxsgzvsIvi1PMcNI5CHY.crl (hash: MFjo7S30wtTNnY4+i+nDY3nvSYebh2i8AMqkcsNC32s=)
                          3: iopDWpo_rr_E4Jdu-DFJ_YACb-s.roa (hash: Fdit1nHKijH5P0XK6gAs4Qqb+a25jZ9LTB23GgD9Srg=)
                          4: wSd219Z4hgM0eN75LZzsv85ElDU.roa (hash: qPdI34JZbHGy1g4XjSdQX8OTwz/pkfGYSVqMXihhMO8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:e9:aa:7e:6c:d9:29:39:de:fb:ea:ef:90:f4:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0277acd112f1c6c833bec22f8b53cc70d2390876
        Validity
            Not Before: Nov 22 07:01:23 2024 GMT
            Not After : Nov 23 07:01:23 2024 GMT
        Subject: CN=7df01e50dc4cbfdf5173c1f0f2aa1dc8c43f0721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:68:fe:f6:b7:3b:7c:48:c0:d8:b5:3c:b5:45:
                    58:56:0e:94:11:98:e0:42:db:29:0d:8a:44:48:e4:
                    45:f3:c8:38:36:20:ef:3a:f8:5a:5c:38:b9:24:34:
                    a5:13:65:85:b3:62:f5:57:d6:7f:48:ee:6e:2a:c3:
                    c8:f2:ab:7a:77:c2:4a:1d:c3:17:66:a6:ec:2c:1b:
                    13:3a:b2:56:e4:2e:24:ba:73:5d:e3:5b:90:a7:e4:
                    65:97:01:83:f3:b2:ff:e7:5b:00:d5:95:6f:17:da:
                    16:12:81:79:5c:86:aa:fc:4d:e5:32:f8:15:f8:4b:
                    55:f3:82:88:b8:fb:a7:39:3f:39:81:a0:e3:66:d0:
                    1d:da:54:07:70:61:62:9c:0a:76:7e:0c:fe:05:69:
                    e6:62:c2:43:7e:17:ce:bb:44:41:5f:ba:2e:4f:a9:
                    90:07:87:99:f8:3a:44:90:7c:76:e9:33:9e:19:f7:
                    2e:53:33:4f:03:15:b2:5f:a8:3f:b3:9a:cd:09:c6:
                    bc:e6:38:25:c5:ae:84:70:fe:32:1d:bc:16:65:a2:
                    50:88:94:72:0f:91:90:e0:56:7a:79:fb:e6:83:ee:
                    b7:83:05:95:df:ea:8a:78:37:ac:f9:e3:25:a6:29:
                    d0:f1:9a:4b:ee:71:1c:8e:09:08:20:98:68:39:90:
                    96:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F0:1E:50:DC:4C:BF:DF:51:73:C1:F0:F2:AA:1D:C8:C4:3F:07:21
            X509v3 Authority Key Identifier:
                keyid:02:77:AC:D1:12:F1:C6:C8:33:BE:C2:2F:8B:53:CC:70:D2:39:08:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:10:35:c1:bb:d1:97:88:7d:13:f6:20:88:a6:99:95:84:4c:
         30:79:b5:6c:1e:e7:47:42:e1:6f:74:99:28:b5:a8:95:28:68:
         a5:3e:60:b6:44:89:33:eb:9c:f7:38:21:59:29:88:97:cb:84:
         d0:3c:cd:54:81:d5:5e:6b:4c:ca:8f:04:d4:a7:89:a9:c3:f9:
         7a:d8:9a:a9:94:b0:2b:2d:78:7e:0c:09:5a:26:2a:c3:a9:1f:
         0b:be:14:2f:e7:a4:88:df:a6:66:12:d8:b0:5f:16:a4:c6:58:
         97:cd:63:b1:93:d5:fc:aa:d8:bf:91:fd:46:83:3f:ea:f5:23:
         dd:51:68:1b:78:65:16:f6:73:f3:d5:03:2f:44:b1:c4:75:24:
         18:0e:94:93:0f:48:49:89:f7:eb:7d:e3:78:43:76:6f:ec:22:
         39:5d:c9:33:fe:7a:23:94:99:9a:bd:66:25:05:2c:70:a3:26:
         39:02:01:ab:ba:92:ba:7a:3b:58:2e:34:f4:73:2b:74:79:0d:
         ef:1e:3b:e0:78:68:06:e0:67:19:c2:b1:2f:d4:87:1c:84:bc:
         50:c9:d7:28:1c:0a:a7:be:bd:86:89:99:ff:ca:32:71:13:07:
         84:80:95:dc:be:81:9b:fd:06:9a:40:06:16:ae:10:61:1c:0e:
         63:7c:87:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSrOmqfmzZKTne++rvkPTMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNzdhY2QxMTJmMWM2YzgzM2JlYzIyZjhiNTNjYzcwZDIz
OTA4NzYwHhcNMjQxMTIyMDcwMTIzWhcNMjQxMTIzMDcwMTIzWjAzMTEwLwYDVQQD
Eyg3ZGYwMWU1MGRjNGNiZmRmNTE3M2MxZjBmMmFhMWRjOGM0M2YwNzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02j+9rc7fEjA2LU8tUVYVg6UEZjg
QtspDYpESORF88g4NiDvOvhaXDi5JDSlE2WFs2L1V9Z/SO5uKsPI8qt6d8JKHcMX
ZqbsLBsTOrJW5C4kunNd41uQp+RllwGD87L/51sA1ZVvF9oWEoF5XIaq/E3lMvgV
+EtV84KIuPunOT85gaDjZtAd2lQHcGFinAp2fgz+BWnmYsJDfhfOu0RBX7ouT6mQ
B4eZ+DpEkHx26TOeGfcuUzNPAxWyX6g/s5rNCca85jglxa6EcP4yHbwWZaJQiJRy
D5GQ4FZ6efvmg+63gwWV3+qKeDes+eMlpinQ8ZpL7nEcjgkIIJhoOZCW8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3wHlDcTL/fUXPB8PKqHcjEPwchMB8GA1UdIwQY
MBaAFAJ3rNES8cbIM77CL4tTzHDSOQh2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW5lczBSTHh4c2d6dnNJdmkxUE1jTkk1Q0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yYzBmMGItNzgzMS00MWQzLTkxNmQt
ZDk2NTU5ODc4NzRhLzEvQW5lczBSTHh4c2d6dnNJdmkxUE1jTkk1Q0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yYzBmMGItNzgzMS00MWQzLTkxNmQtZDk2NTU5ODc4NzRh
LzEvQW5lczBSTHh4c2d6dnNJdmkxUE1jTkk1Q0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlBA1wbvR
l4h9E/YgiKaZlYRMMHm1bB7nR0Lhb3SZKLWolShopT5gtkSJM+uc9zghWSmIl8uE
0DzNVIHVXmtMyo8E1KeJqcP5etiaqZSwKy14fgwJWiYqw6kfC74UL+ekiN+mZhLY
sF8WpMZYl81jsZPV/KrYv5H9RoM/6vUj3VFoG3hlFvZz89UDL0SxxHUkGA6Ukw9I
SYn3633jeEN2b+wiOV3JM/56I5SZmr1mJQUscKMmOQIBq7qSuno7WC409HMrdHkN
7x474HhoBuBnGcKxL9SHHIS8UMnXKBwKp769homZ/8oycRMHhICV3L6Bm/0GmkAG
Fq4QYRwOY3yHVA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:12:04 2024 by rpki-client on console-ams.rpki-client.org