Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
File:                     dh55HzroOuiyY-PNtoKjR1tXB98.mft (raw, json)
Hash identifier:          9bG11mBlo/upUg5E+hzeesZRuE/ICZMDVmQI2bRr4Kw=
Subject key identifier:   76:92:F5:AC:49:62:3D:78:2B:78:54:23:A5:FC:1E:6F:38:3D:68:F4
Authority key identifier: 76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
Certificate issuer:       /CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Certificate serial:       01936A469547380A00B23F58B9C3C9DE351F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
Manifest number:          137A
Signing time:             Tue 26 Nov 2024 21:00:30 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:30 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:30 +0000
Files and hashes:         1: cA9y-e1iOxbTOqZMkVW7qOGIKTo.roa (hash: gPdzJEDRC/HzU7efo5JepK3m0iYoJpiQMnJ+rsfhgOk=)
                          2: dh55HzroOuiyY-PNtoKjR1tXB98.crl (hash: WzCRICHZatlAAfoKN7bPZA2TlnAOnM9Ouo/rS+WD1HA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:95:47:38:0a:00:b2:3f:58:b9:c3:c9:de:35:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
        Validity
            Not Before: Nov 26 21:00:30 2024 GMT
            Not After : Nov 27 21:00:30 2024 GMT
        Subject: CN=7692f5ac49623d782b785423a5fc1e6f383d68f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3f:de:5a:54:ee:a3:8d:93:d9:83:48:ff:87:
                    10:74:c8:7e:c2:17:db:b6:1a:88:6a:2f:e4:ed:11:
                    f2:2d:ae:fc:2a:39:ec:fa:8e:56:9f:0b:d4:c8:3b:
                    5d:e5:7b:b8:da:aa:1a:42:98:b9:e8:dd:6e:9c:11:
                    68:34:ed:22:09:3c:d7:d6:06:da:b0:50:69:43:43:
                    f8:48:08:7a:d2:70:d9:b2:a2:a7:c0:4b:a6:a9:eb:
                    6e:11:c0:0d:7d:d1:9a:7a:76:8b:ca:c4:85:9f:78:
                    ab:c0:4e:a5:b2:2f:de:a5:68:33:dc:60:70:df:13:
                    55:b5:06:a2:59:2b:7e:03:64:ac:68:b8:0a:29:6e:
                    78:e6:13:39:a9:cc:ee:d3:e5:5c:a2:7b:ef:ed:7c:
                    e1:6e:3a:94:45:97:96:af:cc:dc:09:4e:93:dd:28:
                    d7:e9:4d:0e:4a:ff:6d:79:29:ed:87:72:be:1a:3d:
                    93:aa:c3:32:52:f3:88:77:2e:e7:23:f6:5a:2a:43:
                    87:c5:c1:a5:a2:4e:89:b2:d6:c4:49:53:d6:4f:1c:
                    17:f4:02:0a:2d:f0:b5:9f:96:cb:c1:9d:ee:aa:65:
                    52:51:ba:b0:18:25:9b:c1:13:71:9b:90:68:86:83:
                    0b:d1:95:ca:1b:f0:86:e8:21:b6:a7:ca:ba:30:57:
                    ad:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:92:F5:AC:49:62:3D:78:2B:78:54:23:A5:FC:1E:6F:38:3D:68:F4
            X509v3 Authority Key Identifier:
                keyid:76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:b6:55:42:54:df:44:45:d3:37:1d:7b:d8:de:5d:26:38:b9:
         45:ad:00:45:7b:3d:ad:14:3e:76:f8:b9:3a:82:c9:96:ff:a0:
         de:8b:41:d7:07:1b:30:7f:da:87:21:eb:a7:02:d8:45:8a:7c:
         e7:b7:eb:25:9b:d2:5b:f4:39:21:51:a9:48:e4:71:9d:cd:07:
         48:9f:36:76:e4:21:6e:6c:74:65:4d:37:0b:23:79:ad:69:03:
         0a:9e:b3:68:f1:44:9e:da:fd:15:3b:35:7d:93:ed:78:30:c8:
         a0:a3:db:09:68:84:14:b6:bf:24:ac:30:8b:79:f5:55:84:65:
         ba:10:5d:f1:c5:cf:52:38:f1:ca:ae:82:29:66:88:f4:19:5c:
         b3:44:59:1f:aa:02:54:79:5f:7d:24:89:e2:7e:8d:65:9d:ca:
         7b:e9:0e:0d:1f:11:f6:52:be:63:00:75:aa:81:43:9e:a3:76:
         72:7c:f0:95:f0:78:8f:62:68:d4:9e:e4:cc:b7:37:26:fb:02:
         e3:a2:63:bd:0b:15:39:a8:40:16:0c:06:e2:78:24:10:11:79:
         4f:73:d6:41:ea:b4:65:b9:11:cc:9d:66:7d:76:e1:44:69:ee:
         16:63:39:5a:1c:8a:30:2d:03:73:2b:c8:f4:08:bd:f2:8e:9c:
         6b:04:e9:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqRpVHOAoAsj9YucPJ3jUfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MWU3OTFmM2FlODNhZThiMjYzZTNjZGI2ODJhMzQ3NWI1
NzA3ZGYwHhcNMjQxMTI2MjEwMDMwWhcNMjQxMTI3MjEwMDMwWjAzMTEwLwYDVQQD
Eyg3NjkyZjVhYzQ5NjIzZDc4MmI3ODU0MjNhNWZjMWU2ZjM4M2Q2OGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnz/eWlTuo42T2YNI/4cQdMh+whfb
thqIai/k7RHyLa78Kjns+o5WnwvUyDtd5Xu42qoaQpi56N1unBFoNO0iCTzX1gba
sFBpQ0P4SAh60nDZsqKnwEumqetuEcANfdGaenaLysSFn3irwE6lsi/epWgz3GBw
3xNVtQaiWSt+A2SsaLgKKW545hM5qczu0+Vconvv7XzhbjqURZeWr8zcCU6T3SjX
6U0OSv9teSnth3K+Gj2TqsMyUvOIdy7nI/ZaKkOHxcGlok6JstbESVPWTxwX9AIK
LfC1n5bLwZ3uqmVSUbqwGCWbwRNxm5BohoML0ZXKG/CG6CG2p8q6MFetZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaS9axJYj14K3hUI6X8Hm84PWj0MB8GA1UdIwQY
MBaAFHYeeR866DrosmPjzbaCo0dbVwffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGg1NUh6cm9PdWl5WS1QTnRvS2pSMXRYQjk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mY2Q5OTAtNzJmNC00ZWJkLTg2NGEt
OTJlNDUxODc3ZDJjLzEvZGg1NUh6cm9PdWl5WS1QTnRvS2pSMXRYQjk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9mY2Q5OTAtNzJmNC00ZWJkLTg2NGEtOTJlNDUxODc3ZDJj
LzEvZGg1NUh6cm9PdWl5WS1QTnRvS2pSMXRYQjk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAabZVQlTf
REXTNx172N5dJji5Ra0ARXs9rRQ+dvi5OoLJlv+g3otB1wcbMH/ahyHrpwLYRYp8
57frJZvSW/Q5IVGpSORxnc0HSJ82duQhbmx0ZU03CyN5rWkDCp6zaPFEntr9FTs1
fZPteDDIoKPbCWiEFLa/JKwwi3n1VYRluhBd8cXPUjjxyq6CKWaI9Blcs0RZH6oC
VHlffSSJ4n6NZZ3Ke+kODR8R9lK+YwB1qoFDnqN2cnzwlfB4j2Jo1J7kzLc3JvsC
46JjvQsVOahAFgwG4ngkEBF5T3PWQeq0ZbkRzJ1mfXbhRGnuFmM5WhyKMC0DcyvI
9Ai98o6cawTplg==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:36:40 2024 by rpki-client on console-ams.rpki-client.org