Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft
File:                     FRRT9ILNp468mWJdgLD_w2YPlfI.mft (raw, json)
Hash identifier:          jnGTpNVuhm0ZBc2S1lj3OevlwzvkBfUIqZtcx8QtIrY=
Subject key identifier:   6E:06:0A:6F:2A:91:76:84:EE:66:05:02:DE:29:2D:CB:FB:DC:11:89
Authority key identifier: 15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2
Certificate issuer:       /CN=151453f482cda78ebc99625d80b0ffc3660f95f2
Certificate serial:       0193561AECB1A7FDFB5F2EB56481933F65A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft
Manifest number:          137B
Signing time:             Fri 22 Nov 2024 23:00:25 +0000
Manifest this update:     Fri 22 Nov 2024 23:00:25 +0000
Manifest next update:     Sat 23 Nov 2024 23:00:25 +0000
Files and hashes:         1: DuRHGP9Dhs4CaHQhdDv06NHymck.roa (hash: CNlU1V7NUEoD7Gcc7L39B4brkPEO7OFu6t/3kFVwhj8=)
                          2: FRRT9ILNp468mWJdgLD_w2YPlfI.crl (hash: uYuSwlxhx2JzQwFyTvBDzl57YHJA7DlA4D7zAekRC4U=)
                          3: LIj14JJC_D2A-z5Y8dyqh2LM6rs.roa (hash: BmrF2bCXt2PMxtCj9TQr/xyJ6r2DWi1SgI28mIog3Ag=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:1a:ec:b1:a7:fd:fb:5f:2e:b5:64:81:93:3f:65:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=151453f482cda78ebc99625d80b0ffc3660f95f2
        Validity
            Not Before: Nov 22 23:00:25 2024 GMT
            Not After : Nov 23 23:00:25 2024 GMT
        Subject: CN=6e060a6f2a917684ee660502de292dcbfbdc1189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d4:ba:d0:30:fa:cb:e9:e5:51:d1:bd:b8:31:
                    47:ae:01:77:b5:91:94:8c:92:28:cd:d5:3b:2e:8e:
                    a1:cc:ef:65:97:cc:a9:86:e9:be:ab:17:ce:7e:ca:
                    61:58:af:3a:da:b7:2b:db:c3:63:ce:2f:c2:a3:02:
                    3d:2a:a0:01:f1:6d:05:88:28:b9:9f:56:d1:a6:63:
                    37:af:b8:9f:41:d4:45:c7:ee:2f:42:3e:42:08:52:
                    35:79:7f:b8:46:9a:cc:bd:d5:c1:fe:9c:57:30:f5:
                    78:5f:ff:a6:d8:7a:e3:6f:de:29:eb:f6:22:13:18:
                    f7:8e:1f:e6:28:76:28:5f:aa:a3:c0:9a:2c:08:52:
                    02:ab:78:29:52:4b:6f:24:90:d5:9b:6e:7e:0e:d5:
                    0d:8e:b1:22:00:97:6e:4c:a1:37:95:9f:6e:ca:54:
                    1f:a3:c1:99:51:39:a4:50:4e:fa:7a:49:ba:ff:b5:
                    53:b2:78:cd:d6:dd:6b:77:f2:39:fb:34:28:42:47:
                    f1:51:4f:51:05:a5:ad:b4:c5:c8:ff:a9:45:e2:b6:
                    aa:cd:99:20:51:e8:a1:b7:bc:a0:54:9f:73:e6:31:
                    67:e0:3f:08:91:af:91:bd:3b:36:ef:1e:bb:71:98:
                    f1:52:21:28:c6:b6:7d:b7:90:67:0a:b9:50:27:b2:
                    90:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:06:0A:6F:2A:91:76:84:EE:66:05:02:DE:29:2D:CB:FB:DC:11:89
            X509v3 Authority Key Identifier:
                keyid:15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:35:24:98:83:6f:a2:98:51:fc:76:bf:39:cc:30:70:7d:f9:
         e5:a4:31:7a:59:06:46:a1:4b:b5:b7:69:ab:d4:a4:37:6c:c1:
         32:16:06:8a:22:e8:b7:ca:29:91:c4:38:6c:64:d4:a0:3f:54:
         81:d9:f1:84:7c:28:86:27:e4:b8:66:c0:e1:54:7b:d9:c5:83:
         5e:66:25:ba:24:27:f0:64:36:f4:f8:69:e6:bc:36:49:1f:50:
         20:6b:5f:91:19:bf:f5:dc:dd:96:e4:1f:5a:34:77:2c:b7:2a:
         8d:ef:15:d8:cd:e8:dc:d0:3e:78:14:c4:f0:68:12:cc:d4:10:
         f4:d7:97:ba:65:4d:f8:50:17:4d:5b:69:72:47:1d:8a:7e:35:
         b4:7e:46:d8:a2:e9:d5:cd:0e:5d:ba:68:09:11:31:fb:52:fc:
         80:09:b6:1e:2b:78:31:fa:9c:f1:bf:14:9c:fe:fb:db:4e:7e:
         56:39:80:34:4d:77:44:5c:b2:b9:67:0d:0a:e1:00:c4:ea:16:
         fc:c0:82:f1:86:0b:db:40:84:55:cd:01:05:02:a0:98:da:f3:
         1d:54:27:be:f9:aa:75:fc:ab:90:ac:6a:99:da:21:07:51:8c:
         aa:0f:62:fa:f6:07:e8:09:65:ea:45:13:b9:80:78:81:1f:a1:
         ab:00:ca:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWGuyxp/37Xy61ZIGTP2WoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MTQ1M2Y0ODJjZGE3OGViYzk5NjI1ZDgwYjBmZmMzNjYw
Zjk1ZjIwHhcNMjQxMTIyMjMwMDI1WhcNMjQxMTIzMjMwMDI1WjAzMTEwLwYDVQQD
Eyg2ZTA2MGE2ZjJhOTE3Njg0ZWU2NjA1MDJkZTI5MmRjYmZiZGMxMTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtS60DD6y+nlUdG9uDFHrgF3tZGU
jJIozdU7Lo6hzO9ll8yphum+qxfOfsphWK862rcr28Njzi/CowI9KqAB8W0FiCi5
n1bRpmM3r7ifQdRFx+4vQj5CCFI1eX+4RprMvdXB/pxXMPV4X/+m2Hrjb94p6/Yi
Exj3jh/mKHYoX6qjwJosCFICq3gpUktvJJDVm25+DtUNjrEiAJduTKE3lZ9uylQf
o8GZUTmkUE76ekm6/7VTsnjN1t1rd/I5+zQoQkfxUU9RBaWttMXI/6lF4raqzZkg
Ueiht7ygVJ9z5jFn4D8Ika+RvTs27x67cZjxUiEoxrZ9t5BnCrlQJ7KQVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4GCm8qkXaE7mYFAt4pLcv73BGJMB8GA1UdIwQY
MBaAFBUUU/SCzaeOvJliXYCw/8NmD5XyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlJSVDlJTE5wNDY4bVdKZGdMRF93MllQbGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC81OWZjZjAtMWQ1Yy00ZWNiLWJmODct
M2JjYjhiZjhiYmZlLzEvRlJSVDlJTE5wNDY4bVdKZGdMRF93MllQbGZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC81OWZjZjAtMWQ1Yy00ZWNiLWJmODctM2JjYjhiZjhiYmZl
LzEvRlJSVDlJTE5wNDY4bVdKZGdMRF93MllQbGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnTUkmINv
ophR/Ha/OcwwcH355aQxelkGRqFLtbdpq9SkN2zBMhYGiiLot8opkcQ4bGTUoD9U
gdnxhHwohifkuGbA4VR72cWDXmYluiQn8GQ29Php5rw2SR9QIGtfkRm/9dzdluQf
WjR3LLcqje8V2M3o3NA+eBTE8GgSzNQQ9NeXumVN+FAXTVtpckcdin41tH5G2KLp
1c0OXbpoCREx+1L8gAm2Hit4Mfqc8b8UnP77205+VjmANE13RFyyuWcNCuEAxOoW
/MCC8YYL20CEVc0BBQKgmNrzHVQnvvmqdfyrkKxqmdohB1GMqg9i+vYH6All6kUT
uYB4gR+hqwDKNQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:58:12 2024 by rpki-client on console-ams.rpki-client.org