Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
File:                     Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft (raw, json)
Hash identifier:          r4tsCbKLmIMf00W6T+BQCxEtagj+Vl3ZjM9JoW6+GAA=
Subject key identifier:   2F:0B:8B:5A:77:D5:9C:BA:85:D3:8B:D9:53:4D:9D:C1:6B:AF:DC:29
Authority key identifier: 15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
Certificate issuer:       /CN=15fedc1705576d97fe4ad20291de198473d8156f
Certificate serial:       0193553F4DA4A50E56E2379CA6240A0026BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 19:00:32 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:32 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:32 +0000
Files and hashes:         1: Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl (hash: gbHp4k310orO4vZtaieE3OVs7gv8NIgN8FS+WNVw/iI=)
                          2: kYChh4QgJH5QTNckydJiTnGGIYw.roa (hash: 6j9KN530MvWCPbqroi0+2gudZbSmbdJ4Zwr8AbuOysA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:4d:a4:a5:0e:56:e2:37:9c:a6:24:0a:00:26:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15fedc1705576d97fe4ad20291de198473d8156f
        Validity
            Not Before: Nov 22 19:00:32 2024 GMT
            Not After : Nov 23 19:00:32 2024 GMT
        Subject: CN=2f0b8b5a77d59cba85d38bd9534d9dc16bafdc29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:44:5c:b1:d5:2e:42:fc:d0:70:7a:6e:b5:bf:
                    ba:fc:be:a8:0d:43:c2:de:e4:bf:b8:82:a8:49:58:
                    c2:01:de:70:f6:f6:c5:cd:f4:bd:3f:fa:31:a1:90:
                    45:5b:e4:1b:3a:10:30:ad:36:13:92:b7:06:37:8e:
                    a8:8d:dc:d1:62:cd:41:ff:1c:6b:72:d8:eb:46:12:
                    c4:ac:1d:91:9c:d2:0e:8a:22:f3:93:06:32:41:ef:
                    bc:27:2e:f3:89:ab:4f:70:f8:1d:b7:01:99:46:a7:
                    cf:5d:d2:10:a7:95:96:d8:08:bd:3e:61:6d:72:02:
                    5d:c1:6f:d4:81:2a:68:20:c3:a5:07:08:05:0f:da:
                    00:bc:8f:ea:d8:56:65:e7:7c:5f:ff:57:e8:d6:71:
                    d1:c3:4f:ea:24:e7:18:4d:39:70:7b:f1:47:3a:34:
                    8f:e5:94:80:35:6b:11:16:cc:d5:2a:03:1d:8d:e5:
                    ba:a0:43:d6:be:92:ad:84:b8:f8:e0:61:cf:64:94:
                    1f:4c:5a:7b:ab:e0:e9:0d:87:d0:bd:dd:f0:5c:1c:
                    ad:70:e9:cf:8b:ef:fc:1a:ea:20:1b:1e:e1:e8:ac:
                    1b:45:5d:e0:5d:0d:e7:ad:6d:fa:82:6a:72:5d:d9:
                    89:fb:d4:5e:86:b1:da:ce:43:d6:c5:3f:a3:c6:2d:
                    c1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0B:8B:5A:77:D5:9C:BA:85:D3:8B:D9:53:4D:9D:C1:6B:AF:DC:29
            X509v3 Authority Key Identifier:
                keyid:15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:f6:75:89:11:13:74:27:78:51:24:35:a3:dc:2e:10:32:5b:
         29:fb:a2:14:d4:f0:88:d6:ea:59:78:1b:34:75:d0:b9:1b:53:
         39:ed:64:32:8d:4a:ff:6c:89:ef:a7:6d:66:05:8e:6e:fd:0c:
         c6:12:82:24:19:80:75:1f:6e:54:01:48:9a:f3:98:61:49:4a:
         e3:7c:ad:90:bd:ad:c5:81:1b:31:6d:c3:a7:3c:19:aa:bf:85:
         38:a3:af:3f:66:c1:2b:de:07:15:23:32:15:16:dd:c3:d1:19:
         c5:eb:67:d0:45:aa:5a:cd:cb:0d:f1:d9:2b:76:94:15:41:a2:
         fd:ce:0b:bc:11:5a:4c:09:c3:92:e7:dc:1a:f2:93:19:5e:c0:
         51:ea:42:44:36:20:8d:fa:3e:ab:aa:0f:ed:ce:ef:40:22:0d:
         f0:61:7a:c5:bd:55:b7:e0:ea:ea:e2:21:fc:f0:67:b8:58:5b:
         66:e3:70:5f:4c:a8:6b:bd:9a:db:a4:de:b7:d7:38:cc:c2:85:
         89:d9:3d:30:51:74:81:0e:23:56:04:8a:0c:ea:f1:14:8e:c7:
         b4:18:62:54:08:7e:40:d5:b3:e6:53:85:2f:04:56:4f:8e:43:
         e2:86:0d:45:7b:46:e9:db:65:e0:ee:e0:87:3c:0b:25:78:28:
         1e:3f:13:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVP02kpQ5W4jecpiQKACa6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZmVkYzE3MDU1NzZkOTdmZTRhZDIwMjkxZGUxOTg0NzNk
ODE1NmYwHhcNMjQxMTIyMTkwMDMyWhcNMjQxMTIzMTkwMDMyWjAzMTEwLwYDVQQD
EygyZjBiOGI1YTc3ZDU5Y2JhODVkMzhiZDk1MzRkOWRjMTZiYWZkYzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsERcsdUuQvzQcHputb+6/L6oDUPC
3uS/uIKoSVjCAd5w9vbFzfS9P/oxoZBFW+QbOhAwrTYTkrcGN46ojdzRYs1B/xxr
ctjrRhLErB2RnNIOiiLzkwYyQe+8Jy7ziatPcPgdtwGZRqfPXdIQp5WW2Ai9PmFt
cgJdwW/UgSpoIMOlBwgFD9oAvI/q2FZl53xf/1fo1nHRw0/qJOcYTTlwe/FHOjSP
5ZSANWsRFszVKgMdjeW6oEPWvpKthLj44GHPZJQfTFp7q+DpDYfQvd3wXBytcOnP
i+/8GuogGx7h6KwbRV3gXQ3nrW36gmpyXdmJ+9RehrHazkPWxT+jxi3BtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8Li1p31Zy6hdOL2VNNncFrr9wpMB8GA1UdIwQY
MBaAFBX+3BcFV22X/krSApHeGYRz2BVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmY3Y0Z3VlhiWmYtU3RJQ2tkNFpoSFBZRlc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9lMjdlYjgtYWY2NC00NDZlLTg4ZWMt
ZDQ3MmU0OWY1OTFlLzEvRmY3Y0Z3VlhiWmYtU3RJQ2tkNFpoSFBZRlc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9lMjdlYjgtYWY2NC00NDZlLTg4ZWMtZDQ3MmU0OWY1OTFl
LzEvRmY3Y0Z3VlhiWmYtU3RJQ2tkNFpoSFBZRlc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAfZ1iRET
dCd4USQ1o9wuEDJbKfuiFNTwiNbqWXgbNHXQuRtTOe1kMo1K/2yJ76dtZgWObv0M
xhKCJBmAdR9uVAFImvOYYUlK43ytkL2txYEbMW3DpzwZqr+FOKOvP2bBK94HFSMy
FRbdw9EZxetn0EWqWs3LDfHZK3aUFUGi/c4LvBFaTAnDkufcGvKTGV7AUepCRDYg
jfo+q6oP7c7vQCIN8GF6xb1Vt+Dq6uIh/PBnuFhbZuNwX0yoa72a26Tet9c4zMKF
idk9MFF0gQ4jVgSKDOrxFI7HtBhiVAh+QNWz5lOFLwRWT45D4oYNRXtG6dtl4O7g
hzwLJXgoHj8T0Q==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:47 2024 by rpki-client on console-fra.rpki-client.org