Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
File:                     u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft (raw, json)
Hash identifier:          4lkL69eW0TxDt5R6CP0ceaPOHnfhC4boaVV9Ykz4EXA=
Subject key identifier:   16:56:AE:AC:BF:E1:C5:3C:0E:74:4D:AF:6C:B2:C9:65:C7:0C:E0:4D
Authority key identifier: BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
Certificate issuer:       /CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Certificate serial:       019369D90F8920B3084988C81C7859B7CE77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
Manifest number:          137E
Signing time:             Tue 26 Nov 2024 19:00:53 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:53 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:53 +0000
Files and hashes:         1: c-zuOwPENbj2Xgue9dnJEreGYvw.roa (hash: cGfEOARxixGPvVWrKf/JvKs2WOe59XaTrFTLWFxep/E=)
                          2: u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl (hash: l0+GvMSSOoENmbnkH81bD/wNgENQda4sG0B1KXrFrgA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:0f:89:20:b3:08:49:88:c8:1c:78:59:b7:ce:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
        Validity
            Not Before: Nov 26 19:00:53 2024 GMT
            Not After : Nov 27 19:00:53 2024 GMT
        Subject: CN=1656aeacbfe1c53c0e744daf6cb2c965c70ce04d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3d:8d:9e:47:fb:ac:2f:8d:4f:4e:ae:18:14:
                    b8:1a:de:89:28:d8:36:01:a0:44:21:97:a8:e9:1c:
                    9f:25:09:e0:ba:bd:8b:10:5d:34:bd:07:f5:f1:18:
                    d4:90:27:e5:a4:cb:06:6e:50:51:c6:5a:ef:99:c3:
                    4d:3a:fc:8f:8e:f1:2c:3e:1f:4f:81:f1:36:c8:44:
                    f9:95:b4:00:d0:ee:0f:32:06:92:24:d1:c9:24:d8:
                    1e:36:56:62:89:32:bd:c4:5b:00:65:73:3b:c8:35:
                    48:cd:c2:73:c7:b2:12:eb:52:ca:82:be:cf:3a:9f:
                    96:11:d0:eb:ac:33:e4:81:23:27:f1:17:7f:58:fe:
                    9e:0f:b8:ef:71:e3:17:35:b2:34:dc:85:c0:f2:1b:
                    89:5d:b6:7e:c0:9a:64:7e:10:db:6c:3a:17:d5:d3:
                    bf:96:15:0f:ec:d6:6b:b7:87:18:95:91:a9:01:13:
                    6d:dd:31:26:44:3d:86:9f:49:5c:91:28:9f:5a:a8:
                    79:f7:2f:48:34:3f:cc:43:9e:bd:68:5b:01:ad:a0:
                    14:ef:bf:b4:7d:b6:13:d3:c6:3e:18:ba:59:3b:f0:
                    ed:c0:76:54:be:53:9a:5b:40:e8:ae:71:95:4d:4c:
                    a0:90:ac:c2:c6:99:fd:03:a9:c3:c1:d1:97:6a:62:
                    62:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:56:AE:AC:BF:E1:C5:3C:0E:74:4D:AF:6C:B2:C9:65:C7:0C:E0:4D
            X509v3 Authority Key Identifier:
                keyid:BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:7d:12:8b:f1:1b:03:2e:e8:f4:62:9e:50:ad:7c:0a:be:d4:
         dd:a2:b3:73:26:a9:ff:43:1c:fe:ac:62:38:51:cb:d6:79:a1:
         ad:63:06:01:b9:25:77:41:34:84:3a:fd:0a:80:f2:40:8e:49:
         45:8b:c4:b2:93:78:5c:55:1c:48:64:48:98:ee:f7:a9:31:3f:
         01:82:93:97:dd:92:9f:b0:2c:a4:77:2c:ed:b8:4d:11:dc:5d:
         2e:78:55:b8:ac:f7:88:cd:7a:de:02:c0:a3:a2:04:e4:c0:b9:
         10:f8:43:ba:24:cd:d7:19:d3:ef:8e:73:67:e5:e2:49:51:64:
         a0:0d:38:1b:70:fb:5a:b4:a9:cd:e8:af:6e:e8:28:50:ab:e1:
         2f:89:68:ff:05:42:3f:d8:ee:66:50:f7:35:90:77:72:50:28:
         f1:ff:be:aa:cc:c8:bd:ec:9e:34:b5:8e:41:ca:34:50:b7:50:
         de:60:8e:9c:b2:b9:ed:6b:ab:28:d3:43:34:54:e0:04:9f:78:
         0a:40:81:0c:62:4f:61:02:32:f4:e8:a0:2a:c8:ee:05:73:97:
         75:f5:5f:92:ea:da:9e:22:61:cc:b0:14:44:c6:5f:b9:39:f8:
         6c:2e:5c:ee:a3:04:03:b6:81:eb:e7:8c:d4:94:67:c9:09:d1:
         42:b9:d7:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2Q+JILMISYjIHHhZt853MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNTc1NjFjYTJkYmY3NTBlOGY1ZTBiNzM4OWVmMDljZTli
NWJjZWEwHhcNMjQxMTI2MTkwMDUzWhcNMjQxMTI3MTkwMDUzWjAzMTEwLwYDVQQD
EygxNjU2YWVhY2JmZTFjNTNjMGU3NDRkYWY2Y2IyYzk2NWM3MGNlMDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD2Nnkf7rC+NT06uGBS4Gt6JKNg2
AaBEIZeo6RyfJQngur2LEF00vQf18RjUkCflpMsGblBRxlrvmcNNOvyPjvEsPh9P
gfE2yET5lbQA0O4PMgaSJNHJJNgeNlZiiTK9xFsAZXM7yDVIzcJzx7IS61LKgr7P
Op+WEdDrrDPkgSMn8Rd/WP6eD7jvceMXNbI03IXA8huJXbZ+wJpkfhDbbDoX1dO/
lhUP7NZrt4cYlZGpARNt3TEmRD2Gn0lckSifWqh59y9IND/MQ569aFsBraAU77+0
fbYT08Y+GLpZO/DtwHZUvlOaW0DornGVTUygkKzCxpn9A6nDwdGXamJivQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZWrqy/4cU8DnRNr2yyyWXHDOBNMB8GA1UdIwQY
MBaAFLtXVhyi2/dQ6PXgtzie8JzptbzqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTFkV0hLTGI5MURvOWVDM09KN3duT20xdk9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kNWY5YWEtMzM3Yi00ZDYwLThmNWUt
MDIxMjVlNDRlM2E4LzEvdTFkV0hLTGI5MURvOWVDM09KN3duT20xdk9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9kNWY5YWEtMzM3Yi00ZDYwLThmNWUtMDIxMjVlNDRlM2E4
LzEvdTFkV0hLTGI5MURvOWVDM09KN3duT20xdk9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC30Si/Eb
Ay7o9GKeUK18Cr7U3aKzcyap/0Mc/qxiOFHL1nmhrWMGAbkld0E0hDr9CoDyQI5J
RYvEspN4XFUcSGRImO73qTE/AYKTl92Sn7AspHcs7bhNEdxdLnhVuKz3iM163gLA
o6IE5MC5EPhDuiTN1xnT745zZ+XiSVFkoA04G3D7WrSpzeivbugoUKvhL4lo/wVC
P9juZlD3NZB3clAo8f++qszIveyeNLWOQco0ULdQ3mCOnLK57WurKNNDNFTgBJ94
CkCBDGJPYQIy9OigKsjuBXOXdfVfkuraniJhzLAURMZfuTn4bC5c7qMEA7aB6+eM
1JRnyQnRQrnXDg==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:11 2024 by rpki-client on console-fra.rpki-client.org