Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
File:                     vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft (raw, json)
Hash identifier:          HgArXJoGpgrot8F3o+nr50UYIhl61YBfHer2ewd4jwQ=
Subject key identifier:   43:1F:5C:F9:1F:CB:9D:A5:17:DB:5F:AC:5B:41:B8:AE:3A:A1:5E:C2
Authority key identifier: BC:3A:46:97:44:7D:19:03:08:64:4A:58:BC:EA:A1:24:C0:74:B7:E1
Certificate issuer:       /CN=bc3a4697447d190308644a58bceaa124c074b7e1
Certificate serial:       01936BC8007A6A400651B24B06BD66CA9DFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
Manifest number:          137C
Signing time:             Wed 27 Nov 2024 04:01:29 +0000
Manifest this update:     Wed 27 Nov 2024 04:01:29 +0000
Manifest next update:     Thu 28 Nov 2024 04:01:29 +0000
Files and hashes:         1: vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl (hash: HEPMWkF5VMHHLAB+jlj60N2dLaDnVbS9gLAUFAVcI78=)
                          2: wH6TuUtLGZB0Lv4Yc2b4ylk_tZ8.roa (hash: ADZXWrZq8ZCiRV9mJi64a/dBDi2bdYAWVQQ5in4uSlk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Nov 2024 04:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:c8:00:7a:6a:40:06:51:b2:4b:06:bd:66:ca:9d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3a4697447d190308644a58bceaa124c074b7e1
        Validity
            Not Before: Nov 27 04:01:29 2024 GMT
            Not After : Nov 28 04:01:29 2024 GMT
        Subject: CN=431f5cf91fcb9da517db5fac5b41b8ae3aa15ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:92:52:e1:e6:67:80:c5:5c:74:a5:c5:d5:77:
                    07:fb:4a:c3:11:47:41:1c:1a:e7:97:19:1b:16:5c:
                    b9:be:61:e2:36:26:4f:80:47:eb:7f:8f:96:e2:28:
                    dc:db:ac:eb:26:96:3b:7d:3f:4b:4b:fe:2e:66:3f:
                    aa:45:87:6a:fd:b1:e7:69:cd:94:65:f1:ad:e9:07:
                    1e:b4:d8:16:ce:73:7e:e0:4c:c1:ea:17:e5:06:0b:
                    cf:94:dc:9f:7c:89:89:99:11:55:99:bb:7c:37:23:
                    4a:89:eb:ee:1a:87:70:58:d3:53:fb:af:ee:05:b0:
                    66:a3:a3:01:f3:fd:1a:7e:78:ad:41:2c:64:cf:8d:
                    2e:4b:97:ab:34:68:ab:1e:7f:ba:f8:a5:57:9a:f3:
                    e5:fe:fa:2b:f4:2d:a8:fe:3e:10:9b:8a:b6:b9:f7:
                    a6:71:06:5d:18:24:cd:ce:ac:ec:3c:0a:5b:e7:85:
                    be:42:10:46:9f:2a:08:67:cb:0c:e1:e0:05:08:23:
                    58:aa:c7:ff:42:95:57:98:77:01:13:ce:a2:0f:74:
                    14:fd:1f:bc:46:6c:e8:8b:d9:a0:50:39:1a:fd:ee:
                    5d:6b:7b:90:04:73:77:1e:9b:fa:04:44:ec:38:47:
                    bc:09:54:8a:ad:f7:6b:8a:4d:18:73:25:78:7c:87:
                    dd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1F:5C:F9:1F:CB:9D:A5:17:DB:5F:AC:5B:41:B8:AE:3A:A1:5E:C2
            X509v3 Authority Key Identifier:
                keyid:BC:3A:46:97:44:7D:19:03:08:64:4A:58:BC:EA:A1:24:C0:74:B7:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:4a:a4:c1:82:be:ce:77:50:72:ba:8b:c2:75:88:1f:7d:f1:
         93:1b:c8:83:1e:e7:73:a0:77:3a:76:18:1a:22:8e:c3:5b:a4:
         98:9d:c4:cd:18:70:9c:55:1b:9a:3b:de:e4:60:ca:d9:95:71:
         59:47:71:38:05:09:ee:bd:b5:33:0b:8d:bb:7e:cb:12:75:c8:
         af:0f:f0:61:70:69:a2:6b:b7:24:9d:0c:8d:06:ab:34:b3:8d:
         52:27:c4:14:6a:5c:bf:21:10:d6:d1:9a:d6:98:43:54:5f:b5:
         e7:be:50:27:1b:6a:e7:10:c5:7d:87:50:35:80:9f:fa:32:b9:
         23:29:34:37:9b:21:56:eb:2d:3b:ca:d9:20:f8:6a:37:ad:a7:
         68:9a:b4:96:a0:8d:2c:97:3b:55:52:06:e3:9b:9c:80:f4:da:
         e1:61:04:44:55:e2:1c:4e:a1:80:ca:f2:3b:f9:aa:38:ec:af:
         f7:0f:cc:fe:cf:bc:27:ff:1c:e2:cd:3c:b8:6e:14:1a:47:9d:
         f6:a8:43:dd:bf:c7:4b:f1:75:d2:41:60:1b:60:b5:e3:45:a6:
         83:43:32:71:96:51:d0:6a:50:c6:4e:9e:de:22:82:0d:d7:b0:
         a2:2f:34:8d:4f:f2:7e:61:16:27:8a:0f:e0:83:6c:a0:89:f7:
         9f:10:95:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNryAB6akAGUbJLBr1myp38MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjM2E0Njk3NDQ3ZDE5MDMwODY0NGE1OGJjZWFhMTI0YzA3
NGI3ZTEwHhcNMjQxMTI3MDQwMTI5WhcNMjQxMTI4MDQwMTI5WjAzMTEwLwYDVQQD
Eyg0MzFmNWNmOTFmY2I5ZGE1MTdkYjVmYWM1YjQxYjhhZTNhYTE1ZWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpJS4eZngMVcdKXF1XcH+0rDEUdB
HBrnlxkbFly5vmHiNiZPgEfrf4+W4ijc26zrJpY7fT9LS/4uZj+qRYdq/bHnac2U
ZfGt6QcetNgWznN+4EzB6hflBgvPlNyffImJmRFVmbt8NyNKievuGodwWNNT+6/u
BbBmo6MB8/0afnitQSxkz40uS5erNGirHn+6+KVXmvPl/vor9C2o/j4Qm4q2ufem
cQZdGCTNzqzsPApb54W+QhBGnyoIZ8sM4eAFCCNYqsf/QpVXmHcBE86iD3QU/R+8
Rmzoi9mgUDka/e5da3uQBHN3Hpv6BETsOEe8CVSKrfdrik0YcyV4fIfdjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMfXPkfy52lF9tfrFtBuK46oV7CMB8GA1UdIwQY
MBaAFLw6RpdEfRkDCGRKWLzqoSTAdLfhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkRwR2wwUjlHUU1JWkVwWXZPcWhKTUIwdC1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi81YWE2MTktZGNjYS00OWQ1LTkwMWYt
YTVhYjdiNjQxNTVmLzEvdkRwR2wwUjlHUU1JWkVwWXZPcWhKTUIwdC1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi81YWE2MTktZGNjYS00OWQ1LTkwMWYtYTVhYjdiNjQxNTVm
LzEvdkRwR2wwUjlHUU1JWkVwWXZPcWhKTUIwdC1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW0qkwYK+
zndQcrqLwnWIH33xkxvIgx7nc6B3OnYYGiKOw1ukmJ3EzRhwnFUbmjve5GDK2ZVx
WUdxOAUJ7r21MwuNu37LEnXIrw/wYXBpomu3JJ0MjQarNLONUifEFGpcvyEQ1tGa
1phDVF+1575QJxtq5xDFfYdQNYCf+jK5Iyk0N5shVustO8rZIPhqN62naJq0lqCN
LJc7VVIG45ucgPTa4WEERFXiHE6hgMryO/mqOOyv9w/M/s+8J/8c4s08uG4UGked
9qhD3b/HS/F10kFgG2C140Wmg0MycZZR0GpQxk6e3iKCDdewoi80jU/yfmEWJ4oP
4INsoIn3nxCVeA==
-----END CERTIFICATE-----
Generated at Wed Nov 27 11:39:29 2024 by rpki-client on console-ams.rpki-client.org