Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
File:                     v5gt73eibXzBlHOzpAZNzFIX5HE.mft (raw, json)
Hash identifier:          bEEE0DybKiYhza5KcVaA6Yl0IFb1qAXfkdRFCwKn+Dw=
Subject key identifier:   8C:BA:33:C7:AE:46:78:A6:8C:6D:6B:90:96:62:5E:75:3E:50:7E:BA
Authority key identifier: BF:98:2D:EF:77:A2:6D:7C:C1:94:73:B3:A4:06:4D:CC:52:17:E4:71
Certificate issuer:       /CN=bf982def77a26d7cc19473b3a4064dcc5217e471
Certificate serial:       019369DA58A50BA91C144C446800CC64C616
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 19:02:17 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:17 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:17 +0000
Files and hashes:         1: _GqJ24gQOfIN3NK2hJe_xXB0_RU.roa (hash: euwLXRZTIBEgdfFmjGKm+bh8IdB+DnVaAA6xuf43LpI=)
                          2: v5gt73eibXzBlHOzpAZNzFIX5HE.crl (hash: IqKiRlTsF7x67z/6aUt0ydbhyL+52JvQ2zvDXZMw9z0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:58:a5:0b:a9:1c:14:4c:44:68:00:cc:64:c6:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf982def77a26d7cc19473b3a4064dcc5217e471
        Validity
            Not Before: Nov 26 19:02:17 2024 GMT
            Not After : Nov 27 19:02:17 2024 GMT
        Subject: CN=8cba33c7ae4678a68c6d6b9096625e753e507eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4c:8e:e5:09:1e:1d:8b:c4:c3:f1:44:ba:28:
                    48:cc:48:11:7f:9f:87:2d:f1:dd:9d:68:3d:e9:46:
                    56:04:07:2f:e4:88:d0:4d:c5:37:19:45:0b:dd:aa:
                    53:28:af:6b:2a:86:c1:4f:e0:7f:db:ae:18:9e:de:
                    3c:3d:c6:7c:35:d0:4e:5c:49:f2:33:4e:ef:7c:8e:
                    bc:fd:c7:51:4d:e4:be:85:58:a8:e8:aa:32:58:b9:
                    37:61:5d:fb:74:87:de:b6:c5:db:ae:31:f0:70:05:
                    89:57:81:2d:c2:69:64:20:73:b0:39:04:b5:e7:7c:
                    ba:2e:f6:65:63:73:8d:b8:98:da:0e:12:7e:57:a5:
                    ab:43:5d:af:47:67:6d:e6:fe:1e:16:3a:dd:02:d3:
                    f5:03:1d:99:ae:8a:cf:e3:55:8a:6e:39:ec:ff:fc:
                    b4:b7:f6:70:f0:e0:01:21:2b:4b:f6:09:de:e1:7b:
                    fe:a7:3e:91:e7:97:24:ee:0b:9b:65:16:db:e9:4a:
                    2d:3a:a8:e1:94:99:b9:b3:a1:40:fe:de:97:47:03:
                    61:56:ce:ff:50:fd:4a:82:0e:f3:79:f7:38:93:8a:
                    14:e8:41:b8:59:0a:82:64:60:ab:eb:57:9f:3c:cc:
                    0b:5a:26:8e:7f:53:1c:30:be:0b:42:94:50:b3:67:
                    dc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BA:33:C7:AE:46:78:A6:8C:6D:6B:90:96:62:5E:75:3E:50:7E:BA
            X509v3 Authority Key Identifier:
                keyid:BF:98:2D:EF:77:A2:6D:7C:C1:94:73:B3:A4:06:4D:CC:52:17:E4:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:47:54:f5:17:d1:06:0a:99:75:bf:3b:13:2e:df:19:75:51:
         c7:68:d0:5d:aa:42:53:98:60:2c:d2:2b:82:a5:08:81:2b:4a:
         f7:6e:e4:5e:15:47:e6:6b:49:74:96:76:e6:ff:c6:b8:2a:f0:
         eb:4e:af:be:0b:d3:17:9a:64:39:38:2e:a8:b1:e3:48:24:8d:
         40:31:ed:c7:64:c1:a5:da:45:bb:99:ad:ad:ca:68:42:8b:d3:
         47:e0:d8:b8:80:ac:26:8a:3b:56:9a:34:07:ef:83:40:dd:24:
         6c:bc:24:13:98:4a:ea:cf:f1:c9:d0:55:3e:b7:a9:8d:75:0c:
         ac:ae:0b:50:bf:36:78:96:e8:a6:2f:a1:81:20:2c:59:1e:0b:
         1f:3e:e3:e3:4c:83:1e:b4:39:96:26:70:bf:74:e7:d1:0b:57:
         58:96:b5:87:12:db:bc:1c:19:39:07:10:9d:3c:ff:65:ab:ca:
         ce:d3:6d:46:0a:ef:81:6a:f2:24:c4:14:a3:08:e9:fc:8e:1f:
         a3:75:81:d7:c4:60:25:85:7d:24:c9:6f:a3:af:0b:c4:f1:ce:
         60:15:56:94:eb:28:be:ff:0f:c4:54:3b:f6:f8:44:e9:76:3a:
         0b:69:e8:3f:0a:3c:05:61:2a:b7:be:af:1f:22:cb:a9:44:44:
         b0:f9:95:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2lilC6kcFExEaADMZMYWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmOTgyZGVmNzdhMjZkN2NjMTk0NzNiM2E0MDY0ZGNjNTIx
N2U0NzEwHhcNMjQxMTI2MTkwMjE3WhcNMjQxMTI3MTkwMjE3WjAzMTEwLwYDVQQD
Eyg4Y2JhMzNjN2FlNDY3OGE2OGM2ZDZiOTA5NjYyNWU3NTNlNTA3ZWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUyO5QkeHYvEw/FEuihIzEgRf5+H
LfHdnWg96UZWBAcv5IjQTcU3GUUL3apTKK9rKobBT+B/264Ynt48PcZ8NdBOXEny
M07vfI68/cdRTeS+hVio6KoyWLk3YV37dIfetsXbrjHwcAWJV4EtwmlkIHOwOQS1
53y6LvZlY3ONuJjaDhJ+V6WrQ12vR2dt5v4eFjrdAtP1Ax2ZrorP41WKbjns//y0
t/Zw8OABIStL9gne4Xv+pz6R55ck7gubZRbb6UotOqjhlJm5s6FA/t6XRwNhVs7/
UP1Kgg7zefc4k4oU6EG4WQqCZGCr61efPMwLWiaOf1McML4LQpRQs2fccQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIy6M8euRnimjG1rkJZiXnU+UH66MB8GA1UdIwQY
MBaAFL+YLe93om18wZRzs6QGTcxSF+RxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjVndDczZWliWHpCbEhPenBBWk56RklYNUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZmEwOTEtYjE2Zi00NTI3LThiMDAt
MWRkYWMyYjA4NDA0LzEvdjVndDczZWliWHpCbEhPenBBWk56RklYNUhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9hZmEwOTEtYjE2Zi00NTI3LThiMDAtMWRkYWMyYjA4NDA0
LzEvdjVndDczZWliWHpCbEhPenBBWk56RklYNUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwkdU9RfR
BgqZdb87Ey7fGXVRx2jQXapCU5hgLNIrgqUIgStK927kXhVH5mtJdJZ25v/GuCrw
606vvgvTF5pkOTguqLHjSCSNQDHtx2TBpdpFu5mtrcpoQovTR+DYuICsJoo7Vpo0
B++DQN0kbLwkE5hK6s/xydBVPrepjXUMrK4LUL82eJbopi+hgSAsWR4LHz7j40yD
HrQ5liZwv3Tn0QtXWJa1hxLbvBwZOQcQnTz/ZavKztNtRgrvgWryJMQUowjp/I4f
o3WB18RgJYV9JMlvo68LxPHOYBVWlOsovv8PxFQ79vhE6XY6C2noPwo8BWEqt76v
HyLLqUREsPmVmQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:43 2024 by rpki-client on console-fra.rpki-client.org