Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
File:                     bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft (raw, json)
Hash identifier:          YIT9JK8Cdqz1OEqLyzBsCk2Oohy6I5B+YkrhGltTb6A=
Subject key identifier:   FE:07:F9:59:5E:E1:AA:47:BB:6B:AA:17:91:BF:41:CE:78:C2:84:CD
Authority key identifier: 6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
Certificate issuer:       /CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Certificate serial:       0193549A86AD4B58C10200B785AF1B42F1D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 16:00:33 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:33 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:33 +0000
Files and hashes:         1: bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl (hash: s8RGxCCh9ndXVv84R/RTWF9AaL5lL+QHOE7ddJqGhXk=)
                          2: wgBR-EGpbemgYALq7Awz02jQUZs.roa (hash: xB5AXpI3xcnJ6CvJgtrIzjbFvW1zLucQKegXiSgDv5U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:86:ad:4b:58:c1:02:00:b7:85:af:1b:42:f1:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c380c8b4e55e59081af73aa1935e10a012057fa
        Validity
            Not Before: Nov 22 16:00:33 2024 GMT
            Not After : Nov 23 16:00:33 2024 GMT
        Subject: CN=fe07f9595ee1aa47bb6baa1791bf41ce78c284cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:65:5e:63:70:75:c7:c0:e8:a5:ef:b2:9e:62:
                    31:ed:75:d5:2d:8a:04:a7:ed:2c:0b:ef:ac:42:00:
                    33:51:75:24:60:cf:00:96:10:4c:4b:c4:57:95:1d:
                    4a:ad:28:5f:63:02:be:d6:8e:3f:40:29:de:d1:f5:
                    65:4c:84:91:59:af:13:9e:b5:fb:44:f4:54:b7:8a:
                    ad:a7:12:dd:19:ce:fa:ef:77:af:49:b3:fe:ab:5d:
                    34:57:cd:10:99:fc:dd:2c:4e:17:af:7c:b5:49:02:
                    6d:38:63:c4:65:d0:f9:63:a2:71:86:b4:b4:45:15:
                    77:f9:5b:38:76:cf:56:d3:f8:a9:4f:de:f4:a9:1a:
                    7a:e3:59:5c:4c:57:8a:6a:0f:8d:b8:52:aa:c0:92:
                    eb:aa:39:b4:dc:7e:0a:17:a4:ac:5d:c8:21:da:91:
                    92:b0:34:e2:f8:ad:28:81:e0:42:91:5b:f0:a5:ca:
                    e1:e6:6d:04:27:ff:77:43:5a:bc:98:86:90:ad:fc:
                    e3:4f:a8:ce:c3:12:60:ad:6e:c7:8b:a2:81:83:75:
                    e1:2d:63:35:63:85:8d:7a:7f:e4:77:38:df:8c:fe:
                    07:1a:a3:ca:71:42:1d:6e:23:fc:42:a8:d9:6d:bd:
                    ee:e7:05:0b:24:4d:0f:f5:3b:f6:ae:7e:f8:57:92:
                    a1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:07:F9:59:5E:E1:AA:47:BB:6B:AA:17:91:BF:41:CE:78:C2:84:CD
            X509v3 Authority Key Identifier:
                keyid:6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:27:c9:f8:53:a5:59:88:9b:18:c6:36:6b:cf:95:fb:87:26:
         55:69:d7:9f:3e:cd:b1:ce:c3:dc:56:0a:22:6f:dd:90:2a:99:
         b0:16:a9:1a:01:19:9b:68:11:17:5d:6a:de:c4:1a:e7:af:f4:
         d3:c6:ce:5f:89:e6:bf:ec:84:7b:05:77:5b:57:b7:34:e1:4f:
         d4:dc:f4:74:e5:09:ac:fe:2d:9b:8d:78:11:af:f6:69:9e:c3:
         12:d9:10:1a:5a:79:fb:cc:c0:9b:df:fa:5b:36:7e:bf:16:33:
         cb:77:35:c6:66:16:8d:ef:22:c6:83:27:8d:22:8d:2f:8a:d6:
         79:c1:11:a0:f8:24:9c:c9:0d:c2:c9:7b:52:41:77:c6:00:0b:
         e8:26:3f:49:bc:9b:d5:5a:a1:38:55:39:11:c8:20:e2:dc:9d:
         9f:8f:ca:f2:14:38:98:14:21:c1:d1:81:22:82:a2:00:64:89:
         a3:67:55:0e:0a:c5:f8:ee:14:38:20:55:ed:97:8a:b8:90:01:
         3b:71:19:6a:21:f5:2b:ee:22:4d:70:52:64:79:f8:d0:4c:ba:
         b4:67:e8:f2:63:12:8d:e0:04:4c:b8:8c:cf:93:70:1e:79:91:
         d9:5d:ed:3c:49:c3:81:96:e9:50:4b:c5:7f:8b:74:a9:9d:1c:
         32:d7:72:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUmoatS1jBAgC3ha8bQvHTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMzgwYzhiNGU1NWU1OTA4MWFmNzNhYTE5MzVlMTBhMDEy
MDU3ZmEwHhcNMjQxMTIyMTYwMDMzWhcNMjQxMTIzMTYwMDMzWjAzMTEwLwYDVQQD
EyhmZTA3Zjk1OTVlZTFhYTQ3YmI2YmFhMTc5MWJmNDFjZTc4YzI4NGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2VeY3B1x8Dope+ynmIx7XXVLYoE
p+0sC++sQgAzUXUkYM8AlhBMS8RXlR1KrShfYwK+1o4/QCne0fVlTISRWa8TnrX7
RPRUt4qtpxLdGc7673evSbP+q100V80QmfzdLE4Xr3y1SQJtOGPEZdD5Y6JxhrS0
RRV3+Vs4ds9W0/ipT970qRp641lcTFeKag+NuFKqwJLrqjm03H4KF6SsXcgh2pGS
sDTi+K0ogeBCkVvwpcrh5m0EJ/93Q1q8mIaQrfzjT6jOwxJgrW7Hi6KBg3XhLWM1
Y4WNen/kdzjfjP4HGqPKcUIdbiP8QqjZbb3u5wULJE0P9Tv2rn74V5KhewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4H+Vle4apHu2uqF5G/Qc54woTNMB8GA1UdIwQY
MBaAFGw4DItOVeWQga9zqhk14QoBIFf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkRnTWkwNVY1WkNCcjNPcUdUWGhDZ0VnVl9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZTQyYzctMTU1YS00OWFhLWFhMDAt
MDhmMDk0ZGFmMjQ3LzEvYkRnTWkwNVY1WkNCcjNPcUdUWGhDZ0VnVl9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zZTQyYzctMTU1YS00OWFhLWFhMDAtMDhmMDk0ZGFmMjQ3
LzEvYkRnTWkwNVY1WkNCcjNPcUdUWGhDZ0VnVl9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuifJ+FOl
WYibGMY2a8+V+4cmVWnXnz7Nsc7D3FYKIm/dkCqZsBapGgEZm2gRF11q3sQa56/0
08bOX4nmv+yEewV3W1e3NOFP1Nz0dOUJrP4tm414Ea/2aZ7DEtkQGlp5+8zAm9/6
WzZ+vxYzy3c1xmYWje8ixoMnjSKNL4rWecERoPgknMkNwsl7UkF3xgAL6CY/Sbyb
1VqhOFU5Ecgg4tydn4/K8hQ4mBQhwdGBIoKiAGSJo2dVDgrF+O4UOCBV7ZeKuJAB
O3EZaiH1K+4iTXBSZHn40Ey6tGfo8mMSjeAETLiMz5NwHnmR2V3tPEnDgZbpUEvF
f4t0qZ0cMtdyMw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:05:27 2024 by rpki-client on console-fra.rpki-client.org