Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/aL8cWiHDgluLhlFqGllxIbVLPMM.mft
File:                     aL8cWiHDgluLhlFqGllxIbVLPMM.mft (raw, json)
Hash identifier:          qjxVWwcGTyBIEBW1R5rHPeceNIz7sDXMcCxgVt7vrO8=
Subject key identifier:   E0:C7:F2:4D:64:EA:59:BC:3C:E8:C1:41:E5:EA:7E:F2:BC:6A:92:BF
Authority key identifier: 68:BF:1C:5A:21:C3:82:5B:8B:86:51:6A:1A:59:71:21:B5:4B:3C:C3
Certificate issuer:       /CN=68bf1c5a21c3825b8b86516a1a597121b54b3cc3
Certificate serial:       019369DA212CCD26051EE078EE7CD31E8501
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aL8cWiHDgluLhlFqGllxIbVLPMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/aL8cWiHDgluLhlFqGllxIbVLPMM.mft
Manifest number:          137C
Signing time:             Tue 26 Nov 2024 19:02:03 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:03 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:03 +0000
Files and hashes:         1: 7EqUTk9ybrIfeMEeD0wLwb0zIO4.roa (hash: k0CajAZ9SJ4lr/W6VJqy9YtDhC2z1DYqK6sfpePub10=)
                          2: aL8cWiHDgluLhlFqGllxIbVLPMM.crl (hash: mc+f/S8/nDwO/CCAQgumQHWtsl54zBE6oRymSMzyvrA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/aL8cWiHDgluLhlFqGllxIbVLPMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/aL8cWiHDgluLhlFqGllxIbVLPMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aL8cWiHDgluLhlFqGllxIbVLPMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:21:2c:cd:26:05:1e:e0:78:ee:7c:d3:1e:85:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68bf1c5a21c3825b8b86516a1a597121b54b3cc3
        Validity
            Not Before: Nov 26 19:02:03 2024 GMT
            Not After : Nov 27 19:02:03 2024 GMT
        Subject: CN=e0c7f24d64ea59bc3ce8c141e5ea7ef2bc6a92bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b2:46:c6:7a:d9:ed:26:5f:a2:2c:65:1a:06:
                    a5:3f:ab:72:a9:d4:0b:6a:a4:80:7a:32:e5:b4:da:
                    02:84:80:58:a3:04:a4:d8:e2:a8:f7:84:f2:48:fe:
                    6f:72:d7:5f:86:76:88:7d:52:0c:61:af:f3:0e:00:
                    a0:ac:f3:1c:9d:94:8f:92:51:49:33:db:b4:bb:ed:
                    1c:90:02:fd:38:ad:9f:71:ab:84:8d:d6:87:2a:b4:
                    64:d7:c4:05:fb:bc:91:21:50:4d:a3:32:25:23:49:
                    0d:db:af:7b:cc:dd:3f:16:3e:40:3e:86:c6:de:a2:
                    67:b4:8e:62:37:45:49:7c:5e:85:e6:e8:be:04:bf:
                    46:11:30:d1:4a:27:3f:b9:d4:46:86:35:d6:90:6a:
                    e5:d6:5c:fb:3b:f3:14:c7:04:b4:2c:53:6a:cb:fb:
                    ec:fd:d8:01:b0:9f:0e:c3:c0:ad:75:d6:77:a6:ff:
                    c2:04:bc:4b:6e:61:9e:d8:7f:9a:9c:7d:6e:b3:73:
                    0f:f7:66:84:51:cc:b6:06:02:14:de:3d:7e:e5:a8:
                    db:d7:31:0a:28:d3:71:60:65:28:e9:cb:9f:0c:c7:
                    31:13:76:97:8f:9c:f6:fd:40:bf:ef:37:2e:3a:48:
                    c2:1b:4d:be:e7:3e:3d:5f:ec:1d:3e:b1:68:d5:2f:
                    78:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C7:F2:4D:64:EA:59:BC:3C:E8:C1:41:E5:EA:7E:F2:BC:6A:92:BF
            X509v3 Authority Key Identifier:
                keyid:68:BF:1C:5A:21:C3:82:5B:8B:86:51:6A:1A:59:71:21:B5:4B:3C:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL8cWiHDgluLhlFqGllxIbVLPMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/aL8cWiHDgluLhlFqGllxIbVLPMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/aL8cWiHDgluLhlFqGllxIbVLPMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a0:7b:93:88:59:b9:19:36:29:75:b8:54:cf:23:b9:4b:3a:
         6b:99:11:d1:bf:c7:ab:00:5d:b7:ca:df:c1:64:24:df:65:38:
         8b:c5:fd:2f:6e:02:ea:9b:64:98:42:bb:49:0a:93:5f:1f:38:
         95:3b:8b:b7:ce:0c:3f:9b:5e:23:3d:30:c7:d4:23:58:49:d8:
         9d:9d:9f:15:b2:99:74:81:f8:6f:11:c2:2a:cd:51:db:60:3f:
         8f:eb:10:83:89:48:52:99:b1:b2:1b:51:df:14:59:b5:14:88:
         25:b0:f8:d7:e1:e2:9a:1f:69:ac:ee:e9:b2:db:c4:bc:24:59:
         a6:48:54:93:9b:f3:61:ac:1a:5b:28:46:cc:89:9c:38:e1:98:
         ca:a0:2b:41:6a:fc:c8:ad:59:2f:79:f7:af:fe:9a:12:ec:82:
         5c:9b:09:d8:41:6b:13:66:97:03:78:59:01:a3:65:d4:a0:14:
         a2:8f:c8:7f:51:63:15:46:61:1b:0d:5d:10:d4:03:55:38:f1:
         c0:93:f5:94:1c:ea:ec:ac:0f:45:ee:67:16:d2:2a:ff:d7:56:
         36:c6:b9:d4:02:d6:60:49:55:3a:da:4c:71:13:c2:d8:36:d4:
         7b:9a:f7:f8:4e:45:ca:e6:e9:b9:25:1a:97:e1:c2:a5:34:c4:
         36:fc:74:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2iEszSYFHuB47nzTHoUBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YmYxYzVhMjFjMzgyNWI4Yjg2NTE2YTFhNTk3MTIxYjU0
YjNjYzMwHhcNMjQxMTI2MTkwMjAzWhcNMjQxMTI3MTkwMjAzWjAzMTEwLwYDVQQD
EyhlMGM3ZjI0ZDY0ZWE1OWJjM2NlOGMxNDFlNWVhN2VmMmJjNmE5MmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17JGxnrZ7SZfoixlGgalP6tyqdQL
aqSAejLltNoChIBYowSk2OKo94TySP5vctdfhnaIfVIMYa/zDgCgrPMcnZSPklFJ
M9u0u+0ckAL9OK2fcauEjdaHKrRk18QF+7yRIVBNozIlI0kN2697zN0/Fj5APobG
3qJntI5iN0VJfF6F5ui+BL9GETDRSic/udRGhjXWkGrl1lz7O/MUxwS0LFNqy/vs
/dgBsJ8Ow8CtddZ3pv/CBLxLbmGe2H+anH1us3MP92aEUcy2BgIU3j1+5ajb1zEK
KNNxYGUo6cufDMcxE3aXj5z2/UC/7zcuOkjCG02+5z49X+wdPrFo1S94ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODH8k1k6lm8POjBQeXqfvK8apK/MB8GA1UdIwQY
MBaAFGi/HFohw4Jbi4ZRahpZcSG1SzzDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUw4Y1dpSERnbHVMaGxGcUdsbHhJYlZMUE1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yZmNlNWUtYzkxNS00ZjAyLWFkM2Et
NTVlYjViYjk5ZTQ1LzEvYUw4Y1dpSERnbHVMaGxGcUdsbHhJYlZMUE1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8yZmNlNWUtYzkxNS00ZjAyLWFkM2EtNTVlYjViYjk5ZTQ1
LzEvYUw4Y1dpSERnbHVMaGxGcUdsbHhJYlZMUE1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqB7k4hZ
uRk2KXW4VM8juUs6a5kR0b/HqwBdt8rfwWQk32U4i8X9L24C6ptkmEK7SQqTXx84
lTuLt84MP5teIz0wx9QjWEnYnZ2fFbKZdIH4bxHCKs1R22A/j+sQg4lIUpmxshtR
3xRZtRSIJbD41+Himh9prO7pstvEvCRZpkhUk5vzYawaWyhGzImcOOGYyqArQWr8
yK1ZL3n3r/6aEuyCXJsJ2EFrE2aXA3hZAaNl1KAUoo/If1FjFUZhGw1dENQDVTjx
wJP1lBzq7KwPRe5nFtIq/9dWNsa51ALWYElVOtpMcRPC2DbUe5r3+E5FyubpuSUa
l+HCpTTENvx0ww==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:38:20 2024 by rpki-client on console-fra.rpki-client.org