Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft
File:                     Ruvdrmp6zug6MioOdDpnWdhTZfI.mft (raw, json)
Hash identifier:          l1+SFjdKOL4t4NsH//GeN/YE0Ksq0FNkuwwvCpT9n3w=
Subject key identifier:   D5:B4:A8:E5:66:C2:33:EE:F2:B9:7B:37:86:DC:AB:44:83:B7:03:E8
Authority key identifier: 46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2
Certificate issuer:       /CN=46ebddae6a7acee83a322a0e743a6759d85365f2
Certificate serial:       01936AB426D5F5505CD2F5C5313868489518
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft
Manifest number:          137A
Signing time:             Tue 26 Nov 2024 23:00:11 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:11 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:11 +0000
Files and hashes:         1: 5jIYCTyqc6TliqYnFGW9mLmvucQ.roa (hash: CUrPGL0ruQ48XykmM32pk8ygGLS9gUoD5CmR55pWyAY=)
                          2: NEg06crp0YPEX2GLlb4bLVMcfYA.roa (hash: ODYGDo4PQqNZS1p0A++0r/AGCv+wi0qmwaIJT5rcnAk=)
                          3: Nv--541-EkV5SEX9PIaTmx9sqQ8.roa (hash: c6OhLLoLcXu3KV7S+Uae+UTjHqVW1PH12d2ic4JZNUw=)
                          4: Ruvdrmp6zug6MioOdDpnWdhTZfI.crl (hash: n8H+o4NPyiqjz8Gjk7PK7VuiUAiZsMtHx6aLjBrmUDU=)
                          5: edbCavwVm9Gkf98mRsbeIyfwK20.roa (hash: GxzIRdfFg1QqK46F7yOBgcGhTVkErq0MgVa9HmsH46o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:26:d5:f5:50:5c:d2:f5:c5:31:38:68:48:95:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ebddae6a7acee83a322a0e743a6759d85365f2
        Validity
            Not Before: Nov 26 23:00:11 2024 GMT
            Not After : Nov 27 23:00:11 2024 GMT
        Subject: CN=d5b4a8e566c233eef2b97b3786dcab4483b703e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e6:5c:d7:b2:3b:ed:bf:51:54:61:8b:10:26:
                    81:42:34:32:47:12:e3:65:64:c4:53:c8:20:46:4c:
                    66:3b:23:23:24:06:35:b0:dd:19:2e:74:b4:f6:0e:
                    84:e4:69:1c:96:95:b8:3e:77:a1:00:3a:5f:5b:56:
                    fd:e6:22:c1:a0:50:da:6e:9e:10:92:d0:92:ca:de:
                    4e:cf:47:d7:e9:3d:4e:41:a4:8f:6a:26:6c:fa:8d:
                    bf:b9:66:b3:4c:d2:51:79:41:f0:27:9e:61:0c:2f:
                    f3:89:c7:52:70:9c:95:ad:7b:af:41:6a:b2:e4:aa:
                    bb:e1:ac:e8:14:b0:72:cb:9d:01:61:ae:c0:f3:c6:
                    fd:de:35:91:30:8a:89:3d:71:b2:bd:69:a7:74:6c:
                    6b:87:9e:28:61:21:66:56:9e:ef:06:3f:8c:e0:38:
                    19:d8:25:17:bd:bc:a0:15:55:82:bc:bd:02:da:4c:
                    79:be:71:ee:8a:bd:41:06:9a:31:79:73:2e:7f:76:
                    a0:29:10:2f:09:73:26:4f:4e:14:a7:95:7d:a5:c3:
                    c1:0c:fa:7c:c5:31:85:04:bb:76:41:af:6c:a2:a5:
                    83:69:d3:7f:91:d8:bb:25:1f:d9:99:6d:7a:ee:63:
                    a7:50:9a:b8:71:66:0d:ff:ab:e1:62:3a:e2:54:a8:
                    85:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B4:A8:E5:66:C2:33:EE:F2:B9:7B:37:86:DC:AB:44:83:B7:03:E8
            X509v3 Authority Key Identifier:
                keyid:46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:3b:85:a2:2b:28:26:3c:de:78:c8:ba:f3:99:32:56:32:1d:
         5d:81:22:d5:e9:46:8d:8a:2c:5a:98:7d:4f:83:56:d7:79:73:
         4a:ba:f6:6a:bb:3b:d2:bf:f0:97:e7:47:7a:ad:36:bd:50:d7:
         bd:59:55:67:fe:05:07:82:76:be:32:6f:63:66:7c:f5:66:13:
         a0:78:9f:25:d4:b6:ce:91:64:44:13:d6:97:68:f0:8f:b0:a5:
         ee:a8:56:d5:15:ac:8b:72:24:48:ba:bf:73:36:d5:6a:7b:87:
         61:44:a2:10:1f:3c:dc:38:d5:bd:da:ab:3c:5b:23:21:23:0b:
         60:03:d8:ed:4c:60:d3:8f:51:9a:a4:d0:36:70:6c:74:f7:7c:
         22:e8:3b:c7:a0:a1:e9:d6:16:27:16:f5:f4:ec:bd:2b:4f:5c:
         54:1b:de:04:e5:3c:a4:cc:7f:7d:c7:12:42:67:59:c7:43:d8:
         af:80:5e:a4:d0:a6:c8:11:80:df:a1:57:4b:ad:94:f8:e2:e5:
         ff:bc:ee:89:19:2d:ce:e8:0a:06:ac:1a:ff:d2:9e:26:e2:f7:
         9f:55:9e:19:6a:66:ab:5d:35:5f:ce:88:96:3f:30:fc:21:f3:
         c3:66:aa:31:de:a3:0d:7b:62:77:d3:74:6b:fa:58:5a:29:b9:
         cd:6e:de:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqtCbV9VBc0vXFMThoSJUYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZWJkZGFlNmE3YWNlZTgzYTMyMmEwZTc0M2E2NzU5ZDg1
MzY1ZjIwHhcNMjQxMTI2MjMwMDExWhcNMjQxMTI3MjMwMDExWjAzMTEwLwYDVQQD
EyhkNWI0YThlNTY2YzIzM2VlZjJiOTdiMzc4NmRjYWI0NDgzYjcwM2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+Zc17I77b9RVGGLECaBQjQyRxLj
ZWTEU8ggRkxmOyMjJAY1sN0ZLnS09g6E5GkclpW4PnehADpfW1b95iLBoFDabp4Q
ktCSyt5Oz0fX6T1OQaSPaiZs+o2/uWazTNJReUHwJ55hDC/zicdScJyVrXuvQWqy
5Kq74azoFLByy50BYa7A88b93jWRMIqJPXGyvWmndGxrh54oYSFmVp7vBj+M4DgZ
2CUXvbygFVWCvL0C2kx5vnHuir1BBpoxeXMuf3agKRAvCXMmT04Up5V9pcPBDPp8
xTGFBLt2Qa9soqWDadN/kdi7JR/ZmW167mOnUJq4cWYN/6vhYjriVKiFsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNW0qOVmwjPu8rl7N4bcq0SDtwPoMB8GA1UdIwQY
MBaAFEbr3a5qes7oOjIqDnQ6Z1nYU2XyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnV2ZHJtcDZ6dWc2TWlvT2REcG5XZGhUWmZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC81YzY1YWYtYjNmOS00YmIzLWE3MDIt
MmJjOTA3OTRkMzhkLzEvUnV2ZHJtcDZ6dWc2TWlvT2REcG5XZGhUWmZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC81YzY1YWYtYjNmOS00YmIzLWE3MDItMmJjOTA3OTRkMzhk
LzEvUnV2ZHJtcDZ6dWc2TWlvT2REcG5XZGhUWmZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDuFoiso
JjzeeMi685kyVjIdXYEi1elGjYosWph9T4NW13lzSrr2ars70r/wl+dHeq02vVDX
vVlVZ/4FB4J2vjJvY2Z89WYToHifJdS2zpFkRBPWl2jwj7Cl7qhW1RWsi3IkSLq/
czbVanuHYUSiEB883DjVvdqrPFsjISMLYAPY7Uxg049RmqTQNnBsdPd8Iug7x6Ch
6dYWJxb19Oy9K09cVBveBOU8pMx/fccSQmdZx0PYr4BepNCmyBGA36FXS62U+OLl
/7zuiRktzugKBqwa/9KeJuL3n1WeGWpmq101X86Ilj8w/CHzw2aqMd6jDXtid9N0
a/pYWim5zW7eGA==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:38:54 2024 by rpki-client on console-fra.rpki-client.org