Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
File:                     pxn9xw058Tw3hNMlrith8PPJn0g.mft (raw, json)
Hash identifier:          Wx0NqV42NqIu6g2gluvmUd8e0w9nRdnCpofboQ8Mmbk=
Subject key identifier:   7B:F2:EC:94:38:C4:D3:AF:DC:B6:DB:97:D5:10:1A:1E:25:96:2F:FD
Authority key identifier: A7:19:FD:C7:0D:39:F1:3C:37:84:D3:25:AE:2B:61:F0:F3:C9:9F:48
Certificate issuer:       /CN=a719fdc70d39f13c3784d325ae2b61f0f3c99f48
Certificate serial:       01936AB4CECF021E2E0E6F0DF2B6D57781A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 23:00:54 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:54 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:54 +0000
Files and hashes:         1: KOeWw2Ab1yzDjLBzqiJ0s8N6fqQ.roa (hash: GGn975mnio2h/tXKkTTowY9JF6cys1o+rD+gN4dwNCA=)
                          2: pxn9xw058Tw3hNMlrith8PPJn0g.crl (hash: b0rduiF0S7gM4SPSdCnDXyT+2hIWjIe8I/aFA8ui0JQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:ce:cf:02:1e:2e:0e:6f:0d:f2:b6:d5:77:81:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a719fdc70d39f13c3784d325ae2b61f0f3c99f48
        Validity
            Not Before: Nov 26 23:00:54 2024 GMT
            Not After : Nov 27 23:00:54 2024 GMT
        Subject: CN=7bf2ec9438c4d3afdcb6db97d5101a1e25962ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1a:56:49:a1:7e:2d:ce:d1:b4:fc:de:c2:b2:
                    54:2e:7e:28:7f:a7:26:44:e5:77:ba:75:16:cf:fc:
                    b7:a8:de:99:09:0a:ab:18:9f:be:ec:1f:ce:27:ac:
                    51:3e:49:0f:9f:fd:a7:5c:1c:19:96:3b:b9:2f:51:
                    63:b5:d9:92:5c:53:69:be:67:6a:d1:36:6e:e1:3b:
                    6b:99:96:f5:90:42:b4:9a:f1:42:40:95:db:54:79:
                    f5:28:79:2c:4a:a4:98:67:73:6e:bc:7c:06:69:ee:
                    86:d4:aa:01:2b:50:1e:f0:65:ad:f2:e9:5b:4a:3b:
                    4a:c9:56:03:4a:0e:76:da:25:20:46:e2:7a:d8:36:
                    f5:20:17:9e:df:b3:fa:3d:96:02:65:54:0a:03:b1:
                    65:4f:f6:14:1c:a4:8c:e7:5d:c5:62:75:32:08:f5:
                    68:c7:40:2f:9d:c9:b8:8d:e2:3f:8b:b9:4e:45:19:
                    d8:52:fb:ce:79:3f:d7:a5:53:c4:4f:98:26:ed:42:
                    de:e6:ce:77:02:ea:97:30:df:21:46:a7:9f:79:3a:
                    ae:52:21:60:a3:7a:c0:09:af:49:0d:83:0a:3f:9d:
                    17:73:7d:28:06:94:ad:bd:e8:f9:18:f8:6a:0e:da:
                    92:90:d2:b8:a5:42:8a:4e:7a:9a:86:53:8b:8f:21:
                    16:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F2:EC:94:38:C4:D3:AF:DC:B6:DB:97:D5:10:1A:1E:25:96:2F:FD
            X509v3 Authority Key Identifier:
                keyid:A7:19:FD:C7:0D:39:F1:3C:37:84:D3:25:AE:2B:61:F0:F3:C9:9F:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:2c:66:99:84:8c:d2:42:92:c9:40:79:f7:38:45:bc:d3:b1:
         8a:d7:da:43:77:b7:9c:89:76:48:3a:bb:50:e6:98:e3:a4:ec:
         ba:8f:8d:65:51:65:e8:36:70:77:d0:ac:62:7b:be:d1:f4:3a:
         ab:1b:d6:3b:81:92:c1:ab:61:45:a5:c8:e0:4d:a7:d3:54:3a:
         43:fb:eb:c6:42:ee:87:3c:3d:6a:30:52:79:43:b4:b3:3f:af:
         5f:bb:80:03:26:85:69:70:76:72:c5:b7:50:e9:66:62:4c:68:
         fb:d8:63:53:ff:8b:1d:2e:b8:30:d9:bb:1f:d4:b1:d0:6e:1d:
         34:c1:75:81:96:cc:79:4e:71:be:f8:77:20:45:b2:25:bf:7f:
         9a:55:9f:4f:4c:ac:1c:90:a2:37:f2:65:48:e0:fd:01:15:18:
         80:71:8c:34:e4:b8:c0:62:19:c5:7d:94:f8:3f:df:16:e7:b3:
         d1:d2:26:6c:08:0f:79:b3:b4:58:9e:dd:e0:66:04:51:e5:e6:
         07:98:4c:a5:12:1d:d0:dd:17:7b:20:19:d0:5f:e6:d9:d1:72:
         aa:d7:3f:83:82:07:cd:59:9d:47:db:3c:60:4a:0c:91:04:a5:
         1c:a1:0f:d9:73:66:67:1a:c0:df:a3:04:2b:d6:02:dd:0b:25:
         83:8d:d9:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqtM7PAh4uDm8N8rbVd4GnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MTlmZGM3MGQzOWYxM2MzNzg0ZDMyNWFlMmI2MWYwZjNj
OTlmNDgwHhcNMjQxMTI2MjMwMDU0WhcNMjQxMTI3MjMwMDU0WjAzMTEwLwYDVQQD
Eyg3YmYyZWM5NDM4YzRkM2FmZGNiNmRiOTdkNTEwMWExZTI1OTYyZmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBpWSaF+Lc7RtPzewrJULn4of6cm
ROV3unUWz/y3qN6ZCQqrGJ++7B/OJ6xRPkkPn/2nXBwZlju5L1FjtdmSXFNpvmdq
0TZu4TtrmZb1kEK0mvFCQJXbVHn1KHksSqSYZ3NuvHwGae6G1KoBK1Ae8GWt8ulb
SjtKyVYDSg522iUgRuJ62Db1IBee37P6PZYCZVQKA7FlT/YUHKSM513FYnUyCPVo
x0Avncm4jeI/i7lORRnYUvvOeT/XpVPET5gm7ULe5s53AuqXMN8hRqefeTquUiFg
o3rACa9JDYMKP50Xc30oBpStvej5GPhqDtqSkNK4pUKKTnqahlOLjyEWiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvy7JQ4xNOv3Lbbl9UQGh4lli/9MB8GA1UdIwQY
MBaAFKcZ/ccNOfE8N4TTJa4rYfDzyZ9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHhuOXh3MDU4VHczaE5NbHJpdGg4UFBKbjBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9kNzJiZjMtMWNhOS00MDIzLWFjZjUt
ZDVhNDIzNDQyZDM1LzEvcHhuOXh3MDU4VHczaE5NbHJpdGg4UFBKbjBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9kNzJiZjMtMWNhOS00MDIzLWFjZjUtZDVhNDIzNDQyZDM1
LzEvcHhuOXh3MDU4VHczaE5NbHJpdGg4UFBKbjBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESxmmYSM
0kKSyUB59zhFvNOxitfaQ3e3nIl2SDq7UOaY46Tsuo+NZVFl6DZwd9CsYnu+0fQ6
qxvWO4GSwathRaXI4E2n01Q6Q/vrxkLuhzw9ajBSeUO0sz+vX7uAAyaFaXB2csW3
UOlmYkxo+9hjU/+LHS64MNm7H9Sx0G4dNMF1gZbMeU5xvvh3IEWyJb9/mlWfT0ys
HJCiN/JlSOD9ARUYgHGMNOS4wGIZxX2U+D/fFuez0dImbAgPebO0WJ7d4GYEUeXm
B5hMpRId0N0XeyAZ0F/m2dFyqtc/g4IHzVmdR9s8YEoMkQSlHKEP2XNmZxrA36ME
K9YC3Qslg43ZFQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:16:19 2024 by rpki-client on console-ams.rpki-client.org