Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
File:                     Jah51ij-XsinYcR0hnmZP5xp-LQ.mft (raw, json)
Hash identifier:          gkHWxd+Iiv9ZhlsO7yn0N1tk4Nu1//d/0kI4V73inoA=
Subject key identifier:   71:97:AE:E8:4A:4E:7F:FD:46:0E:84:57:5C:D0:8E:64:DF:F4:E8:71
Authority key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
Certificate issuer:       /CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Certificate serial:       01935199AA21E504E8130533BF1A5ED486C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
Manifest number:          136D
Signing time:             Fri 22 Nov 2024 02:00:45 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:45 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:45 +0000
Files and hashes:         1: CyLJR1bE7vRGNLYN37T2CiAG1mY.roa (hash: 3z+UqRH/pjIs0mdd2ZxTs+R4R2I5FhLcaHvZBLo3WVc=)
                          2: Jah51ij-XsinYcR0hnmZP5xp-LQ.crl (hash: jtOWoDnkYlVtC2NWGkwKCfM6V+LFOw4VolP8igscN38=)
                          3: i5TJmpCgcwEIK-2STzLppvHczOg.roa (hash: a+s1/5y9/qXzZ7947OUjocn0y5pb+XkYafSpl5gKnlQ=)
                          4: tEv35q2RkU8qZwi3KbCbrQN4IU4.roa (hash: lfI/ly+fn3srZUEQSiNWtoImdhn39dWDFKmOYscx3TI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:aa:21:e5:04:e8:13:05:33:bf:1a:5e:d4:86:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
        Validity
            Not Before: Nov 22 02:00:45 2024 GMT
            Not After : Nov 23 02:00:45 2024 GMT
        Subject: CN=7197aee84a4e7ffd460e84575cd08e64dff4e871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8c:04:76:d5:f6:76:03:18:5c:35:ff:07:04:
                    ee:9e:50:17:7a:62:60:ad:9c:d4:f7:63:24:81:d7:
                    73:a5:64:ec:1d:bb:82:13:84:09:b9:15:06:51:2d:
                    b1:fb:3b:d0:43:e8:9e:21:3a:a6:8c:f8:92:80:5b:
                    e0:51:83:28:ca:6a:81:4a:4b:a1:5e:ee:fb:27:1e:
                    58:8d:77:6c:6e:c8:05:54:f0:ac:e2:0b:aa:a9:80:
                    68:9b:a9:9c:13:f8:15:dc:8e:13:8c:36:e5:6b:b6:
                    c3:ad:9a:46:e8:2a:a5:3a:17:b7:da:fe:d4:8c:56:
                    67:31:ea:af:2b:e3:16:36:20:3f:b5:e5:1e:b3:41:
                    d7:38:5c:46:cd:09:5c:0a:c8:02:1f:6d:b7:bb:d7:
                    cd:07:4d:a8:ef:48:f9:d0:91:52:cf:13:bf:d1:a3:
                    7c:ff:f5:58:df:80:60:43:6c:25:34:8b:81:3f:90:
                    83:72:0a:f3:60:17:04:c5:6c:46:92:86:d3:98:ed:
                    70:9d:54:78:38:a9:0b:0d:82:09:80:f6:f7:d1:09:
                    bd:be:f3:8e:9e:03:b2:ba:bd:4b:f9:23:cc:cf:5c:
                    d5:d8:23:09:89:5c:67:e5:fa:1a:95:96:18:60:e3:
                    fa:81:ce:24:f0:69:14:16:24:8e:be:fa:77:a5:0f:
                    71:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:97:AE:E8:4A:4E:7F:FD:46:0E:84:57:5C:D0:8E:64:DF:F4:E8:71
            X509v3 Authority Key Identifier:
                keyid:25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:fb:f3:20:b4:3e:a3:67:7f:b5:f9:3e:93:05:4e:7b:b0:f2:
         36:c2:a0:1c:1b:da:d2:72:74:b8:ec:31:73:6b:9e:2f:ef:62:
         2e:13:34:9e:82:8c:fc:d1:91:57:b1:41:41:de:3a:78:84:36:
         d4:3e:a4:f3:8d:d8:bf:55:3c:9a:28:82:df:4f:b7:98:ca:99:
         8c:8b:03:ea:f7:5b:2f:c6:cd:28:9a:dc:c5:50:bb:e2:80:cc:
         9b:f3:13:ec:42:b9:af:9a:99:4e:5f:22:76:23:a3:69:f6:6e:
         a7:36:8d:9b:95:3a:f0:57:37:91:2d:49:64:09:37:9d:6d:9e:
         97:ac:d2:17:78:1f:da:74:b2:60:0e:f1:a6:00:bf:57:17:5e:
         8c:a0:7e:17:8c:61:a9:1b:a7:26:67:04:39:97:ab:c3:81:9d:
         50:9f:96:07:fb:53:70:5c:e5:b5:58:c7:bd:9e:31:f5:53:00:
         cc:37:22:6e:72:a0:13:b1:46:10:df:16:e6:52:61:9a:ab:40:
         71:fb:85:a8:88:db:e3:cb:7d:b2:04:d7:c2:94:15:e6:75:97:
         5a:fc:08:09:47:15:f2:9c:b4:cb:f7:38:a9:33:f9:29:57:7f:
         89:2e:83:51:77:11:16:7b:8b:56:86:10:a0:b1:62:fa:3f:e5:
         61:80:58:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRmaoh5QToEwUzvxpe1IbFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YTg3OWQ2MjhmZTVlYzhhNzYxYzQ3NDg2Nzk5OTNmOWM2
OWY4YjQwHhcNMjQxMTIyMDIwMDQ1WhcNMjQxMTIzMDIwMDQ1WjAzMTEwLwYDVQQD
Eyg3MTk3YWVlODRhNGU3ZmZkNDYwZTg0NTc1Y2QwOGU2NGRmZjRlODcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4wEdtX2dgMYXDX/BwTunlAXemJg
rZzU92MkgddzpWTsHbuCE4QJuRUGUS2x+zvQQ+ieITqmjPiSgFvgUYMoymqBSkuh
Xu77Jx5YjXdsbsgFVPCs4guqqYBom6mcE/gV3I4TjDbla7bDrZpG6CqlOhe32v7U
jFZnMeqvK+MWNiA/teUes0HXOFxGzQlcCsgCH223u9fNB02o70j50JFSzxO/0aN8
//VY34BgQ2wlNIuBP5CDcgrzYBcExWxGkobTmO1wnVR4OKkLDYIJgPb30Qm9vvOO
ngOyur1L+SPMz1zV2CMJiVxn5foalZYYYOP6gc4k8GkUFiSOvvp3pQ9xlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGXruhKTn/9Rg6EV1zQjmTf9OhxMB8GA1UdIwQY
MBaAFCWoedYo/l7Ip2HEdIZ5mT+cafi0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOGQ1YTctNDhmMS00NDE0LWE4NTMt
ZDg2YjRjYWVkMTFkLzEvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8yOGQ1YTctNDhmMS00NDE0LWE4NTMtZDg2YjRjYWVkMTFk
LzEvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPvzILQ+
o2d/tfk+kwVOe7DyNsKgHBva0nJ0uOwxc2ueL+9iLhM0noKM/NGRV7FBQd46eIQ2
1D6k843Yv1U8miiC30+3mMqZjIsD6vdbL8bNKJrcxVC74oDMm/MT7EK5r5qZTl8i
diOjafZupzaNm5U68Fc3kS1JZAk3nW2el6zSF3gf2nSyYA7xpgC/VxdejKB+F4xh
qRunJmcEOZerw4GdUJ+WB/tTcFzltVjHvZ4x9VMAzDcibnKgE7FGEN8W5lJhmqtA
cfuFqIjb48t9sgTXwpQV5nWXWvwICUcV8py0y/c4qTP5KVd/iS6DUXcRFnuLVoYQ
oLFi+j/lYYBYTw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:45 2024 by rpki-client on console-fra.rpki-client.org