Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
File:                     x2v2t4G8-MKACKjo_d5g564xIqo.mft (raw, json)
Hash identifier:          ll0uOuF+eMj4vGCJbt1CR7V6dpJN9wEcbvQfHK81/ww=
Subject key identifier:   42:3E:20:65:1C:E5:B4:0B:37:29:17:A2:E8:79:88:3C:44:E0:9D:DE
Authority key identifier: C7:6B:F6:B7:81:BC:F8:C2:80:08:A8:E8:FD:DE:60:E7:AE:31:22:AA
Certificate issuer:       /CN=c76bf6b781bcf8c28008a8e8fdde60e7ae3122aa
Certificate serial:       01936AEB1F7594C113848E83BD976A5E6691
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
Manifest number:          137A
Signing time:             Wed 27 Nov 2024 00:00:13 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:13 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:13 +0000
Files and hashes:         1: OI49TSZggWvLCzgJgZZ4EU3itP8.roa (hash: Ph+Eq/BHLfN6KACp38LKQjqFlTqybRJUSqvWZXxQFRw=)
                          2: x2v2t4G8-MKACKjo_d5g564xIqo.crl (hash: gQzVmMDTx2Lbm0Nf4TBnxqOQMueexLo7yGMiYNd0fnQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:1f:75:94:c1:13:84:8e:83:bd:97:6a:5e:66:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c76bf6b781bcf8c28008a8e8fdde60e7ae3122aa
        Validity
            Not Before: Nov 27 00:00:13 2024 GMT
            Not After : Nov 28 00:00:13 2024 GMT
        Subject: CN=423e20651ce5b40b372917a2e879883c44e09dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9e:e0:37:8c:cf:23:8a:38:42:e6:44:ee:9a:
                    93:ec:0a:df:7a:c4:d4:53:b9:85:6e:cd:e6:e4:a4:
                    d4:f4:1d:4f:fc:18:2c:a6:c2:f5:9a:49:55:0b:e2:
                    4f:07:f5:64:6f:0c:ca:eb:75:50:7e:77:2d:e5:7c:
                    2b:a7:79:07:f7:1c:0c:62:95:a4:11:a7:82:82:f4:
                    92:63:30:0a:63:f4:d8:66:89:fe:03:c6:51:dd:a8:
                    c9:55:ef:84:bc:a7:68:a6:cb:fe:32:88:d9:55:08:
                    88:52:aa:72:b3:43:62:8d:f3:aa:d0:8f:fc:11:3e:
                    ed:cc:cf:bd:5b:a6:27:6e:b3:d5:b0:4e:4c:d2:b8:
                    a3:fb:31:ae:a5:d5:95:94:37:6c:e3:1a:bf:13:22:
                    fd:e5:4b:8b:41:6b:ec:fd:bb:19:44:3e:ae:67:12:
                    45:0e:53:a5:0a:02:b4:0b:d3:5a:e6:e8:b1:fe:f9:
                    6a:e2:dc:58:f5:5e:5d:27:cf:cb:b8:5a:ec:af:01:
                    84:f1:00:64:d8:ca:97:de:01:cd:45:5c:bc:5e:0f:
                    4c:4b:23:c0:3b:c5:12:ca:29:34:7b:1c:10:5f:ac:
                    f7:85:cd:5f:96:43:5f:e5:c8:f5:91:73:bd:4c:ac:
                    c9:15:11:fc:71:13:4b:e1:0b:9f:1b:39:ab:ff:22:
                    36:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3E:20:65:1C:E5:B4:0B:37:29:17:A2:E8:79:88:3C:44:E0:9D:DE
            X509v3 Authority Key Identifier:
                keyid:C7:6B:F6:B7:81:BC:F8:C2:80:08:A8:E8:FD:DE:60:E7:AE:31:22:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:9d:e3:16:5a:61:92:97:c8:38:ec:b0:f7:d3:7a:93:4c:df:
         f6:b5:d7:b0:66:94:33:0b:2e:d4:a5:74:1a:59:ec:95:23:9c:
         89:07:51:fd:c8:96:bb:65:e8:e8:c3:98:ea:a2:be:94:1e:de:
         57:b4:c7:99:83:e3:c8:7f:e9:7a:50:4e:72:57:af:0b:f1:e4:
         61:38:b3:c2:5c:97:95:fe:41:0b:0d:6e:fd:73:5d:03:99:3b:
         d0:c6:4a:66:34:cc:5e:03:15:fb:88:13:f2:31:15:c9:09:5b:
         ea:fd:bd:ea:f6:d7:ad:03:ef:42:53:d1:14:ad:4a:b4:a0:90:
         e8:61:4a:7e:eb:0a:42:a7:1e:1f:92:05:ad:eb:85:69:2f:c1:
         62:4f:df:e4:1c:d9:65:80:26:39:1c:8a:d4:21:a0:ea:3d:64:
         db:d1:ea:2b:79:8d:39:41:77:0a:7c:49:b2:87:3c:b2:7e:74:
         77:b0:48:64:3f:07:df:ec:e5:17:dd:83:0a:b2:dc:ff:50:ea:
         59:75:f1:7d:e9:08:ac:ba:f0:b6:af:2c:37:5d:7e:02:36:a0:
         53:49:fa:ec:0c:4b:04:43:b5:01:56:44:bd:d5:cd:ee:e8:5a:
         a4:66:f9:c0:51:0b:51:c4:b9:30:bd:8f:ba:41:2a:a8:ae:9b:
         8a:3f:05:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNq6x91lMEThI6DvZdqXmaRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NmJmNmI3ODFiY2Y4YzI4MDA4YThlOGZkZGU2MGU3YWUz
MTIyYWEwHhcNMjQxMTI3MDAwMDEzWhcNMjQxMTI4MDAwMDEzWjAzMTEwLwYDVQQD
Eyg0MjNlMjA2NTFjZTViNDBiMzcyOTE3YTJlODc5ODgzYzQ0ZTA5ZGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2p7gN4zPI4o4QuZE7pqT7ArfesTU
U7mFbs3m5KTU9B1P/BgspsL1mklVC+JPB/VkbwzK63VQfnct5Xwrp3kH9xwMYpWk
EaeCgvSSYzAKY/TYZon+A8ZR3ajJVe+EvKdopsv+MojZVQiIUqpys0NijfOq0I/8
ET7tzM+9W6YnbrPVsE5M0rij+zGupdWVlDds4xq/EyL95UuLQWvs/bsZRD6uZxJF
DlOlCgK0C9Na5uix/vlq4txY9V5dJ8/LuFrsrwGE8QBk2MqX3gHNRVy8Xg9MSyPA
O8USyik0exwQX6z3hc1flkNf5cj1kXO9TKzJFRH8cRNL4QufGzmr/yI2YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEI+IGUc5bQLNykXouh5iDxE4J3eMB8GA1UdIwQY
MBaAFMdr9reBvPjCgAio6P3eYOeuMSKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDJ2MnQ0RzgtTUtBQ0tqb19kNWc1NjR4SXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iMTc4YmQtYjZhNS00NjEwLThjNmEt
YWJmNDg0MGVhNjA3LzEveDJ2MnQ0RzgtTUtBQ0tqb19kNWc1NjR4SXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iMTc4YmQtYjZhNS00NjEwLThjNmEtYWJmNDg0MGVhNjA3
LzEveDJ2MnQ0RzgtTUtBQ0tqb19kNWc1NjR4SXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOp3jFlph
kpfIOOyw99N6k0zf9rXXsGaUMwsu1KV0GlnslSOciQdR/ciWu2Xo6MOY6qK+lB7e
V7THmYPjyH/pelBOclevC/HkYTizwlyXlf5BCw1u/XNdA5k70MZKZjTMXgMV+4gT
8jEVyQlb6v296vbXrQPvQlPRFK1KtKCQ6GFKfusKQqceH5IFreuFaS/BYk/f5BzZ
ZYAmORyK1CGg6j1k29HqK3mNOUF3CnxJsoc8sn50d7BIZD8H3+zlF92DCrLc/1Dq
WXXxfekIrLrwtq8sN11+AjagU0n67AxLBEO1AVZEvdXN7uhapGb5wFELUcS5ML2P
ukEqqK6bij8F1Q==
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:32:21 2024 by rpki-client on console-ams.rpki-client.org