Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
File:                     vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft (raw, json)
Hash identifier:          Es+JcEKdHw3XRko0MP4Y9tIEE0arkFD8QGuL9jAqT5o=
Subject key identifier:   AD:E0:6C:2C:AC:74:AF:D5:D3:A3:EF:76:8E:5F:2B:51:04:38:2C:99
Authority key identifier: BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7
Certificate issuer:       /CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
Certificate serial:       019369D9E73339C722D135D25A4D6020AF54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 19:01:48 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:48 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:48 +0000
Files and hashes:         1: GGssooi9Ii2hrSc7Y5EvjogIVCQ.roa (hash: 6pV6cePq41nXfmp2/YH08aPZ9ednuSh2cF2+k6Ucx5w=)
                          2: vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl (hash: jicHCrf5CCunOwt65jlVqWe0Y1H9ibHlJr9Et2jVDSY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:e7:33:39:c7:22:d1:35:d2:5a:4d:60:20:af:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
        Validity
            Not Before: Nov 26 19:01:48 2024 GMT
            Not After : Nov 27 19:01:48 2024 GMT
        Subject: CN=ade06c2cac74afd5d3a3ef768e5f2b5104382c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3c:42:67:fd:72:d3:be:33:54:41:37:33:f1:
                    38:54:a7:78:31:92:a7:50:00:82:d6:77:ce:6d:61:
                    1e:62:62:a5:c0:d6:0f:78:cc:f5:e9:c1:b7:3c:98:
                    70:89:fa:80:b9:91:d9:1c:f9:e1:37:a6:58:3b:36:
                    38:cc:5b:1b:75:07:7f:42:2a:9d:15:97:47:a3:a3:
                    00:e9:2a:38:c1:85:7f:61:ba:a3:de:e4:c0:a4:8b:
                    02:83:bc:2b:c9:fe:b6:df:d5:1f:ef:63:9b:b5:32:
                    00:30:40:e7:1b:98:93:6c:88:dd:54:4e:97:c5:0e:
                    53:23:7d:d4:5a:ac:08:6c:37:a7:0f:c9:db:e8:62:
                    df:a2:8e:e7:e6:ab:52:96:3d:e6:75:c7:78:04:32:
                    65:7a:05:7a:8b:40:4f:63:04:16:1c:8f:e8:e6:04:
                    5f:ea:4c:5f:2d:01:ef:55:3e:e2:94:75:a6:19:db:
                    8d:3f:d0:72:3e:0e:e0:2b:39:8f:27:d7:3c:42:62:
                    5d:43:e5:03:36:68:54:ef:7f:23:e3:fb:db:94:49:
                    f9:2e:db:44:2e:63:70:5b:35:0f:69:ec:08:3b:5b:
                    87:3c:53:d7:13:12:77:f0:62:89:97:1f:fc:f6:f5:
                    4a:6a:69:83:9e:7c:5d:0e:5c:0e:94:65:05:d1:44:
                    e3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E0:6C:2C:AC:74:AF:D5:D3:A3:EF:76:8E:5F:2B:51:04:38:2C:99
            X509v3 Authority Key Identifier:
                keyid:BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:37:26:d3:af:6c:39:ee:59:ec:42:06:82:55:78:2c:e4:58:
         b7:21:2b:cd:fa:09:69:a1:36:be:26:2b:16:6c:cd:00:ae:3d:
         2f:9b:81:3f:0c:98:72:41:f6:35:19:14:99:ad:86:ad:ae:94:
         f2:c4:0a:c5:d0:53:7b:07:08:85:6b:d2:5d:14:b6:bb:6d:72:
         47:fe:d6:88:30:6a:01:f9:7f:46:08:fe:56:9c:16:df:8a:02:
         ea:0a:1c:ab:62:ec:6f:d8:a8:ba:f3:12:3b:49:e0:fc:fd:28:
         85:2b:cb:b4:ea:52:8d:26:1c:39:4d:84:b2:8f:c5:5b:0b:8f:
         a9:66:10:ee:d6:71:9d:50:68:1a:d7:97:9f:da:65:69:c6:97:
         1d:85:55:4d:20:8c:1c:a8:22:e8:ad:29:71:be:b7:12:1b:9d:
         ef:2f:8b:81:e9:98:15:8b:75:4e:22:a4:cc:62:65:45:86:8a:
         72:d4:a6:ad:6a:29:03:6a:ff:61:8a:ab:95:c9:c8:3b:1a:29:
         58:67:13:27:0c:ac:2a:4b:8b:e5:2a:28:19:dc:5e:51:a8:a5:
         a7:8a:b5:3d:82:72:fa:2f:5a:11:0a:f7:51:05:77:ad:17:0c:
         fa:1e:72:1d:e4:02:73:c3:59:5c:25:aa:aa:b1:02:58:0b:f3:
         21:15:72:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2eczOcci0TXSWk1gIK9UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMTVhMDI3YjVlZTRiMGU4NTM3YThmNzE5OGNmYTllYTA5
NDVhZTcwHhcNMjQxMTI2MTkwMTQ4WhcNMjQxMTI3MTkwMTQ4WjAzMTEwLwYDVQQD
EyhhZGUwNmMyY2FjNzRhZmQ1ZDNhM2VmNzY4ZTVmMmI1MTA0MzgyYzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzxCZ/1y074zVEE3M/E4VKd4MZKn
UACC1nfObWEeYmKlwNYPeMz16cG3PJhwifqAuZHZHPnhN6ZYOzY4zFsbdQd/Qiqd
FZdHo6MA6So4wYV/Ybqj3uTApIsCg7wryf6239Uf72ObtTIAMEDnG5iTbIjdVE6X
xQ5TI33UWqwIbDenD8nb6GLfoo7n5qtSlj3mdcd4BDJlegV6i0BPYwQWHI/o5gRf
6kxfLQHvVT7ilHWmGduNP9ByPg7gKzmPJ9c8QmJdQ+UDNmhU738j4/vblEn5LttE
LmNwWzUPaewIO1uHPFPXExJ38GKJlx/89vVKammDnnxdDlwOlGUF0UTjUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3gbCysdK/V06Pvdo5fK1EEOCyZMB8GA1UdIwQY
MBaAFLwVoCe17ksOhTeo9xmM+p6glFrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkJXZ0o3WHVTdzZGTjZqM0dZejZucUNVV3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yN2NkNzEtOWRmNS00ZjVhLWE3MDEt
NmRmZTIzOWFlNTQxLzEvdkJXZ0o3WHVTdzZGTjZqM0dZejZucUNVV3VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yN2NkNzEtOWRmNS00ZjVhLWE3MDEtNmRmZTIzOWFlNTQx
LzEvdkJXZ0o3WHVTdzZGTjZqM0dZejZucUNVV3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzcm069s
Oe5Z7EIGglV4LORYtyErzfoJaaE2viYrFmzNAK49L5uBPwyYckH2NRkUma2Gra6U
8sQKxdBTewcIhWvSXRS2u21yR/7WiDBqAfl/Rgj+VpwW34oC6gocq2Lsb9iouvMS
O0ng/P0ohSvLtOpSjSYcOU2Eso/FWwuPqWYQ7tZxnVBoGteXn9placaXHYVVTSCM
HKgi6K0pcb63Ehud7y+LgemYFYt1TiKkzGJlRYaKctSmrWopA2r/YYqrlcnIOxop
WGcTJwysKkuL5SooGdxeUailp4q1PYJy+i9aEQr3UQV3rRcM+h5yHeQCc8NZXCWq
qrECWAvzIRVyQw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:17:40 2024 by rpki-client on console-ams.rpki-client.org