Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
File:                     fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft (raw, json)
Hash identifier:          HE00Q5G63lOPG1g7AU2nWHuSX9WmuOT42TbWIA4MPqI=
Subject key identifier:   9D:FB:D6:8E:C4:2C:7F:52:79:FE:98:E4:79:76:1C:76:B7:99:2E:09
Authority key identifier: 7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
Certificate issuer:       /CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Certificate serial:       019352ACB960C5B216ED512961592891374A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
Manifest number:          136C
Signing time:             Fri 22 Nov 2024 07:01:11 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:11 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:11 +0000
Files and hashes:         1: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl (hash: oIaCAMYpGZbfM2u87hAirtMFyQhIOFpa2bYNJdaS8R4=)
                          2: ybI9S2NbEQHH9kNPOXTYJJkL0jo.roa (hash: mOrvYJBPos8fqDy0oqyWBJyafRCmupULq36Xj16ilr8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:b9:60:c5:b2:16:ed:51:29:61:59:28:91:37:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
        Validity
            Not Before: Nov 22 07:01:11 2024 GMT
            Not After : Nov 23 07:01:11 2024 GMT
        Subject: CN=9dfbd68ec42c7f5279fe98e479761c76b7992e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f7:b4:1b:be:ec:b0:13:46:cc:a3:f2:82:1e:
                    79:9c:20:03:ab:65:3d:48:3c:4f:40:49:bb:4b:49:
                    f2:43:85:f6:99:79:91:63:c7:cd:53:00:51:ed:4b:
                    41:ab:e8:7b:14:fe:df:99:2a:72:41:c1:a6:8f:69:
                    dc:2e:2e:d9:d6:dc:b3:71:93:fb:7f:2a:29:c3:6b:
                    04:50:17:05:19:b2:38:bd:67:dd:e5:47:60:54:0f:
                    d8:fd:65:af:c6:05:9c:10:b2:bb:4c:46:de:2e:d5:
                    54:50:92:35:53:9e:7b:ee:63:1d:cc:b9:fb:78:12:
                    34:a9:5b:5c:12:b1:cb:81:6d:cb:b3:58:71:b0:23:
                    a2:58:6f:75:b3:98:d8:26:52:80:46:c1:b3:7e:e1:
                    a6:e5:76:f1:2f:f1:69:9f:eb:5c:37:52:2f:78:3b:
                    c2:25:f2:66:c7:5f:26:80:78:53:e6:ff:21:d5:b0:
                    ae:2f:65:f1:5e:b9:b2:a2:de:49:44:5a:36:04:b8:
                    c7:8a:43:b4:53:a3:27:72:88:fc:91:8c:fb:5a:78:
                    bc:b6:ca:b1:ee:57:53:d9:e3:af:b2:c0:ae:a1:0d:
                    09:ea:fa:2b:f8:87:5e:02:ad:5f:97:99:0a:27:a7:
                    a2:86:25:37:e8:f9:97:af:3c:6c:ee:c2:bb:29:28:
                    7d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FB:D6:8E:C4:2C:7F:52:79:FE:98:E4:79:76:1C:76:B7:99:2E:09
            X509v3 Authority Key Identifier:
                keyid:7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:be:2c:1e:c6:ab:df:62:5e:52:a9:1e:b5:a3:d3:ea:42:fb:
         b1:d7:dd:a5:c2:82:d5:0d:da:bf:a8:34:23:b6:2d:fa:9f:0e:
         10:c7:35:fb:de:a7:89:f5:ae:38:c0:38:c5:6e:06:97:94:50:
         e7:58:3f:4d:eb:54:17:3c:f5:49:27:b1:58:67:a9:aa:27:52:
         cf:29:95:a7:36:29:fa:05:7b:0d:95:7f:8a:fd:c9:e8:68:ed:
         0c:b2:16:d7:b6:6d:57:39:90:05:c6:b4:6a:7e:48:29:d0:f0:
         25:32:00:f0:16:de:05:f5:eb:77:d0:3c:3c:f7:d5:46:6e:68:
         fa:af:93:bf:5a:ab:06:84:e6:a7:9b:02:71:5c:8d:67:8d:4d:
         7a:2b:e3:74:e7:65:39:e8:af:bd:3a:6a:61:fe:83:93:c3:2e:
         65:fe:8d:af:67:46:20:10:e9:cd:00:d1:6f:6b:a0:8b:27:47:
         db:3f:60:6b:8f:82:67:8c:4d:1b:da:47:08:c4:8e:93:22:c2:
         80:42:27:84:64:90:75:62:26:4e:be:4b:20:ac:a2:fb:d4:1f:
         d2:76:aa:6f:92:28:11:3f:39:e4:56:d7:07:1d:1d:53:4a:be:
         60:df:d1:53:41:7b:39:ce:59:e5:2b:73:34:29:a6:f5:2d:58:
         31:ff:71:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSrLlgxbIW7VEpYVkokTdKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMWQ1OGQ2MmRkZDdlNDdhZjIxOTZmZDc1NGJiM2ZmMjY3
OTg5MmEwHhcNMjQxMTIyMDcwMTExWhcNMjQxMTIzMDcwMTExWjAzMTEwLwYDVQQD
Eyg5ZGZiZDY4ZWM0MmM3ZjUyNzlmZTk4ZTQ3OTc2MWM3NmI3OTkyZTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPe0G77ssBNGzKPygh55nCADq2U9
SDxPQEm7S0nyQ4X2mXmRY8fNUwBR7UtBq+h7FP7fmSpyQcGmj2ncLi7Z1tyzcZP7
fyopw2sEUBcFGbI4vWfd5UdgVA/Y/WWvxgWcELK7TEbeLtVUUJI1U5577mMdzLn7
eBI0qVtcErHLgW3Ls1hxsCOiWG91s5jYJlKARsGzfuGm5XbxL/Fpn+tcN1IveDvC
JfJmx18mgHhT5v8h1bCuL2XxXrmyot5JRFo2BLjHikO0U6Mncoj8kYz7Wni8tsqx
7ldT2eOvssCuoQ0J6vor+IdeAq1fl5kKJ6eihiU36PmXrzxs7sK7KSh9RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ371o7ELH9Sef6Y5Hl2HHa3mS4JMB8GA1UdIwQY
MBaAFH8dWNYt3X5HryGW/XVLs/8meYkqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yOTBhNjAtNzkyZi00NDc1LWE5ZjQt
ZTNiOWUwYmFlNmFiLzEvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yOTBhNjAtNzkyZi00NDc1LWE5ZjQtZTNiOWUwYmFlNmFi
LzEvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARb4sHsar
32JeUqketaPT6kL7sdfdpcKC1Q3av6g0I7Yt+p8OEMc1+96nifWuOMA4xW4Gl5RQ
51g/TetUFzz1SSexWGepqidSzymVpzYp+gV7DZV/iv3J6GjtDLIW17ZtVzmQBca0
an5IKdDwJTIA8BbeBfXrd9A8PPfVRm5o+q+Tv1qrBoTmp5sCcVyNZ41NeivjdOdl
OeivvTpqYf6Dk8MuZf6Nr2dGIBDpzQDRb2ugiydH2z9ga4+CZ4xNG9pHCMSOkyLC
gEInhGSQdWImTr5LIKyi+9Qf0naqb5IoET855FbXBx0dU0q+YN/RU0F7Oc5Z5Stz
NCmm9S1YMf9xrg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:48:29 2024 by rpki-client on console-ams.rpki-client.org