Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
File:                     t6hswzTG4Oq4PyUr2D7ulWklykA.mft (raw, json)
Hash identifier:          /Bm2qtHzfQerpu2YjClK/tyLBDwzGQiq/THUK23/ogk=
Subject key identifier:   8D:62:9C:23:DA:B8:92:71:DF:F6:EB:7C:0D:57:E0:EF:6F:7C:88:62
Authority key identifier: B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40
Certificate issuer:       /CN=b7a86cc334c6e0eab83f252bd83eee956925ca40
Certificate serial:       01935689AD70691665104E520C32B63BB9AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
Manifest number:          136E
Signing time:             Sat 23 Nov 2024 01:01:23 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:23 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:23 +0000
Files and hashes:         1: PyB3br87ysturNkEL11dufKxCkc.roa (hash: 9CLfN9RVpA1OhLpOXnt+CiBIueknyeznNNkai/fPQ9s=)
                          2: t6hswzTG4Oq4PyUr2D7ulWklykA.crl (hash: ZIIEqwvEjlTm6zNNmXx463CU1pENZI9cmbWiIdZ2T0o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:ad:70:69:16:65:10:4e:52:0c:32:b6:3b:b9:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a86cc334c6e0eab83f252bd83eee956925ca40
        Validity
            Not Before: Nov 23 01:01:23 2024 GMT
            Not After : Nov 24 01:01:23 2024 GMT
        Subject: CN=8d629c23dab89271dff6eb7c0d57e0ef6f7c8862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8a:fd:63:d5:12:2e:7f:3c:aa:f8:d0:5b:e6:
                    02:d8:03:44:92:b5:45:38:63:28:bd:db:9b:55:9c:
                    43:9c:26:ee:17:c1:5b:96:23:6b:a9:95:8a:a4:0e:
                    df:bd:a1:91:d5:e3:88:9d:81:3e:5e:1f:6e:e1:9d:
                    95:79:be:fd:7f:ec:86:1a:16:c8:5b:df:59:17:a6:
                    e0:71:1c:23:c6:1a:18:d9:f5:42:2a:37:a8:66:d3:
                    d8:0d:5b:ac:e2:9d:3d:57:d9:57:8e:69:60:d9:8a:
                    a3:59:33:cf:fe:19:0a:92:db:a6:01:33:39:48:b0:
                    93:2e:ce:d2:88:3a:ea:20:de:c2:d0:31:00:4d:a3:
                    2f:bf:7c:3b:9b:6e:c5:43:09:38:27:d6:50:d6:ac:
                    de:13:04:59:9b:40:69:ef:92:f4:59:f1:65:59:91:
                    50:e2:88:53:94:84:5c:0f:e2:d8:4a:0c:cf:8b:a2:
                    2f:da:78:01:56:19:ec:17:ba:a1:e7:a2:65:66:c5:
                    e6:c2:8e:9b:3a:2e:11:29:30:b6:83:32:73:6f:02:
                    95:80:73:08:40:45:b8:ca:4b:bd:7a:fe:19:f8:82:
                    e8:e3:25:7c:cb:22:b0:a7:f0:01:3d:5e:a7:55:42:
                    59:f5:90:5f:8f:2d:d6:4b:6c:9a:ec:fa:30:0e:58:
                    81:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:62:9C:23:DA:B8:92:71:DF:F6:EB:7C:0D:57:E0:EF:6F:7C:88:62
            X509v3 Authority Key Identifier:
                keyid:B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:8b:91:33:bc:9a:79:d3:cc:65:ed:b2:91:96:aa:a2:ed:ed:
         0e:7f:9d:2d:81:6d:b9:d7:bd:f4:7c:ea:e5:a7:c1:7d:0b:1b:
         0e:20:8f:55:2c:f0:d4:f4:83:7f:bd:56:2a:02:ca:73:ca:a6:
         c2:ec:26:10:03:5e:4e:4e:d0:4f:8c:2d:62:58:34:a9:6f:05:
         e4:eb:6e:b8:70:7d:ff:21:73:0f:70:35:71:96:f6:c9:9c:5c:
         38:f4:c8:8f:69:54:87:d7:f0:16:da:bc:30:ef:b3:1b:28:6c:
         3d:17:56:1d:6a:ac:5f:17:b9:86:55:31:f3:3a:f6:12:b8:cb:
         eb:17:9a:d3:4f:a5:8f:61:1f:ee:9e:af:4d:c7:65:82:11:d3:
         20:4f:ba:ba:09:fa:17:14:6b:96:29:7a:ec:a9:26:0b:15:cb:
         57:6d:a8:95:73:3b:57:81:bc:04:56:93:6d:4e:2d:67:d3:78:
         ad:cb:77:1a:58:46:e1:93:95:03:bd:83:c1:32:e5:66:c4:b3:
         4d:1b:8c:17:c1:f3:55:6e:99:08:37:7f:b0:08:4e:b4:bb:ba:
         11:e8:4d:25:22:6d:ad:cd:3f:20:c5:54:82:e3:10:fa:a2:52:
         4b:3b:05:11:7a:a0:01:ff:bf:7d:c1:3a:6d:96:e1:9c:a3:60:
         0f:a0:7a:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWia1waRZlEE5SDDK2O7mrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YTg2Y2MzMzRjNmUwZWFiODNmMjUyYmQ4M2VlZTk1Njky
NWNhNDAwHhcNMjQxMTIzMDEwMTIzWhcNMjQxMTI0MDEwMTIzWjAzMTEwLwYDVQQD
Eyg4ZDYyOWMyM2RhYjg5MjcxZGZmNmViN2MwZDU3ZTBlZjZmN2M4ODYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIr9Y9USLn88qvjQW+YC2ANEkrVF
OGMovdubVZxDnCbuF8FbliNrqZWKpA7fvaGR1eOInYE+Xh9u4Z2Veb79f+yGGhbI
W99ZF6bgcRwjxhoY2fVCKjeoZtPYDVus4p09V9lXjmlg2YqjWTPP/hkKktumATM5
SLCTLs7SiDrqIN7C0DEATaMvv3w7m27FQwk4J9ZQ1qzeEwRZm0Bp75L0WfFlWZFQ
4ohTlIRcD+LYSgzPi6Iv2ngBVhnsF7qh56JlZsXmwo6bOi4RKTC2gzJzbwKVgHMI
QEW4yku9ev4Z+ILo4yV8yyKwp/ABPV6nVUJZ9ZBfjy3WS2ya7PowDliB1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1inCPauJJx3/brfA1X4O9vfIhiMB8GA1UdIwQY
MBaAFLeobMM0xuDquD8lK9g+7pVpJcpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDZoc3d6VEc0T3E0UHlVcjJEN3VsV2tseWtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC81MDM2YmUtMTM4Yi00NDJlLTk2M2Yt
NTdjZDcyOTU3Yjg5LzEvdDZoc3d6VEc0T3E0UHlVcjJEN3VsV2tseWtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC81MDM2YmUtMTM4Yi00NDJlLTk2M2YtNTdjZDcyOTU3Yjg5
LzEvdDZoc3d6VEc0T3E0UHlVcjJEN3VsV2tseWtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYuRM7ya
edPMZe2ykZaqou3tDn+dLYFtude99Hzq5afBfQsbDiCPVSzw1PSDf71WKgLKc8qm
wuwmEANeTk7QT4wtYlg0qW8F5OtuuHB9/yFzD3A1cZb2yZxcOPTIj2lUh9fwFtq8
MO+zGyhsPRdWHWqsXxe5hlUx8zr2ErjL6xea00+lj2Ef7p6vTcdlghHTIE+6ugn6
FxRrlil67KkmCxXLV22olXM7V4G8BFaTbU4tZ9N4rct3GlhG4ZOVA72DwTLlZsSz
TRuMF8HzVW6ZCDd/sAhOtLu6EehNJSJtrc0/IMVUguMQ+qJSSzsFEXqgAf+/fcE6
bZbhnKNgD6B6Ug==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:33 2024 by rpki-client on console-ams.rpki-client.org