Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
File:                     FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft (raw, json)
Hash identifier:          q4jDmIyveujEhMBEfDX0l6iS9AEXch0xI+EYLwenvtU=
Subject key identifier:   A1:16:B7:23:CA:71:CF:4B:2A:DE:D1:26:39:69:17:18:20:67:D0:F1
Authority key identifier: 15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C
Certificate issuer:       /CN=153d757b77067befd9446694748ad2b04e97b38c
Certificate serial:       01936BC7A226D23170048B7126EADDE3896E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
Manifest number:          137D
Signing time:             Wed 27 Nov 2024 04:01:05 +0000
Manifest this update:     Wed 27 Nov 2024 04:01:05 +0000
Manifest next update:     Thu 28 Nov 2024 04:01:05 +0000
Files and hashes:         1: FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl (hash: ILuWhCM1LqJ5r9LLrS2R5hPh7dmht2yTwUfnCllCyw8=)
                          2: Qb6Rm69_RQcB0qw-9chnp9gGKLE.roa (hash: LtNJ8KuxA1Ro/nFVcWNwx79QS8gfyvL7rKTnLQBvwHk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 23:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:c7:a2:26:d2:31:70:04:8b:71:26:ea:dd:e3:89:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153d757b77067befd9446694748ad2b04e97b38c
        Validity
            Not Before: Nov 27 04:01:05 2024 GMT
            Not After : Nov 28 04:01:05 2024 GMT
        Subject: CN=a116b723ca71cf4b2aded126396917182067d0f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ed:5c:f5:4f:c9:f5:00:88:f8:3b:eb:5e:a0:
                    0e:71:d3:6a:e1:0c:b2:99:a3:67:36:de:de:e2:32:
                    24:41:2e:c0:b5:d5:49:d6:03:f9:19:dc:72:78:cf:
                    26:3d:20:f2:72:b0:63:a7:71:f1:2b:c0:4d:00:6a:
                    20:a4:9f:14:69:04:1e:11:99:60:1d:95:ef:d0:dd:
                    f5:38:1a:5b:6e:3f:75:99:a4:64:05:30:bc:8a:ca:
                    f7:5d:f1:7a:d1:94:4a:48:22:15:49:32:0f:8c:1e:
                    e7:43:83:58:5e:47:b8:93:fb:a0:0d:3d:8d:e9:ad:
                    87:f4:d6:f6:c6:01:b2:3d:44:39:98:4a:eb:0a:6b:
                    0f:29:5d:43:72:b6:8d:50:eb:72:7f:0b:7d:b0:f6:
                    34:a0:70:51:7c:0e:ea:ca:a1:47:56:c8:ed:4d:66:
                    91:c2:e6:54:75:ca:27:40:4e:e9:b3:c5:d0:b8:a4:
                    75:e1:0e:9f:55:0a:e7:c0:10:0d:0e:d3:87:9a:5f:
                    e6:1f:a6:4d:14:a3:18:a8:99:2d:03:af:80:3c:fd:
                    50:f8:ad:17:9a:22:83:6c:14:54:17:20:b0:5a:d8:
                    a8:80:37:8e:5d:51:19:52:fb:8a:04:97:e5:57:1a:
                    33:05:c4:1a:78:33:c2:de:33:44:e7:31:b2:0d:9c:
                    4a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:16:B7:23:CA:71:CF:4B:2A:DE:D1:26:39:69:17:18:20:67:D0:F1
            X509v3 Authority Key Identifier:
                keyid:15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:85:cb:f0:0a:5a:f9:5c:24:5a:52:32:33:04:76:f2:09:48:
         78:71:20:99:f2:42:d2:82:bd:c7:10:a1:6d:95:c7:06:e1:78:
         2a:b6:2b:a6:db:fb:71:42:a2:86:83:57:4f:b2:9f:8c:92:d8:
         41:53:f6:87:f2:ea:b9:05:4c:09:a9:a0:65:31:5a:a0:1e:4e:
         f4:3e:7a:97:a8:de:d9:f5:99:49:13:81:02:3d:a4:a7:4f:46:
         47:ab:a8:72:37:02:d2:1f:b7:af:be:75:dd:ce:5c:16:78:bc:
         fe:c0:8c:33:61:49:03:be:eb:97:80:21:81:94:89:e4:24:bb:
         72:bf:2e:82:e8:62:c9:37:3f:27:92:71:f0:18:ce:26:2f:74:
         d1:95:fc:7c:03:c7:68:a1:7d:03:55:da:7e:10:15:8e:f9:22:
         03:12:26:cf:04:ca:5f:77:f7:04:ef:33:49:39:23:e1:d6:99:
         44:96:21:42:35:cf:8e:35:99:1a:9c:b0:b3:56:97:76:49:96:
         53:9e:65:7f:a1:db:eb:7e:6f:72:78:28:8b:83:68:69:77:9d:
         62:a8:f0:0d:c9:cd:a7:a3:43:85:cb:29:f0:23:56:88:69:6e:
         f3:f4:dc:fe:4c:90:f5:3a:0f:7d:6f:7c:45:6b:05:fd:b8:2c:
         6c:fd:2a:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNrx6Im0jFwBItxJurd44luMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1M2Q3NTdiNzcwNjdiZWZkOTQ0NjY5NDc0OGFkMmIwNGU5
N2IzOGMwHhcNMjQxMTI3MDQwMTA1WhcNMjQxMTI4MDQwMTA1WjAzMTEwLwYDVQQD
EyhhMTE2YjcyM2NhNzFjZjRiMmFkZWQxMjYzOTY5MTcxODIwNjdkMGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1O1c9U/J9QCI+DvrXqAOcdNq4Qyy
maNnNt7e4jIkQS7AtdVJ1gP5GdxyeM8mPSDycrBjp3HxK8BNAGogpJ8UaQQeEZlg
HZXv0N31OBpbbj91maRkBTC8isr3XfF60ZRKSCIVSTIPjB7nQ4NYXke4k/ugDT2N
6a2H9Nb2xgGyPUQ5mErrCmsPKV1DcraNUOtyfwt9sPY0oHBRfA7qyqFHVsjtTWaR
wuZUdconQE7ps8XQuKR14Q6fVQrnwBANDtOHml/mH6ZNFKMYqJktA6+APP1Q+K0X
miKDbBRUFyCwWtiogDeOXVEZUvuKBJflVxozBcQaeDPC3jNE5zGyDZxKxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEWtyPKcc9LKt7RJjlpFxggZ9DxMB8GA1UdIwQY
MBaAFBU9dXt3Bnvv2URmlHSK0rBOl7OMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlQxMWUzY0dlLV9aUkdhVWRJclNzRTZYczR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi84YTk0YjktNzBmZS00NmZmLWE0ZTYt
MDE5ZTFmODQwM2RkLzEvRlQxMWUzY0dlLV9aUkdhVWRJclNzRTZYczR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi84YTk0YjktNzBmZS00NmZmLWE0ZTYtMDE5ZTFmODQwM2Rk
LzEvRlQxMWUzY0dlLV9aUkdhVWRJclNzRTZYczR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAIXL8Apa
+VwkWlIyMwR28glIeHEgmfJC0oK9xxChbZXHBuF4KrYrptv7cUKihoNXT7KfjJLY
QVP2h/LquQVMCamgZTFaoB5O9D56l6je2fWZSROBAj2kp09GR6uocjcC0h+3r751
3c5cFni8/sCMM2FJA77rl4AhgZSJ5CS7cr8uguhiyTc/J5Jx8BjOJi900ZX8fAPH
aKF9A1XafhAVjvkiAxImzwTKX3f3BO8zSTkj4daZRJYhQjXPjjWZGpyws1aXdkmW
U55lf6Hb635vcngoi4NoaXedYqjwDcnNp6NDhcsp8CNWiGlu8/Tc/kyQ9ToPfW98
RWsF/bgsbP0qlA==
-----END CERTIFICATE-----
Generated at Wed Nov 27 06:01:19 2024 by rpki-client on console-fra.rpki-client.org