Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
File:                     LuKffz-qSKlAq42iErSxEWiD8nM.mft (raw, json)
Hash identifier:          Bp5Yy3p2wWGV7mDVhLVyWiVlyH865noBvyihegWPWoU=
Subject key identifier:   54:08:3A:BB:0F:6A:C8:49:11:06:05:F1:41:FE:A7:AF:4F:B0:24:09
Authority key identifier: 2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
Certificate issuer:       /CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Certificate serial:       01936A7D59403B7EB645FCAA5229A1122B68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
Manifest number:          137E
Signing time:             Tue 26 Nov 2024 22:00:19 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:19 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:19 +0000
Files and hashes:         1: Lf8B2Q_0n_9IpokutvRHKk1n3s4.roa (hash: sa9Y8yQENqrAxTPMxIr8uXmRO0j++CXNLNISviulsuk=)
                          2: LuKffz-qSKlAq42iErSxEWiD8nM.crl (hash: bbj3J1W6aHWw7vuVhZfu3QpACGPrKv3IqN6FkX1Tj2E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:59:40:3b:7e:b6:45:fc:aa:52:29:a1:12:2b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
        Validity
            Not Before: Nov 26 22:00:19 2024 GMT
            Not After : Nov 27 22:00:19 2024 GMT
        Subject: CN=54083abb0f6ac849110605f141fea7af4fb02409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bf:ba:ab:60:3a:64:37:82:0b:c2:10:69:ed:
                    88:6a:7e:ca:c3:cd:41:98:d6:f1:d2:ab:82:07:31:
                    5f:8f:bb:70:f4:08:99:2a:02:bf:b1:8d:7b:95:36:
                    2d:01:fc:b2:74:96:95:bc:6f:0e:05:92:a5:10:f4:
                    b2:01:d8:d5:f0:77:61:9d:3b:eb:50:61:d4:0a:58:
                    36:d2:7a:19:ee:46:9a:48:93:a5:69:55:cd:41:ad:
                    9d:01:fd:05:03:42:2e:52:11:82:ac:b0:16:94:fc:
                    46:1d:99:06:ac:a5:02:29:11:2b:67:c8:13:85:05:
                    e0:0a:ef:e4:55:8d:c9:55:5b:2e:d6:5f:8d:b4:ad:
                    b4:17:46:79:93:74:77:4b:a1:4b:cd:29:aa:d9:f9:
                    f3:19:54:67:62:a0:0c:c3:11:df:4f:d1:28:14:5a:
                    ae:da:b2:7c:5c:12:f9:9d:e5:b4:cc:e0:6c:b2:e4:
                    80:5b:5b:b4:9b:c6:74:2f:3f:a9:ce:40:00:d9:e7:
                    67:02:b7:e0:22:27:86:4e:55:0f:ad:76:77:8f:0e:
                    0c:d8:5d:8c:b6:af:80:94:89:47:98:d6:5b:4d:a1:
                    ac:7e:7d:73:78:9f:c8:8c:fa:72:f2:78:5f:22:08:
                    d6:e4:cb:07:37:e8:16:97:8f:9a:25:14:de:06:7f:
                    69:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:08:3A:BB:0F:6A:C8:49:11:06:05:F1:41:FE:A7:AF:4F:B0:24:09
            X509v3 Authority Key Identifier:
                keyid:2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:45:48:da:e3:82:7b:a8:74:7f:39:40:3d:07:6d:a3:ea:87:
         9c:39:71:a6:60:a6:6e:88:ac:7a:7a:9a:4d:fe:f1:47:e5:8b:
         94:b0:9e:53:d0:53:13:a7:81:c9:89:59:72:ae:3a:0a:8c:01:
         46:20:b5:58:8a:b6:f6:59:72:12:f8:5e:80:f8:c2:2e:92:d1:
         9a:81:b8:8c:26:d7:aa:09:20:01:d9:90:a3:ab:52:1e:5f:6e:
         1c:ba:1f:8d:36:a0:8d:ca:9f:dd:49:43:59:f6:70:35:4c:22:
         c8:e7:a7:d1:c4:29:af:de:ec:52:f1:2f:9b:97:7f:11:01:2f:
         87:29:b8:b6:97:dc:82:a4:b7:39:32:61:b8:13:a0:59:63:e6:
         46:06:27:11:43:e3:da:5f:52:24:80:64:cc:b2:e9:5c:52:e4:
         a6:36:1d:b7:05:a7:c7:31:f2:83:c5:d3:c7:94:71:b0:6d:13:
         1a:62:a1:ed:93:37:0b:5b:e3:49:da:fa:dc:29:a3:f1:86:d6:
         16:b4:51:cb:9c:c8:2d:5d:aa:7a:29:e9:c0:c6:2f:f6:87:d7:
         99:d8:cd:ae:35:2d:0a:99:0d:f4:ae:49:06:85:55:29:53:70:
         98:31:ee:3b:d6:37:41:82:f2:61:6d:da:cb:65:4c:b0:c2:8b:
         c8:62:ed:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqfVlAO362RfyqUimhEitoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZTI5ZjdmM2ZhYTQ4YTk0MGFiOGRhMjEyYjRiMTExNjg4
M2YyNzMwHhcNMjQxMTI2MjIwMDE5WhcNMjQxMTI3MjIwMDE5WjAzMTEwLwYDVQQD
Eyg1NDA4M2FiYjBmNmFjODQ5MTEwNjA1ZjE0MWZlYTdhZjRmYjAyNDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr+6q2A6ZDeCC8IQae2Ian7Kw81B
mNbx0quCBzFfj7tw9AiZKgK/sY17lTYtAfyydJaVvG8OBZKlEPSyAdjV8HdhnTvr
UGHUClg20noZ7kaaSJOlaVXNQa2dAf0FA0IuUhGCrLAWlPxGHZkGrKUCKRErZ8gT
hQXgCu/kVY3JVVsu1l+NtK20F0Z5k3R3S6FLzSmq2fnzGVRnYqAMwxHfT9EoFFqu
2rJ8XBL5neW0zOBssuSAW1u0m8Z0Lz+pzkAA2ednArfgIieGTlUPrXZ3jw4M2F2M
tq+AlIlHmNZbTaGsfn1zeJ/IjPpy8nhfIgjW5MsHN+gWl4+aJRTeBn9pHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQIOrsPashJEQYF8UH+p69PsCQJMB8GA1UdIwQY
MBaAFC7in38/qkipQKuNohK0sRFog/JzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHVLZmZ6LXFTS2xBcTQyaUVyU3hFV2lEOG5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC81Njc4NzYtOGQxNy00NmM2LThjZGQt
NGI4NDNlOWQwNGY4LzEvTHVLZmZ6LXFTS2xBcTQyaUVyU3hFV2lEOG5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC81Njc4NzYtOGQxNy00NmM2LThjZGQtNGI4NDNlOWQwNGY4
LzEvTHVLZmZ6LXFTS2xBcTQyaUVyU3hFV2lEOG5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUVI2uOC
e6h0fzlAPQdto+qHnDlxpmCmboisenqaTf7xR+WLlLCeU9BTE6eByYlZcq46CowB
RiC1WIq29llyEvhegPjCLpLRmoG4jCbXqgkgAdmQo6tSHl9uHLofjTagjcqf3UlD
WfZwNUwiyOen0cQpr97sUvEvm5d/EQEvhym4tpfcgqS3OTJhuBOgWWPmRgYnEUPj
2l9SJIBkzLLpXFLkpjYdtwWnxzHyg8XTx5RxsG0TGmKh7ZM3C1vjSdr63Cmj8YbW
FrRRy5zILV2qeinpwMYv9ofXmdjNrjUtCpkN9K5JBoVVKVNwmDHuO9Y3QYLyYW3a
y2VMsMKLyGLtWg==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:18:31 2024 by rpki-client on console-ams.rpki-client.org