Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.mft
File:                     iu8WONCRG6mIZOl5yEJrpPQaJy4.mft (raw, json)
Hash identifier:          kA2S3YP5430tu9tTeiIZGRdNCCTD4obVTJ3AfQaYKKY=
Subject key identifier:   CF:CD:48:28:76:11:1A:A8:86:4A:68:73:96:5B:B5:AF:02:0E:B8:36
Authority key identifier: 8A:EF:16:38:D0:91:1B:A9:88:64:E9:79:C8:42:6B:A4:F4:1A:27:2E
Certificate issuer:       /CN=8aef1638d0911ba98864e979c8426ba4f41a272e
Certificate serial:       01936AB45FEE64D7C4002DD0C103AA591EF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iu8WONCRG6mIZOl5yEJrpPQaJy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.mft
Manifest number:          137C
Signing time:             Tue 26 Nov 2024 23:00:26 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:26 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:26 +0000
Files and hashes:         1: 7WOM9Bfylkzn-4-_DERENzjPcxw.roa (hash: z6/ZlI/W0BrpXJdrBEyeQGf1IrmAq79cxMAOG2mZOT4=)
                          2: iu8WONCRG6mIZOl5yEJrpPQaJy4.crl (hash: vJ7C8MLtCB1fGJXuL0gpeU+kdxFvRNoX2Y5Q3qMNo1I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iu8WONCRG6mIZOl5yEJrpPQaJy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:5f:ee:64:d7:c4:00:2d:d0:c1:03:aa:59:1e:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aef1638d0911ba98864e979c8426ba4f41a272e
        Validity
            Not Before: Nov 26 23:00:26 2024 GMT
            Not After : Nov 27 23:00:26 2024 GMT
        Subject: CN=cfcd482876111aa8864a6873965bb5af020eb836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ba:0c:66:a5:79:b5:6d:d8:42:a6:90:a5:f3:
                    77:bc:bd:ac:14:6b:59:df:73:ae:2b:76:6b:96:80:
                    32:d3:31:eb:cb:13:20:e2:2c:44:4e:6e:ff:47:b1:
                    f8:6b:ac:de:6f:5b:7e:b5:b3:be:12:22:55:d8:07:
                    33:fb:0a:c8:d4:07:c3:2f:14:5d:aa:56:50:2c:b4:
                    47:e6:43:26:fc:a7:b9:3c:ea:60:57:50:ec:64:66:
                    23:09:dc:3e:59:e6:ad:a0:65:b5:38:3c:f4:ca:38:
                    a3:15:2a:a5:05:b4:75:b9:59:ef:8c:cb:e6:b4:42:
                    31:28:ef:76:2f:d0:99:38:13:18:8e:ee:f6:b2:43:
                    51:52:bd:90:8f:61:25:38:87:a2:e1:0d:c5:1c:b3:
                    ca:9c:48:a0:4f:40:3b:e9:be:78:e1:5a:33:88:90:
                    a7:75:ad:bf:b9:37:7c:c9:77:91:55:15:79:82:77:
                    31:bd:27:c4:a3:f6:cc:18:a5:e6:7d:d2:4e:98:88:
                    ee:79:70:c2:87:0d:f1:7a:4a:6e:66:38:1c:6d:64:
                    db:80:9e:86:0c:89:91:23:58:6f:a1:8a:91:2b:52:
                    50:3d:5b:1f:46:71:bd:8e:ba:25:c0:49:e7:3c:7e:
                    6c:06:af:61:c5:c4:b0:e8:25:8e:35:9c:ad:ce:d7:
                    61:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CD:48:28:76:11:1A:A8:86:4A:68:73:96:5B:B5:AF:02:0E:B8:36
            X509v3 Authority Key Identifier:
                keyid:8A:EF:16:38:D0:91:1B:A9:88:64:E9:79:C8:42:6B:A4:F4:1A:27:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iu8WONCRG6mIZOl5yEJrpPQaJy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:2a:6a:92:fb:b3:9d:51:b5:6c:76:09:5e:c1:c5:d1:c9:ba:
         8a:a3:6d:f9:c7:ad:f2:9b:93:6a:2b:b5:b5:18:13:9f:2f:95:
         ab:fb:20:db:87:15:75:89:9b:6b:30:6b:ab:f7:99:d2:57:f3:
         fb:6c:75:da:f0:cf:ed:92:ed:72:45:26:b3:6c:29:ce:a1:bc:
         d2:b1:0a:09:6d:61:ea:12:93:7c:59:52:ed:8e:cd:ab:e8:d9:
         3e:9d:5f:a6:c6:1a:7c:51:e7:8c:72:54:60:f7:69:b3:f5:92:
         80:0e:48:59:fd:d9:f1:f8:39:2e:88:84:70:d3:0f:9d:b2:6c:
         c7:71:6d:71:fe:3e:26:03:91:6a:78:d2:a9:ae:10:b9:14:ff:
         a8:04:4d:3c:d9:f3:60:a5:9c:ea:4a:4a:93:3d:a1:33:7f:9f:
         a6:9f:af:7c:ba:b2:40:1f:e8:e0:c0:51:5d:ee:cb:3b:60:f4:
         73:9c:8a:4f:d5:9a:45:82:8c:6e:1a:9a:1e:48:de:5b:c5:12:
         55:a6:c5:be:42:ec:43:f6:c4:26:a2:cb:2f:59:e4:89:48:77:
         fc:45:da:24:ed:a8:a0:c5:cf:d6:cf:81:f7:f3:3b:ca:be:d1:
         24:ff:ea:77:fe:93:de:16:4f:52:64:ea:9c:94:e6:2f:cc:f1:
         86:9e:0b:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqtF/uZNfEAC3QwQOqWR7xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZWYxNjM4ZDA5MTFiYTk4ODY0ZTk3OWM4NDI2YmE0ZjQx
YTI3MmUwHhcNMjQxMTI2MjMwMDI2WhcNMjQxMTI3MjMwMDI2WjAzMTEwLwYDVQQD
EyhjZmNkNDgyODc2MTExYWE4ODY0YTY4NzM5NjViYjVhZjAyMGViODM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7oMZqV5tW3YQqaQpfN3vL2sFGtZ
33OuK3ZrloAy0zHryxMg4ixETm7/R7H4a6zeb1t+tbO+EiJV2Acz+wrI1AfDLxRd
qlZQLLRH5kMm/Ke5POpgV1DsZGYjCdw+WeatoGW1ODz0yjijFSqlBbR1uVnvjMvm
tEIxKO92L9CZOBMYju72skNRUr2Qj2ElOIei4Q3FHLPKnEigT0A76b544VoziJCn
da2/uTd8yXeRVRV5gncxvSfEo/bMGKXmfdJOmIjueXDChw3xekpuZjgcbWTbgJ6G
DImRI1hvoYqRK1JQPVsfRnG9jrolwEnnPH5sBq9hxcSw6CWONZytztdh0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/NSCh2ERqohkpoc5Zbta8CDrg2MB8GA1UdIwQY
MBaAFIrvFjjQkRupiGTpechCa6T0GicuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXU4V09OQ1JHNm1JWk9sNXlFSnJwUFFhSnk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8yNjU3NjktMzU0ZS00YThiLTk1NDIt
OTRmOTdiM2EyY2UyLzEvaXU4V09OQ1JHNm1JWk9sNXlFSnJwUFFhSnk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8yNjU3NjktMzU0ZS00YThiLTk1NDItOTRmOTdiM2EyY2Uy
LzEvaXU4V09OQ1JHNm1JWk9sNXlFSnJwUFFhSnk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyipqkvuz
nVG1bHYJXsHF0cm6iqNt+cet8puTaiu1tRgTny+Vq/sg24cVdYmbazBrq/eZ0lfz
+2x12vDP7ZLtckUms2wpzqG80rEKCW1h6hKTfFlS7Y7Nq+jZPp1fpsYafFHnjHJU
YPdps/WSgA5IWf3Z8fg5LoiEcNMPnbJsx3Ftcf4+JgORanjSqa4QuRT/qARNPNnz
YKWc6kpKkz2hM3+fpp+vfLqyQB/o4MBRXe7LO2D0c5yKT9WaRYKMbhqaHkjeW8US
VabFvkLsQ/bEJqLLL1nkiUh3/EXaJO2ooMXP1s+B9/M7yr7RJP/qd/6T3hZPUmTq
nJTmL8zxhp4L7g==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:42:09 2024 by rpki-client on console-fra.rpki-client.org