Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
File:                     Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft (raw, json)
Hash identifier:          4AIPSHaAzdfj1U7erSRGvSUVCL18s8jsjTOMIBAZmu4=
Subject key identifier:   7D:44:86:B4:BC:7C:5B:AD:3C:83:F6:6A:9F:8E:6F:F3:AA:48:45:43
Authority key identifier: 12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
Certificate issuer:       /CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Certificate serial:       0193512C1D4D43D9C9AD8B10EDE759A9623F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 00:01:05 +0000
Manifest this update:     Fri 22 Nov 2024 00:01:05 +0000
Manifest next update:     Sat 23 Nov 2024 00:01:05 +0000
Files and hashes:         1: 2joWpTYz2yglFJvvMDXAh8boHEI.roa (hash: podyg7PSuwqULq01nYRz9Vx//UVoUyqMHR6KEs4MoEk=)
                          2: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl (hash: qD9lXT+l26Kb/QBXjfbq9hceM2Huo7m3e+tg/DgzAb0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2c:1d:4d:43:d9:c9:ad:8b:10:ed:e7:59:a9:62:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
        Validity
            Not Before: Nov 22 00:01:05 2024 GMT
            Not After : Nov 23 00:01:05 2024 GMT
        Subject: CN=7d4486b4bc7c5bad3c83f66a9f8e6ff3aa484543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f3:06:b1:93:7a:6e:92:c4:26:ae:1c:04:09:
                    78:69:7b:25:52:f2:4c:62:40:b5:99:52:df:06:b1:
                    e5:e9:96:f2:59:9b:d2:09:ba:af:c7:c7:8a:12:e6:
                    a9:05:bc:d9:f7:59:50:e9:00:10:52:0d:b0:c6:7d:
                    b5:03:e4:be:3c:1f:d1:90:05:1b:5f:86:ce:01:52:
                    b3:39:62:1f:4c:8b:05:33:0b:f8:d3:e0:b3:22:49:
                    b2:4c:3e:00:cc:0d:cc:f0:60:f6:51:a8:74:60:07:
                    8b:f4:d5:2c:72:aa:ac:57:c9:a6:cd:db:79:2e:54:
                    fc:84:f0:24:4d:94:d5:16:24:e2:0d:4d:bb:1b:24:
                    1e:95:3f:d2:49:53:52:ac:f7:cd:f8:4d:10:9d:4f:
                    81:27:5e:ee:61:9e:4a:06:71:81:1b:0d:54:5b:d5:
                    47:f4:e5:42:78:a0:c8:db:fd:89:f1:7b:09:65:95:
                    f2:b2:e7:29:e1:b7:a7:c5:b7:20:dd:d4:06:76:85:
                    71:5e:47:ba:ae:b4:cc:7e:ab:bb:4a:d6:ee:33:05:
                    5e:1e:f9:8a:0c:20:43:80:be:5d:8a:2d:66:f5:a5:
                    c8:1d:34:8b:bb:47:2d:d3:e7:99:96:64:cd:40:ed:
                    be:b1:58:fa:db:81:a4:f0:39:3e:be:0f:df:15:36:
                    54:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:44:86:B4:BC:7C:5B:AD:3C:83:F6:6A:9F:8E:6F:F3:AA:48:45:43
            X509v3 Authority Key Identifier:
                keyid:12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:3c:e8:7c:82:73:17:31:a4:76:b4:6a:1e:7a:d3:0a:47:57:
         2c:41:37:84:5b:db:d3:c5:8f:66:59:4c:55:fc:83:de:ce:8a:
         86:94:56:76:bc:de:48:0f:8c:1f:6e:24:62:90:36:20:40:a0:
         c3:81:43:1a:5d:a1:70:35:36:05:8a:06:22:29:66:7a:ef:41:
         59:ec:2a:35:80:21:53:77:19:05:46:d4:56:b2:27:2a:c7:d0:
         5e:b2:f1:4b:53:ed:bb:63:af:5f:42:91:87:5e:34:97:f5:ed:
         9e:57:28:a4:f6:c5:5b:3c:ac:e9:b2:88:a9:ec:d7:3f:ca:2c:
         f0:6e:4e:c5:b6:fe:be:86:86:ff:3e:d8:44:67:73:e2:8b:92:
         11:8d:10:bb:98:f6:6d:02:cb:f7:5e:bc:5b:7a:f6:b9:86:e6:
         18:34:96:ea:d5:a8:1a:53:fa:f3:99:9c:da:0e:cd:6b:9a:83:
         8f:b6:b7:3b:f5:9e:bc:fa:7b:1d:f4:e5:11:ac:29:32:70:4a:
         0a:04:67:38:33:f1:10:09:86:6d:64:8e:c0:de:d1:4d:21:ca:
         14:7f:7c:7e:f3:6a:45:58:b3:8c:a8:a3:4d:a5:9f:d1:95:a1:
         89:b0:2f:2a:8c:70:8f:5b:b5:89:d3:f3:69:b1:75:c0:ff:69:
         c4:d6:be:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRLB1NQ9nJrYsQ7edZqWI/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyOGZkZTJiZmM2M2VmZTNkMTMyZGRhYzc4MzdlMTVjN2Y0
YjQ5ZjQwHhcNMjQxMTIyMDAwMTA1WhcNMjQxMTIzMDAwMTA1WjAzMTEwLwYDVQQD
Eyg3ZDQ0ODZiNGJjN2M1YmFkM2M4M2Y2NmE5ZjhlNmZmM2FhNDg0NTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/MGsZN6bpLEJq4cBAl4aXslUvJM
YkC1mVLfBrHl6ZbyWZvSCbqvx8eKEuapBbzZ91lQ6QAQUg2wxn21A+S+PB/RkAUb
X4bOAVKzOWIfTIsFMwv40+CzIkmyTD4AzA3M8GD2Uah0YAeL9NUscqqsV8mmzdt5
LlT8hPAkTZTVFiTiDU27GyQelT/SSVNSrPfN+E0QnU+BJ17uYZ5KBnGBGw1UW9VH
9OVCeKDI2/2J8XsJZZXysucp4benxbcg3dQGdoVxXke6rrTMfqu7StbuMwVeHvmK
DCBDgL5dii1m9aXIHTSLu0ct0+eZlmTNQO2+sVj624Gk8Dk+vg/fFTZUSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1EhrS8fFutPIP2ap+Ob/OqSEVDMB8GA1UdIwQY
MBaAFBKP3iv8Y+/j0TLdrHg34Vx/S0n0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW9fZUtfeGo3LVBSTXQyc2VEZmhYSDlMU2ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hOWY4MWUtNzliMi00YzJlLTlmM2Ut
N2MyNGVmMDI1OWRiLzEvRW9fZUtfeGo3LVBSTXQyc2VEZmhYSDlMU2ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9hOWY4MWUtNzliMi00YzJlLTlmM2UtN2MyNGVmMDI1OWRi
LzEvRW9fZUtfeGo3LVBSTXQyc2VEZmhYSDlMU2ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAczzofIJz
FzGkdrRqHnrTCkdXLEE3hFvb08WPZllMVfyD3s6KhpRWdrzeSA+MH24kYpA2IECg
w4FDGl2hcDU2BYoGIilmeu9BWewqNYAhU3cZBUbUVrInKsfQXrLxS1Ptu2OvX0KR
h140l/XtnlcopPbFWzys6bKIqezXP8os8G5Oxbb+voaG/z7YRGdz4ouSEY0Qu5j2
bQLL9168W3r2uYbmGDSW6tWoGlP685mc2g7Na5qDj7a3O/WevPp7HfTlEawpMnBK
CgRnODPxEAmGbWSOwN7RTSHKFH98fvNqRVizjKijTaWf0ZWhibAvKoxwj1u1idPz
abF1wP9pxNa+gw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:49:37 2024 by rpki-client on console-ams.rpki-client.org