Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft
File:                     XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft (raw, json)
Hash identifier:          +FRERe8a2KR/E1SqSu1E4nx60T9Yqgz70ZWv76KTMJk=
Subject key identifier:   3A:8F:60:3C:5D:D4:16:27:31:26:A7:FA:07:6E:36:A0:45:9C:17:51
Authority key identifier: 5D:E4:58:F2:1D:40:64:66:BD:F6:82:40:F5:05:EE:FD:19:7B:A9:36
Certificate issuer:       /CN=5de458f21d406466bdf68240f505eefd197ba936
Certificate serial:       01938B1B78802BE566D493C0425BEF1E3041
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XeRY8h1AZGa99oJA9QXu_Rl7qTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft
Manifest number:          138E
Signing time:             Tue 03 Dec 2024 06:00:53 +0000
Manifest this update:     Tue 03 Dec 2024 06:00:53 +0000
Manifest next update:     Wed 04 Dec 2024 06:00:53 +0000
Files and hashes:         1: XeRY8h1AZGa99oJA9QXu_Rl7qTY.crl (hash: 5eU7VhR/E2ba8cM9rA34HFMVxMcwWrS7F3NXql9pkug=)
                          2: wiFwvlb4P1lUc4u0Ig1Rv8rBN24.roa (hash: JcrVbAr3EkZBZNASqlnVilO3B003i4kGZ/FXdXAiDT8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XeRY8h1AZGa99oJA9QXu_Rl7qTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8b:1b:78:80:2b:e5:66:d4:93:c0:42:5b:ef:1e:30:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5de458f21d406466bdf68240f505eefd197ba936
        Validity
            Not Before: Dec  3 06:00:53 2024 GMT
            Not After : Dec  4 06:00:53 2024 GMT
        Subject: CN=3a8f603c5dd416273126a7fa076e36a0459c1751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b8:e8:7c:bc:14:f1:1e:5e:9e:65:46:24:9c:
                    62:2c:c8:28:7f:b7:d4:bf:dd:2d:0e:8e:96:00:f3:
                    37:76:35:a5:d2:cf:b9:42:d4:29:e8:e2:19:6d:24:
                    d4:cd:9f:d5:52:53:b8:db:f9:37:93:97:07:d1:8a:
                    07:74:c7:ca:6a:89:81:2a:56:ec:7b:2b:c4:8d:17:
                    6a:92:54:44:32:80:e0:58:0a:14:ca:92:97:31:db:
                    0c:6c:54:ea:0e:53:e8:da:b4:8e:11:44:83:83:3e:
                    3e:d6:81:27:59:3b:54:36:de:2b:df:96:4e:22:d9:
                    ff:49:ee:87:ff:5b:34:d2:79:1a:32:17:2f:1f:40:
                    34:81:a2:3a:48:77:39:20:b8:13:18:cf:71:fc:3d:
                    f0:9f:ef:e2:29:77:3d:fd:15:5b:00:7d:43:62:3a:
                    53:da:e2:47:8b:5d:e0:17:7f:6e:98:2d:49:77:5d:
                    98:b6:75:7c:db:07:9e:c3:11:1a:c6:6e:1e:7c:55:
                    c9:16:b1:86:64:14:75:45:f1:7b:b7:2a:24:a4:86:
                    00:d1:92:ac:ec:10:59:be:75:87:4e:fd:8b:56:3c:
                    b7:33:bb:42:28:ad:06:f3:a1:f2:4c:ba:7b:2f:59:
                    2e:cc:02:ec:55:83:14:17:b3:bd:26:66:d4:00:81:
                    77:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8F:60:3C:5D:D4:16:27:31:26:A7:FA:07:6E:36:A0:45:9C:17:51
            X509v3 Authority Key Identifier:
                keyid:5D:E4:58:F2:1D:40:64:66:BD:F6:82:40:F5:05:EE:FD:19:7B:A9:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeRY8h1AZGa99oJA9QXu_Rl7qTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:12:21:24:ab:9a:d3:b7:11:6c:b9:cb:13:ba:eb:a5:27:36:
         cb:de:39:01:0f:93:92:bb:e1:a6:48:7a:75:60:3d:8a:03:55:
         fc:4b:d4:a2:ba:e6:84:40:4d:43:c2:6e:e3:b5:b3:86:d2:37:
         48:9b:04:ec:83:1c:d5:4d:50:5a:34:e0:98:91:5a:8a:67:f9:
         13:e9:73:ef:28:b3:69:c1:a0:fb:a4:ce:d2:a5:fe:a5:ad:e8:
         0b:2c:61:86:8c:1f:4e:a8:09:d0:ab:1b:65:80:90:b3:13:25:
         3a:a2:8b:0f:a6:a3:c9:30:d4:99:eb:17:2e:cb:74:a1:ce:b0:
         88:31:2f:5c:5c:fe:3b:da:34:4d:32:5d:7d:ad:dc:c6:94:72:
         49:25:0a:e8:58:12:0a:82:bf:bc:97:33:ee:ba:30:7c:0d:5b:
         ed:6f:dd:14:77:a8:08:b6:aa:ea:64:4f:0d:03:97:00:27:9c:
         d8:81:57:b8:40:c9:bc:93:31:fd:81:55:e7:0a:dc:de:e8:d2:
         ee:fc:a9:4c:7d:d1:88:d3:e8:11:4d:c7:58:e2:9e:43:fb:d3:
         48:31:96:f6:33:c0:4f:a2:45:da:40:0d:00:2f:c5:7b:ed:54:
         8e:1d:14:90:c9:24:5b:ed:6c:af:f6:33:d3:6d:3a:ce:77:f7:
         00:7f:f1:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZOLG3iAK+Vm1JPAQlvvHjBBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZTQ1OGYyMWQ0MDY0NjZiZGY2ODI0MGY1MDVlZWZkMTk3
YmE5MzYwHhcNMjQxMjAzMDYwMDUzWhcNMjQxMjA0MDYwMDUzWjAzMTEwLwYDVQQD
EygzYThmNjAzYzVkZDQxNjI3MzEyNmE3ZmEwNzZlMzZhMDQ1OWMxNzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLjofLwU8R5enmVGJJxiLMgof7fU
v90tDo6WAPM3djWl0s+5QtQp6OIZbSTUzZ/VUlO42/k3k5cH0YoHdMfKaomBKlbs
eyvEjRdqklREMoDgWAoUypKXMdsMbFTqDlPo2rSOEUSDgz4+1oEnWTtUNt4r35ZO
Itn/Se6H/1s00nkaMhcvH0A0gaI6SHc5ILgTGM9x/D3wn+/iKXc9/RVbAH1DYjpT
2uJHi13gF39umC1Jd12YtnV82weewxEaxm4efFXJFrGGZBR1RfF7tyokpIYA0ZKs
7BBZvnWHTv2LVjy3M7tCKK0G86HyTLp7L1kuzALsVYMUF7O9JmbUAIF38wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqPYDxd1BYnMSan+gduNqBFnBdRMB8GA1UdIwQY
MBaAFF3kWPIdQGRmvfaCQPUF7v0Ze6k2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGVSWThoMUFaR2E5OW9KQTlRWHVfUmw3cVRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9lMTU1ZWEtODhjZC00NDE0LWFhYjYt
MjNhYjU4ZDY0MTVhLzEvWGVSWThoMUFaR2E5OW9KQTlRWHVfUmw3cVRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9lMTU1ZWEtODhjZC00NDE0LWFhYjYtMjNhYjU4ZDY0MTVh
LzEvWGVSWThoMUFaR2E5OW9KQTlRWHVfUmw3cVRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAhIhJKua
07cRbLnLE7rrpSc2y945AQ+Tkrvhpkh6dWA9igNV/EvUorrmhEBNQ8Ju47WzhtI3
SJsE7IMc1U1QWjTgmJFaimf5E+lz7yizacGg+6TO0qX+pa3oCyxhhowfTqgJ0Ksb
ZYCQsxMlOqKLD6ajyTDUmesXLst0oc6wiDEvXFz+O9o0TTJdfa3cxpRySSUK6FgS
CoK/vJcz7rowfA1b7W/dFHeoCLaq6mRPDQOXACec2IFXuEDJvJMx/YFV5wrc3ujS
7vypTH3RiNPoEU3HWOKeQ/vTSDGW9jPAT6JF2kANAC/Fe+1Ujh0UkMkkW+1sr/Yz
0206znf3AH/xMg==
-----END CERTIFICATE-----
Generated at Tue Dec 3 17:34:18 2024 by rpki-client on console-ams.rpki-client.org