Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
File:                     tEORSkjl2uWnVrHjuPvkN-4Niww.mft (raw, json)
Hash identifier:          sxhXHYxXNcHHaovaV1S4l2+lh7nVt3Qq8K1R+SsYvns=
Subject key identifier:   8E:C5:C8:EB:43:AE:96:CE:7D:89:EE:FE:76:A4:15:9C:0E:C0:99:FE
Authority key identifier: B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
Certificate issuer:       /CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Certificate serial:       019352076A5A284D0762927FB5D28E27C054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
Manifest number:          136E
Signing time:             Fri 22 Nov 2024 04:00:37 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:37 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:37 +0000
Files and hashes:         1: 70N2nRQiDL2LT1eFUg_Fkz-wkCU.roa (hash: 4uaIa9o7d/8apcdRMv8Fh2XKMQb472iYtzk8oIdKXeI=)
                          2: KVt_no_lfHWTZhzNwemlJDM2ftE.roa (hash: Ov1wEZbxMW0tXUjppWm22mwdnVcmSbVO0/ASdOTvEqc=)
                          3: KnjslgaopCmCG6TO0JqHDEEJW6w.roa (hash: F+UaxGL2gzRNJ5UYB+AUXvvmATQZnVDX+4cApftbjok=)
                          4: T82VKTLz3PAW5M0U-u-2DAB5Mt8.roa (hash: 4AIB/qUCeMRHNuKC1cR9OduIG6PR1WdNsYvLIWvPs/c=)
                          5: tEORSkjl2uWnVrHjuPvkN-4Niww.crl (hash: lzZDfsBvvK3WxfGWkt5JvSJylvsjgud1mW+Xx77izQ4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:6a:5a:28:4d:07:62:92:7f:b5:d2:8e:27:c0:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
        Validity
            Not Before: Nov 22 04:00:37 2024 GMT
            Not After : Nov 23 04:00:37 2024 GMT
        Subject: CN=8ec5c8eb43ae96ce7d89eefe76a4159c0ec099fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7e:34:aa:1a:6d:e5:da:1a:26:30:03:1b:d5:
                    ec:6a:df:8b:a8:e2:54:f1:22:24:3d:86:45:83:36:
                    3c:f9:75:56:7c:81:c3:3c:ea:f8:3c:7a:17:01:a7:
                    99:5f:cd:ad:5a:ca:89:02:99:68:b5:89:80:8b:db:
                    3f:13:39:b8:95:ad:71:db:d1:14:23:c6:ff:ef:d1:
                    05:f0:e7:60:be:6f:67:6c:bf:72:b8:3e:e6:11:87:
                    77:0f:56:33:3d:ae:d4:4a:bd:4b:9a:ec:cc:ac:26:
                    61:13:ad:6b:86:9e:c8:41:51:8a:3a:c7:43:9e:8a:
                    06:94:12:6d:09:be:a2:75:aa:cb:7d:14:a0:03:da:
                    35:7a:cf:6d:2a:83:1e:fe:06:70:2a:e7:23:45:80:
                    82:96:1d:5f:14:a9:1f:39:6d:04:f4:6b:71:ec:da:
                    59:05:aa:46:18:f1:2d:36:5d:f9:4e:65:91:f1:b7:
                    ea:a0:1d:df:91:fc:81:96:a0:22:f6:46:00:35:2b:
                    ce:26:3c:e3:6c:2b:0d:7c:d8:34:7a:4c:0c:3d:0b:
                    d4:78:17:df:88:c6:12:2a:e6:c3:07:65:7d:ff:9e:
                    ac:b3:8c:58:d8:d5:e6:97:b4:da:c7:d8:db:70:37:
                    5f:42:12:3a:84:e7:b1:ac:b4:7e:f3:aa:c0:fe:e4:
                    d9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C5:C8:EB:43:AE:96:CE:7D:89:EE:FE:76:A4:15:9C:0E:C0:99:FE
            X509v3 Authority Key Identifier:
                keyid:B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:e2:c8:75:b0:37:cf:6f:10:b6:a5:0f:b5:08:79:f9:ea:2a:
         e9:a5:ee:d7:3c:07:84:ad:4a:b1:b2:b9:af:fe:e7:9c:18:b7:
         af:4c:01:ca:b1:fa:8e:89:a8:ca:dd:65:c9:28:93:5b:88:48:
         04:ff:25:c9:ef:74:e8:4c:f3:ea:86:24:3e:ee:01:5c:de:ae:
         89:1e:e7:7b:03:ce:cc:9b:ae:e8:70:ab:3d:cd:da:9d:85:c1:
         45:64:13:81:3b:34:91:6a:2c:01:6e:7d:97:63:ec:1e:b0:77:
         99:f9:8f:8c:07:ea:7d:73:de:53:6e:b0:8e:3c:95:a4:5c:a9:
         0f:cd:4a:ce:a8:84:fa:5a:31:49:c0:26:81:30:06:43:ec:8b:
         fc:e8:ec:86:e9:96:ef:97:e9:9d:a4:46:e1:60:25:75:2b:d1:
         f3:dc:ca:60:fd:54:ec:0b:67:35:14:4c:fa:33:33:81:9c:a4:
         7e:ae:c5:ce:e8:5e:a2:e1:be:fc:c6:fe:6e:33:f4:d1:c9:d8:
         a4:00:21:30:5e:07:c3:2e:d5:42:58:3a:f8:98:17:37:6e:01:
         98:20:cf:ff:d0:9c:5c:ed:71:24:58:6e:71:44:f8:8e:7a:22:
         97:31:64:22:72:d4:3e:2b:c3:1c:93:64:a7:de:50:bc:ad:6b:
         dc:da:4d:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSB2paKE0HYpJ/tdKOJ8BUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NDM5MTRhNDhlNWRhZTVhNzU2YjFlM2I4ZmJlNDM3ZWUw
ZDhiMGMwHhcNMjQxMTIyMDQwMDM3WhcNMjQxMTIzMDQwMDM3WjAzMTEwLwYDVQQD
Eyg4ZWM1YzhlYjQzYWU5NmNlN2Q4OWVlZmU3NmE0MTU5YzBlYzA5OWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkn40qhpt5doaJjADG9Xsat+LqOJU
8SIkPYZFgzY8+XVWfIHDPOr4PHoXAaeZX82tWsqJAplotYmAi9s/Ezm4la1x29EU
I8b/79EF8Odgvm9nbL9yuD7mEYd3D1YzPa7USr1LmuzMrCZhE61rhp7IQVGKOsdD
nooGlBJtCb6idarLfRSgA9o1es9tKoMe/gZwKucjRYCClh1fFKkfOW0E9Gtx7NpZ
BapGGPEtNl35TmWR8bfqoB3fkfyBlqAi9kYANSvOJjzjbCsNfNg0ekwMPQvUeBff
iMYSKubDB2V9/56ss4xY2NXml7Tax9jbcDdfQhI6hOexrLR+86rA/uTZywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7FyOtDrpbOfYnu/nakFZwOwJn+MB8GA1UdIwQY
MBaAFLRDkUpI5drlp1ax47j75DfuDYsMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEVPUlNramwydVduVnJIanVQdmtOLTROaXd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC82OTIwZDItYTdhNi00MWE1LTk2ZTAt
MzE0ZWY3NDZkOGE2LzEvdEVPUlNramwydVduVnJIanVQdmtOLTROaXd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC82OTIwZDItYTdhNi00MWE1LTk2ZTAtMzE0ZWY3NDZkOGE2
LzEvdEVPUlNramwydVduVnJIanVQdmtOLTROaXd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOLIdbA3
z28QtqUPtQh5+eoq6aXu1zwHhK1KsbK5r/7nnBi3r0wByrH6jomoyt1lySiTW4hI
BP8lye906Ezz6oYkPu4BXN6uiR7newPOzJuu6HCrPc3anYXBRWQTgTs0kWosAW59
l2PsHrB3mfmPjAfqfXPeU26wjjyVpFypD81KzqiE+loxScAmgTAGQ+yL/OjshumW
75fpnaRG4WAldSvR89zKYP1U7AtnNRRM+jMzgZykfq7FzuheouG+/Mb+bjP00cnY
pAAhMF4Hwy7VQlg6+JgXN24BmCDP/9CcXO1xJFhucUT4jnoilzFkInLUPivDHJNk
p95QvK1r3NpNqA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:51:50 2024 by rpki-client on console-fra.rpki-client.org