Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
File:                     eNY2xQXVavQqQUwWfVJAfTVrPQs.mft (raw, json)
Hash identifier:          cZ3ZMlzdQoc1ABez/kavTZyiiAi04JtTAuWaSPusqjE=
Subject key identifier:   34:79:72:5C:B2:1B:90:E0:38:D6:30:53:B8:E3:EE:3D:1D:DC:66:63
Authority key identifier: 78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
Certificate issuer:       /CN=78d636c505d56af42a414c167d52407d356b3d0b
Certificate serial:       019364444BDD37FD69FDE604EA2C62854E72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
Manifest number:          137B
Signing time:             Mon 25 Nov 2024 17:00:17 +0000
Manifest this update:     Mon 25 Nov 2024 17:00:17 +0000
Manifest next update:     Tue 26 Nov 2024 17:00:17 +0000
Files and hashes:         1: HKYXuhb1IzMtjlvETNDmCgEmPQQ.roa (hash: lbIE8D99hG8ZIBHDOkoVTLuMFrO9nZnOkvOjjk66KJM=)
                          2: eNY2xQXVavQqQUwWfVJAfTVrPQs.crl (hash: GOrKFI5mkJKvp09Xkl87zOxMcVMBlDSnnnlTQPgf4DY=)
                          3: sYgH0wjFN2thOHWrp1N-BQ5TPp8.roa (hash: Gbf1ca3hbJ/gEUPxruXgOhpvIxenRX5bWNMOdSIPjRI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:44:4b:dd:37:fd:69:fd:e6:04:ea:2c:62:85:4e:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d636c505d56af42a414c167d52407d356b3d0b
        Validity
            Not Before: Nov 25 17:00:17 2024 GMT
            Not After : Nov 26 17:00:17 2024 GMT
        Subject: CN=3479725cb21b90e038d63053b8e3ee3d1ddc6663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:61:7b:4e:e3:64:c3:c0:65:1a:a9:a0:cc:e9:
                    a8:f7:6c:67:37:66:1b:86:ec:bf:08:0a:09:6c:27:
                    a6:aa:3b:86:f6:0e:da:96:7c:39:f2:29:f2:8e:90:
                    76:9d:7f:13:11:e0:42:80:bc:3f:9d:d8:f6:ac:71:
                    77:e2:6e:b0:25:9c:09:30:72:9f:7a:9d:51:ca:a3:
                    e8:88:61:2e:2c:9e:9b:d2:b3:ba:2a:c4:76:0c:63:
                    ed:b6:df:cc:84:d2:05:2c:d4:a9:c9:32:aa:ce:81:
                    6d:77:05:72:9d:81:6b:9c:e4:d2:e8:d4:3e:b1:46:
                    f6:0b:9b:af:bc:80:27:6f:36:85:c7:c7:24:7f:d6:
                    f0:cd:35:ec:de:af:37:0f:4c:5c:09:57:59:f4:15:
                    af:40:0b:b5:a6:68:04:5e:f5:00:76:5c:b7:68:83:
                    aa:d6:da:ef:c6:39:7c:8e:72:10:29:a0:97:11:38:
                    c5:f3:a2:5e:15:22:67:92:7b:95:d2:54:62:8d:03:
                    cd:39:dd:3d:f2:f3:70:0c:cd:88:22:7c:9d:9d:87:
                    35:5e:d1:ba:3b:fb:c3:f3:97:39:62:48:dc:4e:fb:
                    35:4c:80:ab:c0:7d:d5:c1:aa:a8:66:32:44:02:08:
                    9d:b9:cb:4b:53:31:be:a2:81:f5:3b:0d:36:8b:06:
                    64:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:79:72:5C:B2:1B:90:E0:38:D6:30:53:B8:E3:EE:3D:1D:DC:66:63
            X509v3 Authority Key Identifier:
                keyid:78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:dc:b5:44:ef:25:7a:0e:f0:3b:ae:c3:d3:ba:89:bc:5f:8a:
         89:1b:0e:2e:70:81:7a:e5:ac:de:45:e7:a3:31:91:8d:28:fa:
         a5:1e:8e:4f:e7:0d:36:a5:d7:da:1b:03:38:7d:d1:3a:35:17:
         1c:32:e7:cb:8d:50:1e:d1:79:eb:b3:7e:f5:7a:39:93:37:88:
         92:d7:86:0e:fa:d9:58:36:4b:f7:6a:35:54:29:8d:a5:7e:c3:
         a2:6a:c9:49:0e:1e:32:e8:e1:c7:6e:4f:32:32:3f:fe:81:1f:
         8e:1f:76:5f:98:92:6d:d0:3f:16:d3:09:ca:ce:67:b8:8e:ae:
         48:74:fa:aa:6a:7d:94:c8:33:98:99:40:56:0b:db:2d:33:e8:
         43:81:e5:06:d6:8e:ee:2d:d7:f0:89:d9:f4:76:5f:2f:3d:62:
         94:eb:da:3c:e8:ab:11:8b:3e:86:e8:05:f7:13:12:d6:d6:1c:
         80:11:72:f0:7e:a4:c1:a9:a2:9e:64:a8:a1:a5:50:f7:86:ad:
         f5:60:e3:3b:19:a0:4a:00:5b:51:f7:1f:b0:50:92:3b:6c:e3:
         a9:d7:ec:f2:93:b9:7d:0c:71:4f:7f:ed:c0:cc:64:2f:e0:73:
         12:c9:c6:4a:c3:4d:c0:4e:6c:a6:c1:38:08:62:12:07:31:9c:
         54:ab:1b:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNkREvdN/1p/eYE6ixihU5yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZDYzNmM1MDVkNTZhZjQyYTQxNGMxNjdkNTI0MDdkMzU2
YjNkMGIwHhcNMjQxMTI1MTcwMDE3WhcNMjQxMTI2MTcwMDE3WjAzMTEwLwYDVQQD
EygzNDc5NzI1Y2IyMWI5MGUwMzhkNjMwNTNiOGUzZWUzZDFkZGM2NjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2F7TuNkw8BlGqmgzOmo92xnN2Yb
huy/CAoJbCemqjuG9g7alnw58inyjpB2nX8TEeBCgLw/ndj2rHF34m6wJZwJMHKf
ep1RyqPoiGEuLJ6b0rO6KsR2DGPttt/MhNIFLNSpyTKqzoFtdwVynYFrnOTS6NQ+
sUb2C5uvvIAnbzaFx8ckf9bwzTXs3q83D0xcCVdZ9BWvQAu1pmgEXvUAdly3aIOq
1trvxjl8jnIQKaCXETjF86JeFSJnknuV0lRijQPNOd098vNwDM2IInydnYc1XtG6
O/vD85c5YkjcTvs1TICrwH3VwaqoZjJEAgiductLUzG+ooH1Ow02iwZkFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDR5clyyG5DgONYwU7jj7j0d3GZjMB8GA1UdIwQY
MBaAFHjWNsUF1Wr0KkFMFn1SQH01az0LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU5ZMnhRWFZhdlFxUVV3V2ZWSkFmVFZyUFFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xZmE5NDUtNTBlNy00NzlhLTlkOTIt
ZGRjZDRkOTM1MDMwLzEvZU5ZMnhRWFZhdlFxUVV3V2ZWSkFmVFZyUFFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8xZmE5NDUtNTBlNy00NzlhLTlkOTItZGRjZDRkOTM1MDMw
LzEvZU5ZMnhRWFZhdlFxUVV3V2ZWSkFmVFZyUFFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGdy1RO8l
eg7wO67D07qJvF+KiRsOLnCBeuWs3kXnozGRjSj6pR6OT+cNNqXX2hsDOH3ROjUX
HDLny41QHtF567N+9Xo5kzeIkteGDvrZWDZL92o1VCmNpX7DomrJSQ4eMujhx25P
MjI//oEfjh92X5iSbdA/FtMJys5nuI6uSHT6qmp9lMgzmJlAVgvbLTPoQ4HlBtaO
7i3X8InZ9HZfLz1ilOvaPOirEYs+hugF9xMS1tYcgBFy8H6kwaminmSooaVQ94at
9WDjOxmgSgBbUfcfsFCSO2zjqdfs8pO5fQxxT3/twMxkL+BzEsnGSsNNwE5spsE4
CGISBzGcVKsbqA==
-----END CERTIFICATE-----