Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft
File:                     7a_cpurOTxKTIjsC7rwngkOGm3s.mft (raw, json)
Hash identifier:          E4F3tqZwaThWs2FJ6Fuk23nPLpd6YWiIUJHzeOu3YTw=
Subject key identifier:   F3:7D:03:25:57:A5:96:34:F7:D6:27:78:9D:C8:87:4B:66:47:F6:BA
Authority key identifier: ED:AF:DC:A6:EA:CE:4F:12:93:22:3B:02:EE:BC:27:82:43:86:9B:7B
Certificate issuer:       /CN=edafdca6eace4f1293223b02eebc278243869b7b
Certificate serial:       019369D9CF9BCB2278B05F443367A9215167
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7a_cpurOTxKTIjsC7rwngkOGm3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft
Manifest number:          137A
Signing time:             Tue 26 Nov 2024 19:01:42 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:42 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:42 +0000
Files and hashes:         1: 7a_cpurOTxKTIjsC7rwngkOGm3s.crl (hash: 5isSLuKhU2pc+aG8GvzNLRD9eG4bmoCJylq4vZ3hdGE=)
                          2: vebbC-kYWkbl3DwSqB7MacBA_3c.roa (hash: FeNDKmGW2EqV+ye/R9n8tlu4NGlLcO1AduHtcVyZO2g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7a_cpurOTxKTIjsC7rwngkOGm3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:cf:9b:cb:22:78:b0:5f:44:33:67:a9:21:51:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edafdca6eace4f1293223b02eebc278243869b7b
        Validity
            Not Before: Nov 26 19:01:42 2024 GMT
            Not After : Nov 27 19:01:42 2024 GMT
        Subject: CN=f37d032557a59634f7d627789dc8874b6647f6ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ff:e3:0f:a0:56:ab:a8:64:01:cc:8a:1a:2f:
                    87:33:8e:e3:3b:09:ff:a7:91:28:76:01:5a:29:49:
                    0d:ba:ed:20:34:84:a7:28:15:f1:5b:6d:bd:2f:d6:
                    fb:74:b4:67:9d:15:b0:29:42:98:9b:fe:9a:ed:0b:
                    e8:d6:1b:26:5a:fb:bd:5d:60:ac:ce:56:03:61:e8:
                    fa:3d:74:a1:f9:a0:bb:f8:46:91:58:2f:74:90:13:
                    bd:ba:2e:45:a1:01:cb:79:73:a9:dc:de:c6:39:63:
                    cd:76:0d:f4:8e:33:01:ee:79:8e:74:b3:2b:88:dd:
                    13:60:64:8c:06:53:7c:ee:65:bc:98:49:51:09:80:
                    11:8f:8a:f6:ab:0c:93:6c:1a:c9:82:84:4a:eb:3b:
                    34:97:b1:20:2d:9c:e6:8c:03:86:54:83:f2:3a:db:
                    7b:d9:aa:df:bf:91:83:06:27:61:bd:2a:e1:6b:d6:
                    28:ff:eb:ab:7a:fd:fc:e8:ae:d9:08:08:7d:0c:5c:
                    77:44:bf:62:0f:0a:2c:10:cd:b4:ba:09:ce:b9:31:
                    9c:cb:36:2b:71:d1:d0:d1:5e:0a:7b:7c:e0:71:9c:
                    31:88:2d:20:a3:58:0f:24:ef:75:15:c9:23:e8:f4:
                    99:80:c3:44:ac:9a:2e:ff:da:09:6a:57:c8:54:b8:
                    72:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7D:03:25:57:A5:96:34:F7:D6:27:78:9D:C8:87:4B:66:47:F6:BA
            X509v3 Authority Key Identifier:
                keyid:ED:AF:DC:A6:EA:CE:4F:12:93:22:3B:02:EE:BC:27:82:43:86:9B:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a_cpurOTxKTIjsC7rwngkOGm3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:48:54:4a:4e:b6:0d:af:74:08:c7:dc:01:36:bf:53:3d:7c:
         3a:2e:45:a6:3d:5d:7d:2c:07:2a:df:c1:d7:8e:bc:38:02:da:
         d5:f9:61:ad:c9:4a:ef:db:3d:f7:d7:5f:a4:c9:eb:f4:02:e3:
         c5:d5:a4:7d:e6:20:19:40:91:b7:40:60:d6:57:c1:7c:ed:43:
         8e:c3:70:f6:4b:42:f1:c0:f9:05:39:54:4f:4e:2d:c5:6f:f1:
         52:d9:61:6b:df:c9:0e:bb:51:67:4d:ae:28:3d:b9:70:f1:91:
         dd:ad:48:6a:b2:1c:49:8d:fe:5d:48:ac:1d:39:87:d3:c2:bb:
         a8:aa:56:fc:f4:de:96:ce:83:f3:2e:dc:6a:78:ea:59:8c:ac:
         6b:90:6c:16:c4:17:96:b9:49:62:c4:84:67:5b:71:d1:74:7f:
         a8:c6:c0:61:44:13:a7:bf:8e:c3:80:85:64:a8:76:69:fb:4f:
         8d:e3:c4:d9:cf:6d:f8:ad:d6:cb:3b:4c:64:ca:03:5a:23:43:
         65:e4:a3:9b:7e:e8:eb:3e:c0:df:0b:7f:69:ad:1c:b7:09:76:
         aa:be:98:63:0b:e2:dc:a9:6b:8e:cd:dd:d0:10:3f:64:35:e1:
         b2:57:b7:1e:bf:fb:1d:56:38:b8:0b:ac:e7:01:9d:45:d5:6b:
         82:97:77:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2c+byyJ4sF9EM2epIVFnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYWZkY2E2ZWFjZTRmMTI5MzIyM2IwMmVlYmMyNzgyNDM4
NjliN2IwHhcNMjQxMTI2MTkwMTQyWhcNMjQxMTI3MTkwMTQyWjAzMTEwLwYDVQQD
EyhmMzdkMDMyNTU3YTU5NjM0ZjdkNjI3Nzg5ZGM4ODc0YjY2NDdmNmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf/jD6BWq6hkAcyKGi+HM47jOwn/
p5EodgFaKUkNuu0gNISnKBXxW229L9b7dLRnnRWwKUKYm/6a7Qvo1hsmWvu9XWCs
zlYDYej6PXSh+aC7+EaRWC90kBO9ui5FoQHLeXOp3N7GOWPNdg30jjMB7nmOdLMr
iN0TYGSMBlN87mW8mElRCYARj4r2qwyTbBrJgoRK6zs0l7EgLZzmjAOGVIPyOtt7
2arfv5GDBidhvSrha9Yo/+urev386K7ZCAh9DFx3RL9iDwosEM20ugnOuTGcyzYr
cdHQ0V4Ke3zgcZwxiC0go1gPJO91Fckj6PSZgMNErJou/9oJalfIVLhy8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPN9AyVXpZY099YneJ3Ih0tmR/a6MB8GA1UdIwQY
MBaAFO2v3Kbqzk8SkyI7Au68J4JDhpt7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2FfY3B1ck9UeEtUSWpzQzdyd25na09HbTNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9iNDc2ZjktZDI0Mi00NjVhLTg3NDgt
NWYxZGMwYTBiZmNmLzEvN2FfY3B1ck9UeEtUSWpzQzdyd25na09HbTNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9iNDc2ZjktZDI0Mi00NjVhLTg3NDgtNWYxZGMwYTBiZmNm
LzEvN2FfY3B1ck9UeEtUSWpzQzdyd25na09HbTNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0hUSk62
Da90CMfcATa/Uz18Oi5Fpj1dfSwHKt/B1468OALa1flhrclK79s999dfpMnr9ALj
xdWkfeYgGUCRt0Bg1lfBfO1DjsNw9ktC8cD5BTlUT04txW/xUtlha9/JDrtRZ02u
KD25cPGR3a1IarIcSY3+XUisHTmH08K7qKpW/PTels6D8y7canjqWYysa5BsFsQX
lrlJYsSEZ1tx0XR/qMbAYUQTp7+Ow4CFZKh2aftPjePE2c9t+K3WyztMZMoDWiND
ZeSjm37o6z7A3wt/aa0ctwl2qr6YYwvi3Klrjs3d0BA/ZDXhsle3Hr/7HVY4uAus
5wGdRdVrgpd3TA==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:20:48 2024 by rpki-client on console-ams.rpki-client.org