Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
File:                     6HFybEwQPg60LC8Oi12ocz-n7-0.mft (raw, json)
Hash identifier:          I7IXKZyCxFLmxEtd8EtocXwwXkFxxOfK66ToobmVrtg=
Subject key identifier:   82:2D:F2:F5:15:E9:86:B3:95:AD:B2:76:06:E3:35:82:5A:43:8E:16
Authority key identifier: E8:71:72:6C:4C:10:3E:0E:B4:2C:2F:0E:8B:5D:A8:73:3F:A7:EF:ED
Certificate issuer:       /CN=e871726c4c103e0eb42c2f0e8b5da8733fa7efed
Certificate serial:       019369D9D88936B4CF698B547B32CB368CB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 19:01:44 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:44 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:44 +0000
Files and hashes:         1: 44EVRtG6dghdl7XBVx84mQP51eQ.roa (hash: CYm7Nx6WYhUusymE5kduLJLg1OYqLb24QE+xTjFb2mY=)
                          2: 6HFybEwQPg60LC8Oi12ocz-n7-0.crl (hash: mjguVNaEJFyZ+FG2IaCJKArpYvggKWHtWjDKERnqHt4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:d8:89:36:b4:cf:69:8b:54:7b:32:cb:36:8c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e871726c4c103e0eb42c2f0e8b5da8733fa7efed
        Validity
            Not Before: Nov 26 19:01:44 2024 GMT
            Not After : Nov 27 19:01:44 2024 GMT
        Subject: CN=822df2f515e986b395adb27606e335825a438e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7c:2c:18:78:44:19:fe:15:4d:99:79:23:c3:
                    3d:a6:e2:b7:0b:a6:f1:fd:ed:bd:7e:46:40:3a:45:
                    6f:f7:93:d8:ce:51:09:21:ea:39:5d:e5:51:74:4b:
                    d1:d4:10:5a:cc:81:ec:70:fe:4c:6f:22:3b:98:a9:
                    30:26:1b:7c:bf:c3:e8:ca:89:a5:f0:eb:05:d7:fc:
                    59:09:78:73:1c:ad:21:a5:de:14:68:b8:25:f1:42:
                    43:a1:d9:af:d9:50:1d:3c:59:e6:f2:e4:08:60:27:
                    b5:8e:46:42:f7:c1:66:f2:8e:69:db:e0:8a:83:3b:
                    ca:76:4e:e5:40:26:bc:05:32:31:53:24:8b:78:b2:
                    04:7f:28:7e:95:f3:77:2e:af:ad:53:bd:e5:52:70:
                    c8:f5:f5:39:d1:22:28:44:ed:54:23:76:a2:c5:fa:
                    80:80:b6:35:eb:b7:b5:e7:ec:b9:00:6f:5d:49:23:
                    85:c0:ad:d2:ad:b0:db:38:e6:32:97:72:ae:97:f9:
                    ef:ba:d3:f0:b0:d2:2f:89:75:51:8b:aa:0c:0f:10:
                    1c:79:de:fb:1e:fc:d7:2e:3e:f1:ae:8c:94:9d:8e:
                    b1:dd:fd:b3:06:5c:6d:f2:87:22:97:1a:e1:d6:27:
                    77:85:45:0b:97:55:f1:91:6f:12:ef:d2:71:4f:5c:
                    80:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2D:F2:F5:15:E9:86:B3:95:AD:B2:76:06:E3:35:82:5A:43:8E:16
            X509v3 Authority Key Identifier:
                keyid:E8:71:72:6C:4C:10:3E:0E:B4:2C:2F:0E:8B:5D:A8:73:3F:A7:EF:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:ff:8e:29:65:b3:78:7e:75:e5:d2:ff:18:37:69:ba:50:05:
         2b:b9:be:64:9b:0b:87:6b:f5:27:c4:2a:db:79:bd:2b:4f:b5:
         24:9a:07:c5:f7:d4:06:a5:fb:1e:37:67:51:56:d4:24:c6:30:
         dd:a9:0e:39:d3:6a:58:a7:5a:b9:5e:c3:2e:72:8a:f9:12:d7:
         79:13:87:f8:8f:49:42:dd:9a:1d:72:a4:a3:d8:39:fd:37:b8:
         ec:f2:68:43:60:4a:33:4d:0b:97:bb:13:67:d4:95:bd:7b:06:
         17:98:24:a9:25:85:9b:d1:63:0f:67:c2:f5:e3:0c:f5:21:85:
         81:86:2a:5f:da:18:a6:fd:4b:ed:d0:d1:cc:3a:b1:ac:47:71:
         f4:0f:b5:8e:da:71:2c:08:77:aa:b7:06:bd:32:f3:82:9f:db:
         2f:fa:f0:f4:ca:7c:99:71:18:38:f7:f5:e8:b0:ab:d6:18:eb:
         48:66:51:e0:38:39:b3:4c:5b:1f:6c:0e:a9:7a:e1:18:62:6c:
         bd:9d:73:a9:dc:b6:1b:89:da:21:28:0b:91:ec:e8:a7:04:e6:
         b0:9c:aa:b3:3a:f8:d5:f9:fc:3b:2f:06:31:66:eb:6f:36:9a:
         35:1c:45:f0:03:1f:3e:4b:df:0b:89:0a:b4:40:02:ee:c3:e9:
         8e:d3:de:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2diJNrTPaYtUezLLNoy0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NzE3MjZjNGMxMDNlMGViNDJjMmYwZThiNWRhODczM2Zh
N2VmZWQwHhcNMjQxMTI2MTkwMTQ0WhcNMjQxMTI3MTkwMTQ0WjAzMTEwLwYDVQQD
Eyg4MjJkZjJmNTE1ZTk4NmIzOTVhZGIyNzYwNmUzMzU4MjVhNDM4ZTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXwsGHhEGf4VTZl5I8M9puK3C6bx
/e29fkZAOkVv95PYzlEJIeo5XeVRdEvR1BBazIHscP5MbyI7mKkwJht8v8Poyoml
8OsF1/xZCXhzHK0hpd4UaLgl8UJDodmv2VAdPFnm8uQIYCe1jkZC98Fm8o5p2+CK
gzvKdk7lQCa8BTIxUySLeLIEfyh+lfN3Lq+tU73lUnDI9fU50SIoRO1UI3aixfqA
gLY167e15+y5AG9dSSOFwK3SrbDbOOYyl3Kul/nvutPwsNIviXVRi6oMDxAced77
HvzXLj7xroyUnY6x3f2zBlxt8ocilxrh1id3hUULl1XxkW8S79JxT1yAOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIt8vUV6Yazla2ydgbjNYJaQ44WMB8GA1UdIwQY
MBaAFOhxcmxMED4OtCwvDotdqHM/p+/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkhGeWJFd1FQZzYwTEM4T2kxMm9jei1uNy0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jZDVjODEtZDIwNS00MGRjLWE4NWIt
Zjc0NGZkYzgzY2Y1LzEvNkhGeWJFd1FQZzYwTEM4T2kxMm9jei1uNy0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9jZDVjODEtZDIwNS00MGRjLWE4NWItZjc0NGZkYzgzY2Y1
LzEvNkhGeWJFd1FQZzYwTEM4T2kxMm9jei1uNy0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw/+OKWWz
eH515dL/GDdpulAFK7m+ZJsLh2v1J8Qq23m9K0+1JJoHxffUBqX7HjdnUVbUJMYw
3akOOdNqWKdauV7DLnKK+RLXeROH+I9JQt2aHXKko9g5/Te47PJoQ2BKM00Ll7sT
Z9SVvXsGF5gkqSWFm9FjD2fC9eMM9SGFgYYqX9oYpv1L7dDRzDqxrEdx9A+1jtpx
LAh3qrcGvTLzgp/bL/rw9Mp8mXEYOPf16LCr1hjrSGZR4Dg5s0xbH2wOqXrhGGJs
vZ1zqdy2G4naISgLkezopwTmsJyqszr41fn8Oy8GMWbrbzaaNRxF8AMfPkvfC4kK
tEAC7sPpjtPeFw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:45:04 2024 by rpki-client on console-fra.rpki-client.org