Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
File:                     kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft (raw, json)
Hash identifier:          yhuInO0Mo0u22M8lXhwyGEhHsamU0DJl/1dHIEE+EOQ=
Subject key identifier:   2D:23:12:90:80:D4:52:91:98:D3:62:D3:F4:D5:39:22:AF:4A:A7:2A
Authority key identifier: 92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
Certificate issuer:       /CN=9246785f469be8aa7151e3333e47465d478fd0e7
Certificate serial:       01936AB4B016B7F2A0EA1BC2868B40D9938C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
Manifest number:          137C
Signing time:             Tue 26 Nov 2024 23:00:46 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:46 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:46 +0000
Files and hashes:         1: 3NgpQxADw7YPbSj03cvzQJtb5vY.roa (hash: tvSTsqQ2PBM0W4YWStwz9lT8EPHRSa6WQ74IoQsDIbk=)
                          2: kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl (hash: 2tBWafLYPRXu6jD+HKZ001hGnSA0GuY1dRJ8eX6pYQM=)
                          3: sk1wKorW-QTwALnxzuSvjCOLJjU.roa (hash: eLtYHCDqJWJMIZ52wvy/2kr3kUnXZX7vWe1REf8+RO8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:b0:16:b7:f2:a0:ea:1b:c2:86:8b:40:d9:93:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9246785f469be8aa7151e3333e47465d478fd0e7
        Validity
            Not Before: Nov 26 23:00:46 2024 GMT
            Not After : Nov 27 23:00:46 2024 GMT
        Subject: CN=2d23129080d4529198d362d3f4d53922af4aa72a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:77:3c:77:6d:dd:c7:8b:5f:fc:ce:52:a0:9d:
                    c6:25:4a:97:05:5f:5a:21:ae:99:90:e7:53:c5:fe:
                    6e:37:e1:17:31:9c:9c:0c:8a:d9:98:0e:b5:c2:58:
                    ca:57:78:e3:4e:5b:b3:e7:e2:c8:6e:8e:14:aa:85:
                    5a:5b:22:9b:4a:76:74:c9:80:f8:7f:f6:5f:4a:65:
                    3d:f0:7e:66:eb:f7:60:6c:4c:c5:51:9c:1a:d4:9f:
                    d6:2d:d6:c1:da:17:6e:d9:57:2d:fe:71:60:2b:e4:
                    37:78:67:70:4c:32:76:ce:fb:ab:a8:be:5a:d2:3a:
                    da:2e:39:a2:7e:69:1e:ad:e9:d5:b8:9d:14:f3:0b:
                    b6:ab:dd:21:3d:95:5b:cc:64:6a:96:03:b7:1e:69:
                    30:12:b4:52:c9:26:94:17:32:9d:0f:3f:9c:ec:0a:
                    6a:72:66:93:1a:98:07:73:13:bf:98:7e:f1:99:8a:
                    56:c1:d1:50:a0:1a:96:b4:c6:56:97:b8:b3:ee:ff:
                    fe:51:d6:49:2b:ad:5f:2e:58:31:0e:8f:8c:9a:44:
                    55:8b:99:6d:9c:d5:b6:a9:73:e0:ca:95:31:4f:cc:
                    ce:6e:e3:8d:c5:0b:59:55:19:6f:19:67:46:75:bd:
                    e8:eb:f8:42:5a:02:77:22:12:b9:5b:a5:f7:41:84:
                    c9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:23:12:90:80:D4:52:91:98:D3:62:D3:F4:D5:39:22:AF:4A:A7:2A
            X509v3 Authority Key Identifier:
                keyid:92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c6:62:48:5c:76:05:9f:56:69:be:10:52:76:9f:da:63:f7:
         10:c0:04:72:8b:db:c5:5f:b0:4a:91:79:4a:25:8e:85:4d:96:
         18:62:03:f5:d0:ef:bc:d1:5b:6b:0f:bb:94:0a:46:eb:b4:64:
         66:fb:ba:32:79:c9:eb:ce:3d:5f:e4:15:7c:a5:77:86:7b:b3:
         b3:78:8d:ba:f3:2b:17:a3:65:ea:8a:2e:55:70:bf:59:01:23:
         4c:df:69:f0:7c:8b:6f:69:9e:01:56:97:54:d5:a2:c0:6c:60:
         90:ff:cd:1b:f2:72:d6:4d:3d:96:41:a2:46:35:66:8d:cc:01:
         28:86:73:bf:44:40:00:19:28:ec:b9:e1:73:73:06:86:d9:7d:
         9b:05:42:5c:d3:c5:fc:b7:2b:fa:61:5d:21:ef:ef:19:ab:81:
         d8:c3:65:aa:ad:cb:cd:8c:fd:b0:a8:1f:f9:f5:2c:61:dc:46:
         b5:41:bd:ac:1b:53:0c:4a:2d:67:69:17:05:15:52:e1:a9:a5:
         cc:a7:c5:50:e2:95:5e:75:d6:78:64:2d:51:53:f7:e2:44:fb:
         88:d5:64:9b:5b:c0:84:44:d0:d4:b8:e2:e0:0f:39:8f:99:78:
         d7:25:4d:43:bd:90:84:88:54:b1:00:a4:45:c8:88:9e:86:a2:
         2d:f5:c2:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqtLAWt/Kg6hvChotA2ZOMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNDY3ODVmNDY5YmU4YWE3MTUxZTMzMzNlNDc0NjVkNDc4
ZmQwZTcwHhcNMjQxMTI2MjMwMDQ2WhcNMjQxMTI3MjMwMDQ2WjAzMTEwLwYDVQQD
EygyZDIzMTI5MDgwZDQ1MjkxOThkMzYyZDNmNGQ1MzkyMmFmNGFhNzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3c8d23dx4tf/M5SoJ3GJUqXBV9a
Ia6ZkOdTxf5uN+EXMZycDIrZmA61wljKV3jjTluz5+LIbo4UqoVaWyKbSnZ0yYD4
f/ZfSmU98H5m6/dgbEzFUZwa1J/WLdbB2hdu2Vct/nFgK+Q3eGdwTDJ2zvurqL5a
0jraLjmifmkerenVuJ0U8wu2q90hPZVbzGRqlgO3HmkwErRSySaUFzKdDz+c7Apq
cmaTGpgHcxO/mH7xmYpWwdFQoBqWtMZWl7iz7v/+UdZJK61fLlgxDo+MmkRVi5lt
nNW2qXPgypUxT8zObuONxQtZVRlvGWdGdb3o6/hCWgJ3IhK5W6X3QYTJBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0jEpCA1FKRmNNi0/TVOSKvSqcqMB8GA1UdIwQY
MBaAFJJGeF9Gm+iqcVHjMz5HRl1Hj9DnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2taNFgwYWI2S3B4VWVNelBrZEdYVWVQME9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80ZTA1ODAtOGIyZi00OWE3LWFiZDgt
NWMzOGM3NDc1YWE5LzEva2taNFgwYWI2S3B4VWVNelBrZEdYVWVQME9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80ZTA1ODAtOGIyZi00OWE3LWFiZDgtNWMzOGM3NDc1YWE5
LzEva2taNFgwYWI2S3B4VWVNelBrZEdYVWVQME9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARsZiSFx2
BZ9Wab4QUnaf2mP3EMAEcovbxV+wSpF5SiWOhU2WGGID9dDvvNFbaw+7lApG67Rk
Zvu6MnnJ6849X+QVfKV3hnuzs3iNuvMrF6Nl6oouVXC/WQEjTN9p8HyLb2meAVaX
VNWiwGxgkP/NG/Jy1k09lkGiRjVmjcwBKIZzv0RAABko7Lnhc3MGhtl9mwVCXNPF
/Lcr+mFdIe/vGauB2MNlqq3LzYz9sKgf+fUsYdxGtUG9rBtTDEotZ2kXBRVS4aml
zKfFUOKVXnXWeGQtUVP34kT7iNVkm1vAhETQ1Lji4A85j5l41yVNQ72QhIhUsQCk
RciInoaiLfXCbQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:45:11 2024 by rpki-client on console-fra.rpki-client.org