Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft
File:                     w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft (raw, json)
Hash identifier:          TUu6VMn4eGVSCctvGV8MugUODXO8PdDhPyaZWetqqVw=
Subject key identifier:   20:28:0C:D2:CC:ED:1F:DD:07:D2:E1:8A:05:52:9A:30:6A:6F:77:8E
Authority key identifier: C3:85:20:1A:33:B5:27:C6:44:AA:D5:AE:CD:37:82:C6:A8:C2:F5:1F
Certificate issuer:       /CN=c385201a33b527c644aad5aecd3782c6a8c2f51f
Certificate serial:       0193549C45506BBB948BA0AFEADA03DEFA11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft
Manifest number:          136E
Signing time:             Fri 22 Nov 2024 16:02:27 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:27 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:27 +0000
Files and hashes:         1: Dm4lpiACFjPqryxH8KxAztRfvus.roa (hash: nYQshXLkd4/0UMv/V70oFmdenrOTOF2ReiR2NBCND38=)
                          2: w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl (hash: W8EmAqfwqOL9cVxQ5Eulzg/wuGe8x7VGrVC123ZpKdQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:45:50:6b:bb:94:8b:a0:af:ea:da:03:de:fa:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c385201a33b527c644aad5aecd3782c6a8c2f51f
        Validity
            Not Before: Nov 22 16:02:27 2024 GMT
            Not After : Nov 23 16:02:27 2024 GMT
        Subject: CN=20280cd2cced1fdd07d2e18a05529a306a6f778e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a3:96:08:81:0c:a8:d0:16:4d:e5:05:92:4e:
                    9b:52:7a:07:bd:fe:4e:59:e2:ad:84:53:b6:a0:d7:
                    12:08:14:a7:f5:08:d4:25:9c:14:a8:da:8d:3d:a4:
                    a8:d4:65:37:4d:4f:9e:85:2e:35:eb:6a:da:ee:89:
                    a6:e0:67:24:14:01:86:1c:2d:a7:b8:28:4d:c8:bc:
                    6f:a8:9a:2c:46:6a:30:d3:1f:ad:85:b3:79:d1:28:
                    e3:4b:33:c9:75:61:ae:89:1d:e7:1b:62:f7:af:5e:
                    80:cc:ca:1f:69:66:a5:49:62:40:bf:20:a3:26:e6:
                    bc:14:a4:1f:25:12:1f:8d:52:45:0c:74:26:0b:38:
                    6c:f8:e1:30:0e:00:88:2f:7e:6f:0c:72:e9:22:3a:
                    e7:95:fd:44:4d:74:12:05:9a:94:a7:45:f0:9b:3e:
                    0c:29:30:e6:e3:b2:2b:9c:d1:63:c5:02:bc:b8:20:
                    0f:4a:ec:22:bd:d1:ec:f0:9c:86:37:e8:23:18:b4:
                    c0:2b:fc:91:55:47:02:ea:28:5b:c0:fc:de:13:d1:
                    40:5a:c2:f5:e3:e3:01:15:5d:f5:2a:38:a1:e1:e5:
                    92:6a:53:b5:81:91:56:76:c9:1b:ac:80:05:cd:55:
                    cc:04:ed:ea:ce:90:92:07:2f:8d:f0:ec:60:a7:8f:
                    68:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:28:0C:D2:CC:ED:1F:DD:07:D2:E1:8A:05:52:9A:30:6A:6F:77:8E
            X509v3 Authority Key Identifier:
                keyid:C3:85:20:1A:33:B5:27:C6:44:AA:D5:AE:CD:37:82:C6:A8:C2:F5:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:3b:dc:c7:5e:58:23:ab:10:8a:68:0a:04:d0:dd:80:6d:a6:
         7b:72:e5:04:90:f9:d0:e2:5c:ab:f6:f8:0f:ce:1b:3e:8e:d0:
         41:b5:b6:86:f4:55:c8:02:2d:3b:e4:e3:ea:f2:67:93:86:f7:
         eb:0e:58:17:cb:31:74:66:d7:ca:c7:24:ea:7c:25:0d:75:3a:
         1d:e6:63:2b:b9:05:e3:8b:91:b3:4c:89:0c:0a:0d:7e:21:ff:
         eb:c1:bf:b6:44:0b:85:2f:54:aa:a8:6a:55:32:64:32:45:6c:
         93:a7:9b:16:6c:01:79:b5:04:ef:ea:19:f8:49:fb:b5:33:bd:
         d7:91:fc:d0:56:52:9f:9c:31:ab:f1:7a:61:fd:db:af:fa:92:
         84:50:54:49:ca:ba:0c:4a:80:d3:38:5b:5c:91:0e:2e:cb:30:
         60:05:b4:95:d6:42:7f:d9:5b:f6:5d:53:ae:cd:a0:7f:13:da:
         69:57:2c:58:57:e6:73:6c:8f:9c:f1:3d:50:38:49:71:cf:c7:
         34:3b:79:f0:8e:c3:4e:d2:4e:45:cb:8e:a3:b2:7f:f1:ff:32:
         3d:ba:67:a7:d8:25:0b:60:77:a0:8f:75:09:db:3e:b9:82:2d:
         2e:20:41:1a:b5:30:d2:03:24:9b:54:e6:44:5c:06:54:6a:2f:
         b9:84:a4:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUnEVQa7uUi6Cv6toD3voRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzODUyMDFhMzNiNTI3YzY0NGFhZDVhZWNkMzc4MmM2YThj
MmY1MWYwHhcNMjQxMTIyMTYwMjI3WhcNMjQxMTIzMTYwMjI3WjAzMTEwLwYDVQQD
EygyMDI4MGNkMmNjZWQxZmRkMDdkMmUxOGEwNTUyOWEzMDZhNmY3NzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKOWCIEMqNAWTeUFkk6bUnoHvf5O
WeKthFO2oNcSCBSn9QjUJZwUqNqNPaSo1GU3TU+ehS4162ra7omm4GckFAGGHC2n
uChNyLxvqJosRmow0x+thbN50SjjSzPJdWGuiR3nG2L3r16AzMofaWalSWJAvyCj
Jua8FKQfJRIfjVJFDHQmCzhs+OEwDgCIL35vDHLpIjrnlf1ETXQSBZqUp0Xwmz4M
KTDm47IrnNFjxQK8uCAPSuwivdHs8JyGN+gjGLTAK/yRVUcC6ihbwPzeE9FAWsL1
4+MBFV31Kjih4eWSalO1gZFWdskbrIAFzVXMBO3qzpCSBy+N8Oxgp49oPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAoDNLM7R/dB9LhigVSmjBqb3eOMB8GA1UdIwQY
MBaAFMOFIBoztSfGRKrVrs03gsaowvUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzRVZ0dqTzFKOFpFcXRXdXpUZUN4cWpDOVI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82ZDY2M2EtNDUzOC00Y2JmLWFkMWYt
ODU3NTgwZmM2MTY3LzEvdzRVZ0dqTzFKOFpFcXRXdXpUZUN4cWpDOVI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS82ZDY2M2EtNDUzOC00Y2JmLWFkMWYtODU3NTgwZmM2MTY3
LzEvdzRVZ0dqTzFKOFpFcXRXdXpUZUN4cWpDOVI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqzvcx15Y
I6sQimgKBNDdgG2me3LlBJD50OJcq/b4D84bPo7QQbW2hvRVyAItO+Tj6vJnk4b3
6w5YF8sxdGbXysck6nwlDXU6HeZjK7kF44uRs0yJDAoNfiH/68G/tkQLhS9Uqqhq
VTJkMkVsk6ebFmwBebUE7+oZ+En7tTO915H80FZSn5wxq/F6Yf3br/qShFBUScq6
DEqA0zhbXJEOLsswYAW0ldZCf9lb9l1Trs2gfxPaaVcsWFfmc2yPnPE9UDhJcc/H
NDt58I7DTtJORcuOo7J/8f8yPbpnp9glC2B3oI91Cds+uYItLiBBGrUw0gMkm1Tm
RFwGVGovuYSk8A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:12:21 2024 by rpki-client on console-fra.rpki-client.org