Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
File:                     LcgdJMRd2qNF-QZN4p-8p7EppSw.mft (raw, json)
Hash identifier:          PMioar4HcCvNLhKbgRSW6RiIqb87XUPcaAg+V2+7A4s=
Subject key identifier:   68:7D:20:F5:7E:9D:7C:1A:23:DF:AE:08:DC:2A:F7:9A:41:ED:18:5D
Authority key identifier: 2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
Certificate issuer:       /CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Certificate serial:       0193512B71C9029C875637987D8DA390C5C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
Manifest number:          137E
Signing time:             Fri 22 Nov 2024 00:00:21 +0000
Manifest this update:     Fri 22 Nov 2024 00:00:21 +0000
Manifest next update:     Sat 23 Nov 2024 00:00:21 +0000
Files and hashes:         1: 6sk2OJhPEnOZW0GRzaUcINd0QDg.roa (hash: ySCfqUj3PzutAnGYMbFl6WMDMiz1+PO9goMXVg60lPA=)
                          2: 8NDcsGFKqiy9Kp-rBYyMfFbVAVE.roa (hash: nkqdI5lHisS6ftdE3qxxIvIHAPzQFDEBajGZv33Tnfs=)
                          3: LcgdJMRd2qNF-QZN4p-8p7EppSw.crl (hash: yT2LSy6PeIH+cdnEq3aSKeqpn+FD+GiwlWfeNb+YNl4=)
                          4: Noz5wr3epbu05Vd2T5en_KUnUJo.roa (hash: n8bHjw8LWs5a7wONCE3PSq7l7lZkIRnYqzaLOdDwG+A=)
                          5: j5Z0DgMrisdF1J7_CfAb2dVNw1w.roa (hash: 92xiyLKyZYL58Kd2ue9ZuxY7WIJpGW0rYnESyDEAxCI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2b:71:c9:02:9c:87:56:37:98:7d:8d:a3:90:c5:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
        Validity
            Not Before: Nov 22 00:00:21 2024 GMT
            Not After : Nov 23 00:00:21 2024 GMT
        Subject: CN=687d20f57e9d7c1a23dfae08dc2af79a41ed185d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ef:a7:ff:59:97:0b:02:66:7e:22:f1:cf:5e:
                    bc:86:2d:c1:59:1d:30:0e:b8:17:ac:8b:a7:23:eb:
                    aa:bc:df:4b:fd:c7:f6:78:91:7e:6c:32:95:94:19:
                    b5:21:b4:b0:d4:ee:6a:57:4b:9f:07:dc:b5:09:24:
                    f4:0b:53:fc:30:7f:14:d3:9d:ec:fa:27:79:b7:ae:
                    bb:84:09:3f:a3:9e:d0:18:02:77:02:e8:d0:e0:ca:
                    3a:4a:16:35:71:00:01:6b:09:e8:df:1d:3c:a4:df:
                    73:a7:de:89:7a:5d:19:58:1c:d2:a8:52:8c:d5:13:
                    d6:17:54:41:f3:c8:0a:b2:fe:19:51:ea:62:f9:c9:
                    f5:51:98:4a:34:13:0b:78:66:1e:7a:e0:d2:b0:3f:
                    36:96:7e:29:aa:58:ed:02:ec:f0:fb:ff:64:ec:f2:
                    15:08:3c:6a:0a:56:28:4a:a6:27:fa:ae:54:0b:21:
                    d3:c2:bd:81:27:34:7c:e0:0d:dd:48:3a:0d:57:64:
                    aa:52:06:89:a3:c9:c7:3c:4a:2b:bd:94:20:dd:ee:
                    a3:0a:07:8d:48:21:c8:82:1f:0b:52:98:71:99:95:
                    b4:fe:e3:9a:56:d9:78:0d:9b:ed:d9:9c:26:05:c9:
                    5c:a9:72:5f:d0:36:55:9b:3a:ee:b1:1f:5a:85:e4:
                    42:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7D:20:F5:7E:9D:7C:1A:23:DF:AE:08:DC:2A:F7:9A:41:ED:18:5D
            X509v3 Authority Key Identifier:
                keyid:2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:69:c2:86:84:03:d5:07:ab:f5:56:2e:e9:b6:01:1c:da:89:
         63:28:5b:85:2f:0a:56:12:9f:3a:f6:9c:0a:2a:21:f5:36:2a:
         8a:4e:5f:e2:66:98:43:c2:34:be:20:e8:b2:14:f2:e4:e3:6b:
         ed:aa:e7:eb:fb:ab:fd:ca:90:e4:dc:5f:11:f2:eb:19:b9:cc:
         cb:ab:93:09:db:3d:93:83:5a:4c:fb:82:db:84:bf:c5:44:b8:
         26:79:5e:33:ad:e9:13:11:e6:78:0e:92:c9:b7:cd:4c:b4:b7:
         2c:7f:f0:54:f5:bf:13:19:43:f6:75:8e:fc:2c:2c:70:f8:8a:
         e5:45:8a:9b:79:85:45:59:7a:10:1b:19:1c:a2:25:6c:0c:b9:
         bb:32:83:da:8d:9d:08:d3:81:33:ae:2a:50:a0:3c:b5:10:9e:
         3f:25:34:39:3a:37:62:22:84:4f:86:c0:0b:5a:fd:75:18:e3:
         6f:48:04:25:4b:26:d8:7e:0f:4c:4d:88:41:ba:67:9c:25:0a:
         00:03:61:e8:22:56:82:5c:86:4d:a6:e8:66:e0:bd:d8:a8:62:
         78:b2:32:65:c9:5b:23:0e:28:e0:b3:e1:54:ac:96:12:af:ed:
         76:22:c8:ae:b0:03:5d:4a:f0:38:2e:45:0f:4e:68:a2:f5:51:
         12:de:9f:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRK3HJApyHVjeYfY2jkMXBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkYzgxZDI0YzQ1ZGRhYTM0NWY5MDY0ZGUyOWZiY2E3YjEy
OWE1MmMwHhcNMjQxMTIyMDAwMDIxWhcNMjQxMTIzMDAwMDIxWjAzMTEwLwYDVQQD
Eyg2ODdkMjBmNTdlOWQ3YzFhMjNkZmFlMDhkYzJhZjc5YTQxZWQxODVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje+n/1mXCwJmfiLxz168hi3BWR0w
DrgXrIunI+uqvN9L/cf2eJF+bDKVlBm1IbSw1O5qV0ufB9y1CST0C1P8MH8U053s
+id5t667hAk/o57QGAJ3AujQ4Mo6ShY1cQABawno3x08pN9zp96Jel0ZWBzSqFKM
1RPWF1RB88gKsv4ZUepi+cn1UZhKNBMLeGYeeuDSsD82ln4pqljtAuzw+/9k7PIV
CDxqClYoSqYn+q5UCyHTwr2BJzR84A3dSDoNV2SqUgaJo8nHPEorvZQg3e6jCgeN
SCHIgh8LUphxmZW0/uOaVtl4DZvt2ZwmBclcqXJf0DZVmzrusR9aheRCsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGh9IPV+nXwaI9+uCNwq95pB7RhdMB8GA1UdIwQY
MBaAFC3IHSTEXdqjRfkGTeKfvKexKaUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGNnZEpNUmQycU5GLVFaTjRwLThwN0VwcFN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iZjNkYjUtYTMzZi00MzExLWFjZDkt
MmZjYzBiNzQ5YjMyLzEvTGNnZEpNUmQycU5GLVFaTjRwLThwN0VwcFN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9iZjNkYjUtYTMzZi00MzExLWFjZDktMmZjYzBiNzQ5YjMy
LzEvTGNnZEpNUmQycU5GLVFaTjRwLThwN0VwcFN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHGnChoQD
1Qer9VYu6bYBHNqJYyhbhS8KVhKfOvacCioh9TYqik5f4maYQ8I0viDoshTy5ONr
7arn6/ur/cqQ5NxfEfLrGbnMy6uTCds9k4NaTPuC24S/xUS4JnleM63pExHmeA6S
ybfNTLS3LH/wVPW/ExlD9nWO/CwscPiK5UWKm3mFRVl6EBsZHKIlbAy5uzKD2o2d
CNOBM64qUKA8tRCePyU0OTo3YiKET4bAC1r9dRjjb0gEJUsm2H4PTE2IQbpnnCUK
AANh6CJWglyGTaboZuC92KhieLIyZclbIw4o4LPhVKyWEq/tdiLIrrADXUrwOC5F
D05oovVREt6fpQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:42:31 2024 by rpki-client on console-fra.rpki-client.org