Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft
File:                     fciWyziZxbZIjRxGU_ruSyMVHx8.mft (raw, json)
Hash identifier:          xnPkxvtEr25Ku8OxzWcvXxxmy5yJBeE4UWpkgKQk4SI=
Subject key identifier:   3D:D9:E6:CE:57:E8:ED:73:93:29:43:97:2D:87:0E:DB:5E:07:F2:48
Authority key identifier: 7D:C8:96:CB:38:99:C5:B6:48:8D:1C:46:53:FA:EE:4B:23:15:1F:1F
Certificate issuer:       /CN=7dc896cb3899c5b6488d1c4653faee4b23151f1f
Certificate serial:       0193572E11D5A2085A5FE8AC47B74D2B875D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fciWyziZxbZIjRxGU_ruSyMVHx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 04:00:56 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:56 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:56 +0000
Files and hashes:         1: 1-blI3hsa3fXfjWoRNd2B24VJxOw.roa (hash: KeFfAY5Vn893C8qe6mFUvUdMJMvtWo+l8bksrRS60Po=)
                          2: fciWyziZxbZIjRxGU_ruSyMVHx8.crl (hash: 4at1GH5nM058GWoJCNh6FFLU15fb5qsyfXJaZITMUFI=)
                          3: oWlfLP9NHDbkXnO5xUNOqo6y6v8.roa (hash: 0Wi1aGI2WgWAOW/eOMkgkg5bYGXMlfw8cbZjd45cePk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fciWyziZxbZIjRxGU_ruSyMVHx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2e:11:d5:a2:08:5a:5f:e8:ac:47:b7:4d:2b:87:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc896cb3899c5b6488d1c4653faee4b23151f1f
        Validity
            Not Before: Nov 23 04:00:56 2024 GMT
            Not After : Nov 24 04:00:56 2024 GMT
        Subject: CN=3dd9e6ce57e8ed73932943972d870edb5e07f248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0c:84:97:d5:b9:86:6d:18:af:59:31:e7:e7:
                    99:48:08:f9:eb:aa:78:8d:40:cf:f2:41:7e:21:d9:
                    b1:62:c2:50:29:2e:fc:fa:2d:1f:ba:d3:8b:ff:e6:
                    57:d6:b4:32:16:7b:5b:59:ef:4d:26:1c:ab:b6:9c:
                    2e:3a:7b:f0:1b:70:6d:db:19:c5:76:46:30:87:d8:
                    a9:be:b5:8a:04:d9:1f:35:6c:7d:4f:fd:2b:3d:f0:
                    e8:9a:e3:e2:30:8e:20:73:c3:37:4e:02:bd:e1:02:
                    3f:37:10:09:89:47:3a:35:11:38:09:3e:ff:d9:f0:
                    a9:61:dc:96:f8:8a:24:61:4a:96:31:4f:18:9e:93:
                    76:90:a9:e2:bd:94:6d:e9:a0:e0:82:e5:53:df:6b:
                    2c:78:03:8f:5e:b9:cc:e2:a8:eb:1f:a7:c3:62:ab:
                    b9:c9:48:09:8a:a2:1d:d0:5f:70:9a:f0:fb:2d:41:
                    ca:5c:d3:0c:83:69:43:08:59:ff:48:30:0e:c0:52:
                    40:0f:10:23:9c:9d:f5:08:ac:4b:c3:a4:56:a9:be:
                    17:d9:8e:85:44:f5:2c:42:55:b3:b5:10:43:47:c5:
                    15:c2:f6:a7:fd:8c:46:c2:16:dc:05:f3:e9:ec:84:
                    06:ee:e7:88:c8:7d:ba:de:fc:bd:6b:f2:a8:f8:96:
                    49:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D9:E6:CE:57:E8:ED:73:93:29:43:97:2D:87:0E:DB:5E:07:F2:48
            X509v3 Authority Key Identifier:
                keyid:7D:C8:96:CB:38:99:C5:B6:48:8D:1C:46:53:FA:EE:4B:23:15:1F:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciWyziZxbZIjRxGU_ruSyMVHx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:68:51:a9:83:75:eb:f5:37:d8:43:b7:23:80:64:c6:d4:ac:
         01:d2:20:56:16:fc:10:c3:64:08:1e:1d:0e:6b:81:ad:46:b9:
         8d:eb:23:47:59:d0:b4:a8:5e:67:53:53:e3:16:45:14:6c:04:
         ee:32:06:a0:ef:88:ab:8d:a3:b6:58:17:35:c5:12:e0:5e:72:
         68:f6:ac:16:17:45:51:64:78:8a:04:38:3f:82:27:49:24:cb:
         ba:bd:5a:9f:d3:33:e3:94:46:21:6e:75:6c:81:4c:a1:9a:e5:
         88:a4:13:ea:b0:d8:2d:e1:fd:5f:0a:c3:8d:0f:f9:7f:6a:03:
         da:2f:05:10:e5:33:d5:81:bd:7f:ff:67:d8:75:af:c8:15:b4:
         2b:c9:e7:74:10:a9:28:35:5f:fe:0d:e1:a8:ac:9c:bc:cb:2d:
         ac:f9:0c:e0:85:8c:cc:49:fb:77:7b:a3:db:4a:3a:84:d3:b5:
         dc:d7:93:10:e6:43:b6:fa:68:2a:b6:11:82:88:74:5a:34:79:
         95:11:09:1b:0a:c6:99:d1:24:ed:e9:05:98:92:81:06:16:2e:
         db:68:db:d2:90:7b:ec:10:33:aa:41:d4:11:da:05:89:50:c4:
         44:35:b4:93:6c:86:8f:c0:95:f5:15:8a:8c:d1:3a:c0:a4:dd:
         36:8d:ad:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXLhHVoghaX+isR7dNK4ddMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYzg5NmNiMzg5OWM1YjY0ODhkMWM0NjUzZmFlZTRiMjMx
NTFmMWYwHhcNMjQxMTIzMDQwMDU2WhcNMjQxMTI0MDQwMDU2WjAzMTEwLwYDVQQD
EygzZGQ5ZTZjZTU3ZThlZDczOTMyOTQzOTcyZDg3MGVkYjVlMDdmMjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AyEl9W5hm0Yr1kx5+eZSAj566p4
jUDP8kF+IdmxYsJQKS78+i0futOL/+ZX1rQyFntbWe9NJhyrtpwuOnvwG3Bt2xnF
dkYwh9ipvrWKBNkfNWx9T/0rPfDomuPiMI4gc8M3TgK94QI/NxAJiUc6NRE4CT7/
2fCpYdyW+IokYUqWMU8YnpN2kKnivZRt6aDgguVT32sseAOPXrnM4qjrH6fDYqu5
yUgJiqId0F9wmvD7LUHKXNMMg2lDCFn/SDAOwFJADxAjnJ31CKxLw6RWqb4X2Y6F
RPUsQlWztRBDR8UVwvan/YxGwhbcBfPp7IQG7ueIyH263vy9a/Ko+JZJXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3Z5s5X6O1zkylDly2HDtteB/JIMB8GA1UdIwQY
MBaAFH3Ilss4mcW2SI0cRlP67ksjFR8fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmNpV3l6aVp4YlpJalJ4R1VfcnVTeU1WSHg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9iNTkyZGQtYzcxMS00MzAxLTliZTUt
YWVmM2ZjYmI3ODg0LzEvZmNpV3l6aVp4YlpJalJ4R1VfcnVTeU1WSHg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9iNTkyZGQtYzcxMS00MzAxLTliZTUtYWVmM2ZjYmI3ODg0
LzEvZmNpV3l6aVp4YlpJalJ4R1VfcnVTeU1WSHg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGhRqYN1
6/U32EO3I4BkxtSsAdIgVhb8EMNkCB4dDmuBrUa5jesjR1nQtKheZ1NT4xZFFGwE
7jIGoO+Iq42jtlgXNcUS4F5yaPasFhdFUWR4igQ4P4InSSTLur1an9Mz45RGIW51
bIFMoZrliKQT6rDYLeH9XwrDjQ/5f2oD2i8FEOUz1YG9f/9n2HWvyBW0K8nndBCp
KDVf/g3hqKycvMstrPkM4IWMzEn7d3uj20o6hNO13NeTEOZDtvpoKrYRgoh0WjR5
lREJGwrGmdEk7ekFmJKBBhYu22jb0pB77BAzqkHUEdoFiVDERDW0k2yGj8CV9RWK
jNE6wKTdNo2taA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:44:38 2024 by rpki-client on console-ams.rpki-client.org