Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
File:                     dhrP1knI7q2FUZQngfoW9o29EPM.mft (raw, json)
Hash identifier:          lKEgdPZJ0as2PTatPY5muuIcwzuNmux+fmBlgJ25Doc=
Subject key identifier:   01:DA:3F:E9:A9:CF:DA:36:7E:7C:16:16:8E:E7:D4:5B:AC:53:12:46
Authority key identifier: 76:1A:CF:D6:49:C8:EE:AD:85:51:94:27:81:FA:16:F6:8D:BD:10:F3
Certificate issuer:       /CN=761acfd649c8eead8551942781fa16f68dbd10f3
Certificate serial:       0193688F7EBF481514F301DE557CA11553F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 13:00:54 +0000
Manifest this update:     Tue 26 Nov 2024 13:00:54 +0000
Manifest next update:     Wed 27 Nov 2024 13:00:54 +0000
Files and hashes:         1: JfS0hqQ95p7fELV58H3e75LRK78.roa (hash: JoOQWrhx92IYoh9YHEJ4KEyoZ6vG9vQIJ+MnQ0fkZxY=)
                          2: dhrP1knI7q2FUZQngfoW9o29EPM.crl (hash: el6wFdMivHC+E6gKnb+ThWUwt4TnTPWAfexPMp7Oj20=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:8f:7e:bf:48:15:14:f3:01:de:55:7c:a1:15:53:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=761acfd649c8eead8551942781fa16f68dbd10f3
        Validity
            Not Before: Nov 26 13:00:54 2024 GMT
            Not After : Nov 27 13:00:54 2024 GMT
        Subject: CN=01da3fe9a9cfda367e7c16168ee7d45bac531246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:07:76:70:6b:61:7b:b1:82:17:22:17:57:11:
                    77:66:cf:b3:4e:81:1f:4e:fa:a6:42:b5:14:d0:d6:
                    47:84:d7:bf:0d:3a:bc:c4:3c:d0:e8:08:4a:36:87:
                    71:e7:44:19:94:ec:7b:79:35:da:8d:3e:9c:55:73:
                    c0:cf:be:4c:01:6d:11:0f:fe:d2:df:8f:cc:17:29:
                    10:82:b9:f2:ab:03:ea:41:7c:fb:2a:67:51:fa:42:
                    96:2b:4b:0f:84:ce:62:c9:2b:6f:63:1b:a7:c5:15:
                    4d:a9:62:c1:fb:e3:0b:77:4e:fd:d9:fb:7a:89:e3:
                    20:8b:77:b4:da:ba:b4:dd:cd:8e:2f:b5:8c:fb:5a:
                    e9:85:2b:34:b9:a8:d2:9b:41:91:61:4f:38:46:46:
                    ee:c0:bc:33:8a:99:ce:ae:74:9b:91:82:3a:81:24:
                    cc:9b:1d:58:ab:c8:2e:66:a6:17:5a:3f:3d:6d:db:
                    37:86:09:bd:d8:1f:96:3a:43:5c:4c:36:21:f5:35:
                    75:81:ba:15:11:0c:f8:e0:8c:77:eb:a1:28:79:bc:
                    5e:5d:c2:98:f9:e0:5c:b6:18:13:22:a5:e6:a6:b9:
                    ac:3b:85:4c:18:7b:99:06:2c:53:33:de:7e:e5:87:
                    c9:17:0a:bc:fd:4b:63:23:f6:1e:ad:5d:43:51:27:
                    ef:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DA:3F:E9:A9:CF:DA:36:7E:7C:16:16:8E:E7:D4:5B:AC:53:12:46
            X509v3 Authority Key Identifier:
                keyid:76:1A:CF:D6:49:C8:EE:AD:85:51:94:27:81:FA:16:F6:8D:BD:10:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:77:cd:a2:ad:95:39:60:40:15:d3:fa:bf:03:b4:71:af:49:
         2d:9f:3b:a5:af:c6:42:05:67:e1:ce:91:41:b6:1b:b5:65:8c:
         df:81:fc:bb:3f:be:ff:60:0d:e9:b0:37:42:a1:14:b4:e4:c5:
         1e:11:a6:e4:57:28:8a:84:2f:30:50:d9:b8:e3:a4:30:d7:b7:
         17:13:d9:63:95:48:80:4e:e4:c3:9d:23:f6:b7:0a:a8:ab:0e:
         63:0c:c4:59:44:ce:1f:70:b7:e1:cd:62:13:7c:fe:82:17:cc:
         77:ab:f3:06:ea:2e:ca:63:47:09:a0:44:78:bc:33:e9:ec:3f:
         22:08:a1:08:23:e0:37:bb:c9:d0:9b:e9:bb:82:c7:bb:89:31:
         33:54:f9:fa:9c:ff:b6:7e:02:6a:63:33:47:ea:74:09:32:3e:
         f0:f0:7b:45:a8:de:18:2e:09:e2:fb:b2:03:ed:fd:d4:82:b8:
         f3:43:4b:3f:03:91:60:e0:31:e0:8c:e7:98:ff:9b:41:43:fa:
         d8:6c:b8:fc:a3:38:65:ea:04:f6:e6:f0:f4:0e:49:56:0b:df:
         13:96:ce:e5:98:83:eb:3d:c9:b6:8c:08:c4:8a:22:77:8a:af:
         3d:2f:6f:4b:28:c4:cf:89:4f:c0:da:ea:e0:4a:10:9d:f7:dd:
         60:2a:23:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNoj36/SBUU8wHeVXyhFVPxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MWFjZmQ2NDljOGVlYWQ4NTUxOTQyNzgxZmExNmY2OGRi
ZDEwZjMwHhcNMjQxMTI2MTMwMDU0WhcNMjQxMTI3MTMwMDU0WjAzMTEwLwYDVQQD
EygwMWRhM2ZlOWE5Y2ZkYTM2N2U3YzE2MTY4ZWU3ZDQ1YmFjNTMxMjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gd2cGthe7GCFyIXVxF3Zs+zToEf
TvqmQrUU0NZHhNe/DTq8xDzQ6AhKNodx50QZlOx7eTXajT6cVXPAz75MAW0RD/7S
34/MFykQgrnyqwPqQXz7KmdR+kKWK0sPhM5iyStvYxunxRVNqWLB++MLd0792ft6
ieMgi3e02rq03c2OL7WM+1rphSs0uajSm0GRYU84RkbuwLwzipnOrnSbkYI6gSTM
mx1Yq8guZqYXWj89bds3hgm92B+WOkNcTDYh9TV1gboVEQz44Ix366EoebxeXcKY
+eBcthgTIqXmprmsO4VMGHuZBixTM95+5YfJFwq8/UtjI/YerV1DUSfvlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHaP+mpz9o2fnwWFo7n1FusUxJGMB8GA1UdIwQY
MBaAFHYaz9ZJyO6thVGUJ4H6FvaNvRDzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGhyUDFrbkk3cTJGVVpRbmdmb1c5bzI5RVBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC82ZjkyODMtYjRkNC00NGNkLWE2OWIt
YzczMjAxZGY5OTk1LzEvZGhyUDFrbkk3cTJGVVpRbmdmb1c5bzI5RVBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC82ZjkyODMtYjRkNC00NGNkLWE2OWItYzczMjAxZGY5OTk1
LzEvZGhyUDFrbkk3cTJGVVpRbmdmb1c5bzI5RVBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXfNoq2V
OWBAFdP6vwO0ca9JLZ87pa/GQgVn4c6RQbYbtWWM34H8uz++/2AN6bA3QqEUtOTF
HhGm5FcoioQvMFDZuOOkMNe3FxPZY5VIgE7kw50j9rcKqKsOYwzEWUTOH3C34c1i
E3z+ghfMd6vzBuouymNHCaBEeLwz6ew/IgihCCPgN7vJ0Jvpu4LHu4kxM1T5+pz/
tn4CamMzR+p0CTI+8PB7RajeGC4J4vuyA+391IK480NLPwORYOAx4IznmP+bQUP6
2Gy4/KM4ZeoE9ubw9A5JVgvfE5bO5ZiD6z3JtowIxIoid4qvPS9vSyjEz4lPwNrq
4EoQnffdYCojjQ==
-----END CERTIFICATE-----
Generated at Tue Nov 26 22:23:14 2024 by rpki-client on console-ams.rpki-client.org