Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
File:                     TlyvXlSV9UsDnx0PJHERJGfJeRw.mft (raw, json)
Hash identifier:          twSA6EAkQcjSSNIXz9cn5VLVvssTfkOa5B3aS2h1WMU=
Subject key identifier:   FA:93:61:66:F6:05:E7:07:0D:A6:17:0D:93:D8:62:DE:BB:6D:71:A7
Authority key identifier: 4E:5C:AF:5E:54:95:F5:4B:03:9F:1D:0F:24:71:11:24:67:C9:79:1C
Certificate issuer:       /CN=4e5caf5e5495f54b039f1d0f2471112467c9791c
Certificate serial:       01936933B951819A56AF4A7FBC93364CDAF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
Manifest number:          137C
Signing time:             Tue 26 Nov 2024 16:00:17 +0000
Manifest this update:     Tue 26 Nov 2024 16:00:17 +0000
Manifest next update:     Wed 27 Nov 2024 16:00:17 +0000
Files and hashes:         1: TlyvXlSV9UsDnx0PJHERJGfJeRw.crl (hash: Kijl8xwyxAjd825vG+fzrmd1o2YT2WjNzysp6kmbgO8=)
                          2: f4H3r4NrA132mPbNIypSh4LY2wQ.roa (hash: PLB89yuiKEc1cL7xwcN2E9vN5v20DRPFhJt+vibPmi8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:33:b9:51:81:9a:56:af:4a:7f:bc:93:36:4c:da:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e5caf5e5495f54b039f1d0f2471112467c9791c
        Validity
            Not Before: Nov 26 16:00:17 2024 GMT
            Not After : Nov 27 16:00:17 2024 GMT
        Subject: CN=fa936166f605e7070da6170d93d862debb6d71a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1c:82:be:16:be:32:48:12:8d:59:37:d2:51:
                    11:dd:ce:84:c7:5a:93:68:0b:6d:8f:0e:04:ed:d8:
                    dd:c7:4d:61:67:56:6c:92:48:1a:42:c3:cc:88:e2:
                    f4:41:38:ba:3f:39:d9:57:a3:73:40:92:cc:89:a2:
                    74:9e:e6:71:36:33:07:4c:ec:9c:c8:b9:8c:3f:da:
                    34:10:e3:d0:e1:40:46:0b:de:1f:fb:20:35:f4:6d:
                    67:e4:97:06:7c:63:73:ea:00:58:17:09:17:05:5c:
                    64:b6:ad:79:2e:52:d9:70:4a:a8:a5:33:3b:75:ea:
                    ed:8a:f5:06:c5:ca:f5:3c:39:1b:b6:4d:31:a3:23:
                    a6:61:fb:69:9d:f4:3f:05:17:ae:1d:f3:97:28:ca:
                    76:d7:bb:4a:73:61:89:12:33:99:10:e6:a4:7a:12:
                    12:4e:4e:fd:d3:f6:18:ab:9d:f7:76:ec:41:76:67:
                    28:ec:38:52:66:0e:59:0b:42:25:fe:ab:ef:32:86:
                    d6:77:d6:04:ca:08:e2:5e:28:51:6e:c1:26:91:d7:
                    79:55:5a:03:8c:30:8a:3c:79:eb:01:88:ab:43:5a:
                    c4:4f:c0:f7:14:a2:70:57:99:2d:66:28:28:c8:60:
                    69:7a:e5:80:34:13:bd:ec:41:e5:d9:e2:f2:77:08:
                    0f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:93:61:66:F6:05:E7:07:0D:A6:17:0D:93:D8:62:DE:BB:6D:71:A7
            X509v3 Authority Key Identifier:
                keyid:4E:5C:AF:5E:54:95:F5:4B:03:9F:1D:0F:24:71:11:24:67:C9:79:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:4c:05:22:f8:21:7c:30:90:1b:e8:33:ed:39:c5:d0:1d:61:
         ab:f1:63:d0:d6:84:3a:55:cc:2e:ec:c1:43:7b:a9:3c:7a:31:
         ef:80:e9:20:87:1e:12:19:d0:7a:6c:85:7b:b0:13:3f:dc:76:
         a6:1b:09:70:ed:c2:57:17:ca:4c:1f:68:20:b6:05:b2:09:41:
         40:08:47:9f:3c:87:ba:99:0a:7d:a3:63:26:22:ca:44:16:3c:
         f3:26:bc:83:3a:a6:12:d0:fd:b6:3b:00:eb:e0:6f:19:c0:59:
         ea:6d:c1:90:aa:15:c0:83:5a:df:5f:19:b4:fe:c7:05:9b:9a:
         20:c7:ec:08:cb:80:bc:db:3a:1c:c1:11:b7:97:22:3e:be:fe:
         4a:61:60:f0:87:32:5d:fa:d1:a7:95:1e:06:da:db:2a:6a:b9:
         bf:58:ce:b5:09:5c:4d:f5:4b:d2:a6:a8:74:65:91:63:6d:e0:
         c5:1d:33:e4:c8:c6:b8:0e:77:26:8f:2b:01:c9:bb:55:67:6c:
         d0:56:9d:b6:f2:a3:8a:d9:52:22:b2:8b:fa:05:07:e8:b2:fe:
         0e:d4:ed:b3:5a:f3:f9:88:99:43:f1:a8:73:5a:e6:fc:83:8a:
         b8:af:2a:2f:73:b6:55:a8:02:31:d7:53:4f:98:62:db:e6:fc:
         16:2c:12:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNpM7lRgZpWr0p/vJM2TNr0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNWNhZjVlNTQ5NWY1NGIwMzlmMWQwZjI0NzExMTI0Njdj
OTc5MWMwHhcNMjQxMTI2MTYwMDE3WhcNMjQxMTI3MTYwMDE3WjAzMTEwLwYDVQQD
EyhmYTkzNjE2NmY2MDVlNzA3MGRhNjE3MGQ5M2Q4NjJkZWJiNmQ3MWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxyCvha+MkgSjVk30lER3c6Ex1qT
aAttjw4E7djdx01hZ1ZskkgaQsPMiOL0QTi6PznZV6NzQJLMiaJ0nuZxNjMHTOyc
yLmMP9o0EOPQ4UBGC94f+yA19G1n5JcGfGNz6gBYFwkXBVxktq15LlLZcEqopTM7
dertivUGxcr1PDkbtk0xoyOmYftpnfQ/BReuHfOXKMp217tKc2GJEjOZEOakehIS
Tk790/YYq533duxBdmco7DhSZg5ZC0Il/qvvMobWd9YEygjiXihRbsEmkdd5VVoD
jDCKPHnrAYirQ1rET8D3FKJwV5ktZigoyGBpeuWANBO97EHl2eLydwgPfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqTYWb2BecHDaYXDZPYYt67bXGnMB8GA1UdIwQY
MBaAFE5cr15UlfVLA58dDyRxESRnyXkcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGx5dlhsU1Y5VXNEbngwUEpIRVJKR2ZKZVJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mODk2ODUtMTE3NC00NWQ1LWE1ZGMt
MDlkYjU3NDY5YmI4LzEvVGx5dlhsU1Y5VXNEbngwUEpIRVJKR2ZKZVJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9mODk2ODUtMTE3NC00NWQ1LWE1ZGMtMDlkYjU3NDY5YmI4
LzEvVGx5dlhsU1Y5VXNEbngwUEpIRVJKR2ZKZVJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREwFIvgh
fDCQG+gz7TnF0B1hq/Fj0NaEOlXMLuzBQ3upPHox74DpIIceEhnQemyFe7ATP9x2
phsJcO3CVxfKTB9oILYFsglBQAhHnzyHupkKfaNjJiLKRBY88ya8gzqmEtD9tjsA
6+BvGcBZ6m3BkKoVwINa318ZtP7HBZuaIMfsCMuAvNs6HMERt5ciPr7+SmFg8Icy
XfrRp5UeBtrbKmq5v1jOtQlcTfVL0qaodGWRY23gxR0z5MjGuA53Jo8rAcm7VWds
0FadtvKjitlSIrKL+gUH6LL+DtTts1rz+YiZQ/Goc1rm/IOKuK8qL3O2VagCMddT
T5hi2+b8FiwS/Q==
-----END CERTIFICATE-----
Generated at Tue Nov 26 20:00:16 2024 by rpki-client on console-ams.rpki-client.org