Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
File:                     d73XXy78JE-GoyGxUOYpNqFAKds.mft (raw, json)
Hash identifier:          6Ei1a9l2D3O4C5mAaV7lVKp9k6fj64tDynL3ARgRGNs=
Subject key identifier:   B4:D4:F1:8B:CD:1A:04:0B:D4:87:63:07:F8:3B:5F:2E:99:48:6D:DC
Authority key identifier: 77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
Certificate issuer:       /CN=77bdd75f2efc244f86a321b150e62936a14029db
Certificate serial:       0193520763C7AB2B81BEA2F484B73D91C4D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
Manifest number:          136E
Signing time:             Fri 22 Nov 2024 04:00:35 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:35 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:35 +0000
Files and hashes:         1: X4rdDQ2a2OMkbzoCoSYIgcZaNIc.roa (hash: 36WWUi/V8+U4pnfVNq7bgc7AxxM0YmNrqX3/IB4mqu8=)
                          2: d73XXy78JE-GoyGxUOYpNqFAKds.crl (hash: 4aeVDwS/83DjWfy1jl5R/r3+gbmwMSuWHkMAPmXI/4c=)
                          3: vM7X6ctK0ERBBqCtPukCyK4LtwY.roa (hash: GCknsHtAfXp+vq6hqI74nK8Od6WwrSAo7lOg8haqjyI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:63:c7:ab:2b:81:be:a2:f4:84:b7:3d:91:c4:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77bdd75f2efc244f86a321b150e62936a14029db
        Validity
            Not Before: Nov 22 04:00:35 2024 GMT
            Not After : Nov 23 04:00:35 2024 GMT
        Subject: CN=b4d4f18bcd1a040bd4876307f83b5f2e99486ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ce:d2:24:34:00:b9:0a:95:c7:dd:5d:9b:f7:
                    f2:c0:e0:40:be:76:93:5a:77:a7:01:d2:2c:6e:98:
                    f2:0d:50:28:be:9a:5d:23:29:66:87:6c:0e:b2:0e:
                    e1:60:d0:76:b3:1e:1d:fd:f8:94:c0:f6:48:94:87:
                    82:02:b8:18:37:9c:e8:98:70:54:06:80:d8:64:32:
                    56:49:59:3c:9b:83:5b:40:b8:f7:63:e1:3d:97:d2:
                    9d:97:3d:36:5c:fd:40:95:a3:de:d8:17:84:9a:9e:
                    24:dc:28:87:d9:ef:9b:ce:1f:fb:f7:cb:d2:c1:57:
                    75:43:b9:04:f5:d8:72:c1:8d:e2:d5:c2:8f:eb:66:
                    1f:d5:13:91:67:e8:bb:48:7b:1c:97:a9:ad:7a:67:
                    94:b4:e6:10:ea:b6:a4:b1:f8:31:92:08:2d:2e:54:
                    cf:94:e7:17:c3:6e:2e:ff:a1:4c:3b:c8:a5:a8:57:
                    43:c4:ff:d1:51:5e:b4:60:71:e3:aa:77:fc:ac:8d:
                    b9:bc:4f:ad:22:ae:50:81:70:53:7a:9c:ff:dd:67:
                    17:d0:b4:b8:37:6d:27:84:61:da:fc:76:c9:11:2b:
                    d1:7c:80:84:64:b3:d7:1d:fe:d0:3a:08:85:86:36:
                    1c:a9:6c:09:eb:db:1d:1a:0e:5a:76:37:24:21:ce:
                    08:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D4:F1:8B:CD:1A:04:0B:D4:87:63:07:F8:3B:5F:2E:99:48:6D:DC
            X509v3 Authority Key Identifier:
                keyid:77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:54:93:47:c2:d0:85:f0:9a:51:f0:14:aa:31:44:3a:49:4e:
         ad:cc:9d:98:41:ae:96:b0:84:6f:a7:00:5e:7d:c8:c2:70:06:
         39:5c:8e:e5:de:19:f3:6b:b6:1d:db:73:0a:5b:82:90:b6:89:
         d4:10:53:4c:1f:da:51:1c:dd:be:be:b8:11:61:52:7d:b2:66:
         9e:0c:48:da:5d:c8:48:6b:15:a6:5d:b9:48:ef:b1:e3:41:a2:
         0b:d8:ee:1a:c5:fc:8d:05:10:85:84:78:46:9b:74:eb:08:73:
         2a:1d:53:3f:c9:c1:8b:78:61:a2:b0:23:76:01:7c:ca:17:7b:
         7c:6e:d2:e4:57:8d:51:00:c3:89:34:9d:a7:c4:94:61:9b:92:
         a9:f7:be:1b:29:a3:43:96:e2:07:49:d6:13:8d:1d:17:db:85:
         f7:b6:b8:17:d8:ef:da:9b:89:28:1d:3f:0c:b1:d0:d5:16:c2:
         db:ae:13:30:ba:a1:19:92:35:b7:a7:2a:e0:d6:41:60:c1:39:
         d6:1b:70:b7:fb:0c:8c:6f:ea:73:1b:2e:10:e9:8a:86:f5:5f:
         2c:d8:1c:95:75:b7:c9:4c:dd:4f:ff:7e:c1:c3:c2:10:d2:a7:
         02:2f:d5:8e:87:27:ee:a2:ac:92:83:65:9d:93:d6:db:bc:29:
         5c:95:98:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSB2PHqyuBvqL0hLc9kcTSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YmRkNzVmMmVmYzI0NGY4NmEzMjFiMTUwZTYyOTM2YTE0
MDI5ZGIwHhcNMjQxMTIyMDQwMDM1WhcNMjQxMTIzMDQwMDM1WjAzMTEwLwYDVQQD
EyhiNGQ0ZjE4YmNkMWEwNDBiZDQ4NzYzMDdmODNiNWYyZTk5NDg2ZGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM7SJDQAuQqVx91dm/fywOBAvnaT
WnenAdIsbpjyDVAovppdIylmh2wOsg7hYNB2sx4d/fiUwPZIlIeCArgYN5zomHBU
BoDYZDJWSVk8m4NbQLj3Y+E9l9Kdlz02XP1AlaPe2BeEmp4k3CiH2e+bzh/798vS
wVd1Q7kE9dhywY3i1cKP62Yf1RORZ+i7SHscl6mtemeUtOYQ6raksfgxkggtLlTP
lOcXw24u/6FMO8ilqFdDxP/RUV60YHHjqnf8rI25vE+tIq5QgXBTepz/3WcX0LS4
N20nhGHa/HbJESvRfICEZLPXHf7QOgiFhjYcqWwJ69sdGg5adjckIc4IeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTU8YvNGgQL1IdjB/g7Xy6ZSG3cMB8GA1UdIwQY
MBaAFHe9118u/CRPhqMhsVDmKTahQCnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDczWFh5NzhKRS1Hb3lHeFVPWXBOcUZBS2RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8yNmEzNGUtMjA5NC00ZTc2LWExZWEt
MWRlZGJlN2I1YmFmLzEvZDczWFh5NzhKRS1Hb3lHeFVPWXBOcUZBS2RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8yNmEzNGUtMjA5NC00ZTc2LWExZWEtMWRlZGJlN2I1YmFm
LzEvZDczWFh5NzhKRS1Hb3lHeFVPWXBOcUZBS2RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVSTR8LQ
hfCaUfAUqjFEOklOrcydmEGulrCEb6cAXn3IwnAGOVyO5d4Z82u2HdtzCluCkLaJ
1BBTTB/aURzdvr64EWFSfbJmngxI2l3ISGsVpl25SO+x40GiC9juGsX8jQUQhYR4
Rpt06whzKh1TP8nBi3hhorAjdgF8yhd7fG7S5FeNUQDDiTSdp8SUYZuSqfe+Gymj
Q5biB0nWE40dF9uF97a4F9jv2puJKB0/DLHQ1RbC264TMLqhGZI1t6cq4NZBYME5
1htwt/sMjG/qcxsuEOmKhvVfLNgclXW3yUzdT/9+wcPCENKnAi/Vjocn7qKskoNl
nZPW27wpXJWYhA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:52:24 2024 by rpki-client on console-fra.rpki-client.org