Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
File:                     m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft (raw, json)
Hash identifier:          B9UO/2jgsEpY3jDAYwGr1TIfFJY5Ay4zIGQ3VyPLPCs=
Subject key identifier:   85:98:92:D6:A0:56:2F:93:D3:D3:98:24:69:0F:53:F0:BA:AC:D9:DF
Authority key identifier: 9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95
Certificate issuer:       /CN=9bd0f8b42045c73870216ce0369cbd1a80bc8995
Certificate serial:       01936AEB92299D916EC8ED25AEDD700B3305
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
Manifest number:          137C
Signing time:             Wed 27 Nov 2024 00:00:43 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:43 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:43 +0000
Files and hashes:         1: 6g_j2fUm7A4kwejTfO-oSWJvy9I.roa (hash: d84SVa5LZUsJznKxhyDWBHBszjMRAg5LUz9kNuBWqJ8=)
                          2: m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl (hash: R+c9JDtaHWd3TPK5Wgo4UNuSJseQX/5EKraFb3FWfdE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Nov 2024 00:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:92:29:9d:91:6e:c8:ed:25:ae:dd:70:0b:33:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd0f8b42045c73870216ce0369cbd1a80bc8995
        Validity
            Not Before: Nov 27 00:00:43 2024 GMT
            Not After : Nov 28 00:00:43 2024 GMT
        Subject: CN=859892d6a0562f93d3d39824690f53f0baacd9df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d7:fe:e8:fd:12:c3:74:24:ca:6c:61:b1:40:
                    87:cc:0e:0e:b1:b5:66:0d:81:64:92:4c:c1:80:cd:
                    64:d6:1f:cf:67:f4:2b:61:6e:2f:55:22:ba:44:85:
                    35:a7:e6:b1:32:e1:83:70:8a:fe:dd:c8:8f:97:4e:
                    de:0c:e2:9a:82:c2:55:30:f1:ce:be:2c:e6:4f:d0:
                    ec:34:ee:6e:c8:66:29:59:0e:e8:00:33:91:6f:a8:
                    71:bb:d0:13:7b:9e:8c:1f:59:71:79:7f:ef:1e:d6:
                    c5:ef:13:e2:40:ed:a1:2d:d9:c6:64:46:ba:af:b8:
                    06:70:5b:a1:85:cd:7c:f3:9e:6d:6f:95:4a:42:c6:
                    d5:78:41:d8:be:ef:69:87:90:05:08:f5:18:cc:0b:
                    49:d1:53:ee:dc:ff:71:cb:aa:50:0e:9f:2c:f9:59:
                    21:1d:c9:09:09:67:66:d5:af:ca:9c:82:46:af:b2:
                    8e:15:47:10:8a:85:4f:dd:7b:dd:e8:f5:42:51:3b:
                    e8:ea:82:e2:4d:b2:8c:ac:e2:79:65:82:90:00:bd:
                    9e:ad:b4:01:21:10:b1:6c:bd:58:f3:e9:12:f1:69:
                    29:f4:fc:cf:d6:db:7a:5b:cf:3a:93:6b:e1:c4:87:
                    11:54:2f:b4:cb:b7:0e:18:03:32:f2:f6:51:df:a4:
                    d2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:98:92:D6:A0:56:2F:93:D3:D3:98:24:69:0F:53:F0:BA:AC:D9:DF
            X509v3 Authority Key Identifier:
                keyid:9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:23:37:d9:f2:fb:19:c7:99:0b:75:49:58:c4:c1:68:14:26:
         47:fd:eb:87:5f:df:d2:24:9e:4f:4b:0c:15:43:21:7c:1e:5e:
         65:10:cd:df:9a:e9:a5:45:1b:5e:01:74:ee:19:9c:3e:d8:41:
         94:f8:a1:70:47:ed:d9:ce:7b:d8:03:f7:9c:4f:93:08:c2:05:
         c2:aa:27:21:79:a9:10:84:e5:9c:59:82:f7:2d:ea:d1:53:be:
         8a:0c:aa:28:29:19:ea:c3:69:6f:d1:85:79:9f:7b:53:6b:c7:
         91:55:68:9f:61:b7:16:a6:28:99:a4:65:63:50:06:ab:c3:02:
         79:f3:14:5f:7f:fc:94:a6:54:ad:ea:4d:fa:fd:c5:e3:b4:c9:
         5c:01:5c:82:19:31:76:fb:0b:62:bd:52:b8:33:07:96:4b:5c:
         13:e1:05:02:15:24:12:8c:27:60:d9:67:2e:6d:2c:ff:3f:af:
         cb:b7:93:b6:b3:eb:1b:97:d7:d5:14:5e:f1:fc:ff:bc:87:61:
         f9:a5:1e:44:d6:6c:04:ef:12:76:32:37:8f:bc:86:05:d1:9d:
         d2:19:77:bf:2b:7f:7f:35:71:b8:5b:5c:e9:a7:d6:78:6a:81:
         4a:e8:d7:99:3b:84:24:7f:2d:46:7d:cc:01:71:c8:48:60:f6:
         0d:d5:b8:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNq65IpnZFuyO0lrt1wCzMFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZDBmOGI0MjA0NWM3Mzg3MDIxNmNlMDM2OWNiZDFhODBi
Yzg5OTUwHhcNMjQxMTI3MDAwMDQzWhcNMjQxMTI4MDAwMDQzWjAzMTEwLwYDVQQD
Eyg4NTk4OTJkNmEwNTYyZjkzZDNkMzk4MjQ2OTBmNTNmMGJhYWNkOWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtf+6P0Sw3QkymxhsUCHzA4OsbVm
DYFkkkzBgM1k1h/PZ/QrYW4vVSK6RIU1p+axMuGDcIr+3ciPl07eDOKagsJVMPHO
vizmT9DsNO5uyGYpWQ7oADORb6hxu9ATe56MH1lxeX/vHtbF7xPiQO2hLdnGZEa6
r7gGcFuhhc18855tb5VKQsbVeEHYvu9ph5AFCPUYzAtJ0VPu3P9xy6pQDp8s+Vkh
HckJCWdm1a/KnIJGr7KOFUcQioVP3Xvd6PVCUTvo6oLiTbKMrOJ5ZYKQAL2erbQB
IRCxbL1Y8+kS8Wkp9PzP1tt6W886k2vhxIcRVC+0y7cOGAMy8vZR36TSoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWYktagVi+T09OYJGkPU/C6rNnfMB8GA1UdIwQY
MBaAFJvQ+LQgRcc4cCFs4DacvRqAvImVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTlENHRDQkZ4emh3SVd6Z05weTlHb0M4aVpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8wZjk2MzItOGMzZC00ZjdjLWIyMmEt
OTJmMWQ3ZGZjODE3LzEvbTlENHRDQkZ4emh3SVd6Z05weTlHb0M4aVpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8wZjk2MzItOGMzZC00ZjdjLWIyMmEtOTJmMWQ3ZGZjODE3
LzEvbTlENHRDQkZ4emh3SVd6Z05weTlHb0M4aVpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbiM32fL7
GceZC3VJWMTBaBQmR/3rh1/f0iSeT0sMFUMhfB5eZRDN35rppUUbXgF07hmcPthB
lPihcEft2c572AP3nE+TCMIFwqonIXmpEITlnFmC9y3q0VO+igyqKCkZ6sNpb9GF
eZ97U2vHkVVon2G3FqYomaRlY1AGq8MCefMUX3/8lKZUrepN+v3F47TJXAFcghkx
dvsLYr1SuDMHlktcE+EFAhUkEownYNlnLm0s/z+vy7eTtrPrG5fX1RRe8fz/vIdh
+aUeRNZsBO8SdjI3j7yGBdGd0hl3vyt/fzVxuFtc6afWeGqBSujXmTuEJH8tRn3M
AXHISGD2DdW4yA==
-----END CERTIFICATE-----
Generated at Wed Nov 27 08:43:51 2024 by rpki-client on console-fra.rpki-client.org