Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
File:                     G57Ppx7--bsb_nsuQCFc2lsjHl0.mft (raw, json)
Hash identifier:          rXUDMKxK2/cdEe/4GfUYF9yqG7/lVemKPovMJqy9svg=
Subject key identifier:   74:6C:85:CF:FC:F6:6C:6B:05:A9:80:DA:39:3D:DF:D8:2F:D2:E7:C9
Authority key identifier: 1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D
Certificate issuer:       /CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d
Certificate serial:       019369DA7BF1FAC86CBCDC78554552991D2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 19:02:26 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:26 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:26 +0000
Files and hashes:         1: 95kfmjeYu601tVD7G5VIwEGLvN8.roa (hash: LncIH1GdBz4gKXhc1rjsKzlF4Bo9rfgpySezcZ0FWHw=)
                          2: G57Ppx7--bsb_nsuQCFc2lsjHl0.crl (hash: BTrwWtOU23KQExM26KDlZr6fsOOTXkyYeNtug2miTT0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:7b:f1:fa:c8:6c:bc:dc:78:55:45:52:99:1d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d
        Validity
            Not Before: Nov 26 19:02:26 2024 GMT
            Not After : Nov 27 19:02:26 2024 GMT
        Subject: CN=746c85cffcf66c6b05a980da393ddfd82fd2e7c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5b:39:13:2b:6b:85:67:e3:ea:08:6c:67:bd:
                    94:84:2f:f3:30:dc:7f:db:11:57:51:0e:be:bb:68:
                    ee:0d:f1:e6:b2:9f:5b:b3:1f:a1:2d:ca:28:37:92:
                    1e:4d:0c:11:e5:f8:5e:19:0c:15:cb:54:10:70:19:
                    9a:6c:c2:1d:e6:d5:06:c7:34:e2:83:f5:e6:fa:b9:
                    c1:a7:bc:e8:41:11:52:b1:2f:96:d8:ca:fa:3d:3e:
                    99:e5:20:d7:57:ea:68:80:11:92:50:7d:3f:6b:36:
                    33:dc:c1:de:d9:31:e9:53:bc:21:b2:56:79:aa:81:
                    8f:dc:21:40:06:0d:e9:bf:fe:82:8e:ee:49:0c:ca:
                    5b:7c:1f:55:f1:8d:a1:f8:6a:52:b0:bc:b9:3a:c2:
                    99:7a:6b:f4:f1:b8:f9:70:dd:0d:cb:34:d5:b6:85:
                    73:1c:02:44:57:b2:75:ff:61:bc:73:ac:0f:88:7c:
                    3f:28:2f:5e:11:b2:ff:ba:4f:a7:4f:d3:4a:fa:14:
                    2c:d7:c8:69:af:6b:61:1d:bf:b8:22:c9:de:0c:4a:
                    dd:0b:d8:e3:23:55:24:4d:5e:bb:2b:6c:c4:24:b3:
                    68:4d:5a:b4:12:ca:35:f1:39:ac:60:3b:c8:51:ce:
                    3d:35:70:3d:b8:0c:77:09:44:c1:89:34:a2:ad:2b:
                    b6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:6C:85:CF:FC:F6:6C:6B:05:A9:80:DA:39:3D:DF:D8:2F:D2:E7:C9
            X509v3 Authority Key Identifier:
                keyid:1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:c1:22:7b:ed:88:fb:47:dc:e1:f9:dd:69:88:b9:96:27:68:
         30:68:16:d6:b0:a6:a7:45:e1:68:33:92:cb:ca:1d:af:d6:26:
         f6:b1:d2:cf:1e:92:0d:2b:89:ee:96:8b:2e:cd:81:99:78:92:
         ee:63:36:1a:b9:f0:67:b1:9c:cb:74:07:b6:00:ce:4c:dc:84:
         d0:63:48:95:f2:d2:07:93:bd:92:a2:f0:27:de:48:1f:88:8f:
         bb:d2:62:9c:58:46:4f:ef:ba:7a:38:e4:94:de:2a:6b:c1:f8:
         63:44:27:4c:bb:e4:07:4c:99:4f:aa:dc:bc:b9:8f:9f:b9:78:
         19:27:d5:ac:f0:0e:b8:b7:b6:c5:83:79:0c:17:28:67:3e:57:
         e0:d8:e6:3c:d6:ac:3b:5d:26:a1:49:6a:ef:ed:9f:de:82:3c:
         1f:5a:9f:cb:19:fa:1d:c3:aa:21:11:d5:93:39:12:20:fc:0a:
         fa:a7:31:cf:d8:c3:59:33:45:7b:13:e9:6a:67:ba:41:cb:cf:
         de:07:79:f5:63:8e:76:3b:ee:0a:54:e0:c7:e7:bb:90:e2:85:
         dc:d9:72:14:74:04:e4:b1:ab:24:ef:7e:8a:57:2f:3e:36:7f:
         56:c5:c6:4f:3e:64:28:bf:88:68:f4:f6:d1:1d:9e:4d:33:8f:
         a8:db:93:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2nvx+shsvNx4VUVSmR0uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOWVjZmE3MWVmZWY5YmIxYmZlN2IyZTQwMjE1Y2RhNWIy
MzFlNWQwHhcNMjQxMTI2MTkwMjI2WhcNMjQxMTI3MTkwMjI2WjAzMTEwLwYDVQQD
Eyg3NDZjODVjZmZjZjY2YzZiMDVhOTgwZGEzOTNkZGZkODJmZDJlN2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Fs5EytrhWfj6ghsZ72UhC/zMNx/
2xFXUQ6+u2juDfHmsp9bsx+hLcooN5IeTQwR5fheGQwVy1QQcBmabMId5tUGxzTi
g/Xm+rnBp7zoQRFSsS+W2Mr6PT6Z5SDXV+pogBGSUH0/azYz3MHe2THpU7whslZ5
qoGP3CFABg3pv/6Cju5JDMpbfB9V8Y2h+GpSsLy5OsKZemv08bj5cN0NyzTVtoVz
HAJEV7J1/2G8c6wPiHw/KC9eEbL/uk+nT9NK+hQs18hpr2thHb+4IsneDErdC9jj
I1UkTV67K2zEJLNoTVq0Eso18TmsYDvIUc49NXA9uAx3CUTBiTSirSu2AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRshc/89mxrBamA2jk939gv0ufJMB8GA1UdIwQY
MBaAFBuez6ce/vm7G/57LkAhXNpbIx5dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzU3UHB4Ny0tYnNiX25zdVFDRmMybHNqSGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9lZDE2MDktMTA4Ni00N2I0LWE0OWQt
ZjEwZDI2ZTNjM2RmLzEvRzU3UHB4Ny0tYnNiX25zdVFDRmMybHNqSGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9lZDE2MDktMTA4Ni00N2I0LWE0OWQtZjEwZDI2ZTNjM2Rm
LzEvRzU3UHB4Ny0tYnNiX25zdVFDRmMybHNqSGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFcEie+2I
+0fc4fndaYi5lidoMGgW1rCmp0XhaDOSy8odr9Ym9rHSzx6SDSuJ7paLLs2BmXiS
7mM2GrnwZ7Gcy3QHtgDOTNyE0GNIlfLSB5O9kqLwJ95IH4iPu9JinFhGT++6ejjk
lN4qa8H4Y0QnTLvkB0yZT6rcvLmPn7l4GSfVrPAOuLe2xYN5DBcoZz5X4NjmPNas
O10moUlq7+2f3oI8H1qfyxn6HcOqIRHVkzkSIPwK+qcxz9jDWTNFexPpame6QcvP
3gd59WOOdjvuClTgx+e7kOKF3NlyFHQE5LGrJO9+ilcvPjZ/VsXGTz5kKL+IaPT2
0R2eTTOPqNuT5Q==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:48:31 2024 by rpki-client on console-fra.rpki-client.org