Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
File:                     n7edKYEQtvsxkwHrwivxgOcFR5Y.mft (raw, json)
Hash identifier:          SD8/2Lo5SVTy0qTRPqR0q5D1dzSYD9GBh0y2vnwV1ME=
Subject key identifier:   F4:AA:09:BE:BB:F0:F4:88:72:49:9F:0E:63:1E:DC:EF:50:56:19:A8
Authority key identifier: 9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96
Certificate issuer:       /CN=9fb79d298110b6fb319301ebc22bf180e7054796
Certificate serial:       019369D895456B08562B87802AEBAC84D391
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
Manifest number:          137A
Signing time:             Tue 26 Nov 2024 19:00:21 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:21 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:21 +0000
Files and hashes:         1: n7edKYEQtvsxkwHrwivxgOcFR5Y.crl (hash: 2IirdWxZDY0pkqLGL6H1AeVS2RQVeZeo7yjXkwcxlkA=)
                          2: vXjLRncvyNJJ_xlMr6_DUsnn5Hw.roa (hash: 3JzBnDR7XCTCWkPoIOh1YyVtu7gXSUa+tOBYVAqA5KM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:95:45:6b:08:56:2b:87:80:2a:eb:ac:84:d3:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb79d298110b6fb319301ebc22bf180e7054796
        Validity
            Not Before: Nov 26 19:00:21 2024 GMT
            Not After : Nov 27 19:00:21 2024 GMT
        Subject: CN=f4aa09bebbf0f48872499f0e631edcef505619a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7f:74:29:60:da:0d:f7:8e:a6:18:fc:7d:31:
                    24:f7:94:25:15:3c:d9:39:c9:68:d7:13:de:98:b3:
                    9a:56:cc:cd:e4:52:85:34:fa:3f:09:6d:e7:9c:8c:
                    0d:41:df:87:e6:4e:2b:e1:df:0e:d0:1f:d0:17:ab:
                    21:b9:aa:52:19:6f:e5:ba:21:73:a9:a0:96:c8:ed:
                    b7:f1:3c:2e:e8:e4:3f:57:9b:19:f8:e5:48:cd:ad:
                    ed:f0:01:c2:81:7c:fc:29:57:79:20:22:3b:44:ef:
                    82:f8:05:96:a5:97:04:e9:f5:fe:b1:6d:af:89:cb:
                    92:03:bb:80:72:b5:ab:73:29:07:dd:47:dc:1d:80:
                    a9:7f:c2:f7:08:c6:f9:51:64:71:93:5f:6e:37:e5:
                    7a:43:59:6d:df:35:69:a4:e0:63:9f:3a:6f:0d:81:
                    ee:9e:81:de:04:aa:ac:d2:2f:89:5c:7a:ab:d9:3f:
                    0f:de:a3:39:4f:91:95:4b:d1:5b:33:f1:52:2b:e1:
                    df:05:75:36:91:00:9f:0f:29:2b:fe:51:da:86:23:
                    27:65:4b:87:01:0c:0d:df:75:01:91:0c:01:16:dc:
                    0c:64:33:2f:41:0a:79:34:0a:08:6f:09:89:b8:f8:
                    44:1c:54:fe:2d:45:e7:d2:59:46:91:b2:cc:7a:c1:
                    96:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AA:09:BE:BB:F0:F4:88:72:49:9F:0E:63:1E:DC:EF:50:56:19:A8
            X509v3 Authority Key Identifier:
                keyid:9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:00:60:6c:83:2d:29:8a:06:18:60:ab:ee:16:5e:3a:e4:8b:
         1c:82:54:68:1e:62:af:a1:96:26:94:7b:34:4c:68:89:ce:3a:
         f9:5f:85:20:d5:6c:cf:d1:be:da:86:ae:a0:48:56:5d:0e:a0:
         e1:c2:f1:e5:82:b7:19:9a:1c:56:c9:c0:37:da:fa:75:2e:b9:
         c6:75:56:01:d7:e7:e7:51:61:a6:83:58:3f:40:57:3c:35:b0:
         bd:7c:e8:8c:6b:e4:9e:4f:46:b3:67:98:5d:ef:25:52:5f:fb:
         12:bd:e6:22:96:35:98:8b:70:f0:50:76:25:a6:67:fe:5f:77:
         49:af:94:bc:28:87:40:3e:7e:3e:0d:f0:62:e7:a6:45:f6:87:
         0b:d8:07:ed:16:e0:92:c3:e1:17:6b:6e:61:03:29:28:5c:0a:
         c2:88:8e:ac:14:12:d4:d5:02:3d:39:29:0f:08:f1:35:f0:5f:
         97:0b:e7:8d:2a:8d:36:04:91:e1:ae:fa:6f:81:39:a5:69:91:
         9f:17:e0:66:dd:b9:10:79:f3:c0:e6:3c:63:19:ce:77:c0:85:
         db:52:a4:18:38:3e:7f:8c:18:a9:8c:b1:27:ad:35:87:73:b2:
         7e:58:8e:46:67:3a:b4:5a:89:64:e6:00:64:0a:c8:5b:51:db:
         ed:10:b1:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2JVFawhWK4eAKuushNORMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYjc5ZDI5ODExMGI2ZmIzMTkzMDFlYmMyMmJmMTgwZTcw
NTQ3OTYwHhcNMjQxMTI2MTkwMDIxWhcNMjQxMTI3MTkwMDIxWjAzMTEwLwYDVQQD
EyhmNGFhMDliZWJiZjBmNDg4NzI0OTlmMGU2MzFlZGNlZjUwNTYxOWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH90KWDaDfeOphj8fTEk95QlFTzZ
Oclo1xPemLOaVszN5FKFNPo/CW3nnIwNQd+H5k4r4d8O0B/QF6shuapSGW/luiFz
qaCWyO238Twu6OQ/V5sZ+OVIza3t8AHCgXz8KVd5ICI7RO+C+AWWpZcE6fX+sW2v
icuSA7uAcrWrcykH3UfcHYCpf8L3CMb5UWRxk19uN+V6Q1lt3zVppOBjnzpvDYHu
noHeBKqs0i+JXHqr2T8P3qM5T5GVS9FbM/FSK+HfBXU2kQCfDykr/lHahiMnZUuH
AQwN33UBkQwBFtwMZDMvQQp5NAoIbwmJuPhEHFT+LUXn0llGkbLMesGWMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSqCb678PSIckmfDmMe3O9QVhmoMB8GA1UdIwQY
MBaAFJ+3nSmBELb7MZMB68Ir8YDnBUeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjdlZEtZRVF0dnN4a3dIcndpdnhnT2NGUjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lODVhNDEtYjNmZi00ZmNkLTgwYjIt
NGFhYmVjMGQzMGEzLzEvbjdlZEtZRVF0dnN4a3dIcndpdnhnT2NGUjVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9lODVhNDEtYjNmZi00ZmNkLTgwYjItNGFhYmVjMGQzMGEz
LzEvbjdlZEtZRVF0dnN4a3dIcndpdnhnT2NGUjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwBgbIMt
KYoGGGCr7hZeOuSLHIJUaB5ir6GWJpR7NExoic46+V+FINVsz9G+2oauoEhWXQ6g
4cLx5YK3GZocVsnAN9r6dS65xnVWAdfn51FhpoNYP0BXPDWwvXzojGvknk9Gs2eY
Xe8lUl/7Er3mIpY1mItw8FB2JaZn/l93Sa+UvCiHQD5+Pg3wYuemRfaHC9gH7Rbg
ksPhF2tuYQMpKFwKwoiOrBQS1NUCPTkpDwjxNfBflwvnjSqNNgSR4a76b4E5pWmR
nxfgZt25EHnzwOY8YxnOd8CF21KkGDg+f4wYqYyxJ601h3OyfliORmc6tFqJZOYA
ZArIW1Hb7RCxIg==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:31:27 2024 by rpki-client on console-ams.rpki-client.org