Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
File:                     5UGkwVK194bWI9hcQUZSmc3aM4k.mft (raw, json)
Hash identifier:          T2UbJVSNAdWdos3wpqhNx6JMM7OxxzRoqEeJx+dJReg=
Subject key identifier:   04:98:2F:50:46:62:C3:01:D4:71:05:0F:91:15:5A:77:82:E1:A0:F8
Authority key identifier: E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89
Certificate issuer:       /CN=e541a4c152b5f786d623d85c41465299cdda3389
Certificate serial:       01936A7D5D36F1F80F6A3BDDD6172F003F82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
Manifest number:          137D
Signing time:             Tue 26 Nov 2024 22:00:20 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:20 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:20 +0000
Files and hashes:         1: 5ELd4_NlRowNtHaIESAPUWgkF1E.roa (hash: hGDKiJx+cdpI7/AYqSwBIg0pne35S3xdf1clkD84dbA=)
                          2: 5UGkwVK194bWI9hcQUZSmc3aM4k.crl (hash: cB+xCxNn8bFWNSrtWuSFED9xvADQwND/sGJKoO/tWQo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:5d:36:f1:f8:0f:6a:3b:dd:d6:17:2f:00:3f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e541a4c152b5f786d623d85c41465299cdda3389
        Validity
            Not Before: Nov 26 22:00:20 2024 GMT
            Not After : Nov 27 22:00:20 2024 GMT
        Subject: CN=04982f504662c301d471050f91155a7782e1a0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bb:f9:9c:49:e3:b4:50:3e:93:74:1b:50:fa:
                    1d:21:95:b6:60:31:7e:c7:37:41:eb:75:a7:5e:95:
                    3d:ed:92:6d:a4:ad:02:64:0b:65:23:ba:a0:1e:8e:
                    35:90:30:e1:58:35:c4:56:eb:a4:1e:7e:32:40:da:
                    45:5e:54:a3:91:35:a7:0f:b9:71:f2:15:7f:be:bf:
                    a9:57:4c:b8:8c:8a:82:30:57:b6:fc:6f:7a:04:aa:
                    22:39:ba:9d:f7:4b:85:00:f4:cb:27:d9:68:c4:72:
                    10:b4:73:42:8e:c6:aa:88:04:ee:1f:02:f2:34:f8:
                    25:98:49:86:09:82:66:57:a8:a2:29:fd:61:0c:48:
                    c0:19:ef:4c:b7:0c:53:0c:40:e7:6a:f8:ba:fb:4f:
                    86:b4:31:63:78:eb:70:33:1d:2d:5a:f0:c3:9f:b6:
                    d8:d9:81:fe:92:bb:24:6b:c9:63:78:1d:88:e5:03:
                    18:67:e0:d1:6d:25:06:34:0d:9c:af:36:9f:85:87:
                    f2:25:6e:ab:f1:40:c9:13:67:ad:4d:95:5e:71:14:
                    08:d5:23:df:08:85:f1:77:ef:ff:45:75:ce:5d:ef:
                    4e:81:44:94:64:7d:08:e2:3e:e5:09:da:e1:a6:3e:
                    02:09:0f:c5:ad:09:52:09:c2:b5:6a:30:75:e0:82:
                    d3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:98:2F:50:46:62:C3:01:D4:71:05:0F:91:15:5A:77:82:E1:A0:F8
            X509v3 Authority Key Identifier:
                keyid:E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:13:5f:cb:8f:c2:fb:dd:66:4d:76:d3:3f:b2:00:2e:25:c6:
         f4:54:57:de:52:9b:e8:60:8b:27:b3:c5:4c:50:ed:58:5c:a9:
         fc:4f:23:61:35:f0:e6:4b:0e:8b:9a:1c:f8:fe:3f:36:cc:d3:
         ea:ee:20:13:4c:10:ee:a9:1b:19:5b:ec:17:ee:1f:4c:a4:8f:
         da:1c:02:7c:f1:45:7b:fc:6c:48:66:fd:75:71:f3:a8:4d:25:
         cd:4a:bb:ba:ed:f1:f9:e9:7e:94:f9:59:17:bd:31:b5:00:df:
         1d:ff:3a:46:d8:92:f7:15:77:34:76:31:31:b3:69:28:5d:46:
         f3:14:29:45:ab:ac:65:9a:01:d7:95:c8:e0:0d:45:b8:0b:1c:
         91:10:81:36:f4:05:45:11:d2:b7:4e:62:b5:53:7d:14:31:64:
         38:bc:05:b0:7b:12:c7:29:51:f5:89:94:1d:d0:62:7d:5b:40:
         db:8e:94:29:a6:95:33:e1:f5:ee:d7:1d:e5:c4:33:7d:e8:8f:
         26:95:65:1f:23:ae:be:e9:9f:28:18:8e:72:0b:9e:7d:8a:38:
         57:ba:0b:3b:ae:cf:2b:8e:03:50:de:17:53:ff:da:c5:21:ce:
         d5:fa:e3:fa:ba:f5:68:42:5b:07:99:45:42:c6:b6:96:d5:c4:
         f5:2a:be:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqfV028fgPajvd1hcvAD+CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NDFhNGMxNTJiNWY3ODZkNjIzZDg1YzQxNDY1Mjk5Y2Rk
YTMzODkwHhcNMjQxMTI2MjIwMDIwWhcNMjQxMTI3MjIwMDIwWjAzMTEwLwYDVQQD
EygwNDk4MmY1MDQ2NjJjMzAxZDQ3MTA1MGY5MTE1NWE3NzgyZTFhMGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbv5nEnjtFA+k3QbUPodIZW2YDF+
xzdB63WnXpU97ZJtpK0CZAtlI7qgHo41kDDhWDXEVuukHn4yQNpFXlSjkTWnD7lx
8hV/vr+pV0y4jIqCMFe2/G96BKoiObqd90uFAPTLJ9loxHIQtHNCjsaqiATuHwLy
NPglmEmGCYJmV6iiKf1hDEjAGe9MtwxTDEDnavi6+0+GtDFjeOtwMx0tWvDDn7bY
2YH+krska8ljeB2I5QMYZ+DRbSUGNA2crzafhYfyJW6r8UDJE2etTZVecRQI1SPf
CIXxd+//RXXOXe9OgUSUZH0I4j7lCdrhpj4CCQ/FrQlSCcK1ajB14ILTIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASYL1BGYsMB1HEFD5EVWneC4aD4MB8GA1UdIwQY
MBaAFOVBpMFStfeG1iPYXEFGUpnN2jOJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVVHa3dWSzE5NGJXSTloY1FVWlNtYzNhTTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kNzEyNjktNGI1Ni00NTcyLWE3MTEt
ZDg0ZWNiMjUwNWM0LzEvNVVHa3dWSzE5NGJXSTloY1FVWlNtYzNhTTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9kNzEyNjktNGI1Ni00NTcyLWE3MTEtZDg0ZWNiMjUwNWM0
LzEvNVVHa3dWSzE5NGJXSTloY1FVWlNtYzNhTTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBNfy4/C
+91mTXbTP7IALiXG9FRX3lKb6GCLJ7PFTFDtWFyp/E8jYTXw5ksOi5oc+P4/NszT
6u4gE0wQ7qkbGVvsF+4fTKSP2hwCfPFFe/xsSGb9dXHzqE0lzUq7uu3x+el+lPlZ
F70xtQDfHf86RtiS9xV3NHYxMbNpKF1G8xQpRausZZoB15XI4A1FuAsckRCBNvQF
RRHSt05itVN9FDFkOLwFsHsSxylR9YmUHdBifVtA246UKaaVM+H17tcd5cQzfeiP
JpVlHyOuvumfKBiOcguefYo4V7oLO67PK44DUN4XU//axSHO1frj+rr1aEJbB5lF
Qsa2ltXE9Sq+cQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:32:54 2024 by rpki-client on console-ams.rpki-client.org