Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
File:                     I8Aq9PWPETIK8xlpRuH86dBQyQY.mft (raw, json)
Hash identifier:          WIDztz562lCNYrL+cz5JpuetBv85gangI0oeqm47ysE=
Subject key identifier:   A9:0A:1D:50:9B:DF:1D:13:D7:C9:02:04:2C:66:E8:8E:01:38:04:79
Authority key identifier: 23:C0:2A:F4:F5:8F:11:32:0A:F3:19:69:46:E1:FC:E9:D0:50:C9:06
Certificate issuer:       /CN=23c02af4f58f11320af3196946e1fce9d050c906
Certificate serial:       01935689F95F06591C482D83E85BF27FBE68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
Manifest number:          136D
Signing time:             Sat 23 Nov 2024 01:01:42 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:42 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:42 +0000
Files and hashes:         1: I8Aq9PWPETIK8xlpRuH86dBQyQY.crl (hash: 5Lj88I9zqh7o3igusn8TroGHvf61pf8l/hrxjJ8IQ1Q=)
                          2: __NAiQxoOU06TmAgIG8WpIyYZQI.roa (hash: lzdB1R7THQGA2rYR2VxcFVl9KZA8hU2SQsUaXnMuudY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:f9:5f:06:59:1c:48:2d:83:e8:5b:f2:7f:be:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23c02af4f58f11320af3196946e1fce9d050c906
        Validity
            Not Before: Nov 23 01:01:42 2024 GMT
            Not After : Nov 24 01:01:42 2024 GMT
        Subject: CN=a90a1d509bdf1d13d7c902042c66e88e01380479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:dd:02:d1:38:7b:52:ad:b6:98:37:27:58:f2:
                    a8:70:73:11:75:9a:8e:8b:4d:57:ee:33:36:17:34:
                    f7:cc:0b:f1:0a:8c:d8:ea:1b:2b:0c:cc:c9:87:e4:
                    5c:62:f7:00:95:2a:13:41:93:90:e7:5a:fa:73:80:
                    f5:d0:ec:a0:72:8b:10:55:6e:1d:42:16:15:8f:c8:
                    6f:a3:60:0d:53:85:b8:0d:46:f2:16:06:38:eb:5b:
                    2e:89:85:bc:98:50:71:69:1c:7c:e8:7b:e7:ac:be:
                    16:f4:32:0f:81:bc:15:ff:49:3c:d4:85:1d:3a:24:
                    c9:f3:c1:63:05:74:40:14:31:d5:07:d5:68:e7:7e:
                    f1:c3:19:8a:3a:dc:8c:2f:97:60:4b:86:d8:da:cd:
                    e2:5d:ef:86:ec:2e:81:d7:c3:f1:4e:4e:d5:6d:00:
                    5c:7c:7e:cf:f1:be:98:33:1f:23:8c:90:aa:35:ab:
                    1f:a4:57:8c:a0:c0:11:c7:02:de:72:7d:9f:bd:47:
                    5f:bc:04:a2:5f:1d:d1:d2:75:db:56:18:ba:d1:37:
                    6d:de:8d:f1:40:44:ca:33:a3:b9:2d:5c:b9:50:b5:
                    dc:cc:41:6a:c0:62:e8:82:f3:ae:bb:0f:b1:2e:dc:
                    45:6d:59:2f:7e:5c:50:9a:14:c5:86:8a:e5:8d:4c:
                    d0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:0A:1D:50:9B:DF:1D:13:D7:C9:02:04:2C:66:E8:8E:01:38:04:79
            X509v3 Authority Key Identifier:
                keyid:23:C0:2A:F4:F5:8F:11:32:0A:F3:19:69:46:E1:FC:E9:D0:50:C9:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:9d:3c:64:82:67:35:f6:b5:ad:36:b8:f6:b4:13:0b:a0:75:
         84:20:d5:4a:cb:fa:91:e7:ec:91:62:33:ae:9c:82:bd:57:e9:
         b4:e5:de:e5:df:91:15:bc:a9:86:81:a4:65:67:42:b0:21:59:
         32:b6:78:74:ac:2f:bc:df:59:43:52:c5:a8:d4:84:34:69:d3:
         90:80:46:72:18:3c:8e:56:30:4e:a1:ee:93:1e:91:8e:c3:29:
         d7:ff:f1:0f:f4:5c:09:7e:2e:b2:2f:43:91:2c:de:57:86:ba:
         71:d3:42:f5:0b:cd:1e:8c:e4:36:45:22:5b:96:3c:f0:8a:0a:
         9f:63:d9:51:3e:7d:61:fc:f7:ea:dc:b9:93:e7:ff:5e:5f:3e:
         ec:3d:d6:c0:c4:f9:66:f1:c0:50:03:6c:00:99:c4:65:88:30:
         7a:a5:35:72:d3:02:ac:fa:99:a7:e3:fe:7f:6f:d5:e4:92:d4:
         fa:06:42:fd:ba:9b:c6:4a:f1:64:42:3c:75:af:af:ba:24:5b:
         60:25:ab:47:ba:af:97:98:b2:c1:c5:77:64:7b:bb:15:db:7b:
         55:ad:8d:87:07:f3:31:dd:d3:8c:60:06:da:66:89:b6:16:91:
         2f:de:ab:a1:e8:72:14:4b:7c:d2:f7:e7:a2:d2:a9:59:29:d1:
         3b:56:da:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiflfBlkcSC2D6Fvyf75oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYzAyYWY0ZjU4ZjExMzIwYWYzMTk2OTQ2ZTFmY2U5ZDA1
MGM5MDYwHhcNMjQxMTIzMDEwMTQyWhcNMjQxMTI0MDEwMTQyWjAzMTEwLwYDVQQD
EyhhOTBhMWQ1MDliZGYxZDEzZDdjOTAyMDQyYzY2ZTg4ZTAxMzgwNDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4N0C0Th7Uq22mDcnWPKocHMRdZqO
i01X7jM2FzT3zAvxCozY6hsrDMzJh+RcYvcAlSoTQZOQ51r6c4D10OygcosQVW4d
QhYVj8hvo2ANU4W4DUbyFgY461suiYW8mFBxaRx86HvnrL4W9DIPgbwV/0k81IUd
OiTJ88FjBXRAFDHVB9Vo537xwxmKOtyML5dgS4bY2s3iXe+G7C6B18PxTk7VbQBc
fH7P8b6YMx8jjJCqNasfpFeMoMARxwLecn2fvUdfvASiXx3R0nXbVhi60Tdt3o3x
QETKM6O5LVy5ULXczEFqwGLogvOuuw+xLtxFbVkvflxQmhTFhorljUzQVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkKHVCb3x0T18kCBCxm6I4BOAR5MB8GA1UdIwQY
MBaAFCPAKvT1jxEyCvMZaUbh/OnQUMkGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSThBcTlQV1BFVElLOHhscFJ1SDg2ZEJReVFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84MTA2OGMtYWVkNy00MTI3LTg4ZTQt
NjJjYjhhY2E5NjE4LzEvSThBcTlQV1BFVElLOHhscFJ1SDg2ZEJReVFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy84MTA2OGMtYWVkNy00MTI3LTg4ZTQtNjJjYjhhY2E5NjE4
LzEvSThBcTlQV1BFVElLOHhscFJ1SDg2ZEJReVFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZ08ZIJn
Nfa1rTa49rQTC6B1hCDVSsv6kefskWIzrpyCvVfptOXe5d+RFbyphoGkZWdCsCFZ
MrZ4dKwvvN9ZQ1LFqNSENGnTkIBGchg8jlYwTqHukx6RjsMp1//xD/RcCX4usi9D
kSzeV4a6cdNC9QvNHozkNkUiW5Y88IoKn2PZUT59Yfz36ty5k+f/Xl8+7D3WwMT5
ZvHAUANsAJnEZYgweqU1ctMCrPqZp+P+f2/V5JLU+gZC/bqbxkrxZEI8da+vuiRb
YCWrR7qvl5iywcV3ZHu7Fdt7Va2NhwfzMd3TjGAG2maJthaRL96roehyFEt80vfn
otKpWSnRO1baaw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:48 2024 by rpki-client on console-fra.rpki-client.org