Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
File:                     NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft (raw, json)
Hash identifier:          m5vHF8n2DP0Knl5QqTx4DibX0EplLtoCajQNrn4g3Mg=
Subject key identifier:   A0:0A:88:11:4C:B3:ED:9F:1E:5E:99:3A:5B:0E:C6:DC:F7:67:D9:6D
Authority key identifier: 35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4
Certificate issuer:       /CN=355608d078d6f31cf79be78736bf884606a17da4
Certificate serial:       019369D975F2D4CF6FEB57500B435B41D3A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
Manifest number:          137A
Signing time:             Tue 26 Nov 2024 19:01:19 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:19 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:19 +0000
Files and hashes:         1: NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl (hash: iUvttNpc+LHi6x95mjM/vp8Nvy42FKcTWoR4wbkhSog=)
                          2: yA26U698WiwzniVz1UlkhJcQMjM.roa (hash: CFHvqr/7PqZARuDpFK+XZh+5AGfZiExKnUkhVk+BFbc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:75:f2:d4:cf:6f:eb:57:50:0b:43:5b:41:d3:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355608d078d6f31cf79be78736bf884606a17da4
        Validity
            Not Before: Nov 26 19:01:19 2024 GMT
            Not After : Nov 27 19:01:19 2024 GMT
        Subject: CN=a00a88114cb3ed9f1e5e993a5b0ec6dcf767d96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9e:af:41:4d:c3:16:e1:76:4f:15:bf:66:6b:
                    7c:96:2f:34:b0:7f:b5:42:99:f3:89:57:3d:b8:69:
                    26:1f:ec:30:3b:3b:db:91:a3:d5:86:a7:df:a1:f9:
                    eb:98:9d:93:26:5e:df:73:f0:ea:ec:fb:06:27:06:
                    32:0c:2c:f4:d7:25:8d:5a:2f:68:a7:72:31:03:80:
                    c6:36:18:da:d7:c4:3c:c6:0d:07:e5:4d:97:73:6e:
                    35:34:51:7b:aa:64:b7:3e:21:4e:82:ae:46:05:b9:
                    fd:fd:49:45:2b:c4:c4:03:d8:d4:2a:fe:f3:8e:2b:
                    eb:3d:41:b8:a1:85:d8:65:8a:c7:cd:53:b5:60:ae:
                    cf:a3:90:4a:ec:2b:6d:ba:b0:1a:8d:3c:01:36:6a:
                    7d:46:52:53:43:0f:26:70:ad:a5:d8:f5:e5:f1:da:
                    c2:b5:28:44:ad:68:f4:53:c5:e8:25:ed:24:2d:0e:
                    e8:f0:03:12:a2:b4:96:0d:45:05:ed:4b:16:a9:73:
                    f9:01:16:f0:82:91:bc:f8:19:f9:40:89:b2:c0:93:
                    f4:43:50:b8:13:7d:d2:c2:b8:6f:e3:29:9d:bc:dd:
                    d4:6d:7a:a0:9a:ca:05:5e:e5:7f:cc:e2:d9:c4:aa:
                    19:c9:a3:12:a7:2a:42:dc:c7:78:68:42:75:c1:a3:
                    dd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0A:88:11:4C:B3:ED:9F:1E:5E:99:3A:5B:0E:C6:DC:F7:67:D9:6D
            X509v3 Authority Key Identifier:
                keyid:35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:fd:05:ae:70:f9:d4:10:a9:03:13:37:14:2f:95:a7:dc:0b:
         17:7b:7d:90:2a:08:a7:24:17:b6:39:db:cf:fd:97:7e:eb:6d:
         43:91:0c:a5:41:6b:2c:5b:44:44:9e:b5:2c:6a:ee:15:67:92:
         9c:a9:67:2f:52:03:c3:7c:ac:69:a5:fd:3d:cd:2f:2e:12:c1:
         29:05:c2:81:e9:61:6a:d0:8d:b4:00:f2:3f:f6:6d:f7:44:f0:
         37:72:e0:01:06:b6:89:f6:4b:48:17:47:b2:55:b0:15:15:67:
         b6:e8:14:a8:f8:5a:3b:2c:4b:4b:e8:3c:6f:f2:72:0b:9f:7d:
         53:fb:f6:cb:86:8c:d0:3a:88:ca:45:63:22:d7:d9:7c:f5:eb:
         84:44:8e:94:62:a9:fa:6c:9a:cb:d2:30:4c:11:d2:16:af:97:
         b4:f3:07:f1:7b:cc:39:f9:bc:06:f4:8f:86:e8:75:75:3b:9e:
         ad:24:c8:13:2c:12:be:80:15:4a:7f:82:df:c2:fe:3d:a9:e4:
         e7:ee:07:ec:c2:7b:59:b1:fc:09:0e:1a:ac:2e:3a:5e:53:83:
         70:70:cf:51:12:dc:ef:9f:48:c3:0e:82:33:72:f4:ce:ce:47:
         03:7d:2b:27:3f:20:2b:65:11:e1:1e:38:89:a4:fe:59:29:01:
         b1:0f:8c:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2XXy1M9v61dQC0NbQdOjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NTYwOGQwNzhkNmYzMWNmNzliZTc4NzM2YmY4ODQ2MDZh
MTdkYTQwHhcNMjQxMTI2MTkwMTE5WhcNMjQxMTI3MTkwMTE5WjAzMTEwLwYDVQQD
EyhhMDBhODgxMTRjYjNlZDlmMWU1ZTk5M2E1YjBlYzZkY2Y3NjdkOTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp6vQU3DFuF2TxW/Zmt8li80sH+1
QpnziVc9uGkmH+wwOzvbkaPVhqffofnrmJ2TJl7fc/Dq7PsGJwYyDCz01yWNWi9o
p3IxA4DGNhja18Q8xg0H5U2Xc241NFF7qmS3PiFOgq5GBbn9/UlFK8TEA9jUKv7z
jivrPUG4oYXYZYrHzVO1YK7Po5BK7CtturAajTwBNmp9RlJTQw8mcK2l2PXl8drC
tShErWj0U8XoJe0kLQ7o8AMSorSWDUUF7UsWqXP5ARbwgpG8+Bn5QImywJP0Q1C4
E33Swrhv4ymdvN3UbXqgmsoFXuV/zOLZxKoZyaMSpypC3Md4aEJ1waPdbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAKiBFMs+2fHl6ZOlsOxtz3Z9ltMB8GA1UdIwQY
MBaAFDVWCNB41vMc95vnhza/iEYGoX2kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlZZSTBIalc4eHozbS1lSE5yLUlSZ2FoZmFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iODQxOTUtY2Q0Ni00OWNiLTg1Zjgt
NmViNDNiNTU2ZTEzLzEvTlZZSTBIalc4eHozbS1lSE5yLUlSZ2FoZmFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9iODQxOTUtY2Q0Ni00OWNiLTg1ZjgtNmViNDNiNTU2ZTEz
LzEvTlZZSTBIalc4eHozbS1lSE5yLUlSZ2FoZmFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfP0FrnD5
1BCpAxM3FC+Vp9wLF3t9kCoIpyQXtjnbz/2XfuttQ5EMpUFrLFtERJ61LGruFWeS
nKlnL1IDw3ysaaX9Pc0vLhLBKQXCgelhatCNtADyP/Zt90TwN3LgAQa2ifZLSBdH
slWwFRVntugUqPhaOyxLS+g8b/JyC599U/v2y4aM0DqIykVjItfZfPXrhESOlGKp
+myay9IwTBHSFq+XtPMH8XvMOfm8BvSPhuh1dTuerSTIEywSvoAVSn+C38L+Pank
5+4H7MJ7WbH8CQ4arC46XlODcHDPURLc759Iww6CM3L0zs5HA30rJz8gK2UR4R44
iaT+WSkBsQ+Mzw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:57:47 2024 by rpki-client on console-fra.rpki-client.org