Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
File:                     RgVeggAswL17mYfl1zZUIOr9SXA.mft (raw, json)
Hash identifier:          sD9XvCa0R73fMBcuABcS0hNp44tE1PSuNl6UQ7ahEhU=
Subject key identifier:   BC:5D:FA:AC:54:70:86:D9:FF:25:0B:D9:F8:04:2F:A6:32:DC:A0:56
Authority key identifier: 46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70
Certificate issuer:       /CN=46055e82002cc0bd7b9987e5d7365420eafd4970
Certificate serial:       019369D8D17E0BA56D559CE76B5F036A84F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
Manifest number:          137E
Signing time:             Tue 26 Nov 2024 19:00:37 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:37 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:37 +0000
Files and hashes:         1: RgVeggAswL17mYfl1zZUIOr9SXA.crl (hash: 5G7z5Ml/Q1NawpP+fE/T1hV8nZ4JZEwLx1RNZ1Tkpuo=)
                          2: qzPII3rg1km9b4kQmaDFcgapwXc.roa (hash: tlXFKCkmT823FBDvWHCljmMAPrdqaCiqpoXI/fxU0AA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:d1:7e:0b:a5:6d:55:9c:e7:6b:5f:03:6a:84:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46055e82002cc0bd7b9987e5d7365420eafd4970
        Validity
            Not Before: Nov 26 19:00:37 2024 GMT
            Not After : Nov 27 19:00:37 2024 GMT
        Subject: CN=bc5dfaac547086d9ff250bd9f8042fa632dca056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8f:78:4a:70:18:2a:c6:22:87:7e:d8:d7:fe:
                    42:f7:cb:2d:b3:c4:c8:0e:54:88:f2:b0:d9:3b:3b:
                    47:f5:ea:2d:ed:98:09:2a:72:da:2d:61:a1:04:ec:
                    fc:a8:9e:25:ab:0e:99:a9:3a:32:ad:6a:72:c2:f8:
                    5d:f7:3d:dc:51:47:f8:20:c9:a2:62:34:97:f6:35:
                    84:82:bd:fc:7c:28:40:d1:04:b9:e0:82:af:b5:af:
                    30:db:e0:00:a5:08:89:3a:ea:22:fe:e2:b3:a4:44:
                    5f:46:d8:ca:95:63:24:62:88:44:3f:32:61:83:ac:
                    d9:60:8b:33:c4:37:48:60:96:64:87:ac:77:8f:ce:
                    4f:1a:84:aa:4e:88:0f:e0:8e:a9:e7:44:1a:39:e4:
                    c2:73:f1:36:8b:d2:3e:00:50:14:b6:5c:eb:8d:91:
                    2f:24:61:75:f4:a2:81:82:f7:7c:d0:2b:26:2c:f3:
                    3a:d9:d6:a8:b3:0b:03:9c:a7:e6:ce:90:14:43:a1:
                    02:fa:38:e3:1b:e8:ab:14:71:a3:a9:ad:bf:cc:e3:
                    b1:b6:ea:8d:b1:35:31:60:c1:df:df:55:66:25:a4:
                    8d:c8:fd:b7:64:62:5d:f7:99:bd:11:50:e0:d2:1d:
                    5c:be:fd:12:cb:50:a1:0f:ae:9e:98:f7:a1:62:ac:
                    69:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5D:FA:AC:54:70:86:D9:FF:25:0B:D9:F8:04:2F:A6:32:DC:A0:56
            X509v3 Authority Key Identifier:
                keyid:46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:62:e1:9d:36:8c:fb:2c:c9:34:4c:cd:db:fe:fa:76:dd:b1:
         a6:fd:70:47:e5:1e:d0:b4:84:92:3d:80:a6:3b:6d:f1:5e:b8:
         41:74:bf:76:ab:74:bf:24:59:f3:f8:f3:71:05:a3:99:12:d0:
         cf:38:9a:11:0b:26:a8:24:e9:59:28:b7:0e:e8:6c:e7:ab:c4:
         58:10:f4:18:f8:51:f0:94:bd:c9:46:1d:ee:53:48:a0:14:9d:
         72:67:06:44:c7:b7:3f:02:44:93:9f:1d:94:67:2c:6d:e7:0b:
         c4:93:d0:fb:c5:70:a7:f9:7b:1e:c4:41:42:94:b9:a0:85:31:
         e0:b8:ab:1c:1b:48:31:7e:f5:ab:49:e5:49:4b:31:ba:7a:dd:
         82:a4:e4:ff:42:55:04:52:04:b0:95:0d:9d:62:5b:ce:6a:0b:
         47:2c:3e:21:f1:c5:fc:4c:c2:e8:b9:35:07:21:ba:a7:57:ca:
         4b:76:6a:cc:a8:86:e9:8f:68:31:a2:70:3f:d0:a5:11:47:6e:
         a6:a1:02:ac:4e:d2:43:00:cf:8a:df:e7:19:3a:aa:07:8b:af:
         90:2d:22:3f:87:a3:13:ac:89:6f:44:d6:63:50:95:c9:0e:cd:
         04:6e:78:9c:73:0f:70:2f:82:38:5d:de:20:31:d9:45:d3:91:
         3b:1b:2e:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2NF+C6VtVZzna18DaoT1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MDU1ZTgyMDAyY2MwYmQ3Yjk5ODdlNWQ3MzY1NDIwZWFm
ZDQ5NzAwHhcNMjQxMTI2MTkwMDM3WhcNMjQxMTI3MTkwMDM3WjAzMTEwLwYDVQQD
EyhiYzVkZmFhYzU0NzA4NmQ5ZmYyNTBiZDlmODA0MmZhNjMyZGNhMDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Y94SnAYKsYih37Y1/5C98sts8TI
DlSI8rDZOztH9eot7ZgJKnLaLWGhBOz8qJ4lqw6ZqToyrWpywvhd9z3cUUf4IMmi
YjSX9jWEgr38fChA0QS54IKvta8w2+AApQiJOuoi/uKzpERfRtjKlWMkYohEPzJh
g6zZYIszxDdIYJZkh6x3j85PGoSqTogP4I6p50QaOeTCc/E2i9I+AFAUtlzrjZEv
JGF19KKBgvd80CsmLPM62daoswsDnKfmzpAUQ6EC+jjjG+irFHGjqa2/zOOxtuqN
sTUxYMHf31VmJaSNyP23ZGJd95m9EVDg0h1cvv0Sy1ChD66emPehYqxpNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxd+qxUcIbZ/yUL2fgEL6Yy3KBWMB8GA1UdIwQY
MBaAFEYFXoIALMC9e5mH5dc2VCDq/UlwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmdWZWdnQXN3TDE3bVlmbDF6WlVJT3I5U1hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80OTkyNGQtNzY5OS00YWY0LWFmZjkt
MjJhYTRmM2E3NjE1LzEvUmdWZWdnQXN3TDE3bVlmbDF6WlVJT3I5U1hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy80OTkyNGQtNzY5OS00YWY0LWFmZjktMjJhYTRmM2E3NjE1
LzEvUmdWZWdnQXN3TDE3bVlmbDF6WlVJT3I5U1hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2LhnTaM
+yzJNEzN2/76dt2xpv1wR+Ue0LSEkj2Apjtt8V64QXS/dqt0vyRZ8/jzcQWjmRLQ
zziaEQsmqCTpWSi3Duhs56vEWBD0GPhR8JS9yUYd7lNIoBSdcmcGRMe3PwJEk58d
lGcsbecLxJPQ+8Vwp/l7HsRBQpS5oIUx4LirHBtIMX71q0nlSUsxunrdgqTk/0JV
BFIEsJUNnWJbzmoLRyw+IfHF/EzC6Lk1ByG6p1fKS3ZqzKiG6Y9oMaJwP9ClEUdu
pqECrE7SQwDPit/nGTqqB4uvkC0iP4ejE6yJb0TWY1CVyQ7NBG54nHMPcC+COF3e
IDHZRdOROxsuJQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:58:45 2024 by rpki-client on console-fra.rpki-client.org