Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.mft
File:                     xBXpJ06dH-RiA8HgaxsNyF5hJFM.mft (raw, json)
Hash identifier:          Vvwrr3uc8d5fr0b0Ohe6ie/g/iIRDIQlO5X7Py12+UI=
Subject key identifier:   6C:14:2D:20:B4:D3:30:65:10:0C:8A:77:24:33:D6:34:02:5C:2F:60
Authority key identifier: C4:15:E9:27:4E:9D:1F:E4:62:03:C1:E0:6B:1B:0D:C8:5E:61:24:53
Certificate issuer:       /CN=c415e9274e9d1fe46203c1e06b1b0dc85e612453
Certificate serial:       01936C34C3B2B824FFED8B2AC2D5B8CC47CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xBXpJ06dH-RiA8HgaxsNyF5hJFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.mft
Manifest number:          137B
Signing time:             Wed 27 Nov 2024 06:00:17 +0000
Manifest this update:     Wed 27 Nov 2024 06:00:17 +0000
Manifest next update:     Thu 28 Nov 2024 06:00:17 +0000
Files and hashes:         1: LsXgEYzwFOd4vra1wnmDOc0d0pw.roa (hash: me/ISHTWnBbg3S3Q3iFgHmqpS89XOjPNlmsPXJAzxpw=)
                          2: xBXpJ06dH-RiA8HgaxsNyF5hJFM.crl (hash: Kd8wHxukugMEbT3wKvGr+r0DIn+X7e97D1HKAnELJEs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xBXpJ06dH-RiA8HgaxsNyF5hJFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Nov 2024 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6c:34:c3:b2:b8:24:ff:ed:8b:2a:c2:d5:b8:cc:47:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c415e9274e9d1fe46203c1e06b1b0dc85e612453
        Validity
            Not Before: Nov 27 06:00:17 2024 GMT
            Not After : Nov 28 06:00:17 2024 GMT
        Subject: CN=6c142d20b4d33065100c8a772433d634025c2f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:23:55:13:88:05:51:cd:ff:ed:16:ec:cc:b1:
                    44:a8:fa:af:ec:f1:7e:aa:b0:c0:81:cb:53:21:77:
                    8c:32:f0:fe:7c:ed:db:58:e6:a3:6f:9d:ee:76:2f:
                    42:66:55:a4:d5:e1:1d:e0:af:2e:e1:83:46:2c:0c:
                    2c:58:e6:0c:5d:1b:76:54:89:6e:22:6c:99:6c:08:
                    25:c3:66:95:bc:72:1f:8a:c3:86:2e:9b:60:b0:0c:
                    67:43:92:be:f8:be:30:06:00:d8:1c:93:73:01:81:
                    8f:3b:2d:87:7c:7b:17:17:b8:da:bb:82:e5:29:fd:
                    2c:86:f6:79:e9:a0:37:f3:86:a0:4a:b0:08:94:88:
                    d4:9d:af:cb:0a:30:2a:e3:a2:95:db:fc:fc:9e:6b:
                    d0:7b:f9:1f:29:21:92:f3:b3:6f:25:b1:05:d6:f2:
                    a2:a9:31:8a:c6:9c:13:c3:5c:0a:c6:b5:a6:ac:32:
                    8d:12:ae:cb:d6:f3:40:be:1b:1f:1b:10:59:cc:22:
                    fa:13:24:bf:de:d4:57:00:2f:18:e5:a0:21:61:bb:
                    9d:01:b7:0c:59:69:a0:a3:18:9f:ff:ba:e3:4b:6a:
                    5f:11:2d:19:ca:55:69:68:2e:09:fb:a9:df:fd:09:
                    c5:02:5a:b3:c5:22:99:f6:40:b1:b9:35:54:50:9e:
                    ea:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:14:2D:20:B4:D3:30:65:10:0C:8A:77:24:33:D6:34:02:5C:2F:60
            X509v3 Authority Key Identifier:
                keyid:C4:15:E9:27:4E:9D:1F:E4:62:03:C1:E0:6B:1B:0D:C8:5E:61:24:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBXpJ06dH-RiA8HgaxsNyF5hJFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:b2:f3:8c:c7:37:b8:0c:80:c6:82:44:05:61:dd:d2:0f:8b:
         04:5e:13:75:2f:58:c7:24:da:8f:63:c7:28:2a:6b:3e:e2:77:
         86:c2:54:03:4c:c6:2f:dd:51:ef:1a:aa:2c:f9:d8:bd:ab:7b:
         b9:ec:f1:99:e3:41:4c:65:7c:7f:ba:62:07:7b:15:ec:d1:bc:
         33:83:a7:e6:d6:c8:77:ef:30:22:88:cb:7e:90:15:95:1f:cb:
         46:33:f4:73:37:ec:3c:67:7d:d2:36:83:d4:62:21:5f:70:34:
         cd:b7:fc:fc:a1:65:18:a7:6d:82:a6:44:2b:0a:04:37:d2:b3:
         4f:82:ac:ae:80:2f:b2:3d:88:27:2c:09:fd:f8:0e:fb:56:12:
         ef:12:b8:32:42:d1:ba:06:b8:95:e0:55:40:7f:0e:34:df:ad:
         b9:82:c1:5c:69:cc:b1:c2:cf:73:06:2a:fc:97:83:de:de:1a:
         a5:e0:d0:0d:59:2d:e7:24:80:eb:48:0e:e5:6f:69:19:9d:c2:
         b8:71:3a:d5:7a:83:20:e2:88:cb:66:e8:37:b6:86:b0:68:ae:
         b6:df:66:d8:a1:b9:43:05:12:9b:47:ab:a0:4d:28:b9:9d:a8:
         aa:2b:1c:e9:c8:a4:85:72:09:cd:06:8a:96:37:f0:4c:36:b2:
         46:9e:00:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNsNMOyuCT/7YsqwtW4zEfLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MTVlOTI3NGU5ZDFmZTQ2MjAzYzFlMDZiMWIwZGM4NWU2
MTI0NTMwHhcNMjQxMTI3MDYwMDE3WhcNMjQxMTI4MDYwMDE3WjAzMTEwLwYDVQQD
Eyg2YzE0MmQyMGI0ZDMzMDY1MTAwYzhhNzcyNDMzZDYzNDAyNWMyZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSNVE4gFUc3/7RbszLFEqPqv7PF+
qrDAgctTIXeMMvD+fO3bWOajb53udi9CZlWk1eEd4K8u4YNGLAwsWOYMXRt2VIlu
ImyZbAglw2aVvHIfisOGLptgsAxnQ5K++L4wBgDYHJNzAYGPOy2HfHsXF7jau4Ll
Kf0shvZ56aA384agSrAIlIjUna/LCjAq46KV2/z8nmvQe/kfKSGS87NvJbEF1vKi
qTGKxpwTw1wKxrWmrDKNEq7L1vNAvhsfGxBZzCL6EyS/3tRXAC8Y5aAhYbudAbcM
WWmgoxif/7rjS2pfES0ZylVpaC4J+6nf/QnFAlqzxSKZ9kCxuTVUUJ7q4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwULSC00zBlEAyKdyQz1jQCXC9gMB8GA1UdIwQY
MBaAFMQV6SdOnR/kYgPB4GsbDcheYSRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEJYcEowNmRILVJpQThIZ2F4c055RjVoSkZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8zN2IzNGQtMTIxMi00ZWNhLWEyMzYt
OGY2MmQ3ZGMxNjk5LzEveEJYcEowNmRILVJpQThIZ2F4c055RjVoSkZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8zN2IzNGQtMTIxMi00ZWNhLWEyMzYtOGY2MmQ3ZGMxNjk5
LzEveEJYcEowNmRILVJpQThIZ2F4c055RjVoSkZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAULLzjMc3
uAyAxoJEBWHd0g+LBF4TdS9YxyTaj2PHKCprPuJ3hsJUA0zGL91R7xqqLPnYvat7
uezxmeNBTGV8f7piB3sV7NG8M4On5tbId+8wIojLfpAVlR/LRjP0czfsPGd90jaD
1GIhX3A0zbf8/KFlGKdtgqZEKwoEN9KzT4KsroAvsj2IJywJ/fgO+1YS7xK4MkLR
uga4leBVQH8ONN+tuYLBXGnMscLPcwYq/JeD3t4apeDQDVkt5ySA60gO5W9pGZ3C
uHE61XqDIOKIy2boN7aGsGiutt9m2KG5QwUSm0eroE0ouZ2oqisc6cikhXIJzQaK
ljfwTDayRp4Auw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 08:54:59 2024 by rpki-client on console-fra.rpki-client.org