Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
File:                     rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft (raw, json)
Hash identifier:          MmmxdNk2MEnwtGzsiFdxrZ0UqapeFAezvIVqEzZqQvE=
Subject key identifier:   B4:6E:31:6C:03:8E:06:14:B7:BF:51:DD:92:52:FF:F4:27:E0:60:D6
Authority key identifier: AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
Certificate issuer:       /CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Certificate serial:       019367EA66590E314A1A8942CA31036ACA88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 10:00:35 +0000
Manifest this update:     Tue 26 Nov 2024 10:00:35 +0000
Manifest next update:     Wed 27 Nov 2024 10:00:35 +0000
Files and hashes:         1: l-l-a5PsWdlNkErmVKfPkDVYaHg.roa (hash: OVC4/xNBCw+wEr/e1oWjexY12494CqBICyzEDbUwnZc=)
                          2: rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl (hash: MpsrhQuqeqcfs05xDeEXCNv0BZSOS4CL7zVC1VfQhEc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:ea:66:59:0e:31:4a:1a:89:42:ca:31:03:6a:ca:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
        Validity
            Not Before: Nov 26 10:00:35 2024 GMT
            Not After : Nov 27 10:00:35 2024 GMT
        Subject: CN=b46e316c038e0614b7bf51dd9252fff427e060d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:da:e0:e0:a5:92:47:9e:bc:10:37:0d:dc:51:
                    2a:a7:5e:2d:4d:77:e5:af:e4:de:83:c7:da:0f:5e:
                    c9:41:52:da:4b:a4:f5:cd:11:1b:af:9b:0b:b8:57:
                    15:f4:f3:fa:ca:a9:f1:44:1e:e0:9f:21:e0:34:c6:
                    af:ff:aa:11:82:fd:61:92:42:ed:cb:fd:71:d0:cc:
                    01:92:ff:fb:e0:af:8c:fd:1a:ea:19:d4:0d:37:0c:
                    ed:c4:b8:bc:b0:3e:5c:12:ce:39:1c:3e:4e:15:0e:
                    41:0d:09:75:ba:1e:c8:8e:f0:f3:b4:24:17:71:b4:
                    e9:28:10:0b:f8:19:f8:c9:4f:c0:13:de:cd:96:74:
                    80:e5:f9:5f:17:d5:dc:12:f2:5a:a0:75:13:2f:56:
                    2e:91:98:1e:68:76:ad:c0:46:e0:dd:43:29:5b:28:
                    8d:45:9c:88:4a:8c:c8:1e:57:18:b6:46:67:3e:04:
                    1c:11:9b:42:c2:ab:03:ee:17:65:56:7c:fa:51:11:
                    e5:c1:f4:49:05:e0:c5:eb:e8:0c:b3:f0:3a:13:a1:
                    8b:4d:4c:7f:5f:7f:d7:e0:d4:54:d1:7f:30:c1:f0:
                    ac:e8:21:10:99:78:06:05:5b:3f:ce:db:68:38:fa:
                    54:3b:c7:c7:98:93:6b:f7:ea:57:d2:06:27:c2:db:
                    91:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6E:31:6C:03:8E:06:14:B7:BF:51:DD:92:52:FF:F4:27:E0:60:D6
            X509v3 Authority Key Identifier:
                keyid:AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:03:72:1e:41:08:ef:df:e7:d8:69:65:fc:46:22:c0:a1:40:
         b0:22:49:78:0f:64:1d:73:d0:a6:95:5b:ca:bf:05:0c:71:14:
         1b:30:c5:09:62:b5:3b:18:39:7e:18:f1:45:e2:c2:35:d8:af:
         4c:83:cf:6b:7e:c1:cc:9f:28:1b:b8:22:74:92:03:a9:22:9b:
         78:22:d7:8d:58:de:d8:be:89:14:5b:8e:12:6f:a9:a9:af:83:
         ea:10:bf:f5:09:62:92:c8:16:7c:92:a1:ec:e7:37:15:84:58:
         fa:fb:ac:18:f0:e4:93:65:12:57:6a:e9:99:14:33:2a:04:0a:
         0e:37:82:9d:9a:8a:dc:85:e8:53:ba:1d:df:df:c1:3a:b3:1c:
         fb:6e:cc:d3:6a:79:dc:f6:cd:39:b3:ed:71:5f:54:e6:ae:ba:
         47:41:a7:e7:3d:62:12:8b:8a:68:64:6c:01:19:72:0b:94:00:
         25:4b:57:f6:ec:a2:ca:f3:c0:0b:56:74:52:a3:90:11:9f:06:
         e3:b0:db:a4:10:98:fd:1f:e4:da:4a:ee:bd:c5:8e:10:a2:86:
         56:52:23:0c:6c:bb:59:4a:04:a5:3f:6d:95:b8:eb:33:2b:b1:
         3c:44:06:db:72:ee:d7:65:ae:a8:26:39:cd:f9:c6:1a:2a:4b:
         23:95:55:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNn6mZZDjFKGolCyjEDasqIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMjdiYzI0NWU3NmJhNWU1YzFmYzVlOWVlNTViNGI0OGRl
N2Y4NWEwHhcNMjQxMTI2MTAwMDM1WhcNMjQxMTI3MTAwMDM1WjAzMTEwLwYDVQQD
EyhiNDZlMzE2YzAzOGUwNjE0YjdiZjUxZGQ5MjUyZmZmNDI3ZTA2MGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNrg4KWSR568EDcN3FEqp14tTXfl
r+Teg8faD17JQVLaS6T1zREbr5sLuFcV9PP6yqnxRB7gnyHgNMav/6oRgv1hkkLt
y/1x0MwBkv/74K+M/RrqGdQNNwztxLi8sD5cEs45HD5OFQ5BDQl1uh7IjvDztCQX
cbTpKBAL+Bn4yU/AE97NlnSA5flfF9XcEvJaoHUTL1YukZgeaHatwEbg3UMpWyiN
RZyISozIHlcYtkZnPgQcEZtCwqsD7hdlVnz6URHlwfRJBeDF6+gMs/A6E6GLTUx/
X3/X4NRU0X8wwfCs6CEQmXgGBVs/zttoOPpUO8fHmJNr9+pX0gYnwtuRDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLRuMWwDjgYUt79R3ZJS//Qn4GDWMB8GA1UdIwQY
MBaAFKwnvCRedrpeXB/F6e5VtLSN5/haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckNlOEpGNTJ1bDVjSDhYcDdsVzB0STNuLUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9lODUzNzUtNDBmZi00ZTc3LWI0ZTkt
YmIwNjcxZDhlYTMyLzEvckNlOEpGNTJ1bDVjSDhYcDdsVzB0STNuLUZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9lODUzNzUtNDBmZi00ZTc3LWI0ZTktYmIwNjcxZDhlYTMy
LzEvckNlOEpGNTJ1bDVjSDhYcDdsVzB0STNuLUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYgNyHkEI
79/n2Gll/EYiwKFAsCJJeA9kHXPQppVbyr8FDHEUGzDFCWK1Oxg5fhjxReLCNdiv
TIPPa37BzJ8oG7gidJIDqSKbeCLXjVje2L6JFFuOEm+pqa+D6hC/9QliksgWfJKh
7Oc3FYRY+vusGPDkk2USV2rpmRQzKgQKDjeCnZqK3IXoU7od39/BOrMc+27M02p5
3PbNObPtcV9U5q66R0Gn5z1iEouKaGRsARlyC5QAJUtX9uyiyvPAC1Z0UqOQEZ8G
47DbpBCY/R/k2kruvcWOEKKGVlIjDGy7WUoEpT9tlbjrMyuxPEQG23Lu12WuqCY5
zfnGGipLI5VVWA==
-----END CERTIFICATE-----
Generated at Tue Nov 26 17:53:51 2024 by rpki-client on console-ams.rpki-client.org