Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
File:                     0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft (raw, json)
Hash identifier:          u4ERIV7+P+DGMuH5a3r6fTeGIBMWeaniju3+ji+QHIY=
Subject key identifier:   66:1D:96:56:DE:EB:3F:B8:3B:03:7E:67:2E:DD:70:9A:01:D2:31:B4
Authority key identifier: D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
Certificate issuer:       /CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Certificate serial:       0193549C9F16B2A4A95D88661C6BBDDC1785
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 16:02:50 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:50 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:50 +0000
Files and hashes:         1: 0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl (hash: RZ6eKC/RrtuLMq4jkW12NyX/CWpFox6MArmdRX0CFeA=)
                          2: OabrQ2IG7lLzi3tra4eQ4todayU.roa (hash: VPrC0JD2TisAWXeKTrKUyuS77BkygEhO3sB4dcYCmXo=)
                          3: a-uF0ilFX531YVGrPM7y8uBk-ds.roa (hash: OLwGjo8Ivg3l2qhjIXae48nuQn2TfLVjpKnrP6a5RzE=)
                          4: arUKsDh34NtQa4oR_LAFMry96TI.roa (hash: +g8HHyvS+oRYOYohx/a0Du7yjuboBje5JAYjpsAld9A=)
                          5: qEamaLnnc3q2Bms9cK640GFRmW0.roa (hash: V+ZZOjO93mvCrcxmQJOEClrhvKm/LHfQtEtH/Pj8XJI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:9f:16:b2:a4:a9:5d:88:66:1c:6b:bd:dc:17:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
        Validity
            Not Before: Nov 22 16:02:50 2024 GMT
            Not After : Nov 23 16:02:50 2024 GMT
        Subject: CN=661d9656deeb3fb83b037e672edd709a01d231b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0e:39:60:51:cf:f4:a1:43:44:50:d7:04:64:
                    ed:3d:06:47:11:33:46:d6:5a:6f:68:55:23:bf:c3:
                    e8:ce:19:63:a2:c6:1f:07:d7:b1:e5:2d:a3:ff:03:
                    81:59:09:48:08:db:29:f7:82:40:18:b4:75:ed:d5:
                    0b:11:4e:38:70:3d:cd:fa:9e:84:73:b3:42:2f:4b:
                    c8:fb:75:8d:58:3c:09:d8:e8:6f:ee:52:73:35:e0:
                    92:fb:ed:1c:9c:15:c4:07:b5:c0:5a:d0:68:cf:1f:
                    a3:5e:47:f8:d1:10:10:d8:e2:69:6e:f8:d7:fd:57:
                    f1:5f:24:3b:37:6c:47:c0:6a:11:40:33:8e:2d:94:
                    20:6f:33:ba:9f:c8:e1:13:c7:62:ea:a5:d7:42:78:
                    57:5d:76:ec:56:c3:76:c1:ff:fc:79:44:36:5a:9b:
                    67:ac:b1:c5:b5:20:91:69:b7:be:97:3e:53:22:f2:
                    f4:23:45:7d:b8:dd:34:4c:cd:c3:01:78:0c:48:c4:
                    aa:32:cf:d9:1b:47:4a:59:d2:cc:65:4e:83:34:1d:
                    9e:3e:e0:f3:49:4f:eb:6a:07:80:a0:b9:b1:a3:d7:
                    9a:dc:d1:a7:8d:51:2a:41:8e:9b:80:ad:fe:d5:df:
                    ee:6e:35:06:ba:b1:44:4f:1c:99:c4:20:7b:2d:ea:
                    aa:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1D:96:56:DE:EB:3F:B8:3B:03:7E:67:2E:DD:70:9A:01:D2:31:B4
            X509v3 Authority Key Identifier:
                keyid:D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:8d:34:16:96:f3:b6:62:b6:b6:5b:19:9a:9f:bf:09:5e:ed:
         c6:61:9c:30:c9:69:cf:23:8b:a9:5f:f7:8d:2c:1c:b4:80:c0:
         6a:ca:7b:22:72:e5:9b:69:d1:ce:5a:bd:c0:e3:ce:f0:c7:5f:
         09:2f:f1:4e:89:27:54:3b:b7:cd:4e:b3:f5:d2:8c:87:1d:e3:
         1c:3b:91:00:e6:b6:db:e1:8e:0a:8d:ba:78:fa:bb:2b:6c:34:
         6f:34:9e:b8:5b:02:52:5b:e3:d4:13:d5:d0:e5:fd:ce:19:a0:
         6c:6d:13:91:22:e3:16:0f:b0:63:1e:0f:b3:dd:f9:d8:24:95:
         6b:f4:41:b0:61:ff:75:4a:2c:b8:c2:6d:a6:00:5b:20:e7:c2:
         ab:d6:9e:56:8a:64:ef:9f:0a:93:e0:6e:59:f3:09:75:4f:89:
         b1:e4:be:2c:e9:bf:0b:15:cd:d8:ea:cf:e9:de:e2:77:0a:d6:
         c2:24:de:3e:86:3e:ba:4e:e2:f3:42:46:45:31:ae:df:0c:5e:
         2a:10:9c:70:a8:22:2c:d8:f0:90:0d:d2:93:0f:20:72:52:9a:
         3a:18:f3:73:47:84:04:81:72:71:b7:6e:fc:1c:90:f7:2f:c4:
         00:ac:9d:a8:5a:f8:f3:4f:c1:85:f8:20:f3:9a:f8:30:6b:93:
         50:74:ce:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUnJ8WsqSpXYhmHGu93BeFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZGU2MTg4MjJiOGFmNmY5ZWNhZmZjZDdkNTQ1OWI3Y2Mx
MTQ0OWEwHhcNMjQxMTIyMTYwMjUwWhcNMjQxMTIzMTYwMjUwWjAzMTEwLwYDVQQD
Eyg2NjFkOTY1NmRlZWIzZmI4M2IwMzdlNjcyZWRkNzA5YTAxZDIzMWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ45YFHP9KFDRFDXBGTtPQZHETNG
1lpvaFUjv8PozhljosYfB9ex5S2j/wOBWQlICNsp94JAGLR17dULEU44cD3N+p6E
c7NCL0vI+3WNWDwJ2Ohv7lJzNeCS++0cnBXEB7XAWtBozx+jXkf40RAQ2OJpbvjX
/VfxXyQ7N2xHwGoRQDOOLZQgbzO6n8jhE8di6qXXQnhXXXbsVsN2wf/8eUQ2Wptn
rLHFtSCRabe+lz5TIvL0I0V9uN00TM3DAXgMSMSqMs/ZG0dKWdLMZU6DNB2ePuDz
SU/rageAoLmxo9ea3NGnjVEqQY6bgK3+1d/ubjUGurFETxyZxCB7LeqqRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYdllbe6z+4OwN+Zy7dcJoB0jG0MB8GA1UdIwQY
MBaAFNDeYYgiuK9vnsr/zX1UWbfMEUSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME41aGlDSzRyMi1leXZfTmZWUlp0OHdSUkpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81YWNkNzgtZDY3MC00MTkyLWI1NjQt
MDQwZTA2NDRmYmU4LzEvME41aGlDSzRyMi1leXZfTmZWUlp0OHdSUkpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81YWNkNzgtZDY3MC00MTkyLWI1NjQtMDQwZTA2NDRmYmU4
LzEvME41aGlDSzRyMi1leXZfTmZWUlp0OHdSUkpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWI00Fpbz
tmK2tlsZmp+/CV7txmGcMMlpzyOLqV/3jSwctIDAasp7InLlm2nRzlq9wOPO8Mdf
CS/xToknVDu3zU6z9dKMhx3jHDuRAOa22+GOCo26ePq7K2w0bzSeuFsCUlvj1BPV
0OX9zhmgbG0TkSLjFg+wYx4Ps9352CSVa/RBsGH/dUosuMJtpgBbIOfCq9aeVopk
758Kk+BuWfMJdU+JseS+LOm/CxXN2OrP6d7idwrWwiTePoY+uk7i80JGRTGu3wxe
KhCccKgiLNjwkA3Skw8gclKaOhjzc0eEBIFycbdu/ByQ9y/EAKydqFr480/Bhfgg
85r4MGuTUHTOSw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:27:40 2024 by rpki-client on console-ams.rpki-client.org