Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
File:                     8n7hjEY57qoWphkIzLRcepjV3Ws.mft (raw, json)
Hash identifier:          5mGbv7xzZ7M9HUCmCFE8klkrUDB08AV8jK2Rm9VV2V8=
Subject key identifier:   CE:D5:BC:C6:E0:99:5B:BE:86:F0:7D:77:D6:A1:D7:BE:BA:B9:AE:8E
Authority key identifier: F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B
Certificate issuer:       /CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
Certificate serial:       019369D95C9048CF7E8F1B6401B4CE790ECE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 19:01:12 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:12 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:12 +0000
Files and hashes:         1: 8n7hjEY57qoWphkIzLRcepjV3Ws.crl (hash: DNu81MmR3cj/iO/MJ19h8P6ePRDQhF3BqGZSf8tcV8Y=)
                          2: rd9hutk4jRx6jd3zGof52fquTMI.roa (hash: 0wlnyo9WnaOA5YVzg9FwUu88/hJCaAI7/wm0MqVGyHE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:5c:90:48:cf:7e:8f:1b:64:01:b4:ce:79:0e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
        Validity
            Not Before: Nov 26 19:01:12 2024 GMT
            Not After : Nov 27 19:01:12 2024 GMT
        Subject: CN=ced5bcc6e0995bbe86f07d77d6a1d7bebab9ae8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d7:19:f5:cf:5e:7b:a0:c9:57:77:a7:06:49:
                    0a:29:0f:bb:53:40:8e:66:85:be:a9:14:05:20:7f:
                    43:7b:cf:22:c1:a7:86:87:fd:35:d4:ae:29:1c:aa:
                    40:90:8a:eb:f0:21:a1:4d:7a:ef:3f:ab:8f:70:31:
                    d1:1c:9e:fa:2b:97:ae:b8:f1:cf:26:74:11:02:04:
                    3b:f1:b0:ce:a0:02:92:6e:ce:5a:84:85:79:09:77:
                    a3:cb:e6:fb:38:28:59:e7:bc:b3:bb:a7:26:8e:4d:
                    3b:98:7f:50:91:0c:2b:04:dd:57:1d:a2:6d:d6:fd:
                    46:f7:10:6f:6b:b7:5d:54:f5:e5:16:59:6e:b2:be:
                    d8:a9:03:05:e9:c0:26:1f:e6:59:77:07:81:b4:14:
                    7f:d5:2a:57:24:27:bc:df:48:7a:59:da:fa:21:f0:
                    e4:42:6f:02:e5:6d:48:93:6d:d2:e0:fb:2a:f2:08:
                    e0:5c:c2:42:9e:22:f5:90:f4:b6:83:8b:93:ac:9f:
                    27:16:4c:5c:2c:be:5b:ec:59:82:9e:f3:f0:fe:57:
                    6a:6a:5a:51:ae:7c:59:40:37:f5:f5:09:89:79:df:
                    48:54:78:ad:92:a9:a2:4b:68:00:11:14:39:f5:bc:
                    d5:d5:14:15:a8:ea:12:43:70:64:5e:84:d2:87:0b:
                    05:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D5:BC:C6:E0:99:5B:BE:86:F0:7D:77:D6:A1:D7:BE:BA:B9:AE:8E
            X509v3 Authority Key Identifier:
                keyid:F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:de:fc:4b:10:8e:94:56:82:2c:d2:29:a3:e6:0f:98:6c:e8:
         3e:e4:3e:f6:31:84:59:7d:56:21:05:50:49:0f:c6:fb:a7:16:
         91:42:f7:f4:f8:71:69:5d:13:b4:4f:cb:44:43:63:af:00:42:
         37:f0:28:2e:d8:6c:02:f3:47:e6:9a:84:9f:ad:1a:b5:3d:40:
         60:aa:7d:45:16:a7:53:ef:2c:c5:8a:df:f2:39:af:d7:e7:39:
         eb:4b:ec:3c:6a:15:07:83:1e:df:2e:68:64:2e:d6:ba:59:71:
         56:4c:98:01:63:99:58:2c:3c:e9:3b:60:4a:bc:4a:9d:9d:20:
         76:24:37:5f:61:97:b7:a2:ad:34:70:8d:7a:6e:12:15:f5:03:
         97:05:83:ff:99:54:ed:48:e4:3d:46:10:42:1a:ba:6b:7e:44:
         25:16:7a:95:03:5e:1a:33:fc:4c:99:c5:7e:88:b0:c9:f2:0e:
         ac:eb:0f:3d:fe:72:2f:49:0b:d8:b2:77:9f:d8:cf:f2:89:7f:
         ac:bd:81:69:1f:b0:cd:2a:32:9a:2d:b9:ea:23:88:b7:d8:b2:
         8a:66:a9:f2:ab:30:d9:80:92:38:46:2c:f9:5d:03:02:40:ac:
         d9:e2:a7:96:96:95:2f:b7:7b:e7:83:d2:bd:a8:ff:d5:da:fa:
         11:fc:ba:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2VyQSM9+jxtkAbTOeQ7OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyN2VlMThjNDYzOWVlYWExNmE2MTkwOGNjYjQ1YzdhOThk
NWRkNmIwHhcNMjQxMTI2MTkwMTEyWhcNMjQxMTI3MTkwMTEyWjAzMTEwLwYDVQQD
EyhjZWQ1YmNjNmUwOTk1YmJlODZmMDdkNzdkNmExZDdiZWJhYjlhZThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNcZ9c9ee6DJV3enBkkKKQ+7U0CO
ZoW+qRQFIH9De88iwaeGh/011K4pHKpAkIrr8CGhTXrvP6uPcDHRHJ76K5euuPHP
JnQRAgQ78bDOoAKSbs5ahIV5CXejy+b7OChZ57yzu6cmjk07mH9QkQwrBN1XHaJt
1v1G9xBva7ddVPXlFllusr7YqQMF6cAmH+ZZdweBtBR/1SpXJCe830h6Wdr6IfDk
Qm8C5W1Ik23S4Psq8gjgXMJCniL1kPS2g4uTrJ8nFkxcLL5b7FmCnvPw/ldqalpR
rnxZQDf19QmJed9IVHitkqmiS2gAERQ59bzV1RQVqOoSQ3BkXoTShwsFDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7VvMbgmVu+hvB9d9ah1766ua6OMB8GA1UdIwQY
MBaAFPJ+4YxGOe6qFqYZCMy0XHqY1d1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG43aGpFWTU3cW9XcGhrSXpMUmNlcGpWM1dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mNThhMmEtMGYyNS00ODMxLWJiMDkt
YTBkZDNiNWYxNWY4LzEvOG43aGpFWTU3cW9XcGhrSXpMUmNlcGpWM1dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9mNThhMmEtMGYyNS00ODMxLWJiMDktYTBkZDNiNWYxNWY4
LzEvOG43aGpFWTU3cW9XcGhrSXpMUmNlcGpWM1dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW978SxCO
lFaCLNIpo+YPmGzoPuQ+9jGEWX1WIQVQSQ/G+6cWkUL39PhxaV0TtE/LRENjrwBC
N/AoLthsAvNH5pqEn60atT1AYKp9RRanU+8sxYrf8jmv1+c560vsPGoVB4Me3y5o
ZC7WullxVkyYAWOZWCw86TtgSrxKnZ0gdiQ3X2GXt6KtNHCNem4SFfUDlwWD/5lU
7UjkPUYQQhq6a35EJRZ6lQNeGjP8TJnFfoiwyfIOrOsPPf5yL0kL2LJ3n9jP8ol/
rL2BaR+wzSoymi256iOIt9iyimap8qsw2YCSOEYs+V0DAkCs2eKnlpaVL7d754PS
vaj/1dr6Efy6/Q==
-----END CERTIFICATE-----
Generated at Tue Nov 26 21:29:22 2024 by rpki-client on console-fra.rpki-client.org