Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
File:                     IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft (raw, json)
Hash identifier:          YmH7/EAvz5TAqBV9yn7feEPBxsDmiw8ZO0PW19PMG7g=
Subject key identifier:   C3:60:41:E1:80:8D:B6:5D:2F:0B:EA:AD:E7:86:67:F8:C2:47:D8:82
Authority key identifier: 20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57
Certificate issuer:       /CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757
Certificate serial:       019369D9ADEA09E8584A5C17BC4DDA8D47D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 19:01:33 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:33 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:33 +0000
Files and hashes:         1: IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl (hash: SWcAbsm3TM/JjEwgbxyMPSkmbu9OK9apbltYfm8b2M0=)
                          2: Nn_ZoxV8BYIAq56GZvaULBaqSbM.roa (hash: gjc9PaRjPbrZyiObyup/LP5HGgi9wG2JGtK1odlx2DE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:ad:ea:09:e8:58:4a:5c:17:bc:4d:da:8d:47:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757
        Validity
            Not Before: Nov 26 19:01:33 2024 GMT
            Not After : Nov 27 19:01:33 2024 GMT
        Subject: CN=c36041e1808db65d2f0beaade78667f8c247d882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:62:d3:fd:82:08:d4:d4:e8:a9:4a:00:79:43:
                    7b:0e:16:c3:05:fb:e2:18:e4:0b:27:48:e4:78:91:
                    c1:a2:84:f0:72:84:f4:c3:d2:a0:76:58:95:d9:ab:
                    84:56:22:d1:f5:93:c6:a8:3c:fd:7d:32:4b:b0:ee:
                    22:f5:95:e8:ed:f6:47:fe:f2:4b:3b:17:b7:e2:ec:
                    2a:41:10:eb:8e:6f:77:0e:f7:39:d6:32:48:82:31:
                    24:aa:cb:c4:c6:fb:38:7b:a7:e1:c7:09:d4:7e:fd:
                    82:30:f8:6d:47:ea:c3:7f:a8:13:33:1b:f8:9b:03:
                    3d:3a:84:41:c5:9c:bc:4d:c6:f4:87:25:67:17:f3:
                    9e:0c:f3:80:58:62:6a:cc:f2:d4:e1:f8:18:5a:56:
                    80:e4:3e:f2:22:dd:d5:0a:cd:b8:e4:c2:2d:0d:f1:
                    3e:6e:3b:98:98:dc:d1:97:a0:de:12:ec:22:31:97:
                    1e:24:26:54:20:07:2e:4b:c4:39:6a:ae:4b:97:56:
                    7f:3c:2b:f4:30:71:e1:01:84:1a:36:49:59:23:00:
                    31:5e:4d:7e:f1:cc:14:9c:24:56:21:4f:b7:df:23:
                    73:04:ef:17:b4:e8:4b:37:1c:09:fb:b6:fa:da:dd:
                    ed:6b:85:bd:9d:20:cd:3f:08:d1:3a:f5:b2:f0:93:
                    5e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:60:41:E1:80:8D:B6:5D:2F:0B:EA:AD:E7:86:67:F8:C2:47:D8:82
            X509v3 Authority Key Identifier:
                keyid:20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:6d:2b:a3:7f:40:77:0c:82:e2:61:98:b9:29:93:b3:f6:ee:
         3c:13:be:d5:7c:05:98:ab:31:4e:1f:6c:24:4d:48:20:ac:3c:
         88:16:01:5a:e1:7b:fa:d5:ee:21:c4:40:f7:db:01:c5:99:61:
         92:4a:4a:17:50:3d:95:4d:95:58:7d:a6:d8:1b:0e:96:aa:1b:
         c6:5c:eb:a4:82:bc:0e:28:c4:5c:85:5e:20:bd:07:95:a4:7c:
         a9:80:af:19:9e:7e:75:71:b6:c8:6c:05:a4:5e:4f:2e:d1:81:
         a1:ca:e6:3e:a9:bd:89:45:ed:af:cd:c8:ea:31:53:b7:6c:f3:
         49:8c:af:d7:38:90:d0:f2:eb:16:6c:04:0b:e0:17:63:2a:bd:
         e6:44:e0:e8:41:f3:20:88:01:e7:a9:7f:ae:7b:4e:a0:38:97:
         68:42:db:1b:98:76:41:27:59:b6:d1:55:47:24:91:68:d0:e7:
         2d:33:04:45:52:e7:6f:57:71:c2:53:a5:e4:55:94:fb:c1:a7:
         02:6a:65:a6:ac:ef:4f:f1:c5:19:30:b0:41:3f:b6:f3:80:5a:
         1e:e9:47:e7:ce:a8:c1:ec:6c:42:cd:c2:8a:91:b9:f2:63:31:
         9b:f0:83:19:44:19:db:a4:fc:ff:f5:b9:d3:55:3e:fa:e1:86:
         85:e7:34:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2a3qCehYSlwXvE3ajUfRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZTExNGE4ZmVjM2Y1M2NiZTljYmY2ZDZhMGJlMDA4OWUz
MGM3NTcwHhcNMjQxMTI2MTkwMTMzWhcNMjQxMTI3MTkwMTMzWjAzMTEwLwYDVQQD
EyhjMzYwNDFlMTgwOGRiNjVkMmYwYmVhYWRlNzg2NjdmOGMyNDdkODgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGLT/YII1NToqUoAeUN7DhbDBfvi
GOQLJ0jkeJHBooTwcoT0w9KgdliV2auEViLR9ZPGqDz9fTJLsO4i9ZXo7fZH/vJL
Oxe34uwqQRDrjm93Dvc51jJIgjEkqsvExvs4e6fhxwnUfv2CMPhtR+rDf6gTMxv4
mwM9OoRBxZy8Tcb0hyVnF/OeDPOAWGJqzPLU4fgYWlaA5D7yIt3VCs245MItDfE+
bjuYmNzRl6DeEuwiMZceJCZUIAcuS8Q5aq5Ll1Z/PCv0MHHhAYQaNklZIwAxXk1+
8cwUnCRWIU+33yNzBO8XtOhLNxwJ+7b62t3ta4W9nSDNPwjROvWy8JNe7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNgQeGAjbZdLwvqreeGZ/jCR9iCMB8GA1UdIwQY
MBaAFCDhFKj+w/U8vpy/bWoL4AieMMdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU9FVXFQN0Q5VHktbkw5dGFndmdDSjR3eDFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS81OTVkYjYtODkyMC00MjMxLWFkMDEt
MzUzNGM4YzVhMzUxLzEvSU9FVXFQN0Q5VHktbkw5dGFndmdDSjR3eDFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS81OTVkYjYtODkyMC00MjMxLWFkMDEtMzUzNGM4YzVhMzUx
LzEvSU9FVXFQN0Q5VHktbkw5dGFndmdDSjR3eDFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ20ro39A
dwyC4mGYuSmTs/buPBO+1XwFmKsxTh9sJE1IIKw8iBYBWuF7+tXuIcRA99sBxZlh
kkpKF1A9lU2VWH2m2BsOlqobxlzrpIK8DijEXIVeIL0HlaR8qYCvGZ5+dXG2yGwF
pF5PLtGBocrmPqm9iUXtr83I6jFTt2zzSYyv1ziQ0PLrFmwEC+AXYyq95kTg6EHz
IIgB56l/rntOoDiXaELbG5h2QSdZttFVRySRaNDnLTMERVLnb1dxwlOl5FWU+8Gn
AmplpqzvT/HFGTCwQT+284BaHulH586owexsQs3CipG58mMxm/CDGUQZ26T8//W5
01U++uGGhec0jg==
-----END CERTIFICATE-----
Generated at Tue Nov 26 23:17:16 2024 by rpki-client on console-fra.rpki-client.org