Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
File:                     s6dYkEx1hW41haRDOuXsV_7xo8c.mft (raw, json)
Hash identifier:          UwO11+05gC0aMnVuzRbMGgg0bmR2l2mJ7EwunCa9ax8=
Subject key identifier:   04:AE:1D:FF:03:9D:C1:51:AD:78:01:97:83:AF:C8:1A:88:09:A1:B4
Authority key identifier: B3:A7:58:90:4C:75:85:6E:35:85:A4:43:3A:E5:EC:57:FE:F1:A3:C7
Certificate issuer:       /CN=b3a758904c75856e3585a4433ae5ec57fef1a3c7
Certificate serial:       019369DA7D489F8B5B84CD26416CC3B41349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 19:02:26 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:26 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:26 +0000
Files and hashes:         1: s6dYkEx1hW41haRDOuXsV_7xo8c.crl (hash: vLItcoB61H7AyHkATxfpnY4JF9fA7XkA+5PT1z44DRw=)
                          2: tyk1W06i-d1FHfI_ivsk0l6qWQg.roa (hash: kXndtcep+tk32XCzwygsBCoadb1shDRH2vmSfiEp8h4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:7d:48:9f:8b:5b:84:cd:26:41:6c:c3:b4:13:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3a758904c75856e3585a4433ae5ec57fef1a3c7
        Validity
            Not Before: Nov 26 19:02:26 2024 GMT
            Not After : Nov 27 19:02:26 2024 GMT
        Subject: CN=04ae1dff039dc151ad78019783afc81a8809a1b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2c:98:a0:21:4f:35:f6:07:ae:d6:74:2a:7a:
                    a6:7c:65:24:27:f8:22:48:dd:f5:19:17:b9:aa:c3:
                    a8:79:76:a7:ca:e9:a9:b6:3d:73:b4:5e:4e:89:2c:
                    e9:9e:ae:66:ab:dd:ba:16:0b:c3:1c:f2:04:5e:29:
                    8b:20:d7:8d:81:49:55:82:16:65:ef:12:be:9e:07:
                    bd:74:ef:50:21:36:4d:2c:d6:f2:0b:91:e5:21:75:
                    ef:d9:d4:38:20:1d:f9:96:5f:03:00:12:b4:04:c4:
                    9b:c5:a4:ee:51:51:fc:f6:7b:17:dc:51:89:01:07:
                    77:57:6b:ee:a5:aa:64:57:0a:0d:b9:db:95:72:51:
                    49:80:e5:ca:f5:32:57:f6:bf:d3:92:55:9e:b4:56:
                    b1:d1:2a:41:56:04:77:33:9a:63:38:7a:ff:22:16:
                    15:35:ff:80:51:30:8b:d2:dd:6a:91:04:c9:95:8c:
                    57:7e:77:08:ec:00:92:cd:5b:5c:18:69:76:5f:7b:
                    c5:28:15:a6:e8:58:6a:00:11:1d:ce:22:92:72:c0:
                    b4:a8:79:8f:0a:da:71:89:07:77:8e:84:cb:9e:fe:
                    be:1a:4f:23:c5:0e:78:e5:b9:e8:d5:bb:30:58:73:
                    0b:e0:c4:87:f4:0c:fe:e9:33:ad:30:bb:3c:4f:21:
                    6c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AE:1D:FF:03:9D:C1:51:AD:78:01:97:83:AF:C8:1A:88:09:A1:B4
            X509v3 Authority Key Identifier:
                keyid:B3:A7:58:90:4C:75:85:6E:35:85:A4:43:3A:E5:EC:57:FE:F1:A3:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:89:91:f3:bd:51:d3:fe:1f:68:84:f1:2c:6e:bc:7d:0d:1b:
         4b:97:f4:21:b9:d2:b1:f3:49:98:ff:f2:d2:c1:d8:98:56:f5:
         82:e3:dd:f8:75:65:ed:d2:90:14:31:cd:48:cf:e7:bf:94:88:
         5f:14:08:a2:9a:20:11:f3:5e:d4:b1:97:14:e7:5d:77:74:96:
         93:70:7c:29:0b:48:22:97:76:77:aa:b9:3f:b1:8f:96:c5:b4:
         6c:24:90:c2:d3:47:d4:4b:c7:9b:90:76:61:f9:6f:e6:4d:bd:
         e7:49:4a:c9:21:82:a7:62:0b:68:80:c2:9f:8e:f1:bf:21:fb:
         09:a4:8b:6d:15:7e:d8:44:c5:cd:75:b5:3b:fe:12:9b:b7:74:
         97:20:2d:f9:65:ee:dd:dc:c8:84:d8:34:d3:6f:f9:0a:34:ca:
         d1:53:03:a7:fc:4c:fc:50:d2:b2:47:cb:91:ff:20:80:49:9f:
         ed:4b:c1:21:30:c8:3f:e9:65:8c:6c:c5:5f:56:08:ca:32:b0:
         c0:61:59:e5:f4:a9:3b:c3:70:ac:8a:4a:53:f0:fb:5e:93:06:
         c1:35:4f:c0:57:da:91:bf:e9:ed:d3:7b:e4:b0:48:d1:10:b0:
         aa:06:ca:85:4e:7f:a0:ad:69:d8:a3:e7:1c:66:ef:be:de:7f:
         7e:ca:12:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2n1In4tbhM0mQWzDtBNJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYTc1ODkwNGM3NTg1NmUzNTg1YTQ0MzNhZTVlYzU3ZmVm
MWEzYzcwHhcNMjQxMTI2MTkwMjI2WhcNMjQxMTI3MTkwMjI2WjAzMTEwLwYDVQQD
EygwNGFlMWRmZjAzOWRjMTUxYWQ3ODAxOTc4M2FmYzgxYTg4MDlhMWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iyYoCFPNfYHrtZ0KnqmfGUkJ/gi
SN31GRe5qsOoeXanyumptj1ztF5OiSzpnq5mq926FgvDHPIEXimLINeNgUlVghZl
7xK+nge9dO9QITZNLNbyC5HlIXXv2dQ4IB35ll8DABK0BMSbxaTuUVH89nsX3FGJ
AQd3V2vupapkVwoNuduVclFJgOXK9TJX9r/TklWetFax0SpBVgR3M5pjOHr/IhYV
Nf+AUTCL0t1qkQTJlYxXfncI7ACSzVtcGGl2X3vFKBWm6FhqABEdziKScsC0qHmP
CtpxiQd3joTLnv6+Gk8jxQ545bno1bswWHML4MSH9Az+6TOtMLs8TyFsoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASuHf8DncFRrXgBl4OvyBqICaG0MB8GA1UdIwQY
MBaAFLOnWJBMdYVuNYWkQzrl7Ff+8aPHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczZkWWtFeDFoVzQxaGFSRE91WHNWXzd4bzhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8xNDljMDEtODQwZC00NWY2LTgyM2Yt
ZTJmMGUxYzI2MTA1LzEvczZkWWtFeDFoVzQxaGFSRE91WHNWXzd4bzhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8xNDljMDEtODQwZC00NWY2LTgyM2YtZTJmMGUxYzI2MTA1
LzEvczZkWWtFeDFoVzQxaGFSRE91WHNWXzd4bzhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARYmR871R
0/4faITxLG68fQ0bS5f0IbnSsfNJmP/y0sHYmFb1guPd+HVl7dKQFDHNSM/nv5SI
XxQIopogEfNe1LGXFOddd3SWk3B8KQtIIpd2d6q5P7GPlsW0bCSQwtNH1EvHm5B2
Yflv5k2950lKySGCp2ILaIDCn47xvyH7CaSLbRV+2ETFzXW1O/4Sm7d0lyAt+WXu
3dzIhNg002/5CjTK0VMDp/xM/FDSskfLkf8ggEmf7UvBITDIP+lljGzFX1YIyjKw
wGFZ5fSpO8NwrIpKU/D7XpMGwTVPwFfakb/p7dN75LBI0RCwqgbKhU5/oK1p2KPn
HGbvvt5/fsoScA==
-----END CERTIFICATE-----
Generated at Wed Nov 27 01:01:36 2024 by rpki-client on console-fra.rpki-client.org