Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
File:                     rLVLzEkpGh8yt86tTylogtBTFJI.mft (raw, json)
Hash identifier:          ThEZCPWZrIxY98f4AZ/PetC9O7BmU9h69ZGsY7xraQQ=
Subject key identifier:   E2:9E:6F:EB:61:FF:C6:B4:2D:94:1E:A1:05:CA:AA:4B:F8:30:2A:E8
Authority key identifier: AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92
Certificate issuer:       /CN=acb54bcc49291a1f32b7cead4f296882d0531492
Certificate serial:       0193549C90390BB4FFCA6F543C53B3F61BFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 16:02:46 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:46 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:46 +0000
Files and hashes:         1: 1BNIV5NkRTj5CjNR6dxPoCeqQLk.roa (hash: OQ1K1b23vvC31SAfUJDSqdcbbcqYisms5QfhHvMan2s=)
                          2: HzEaWN2wE3J6qMUDkQEtIVh2LZA.roa (hash: pvvGuSDldZ1sLgH7atKBPNn58A/CP7fzdGK+l/XFsVM=)
                          3: SdtEv5h89KVftBAvhjsPcXjFUgE.roa (hash: Vwyf4J4z5TjpDEBV9qMjzmVvI9/CJvK7GD0NH6CC7sU=)
                          4: qKs1YWZUrZZ3gjRwE3dglX4BIeM.roa (hash: +LfEhJeRaLV5Z8wfcDeb4S7e0iNY1GBXp3UGrFDI7is=)
                          5: rLVLzEkpGh8yt86tTylogtBTFJI.crl (hash: HdxBWvyM7Yp1rceUEUMQNGc06NF73qgQd/S7wh9+0qY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:90:39:0b:b4:ff:ca:6f:54:3c:53:b3:f6:1b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acb54bcc49291a1f32b7cead4f296882d0531492
        Validity
            Not Before: Nov 22 16:02:46 2024 GMT
            Not After : Nov 23 16:02:46 2024 GMT
        Subject: CN=e29e6feb61ffc6b42d941ea105caaa4bf8302ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ac:b2:08:ee:a3:7c:c6:d3:1f:7b:29:6a:0d:
                    0a:ff:ee:ba:e0:a0:52:4f:f7:7f:88:1e:62:3c:a7:
                    3f:f2:5c:31:73:07:95:33:98:32:46:14:8d:d5:a2:
                    8f:7c:bc:6f:83:21:2d:4d:9e:59:1e:0f:22:08:39:
                    17:23:81:f7:2b:76:07:79:8e:66:6c:fe:e4:7e:e0:
                    79:73:5b:8c:b6:c7:c1:35:bf:dc:22:1d:e9:fc:17:
                    b6:23:44:97:a0:bd:62:24:6a:4e:a5:ca:9f:f0:d6:
                    3a:46:10:c8:66:be:ef:72:0d:60:07:9d:5f:b2:8a:
                    0f:d5:8a:36:c6:8b:08:b8:06:ba:36:45:66:96:6e:
                    3c:c2:02:75:06:e4:da:0d:62:bf:f7:e6:a9:54:91:
                    b4:4e:01:39:e0:99:b0:f4:c3:0d:2d:1f:ed:8a:0a:
                    01:a8:e2:17:b7:2e:b0:72:25:a8:b3:95:e9:c6:f5:
                    40:56:eb:b2:6c:4a:e5:7f:7b:2d:0e:55:6a:73:2d:
                    e6:fe:48:b2:44:a3:76:8a:be:14:1d:ef:d1:8f:fa:
                    17:2a:53:9d:53:dd:40:d2:31:62:c8:8e:fa:da:ee:
                    af:12:40:90:2e:7d:cb:24:12:d6:48:ea:31:20:ec:
                    53:0e:e2:60:cb:fc:93:31:56:f0:9d:63:4b:4b:51:
                    ac:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9E:6F:EB:61:FF:C6:B4:2D:94:1E:A1:05:CA:AA:4B:F8:30:2A:E8
            X509v3 Authority Key Identifier:
                keyid:AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:68:65:7e:e6:e3:e9:32:b1:22:80:21:bd:80:35:cc:5f:ba:
         e2:4c:74:bd:87:48:db:a2:b1:28:a3:c8:ca:c1:f5:a7:50:84:
         ad:ca:c1:3b:3a:97:76:bf:95:7b:6c:2b:1c:e0:1b:51:35:32:
         1b:ca:87:67:9d:65:58:64:50:af:de:7c:f5:0f:4b:e9:cb:79:
         8c:7b:30:db:10:15:dc:5e:46:04:d6:1c:93:93:3d:d5:2a:ca:
         9e:81:a2:1a:87:41:6d:70:98:de:f0:a0:9d:5f:47:8c:19:f6:
         96:b4:05:44:9e:a5:a8:27:de:3f:9e:72:44:75:d6:3c:35:75:
         58:bf:59:bb:04:b8:20:ba:59:37:c0:5f:f9:4d:e9:da:03:cc:
         22:f3:bf:8c:46:36:6d:90:9d:25:c0:57:9e:70:19:f7:e8:c4:
         83:4b:c0:f8:0e:9b:88:a7:2b:e2:88:37:52:e0:71:b7:47:6c:
         04:02:64:0f:4a:c3:fb:42:13:99:4a:4e:a4:94:87:3c:ae:67:
         9b:f0:b0:2c:77:19:5b:b1:88:de:8b:0e:00:b7:28:41:a7:9f:
         58:5e:d3:7d:c6:ae:38:b4:3d:31:30:ef:fd:14:80:42:c7:a9:
         4a:74:ee:3b:69:f6:fd:49:83:69:99:c1:1e:38:30:ab:c1:c5:
         19:f8:80:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUnJA5C7T/ym9UPFOz9hv+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYjU0YmNjNDkyOTFhMWYzMmI3Y2VhZDRmMjk2ODgyZDA1
MzE0OTIwHhcNMjQxMTIyMTYwMjQ2WhcNMjQxMTIzMTYwMjQ2WjAzMTEwLwYDVQQD
EyhlMjllNmZlYjYxZmZjNmI0MmQ5NDFlYTEwNWNhYWE0YmY4MzAyYWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqyyCO6jfMbTH3spag0K/+664KBS
T/d/iB5iPKc/8lwxcweVM5gyRhSN1aKPfLxvgyEtTZ5ZHg8iCDkXI4H3K3YHeY5m
bP7kfuB5c1uMtsfBNb/cIh3p/Be2I0SXoL1iJGpOpcqf8NY6RhDIZr7vcg1gB51f
sooP1Yo2xosIuAa6NkVmlm48wgJ1BuTaDWK/9+apVJG0TgE54Jmw9MMNLR/tigoB
qOIXty6wciWos5XpxvVAVuuybErlf3stDlVqcy3m/kiyRKN2ir4UHe/Rj/oXKlOd
U91A0jFiyI762u6vEkCQLn3LJBLWSOoxIOxTDuJgy/yTMVbwnWNLS1GsewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKeb+th/8a0LZQeoQXKqkv4MCroMB8GA1UdIwQY
MBaAFKy1S8xJKRofMrfOrU8paILQUxSSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckxWTHpFa3BHaDh5dDg2dFR5bG9ndEJURkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jZDJiZGQtZDNjNC00ZDYwLWIwOTYt
YWYzYTY4NWQ1NzlmLzEvckxWTHpFa3BHaDh5dDg2dFR5bG9ndEJURkpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jZDJiZGQtZDNjNC00ZDYwLWIwOTYtYWYzYTY4NWQ1Nzlm
LzEvckxWTHpFa3BHaDh5dDg2dFR5bG9ndEJURkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWhlfubj
6TKxIoAhvYA1zF+64kx0vYdI26KxKKPIysH1p1CErcrBOzqXdr+Ve2wrHOAbUTUy
G8qHZ51lWGRQr9589Q9L6ct5jHsw2xAV3F5GBNYck5M91SrKnoGiGodBbXCY3vCg
nV9HjBn2lrQFRJ6lqCfeP55yRHXWPDV1WL9ZuwS4ILpZN8Bf+U3p2gPMIvO/jEY2
bZCdJcBXnnAZ9+jEg0vA+A6biKcr4og3UuBxt0dsBAJkD0rD+0ITmUpOpJSHPK5n
m/CwLHcZW7GI3osOALcoQaefWF7TfcauOLQ9MTDv/RSAQsepSnTuO2n2/UmDaZnB
Hjgwq8HFGfiAZQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:26:58 2024 by rpki-client on console-fra.rpki-client.org