Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
File:                     lDbagFrtoKOlD_xmJR3L-0Lw814.mft (raw, json)
Hash identifier:          z/I500s6M+RDcC+Iin5TznklcTfMl13QS0cf74bKuNc=
Subject key identifier:   4B:AF:5A:F8:D6:32:0B:8B:11:E2:0A:1A:EA:75:3D:B4:44:65:82:2F
Authority key identifier: 94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E
Certificate issuer:       /CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e
Certificate serial:       019330C4EDB72722B7BD86AD8D51E5266D21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
Manifest number:          135C
Signing time:             Fri 15 Nov 2024 17:00:32 +0000
Manifest this update:     Fri 15 Nov 2024 17:00:32 +0000
Manifest next update:     Sat 16 Nov 2024 17:00:32 +0000
Files and hashes:         1: lDbagFrtoKOlD_xmJR3L-0Lw814.crl (hash: +krL5YJcEtAJ5f80WnCmZFD/eIFczSQrHOfi9dSJV9I=)
                          2: mJuJL0HYDOCWRezggzc2YK-AtiE.roa (hash: q3e5daI24vL6ph0Wc3MqKhecKQlQW1I74atRWiuHkio=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 Nov 2024 17:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:30:c4:ed:b7:27:22:b7:bd:86:ad:8d:51:e5:26:6d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e
        Validity
            Not Before: Nov 15 17:00:32 2024 GMT
            Not After : Nov 16 17:00:32 2024 GMT
        Subject: CN=4baf5af8d6320b8b11e20a1aea753db44465822f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:46:a1:0a:1d:86:03:71:bd:3d:b0:2c:a6:95:
                    55:4d:44:38:8a:7e:79:20:b7:82:c8:f1:aa:7e:23:
                    f5:e2:c7:1d:9f:5b:65:a9:9d:5e:12:bf:82:11:bd:
                    11:75:33:43:9e:2d:68:eb:49:ac:4e:63:38:f2:93:
                    4d:9c:99:0a:c5:b6:92:fc:2b:36:bb:2c:ab:79:5d:
                    82:53:82:1f:a0:8b:84:46:6f:60:bb:68:9c:3b:51:
                    80:af:31:2b:cd:cb:2b:15:83:7c:e3:28:97:86:6d:
                    8c:ef:f6:fd:4d:ce:89:de:7d:ce:18:a8:b3:54:33:
                    e8:58:4c:70:46:3d:7f:c4:29:b9:35:0e:96:2a:b0:
                    c7:ed:3a:69:9b:82:a1:0d:78:ea:d7:24:8e:2f:09:
                    3b:c4:af:aa:45:52:8a:ff:fd:f5:c6:33:45:f2:46:
                    6c:2c:70:59:ee:36:01:3f:9a:5f:a3:7f:0e:11:3d:
                    b5:84:8a:00:4e:40:97:0c:da:4b:e2:4a:67:47:81:
                    fc:29:d5:e3:83:a0:9f:f4:5d:59:19:77:f4:c4:41:
                    36:38:db:d6:b3:ac:f5:5c:53:9d:36:72:27:f2:f7:
                    e3:25:e5:e8:cf:2c:29:35:28:3a:19:b9:33:7a:ea:
                    f2:e4:19:c7:fa:a2:3c:34:a9:f4:75:66:d1:87:c6:
                    0e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AF:5A:F8:D6:32:0B:8B:11:E2:0A:1A:EA:75:3D:B4:44:65:82:2F
            X509v3 Authority Key Identifier:
                keyid:94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:e6:6d:80:6b:c9:f7:e0:43:57:21:c5:43:49:9f:fe:34:c2:
         c3:0e:8e:f6:5d:8a:1c:1e:bd:8d:dd:e4:a3:4c:77:8e:6a:d0:
         65:ad:1b:21:0d:b4:df:d2:bc:02:78:60:91:18:a3:da:08:34:
         b3:35:a3:0e:74:74:7a:43:a8:4c:d7:30:c2:f6:f6:3b:50:ed:
         a0:cf:0f:29:47:dd:85:41:e8:b1:f0:19:bf:35:bd:3d:a0:84:
         81:11:69:a2:6e:2f:d7:ad:50:83:93:05:4d:47:fd:33:5e:b2:
         1d:43:1b:1d:6b:99:08:84:37:14:e0:d9:0a:bf:65:df:8b:ea:
         32:8e:3f:a3:a6:8d:46:00:fd:0b:1d:17:a7:94:fa:8a:a5:eb:
         23:0a:82:51:3f:f0:34:50:fc:a9:d2:bd:ad:f3:87:60:7c:09:
         21:84:25:27:0e:f5:49:4e:d4:54:1c:a9:cf:a0:84:4b:9f:49:
         e7:89:d8:4d:2c:35:f8:22:81:51:fb:fe:1e:e0:7f:89:96:d1:
         73:5f:95:d1:87:55:b8:91:c3:18:d0:ac:39:3a:85:01:03:e0:
         b5:42:44:5e:a9:10:3a:c5:af:3e:b8:e3:b1:5b:07:dc:b2:d6:
         d6:39:07:4f:1d:e4:1a:78:97:79:2f:84:c4:75:fe:52:3b:d5:
         9b:7d:9e:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZMwxO23JyK3vYatjVHlJm0hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MzZkYTgwNWFlZGEwYTNhNTBmZmM2NjI1MWRjYmZiNDJm
MGYzNWUwHhcNMjQxMTE1MTcwMDMyWhcNMjQxMTE2MTcwMDMyWjAzMTEwLwYDVQQD
Eyg0YmFmNWFmOGQ2MzIwYjhiMTFlMjBhMWFlYTc1M2RiNDQ0NjU4MjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkahCh2GA3G9PbAsppVVTUQ4in55
ILeCyPGqfiP14scdn1tlqZ1eEr+CEb0RdTNDni1o60msTmM48pNNnJkKxbaS/Cs2
uyyreV2CU4IfoIuERm9gu2icO1GArzErzcsrFYN84yiXhm2M7/b9Tc6J3n3OGKiz
VDPoWExwRj1/xCm5NQ6WKrDH7Tppm4KhDXjq1ySOLwk7xK+qRVKK//31xjNF8kZs
LHBZ7jYBP5pfo38OET21hIoATkCXDNpL4kpnR4H8KdXjg6Cf9F1ZGXf0xEE2ONvW
s6z1XFOdNnIn8vfjJeXozywpNSg6Gbkzeury5BnH+qI8NKn0dWbRh8YOgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuvWvjWMguLEeIKGup1PbREZYIvMB8GA1UdIwQY
MBaAFJQ22oBa7aCjpQ/8ZiUdy/tC8PNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbERiYWdGcnRvS09sRF94bUpSM0wtMEx3ODE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZTYyNTAtNTQyMC00MzE4LTkyODQt
MmMyNzcxZThlMTc3LzEvbERiYWdGcnRvS09sRF94bUpSM0wtMEx3ODE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wZTYyNTAtNTQyMC00MzE4LTkyODQtMmMyNzcxZThlMTc3
LzEvbERiYWdGcnRvS09sRF94bUpSM0wtMEx3ODE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgeZtgGvJ
9+BDVyHFQ0mf/jTCww6O9l2KHB69jd3ko0x3jmrQZa0bIQ2039K8AnhgkRij2gg0
szWjDnR0ekOoTNcwwvb2O1DtoM8PKUfdhUHosfAZvzW9PaCEgRFpom4v161Qg5MF
TUf9M16yHUMbHWuZCIQ3FODZCr9l34vqMo4/o6aNRgD9Cx0Xp5T6iqXrIwqCUT/w
NFD8qdK9rfOHYHwJIYQlJw71SU7UVBypz6CES59J54nYTSw1+CKBUfv+HuB/iZbR
c1+V0YdVuJHDGNCsOTqFAQPgtUJEXqkQOsWvPrjjsVsH3LLW1jkHTx3kGniXeS+E
xHX+UjvVm32eJQ==
-----END CERTIFICATE-----
Generated at Fri Nov 15 19:43:10 2024 by rpki-client on console-fra.rpki-client.org