Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
File:                     36acPZg4XUFUBfxv0wqAA2PAF8E.mft (raw, json)
Hash identifier:          YxTWRLn65biblNxytzwREVVoyss/oLYCEKXHJY0NnPo=
Subject key identifier:   69:0B:3B:5A:24:4F:75:3D:76:AA:33:7E:59:15:6F:59:4D:95:C0:F1
Authority key identifier: DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1
Certificate issuer:       /CN=dfa69c3d98385d415405fc6fd30a800363c017c1
Certificate serial:       019369DABC835EEB6EACACC6492BF35342BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
Manifest number:          137C
Signing time:             Tue 26 Nov 2024 19:02:42 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:42 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:42 +0000
Files and hashes:         1: 36acPZg4XUFUBfxv0wqAA2PAF8E.crl (hash: EeWB9aHblbEMVE6RQhkONGTVaFm6+nOJGKu08acztQc=)
                          2: 7oZFTVxbPY1wyRAFGqq0iEiXfQY.roa (hash: g9c7ivm55GRKnyLCBvfz10MVI781xoTPfCldwBVtSXs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:bc:83:5e:eb:6e:ac:ac:c6:49:2b:f3:53:42:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfa69c3d98385d415405fc6fd30a800363c017c1
        Validity
            Not Before: Nov 26 19:02:42 2024 GMT
            Not After : Nov 27 19:02:42 2024 GMT
        Subject: CN=690b3b5a244f753d76aa337e59156f594d95c0f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1d:d0:6b:72:55:ad:a1:e7:e4:97:d3:9a:f4:
                    b6:cc:22:df:0e:b5:39:44:55:f7:17:05:27:30:d9:
                    b7:01:43:1d:b5:6e:ca:8c:8d:f0:c9:ee:55:ad:3a:
                    90:0c:f5:fe:d7:69:fd:ad:4e:40:43:cd:28:77:ee:
                    09:81:f6:38:07:1c:6d:32:96:3a:d4:8a:4c:d6:ea:
                    e1:6e:68:94:d8:16:5b:79:e3:e4:62:6e:4e:45:15:
                    e5:90:69:d1:68:fd:2b:9d:12:30:7a:45:66:d9:1a:
                    03:91:56:f0:8e:e3:e6:80:07:0d:15:73:ec:80:eb:
                    cb:15:28:ce:7a:d7:ab:59:6b:bc:f4:58:ee:8f:92:
                    cc:90:ef:76:bf:04:f8:8d:aa:64:b8:15:1a:05:ee:
                    4f:ed:c3:44:9f:fd:75:ae:27:e6:36:d4:e2:78:e3:
                    42:25:37:74:b6:43:28:ad:24:17:fe:45:da:2a:e0:
                    4b:25:a1:99:ad:af:33:18:d8:28:58:a5:64:a3:bb:
                    58:ef:33:3d:d4:55:5e:37:5c:3c:9d:04:3b:76:79:
                    88:f5:2a:cc:be:e3:28:cc:b4:70:40:6f:55:03:b1:
                    b7:20:03:bc:88:b5:7b:01:b8:7e:42:e9:bd:81:cc:
                    b3:40:6b:d4:49:6f:71:6f:10:bd:45:d1:7d:39:0b:
                    86:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0B:3B:5A:24:4F:75:3D:76:AA:33:7E:59:15:6F:59:4D:95:C0:F1
            X509v3 Authority Key Identifier:
                keyid:DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c2:eb:31:18:78:91:ad:e8:44:e0:a6:f7:1f:82:f1:92:d6:
         82:ce:1b:82:ce:25:35:49:9d:1b:ac:32:66:5b:97:87:0c:d5:
         ae:be:9d:5b:6e:fb:5b:22:98:2b:99:3b:73:b8:e6:0e:fa:64:
         bb:41:53:f3:d3:21:1d:69:6b:22:a9:d8:e9:6e:a9:34:25:23:
         36:a1:4b:51:5c:d6:f6:23:f9:a7:fd:9b:e6:64:bc:74:37:cf:
         ba:b2:56:c9:18:2e:2c:86:49:3f:67:93:49:64:ca:51:c2:cb:
         e7:2a:23:c1:40:fa:98:c7:a7:8d:10:fc:93:03:0d:7d:87:00:
         9f:da:a9:ee:e9:32:2c:b2:7a:50:97:a0:4a:be:c7:5f:39:a0:
         1b:6f:79:37:68:d5:c5:ce:37:13:20:68:d2:71:5a:0b:1d:59:
         a3:37:a0:9a:6f:ab:6d:72:58:dc:e9:2c:7f:c2:46:ae:56:39:
         cc:31:cc:51:ce:38:e6:c3:01:0f:a6:86:b6:ac:5b:ae:83:60:
         ec:78:16:39:c1:a6:59:0b:56:75:84:c8:8e:bc:a5:3d:ca:0b:
         1d:af:19:82:97:c8:81:f6:2a:6e:c1:f6:96:a4:f8:e6:93:15:
         b0:cb:30:6f:00:71:f3:66:d0:2d:ad:38:59:1e:f9:83:12:61:
         dd:eb:d7:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2ryDXuturKzGSSvzU0K6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYTY5YzNkOTgzODVkNDE1NDA1ZmM2ZmQzMGE4MDAzNjNj
MDE3YzEwHhcNMjQxMTI2MTkwMjQyWhcNMjQxMTI3MTkwMjQyWjAzMTEwLwYDVQQD
Eyg2OTBiM2I1YTI0NGY3NTNkNzZhYTMzN2U1OTE1NmY1OTRkOTVjMGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB3Qa3JVraHn5JfTmvS2zCLfDrU5
RFX3FwUnMNm3AUMdtW7KjI3wye5VrTqQDPX+12n9rU5AQ80od+4JgfY4BxxtMpY6
1IpM1urhbmiU2BZbeePkYm5ORRXlkGnRaP0rnRIwekVm2RoDkVbwjuPmgAcNFXPs
gOvLFSjOeterWWu89Fjuj5LMkO92vwT4japkuBUaBe5P7cNEn/11rifmNtTieONC
JTd0tkMorSQX/kXaKuBLJaGZra8zGNgoWKVko7tY7zM91FVeN1w8nQQ7dnmI9SrM
vuMozLRwQG9VA7G3IAO8iLV7Abh+Qum9gcyzQGvUSW9xbxC9RdF9OQuGVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkLO1okT3U9dqozflkVb1lNlcDxMB8GA1UdIwQY
MBaAFN+mnD2YOF1BVAX8b9MKgANjwBfBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzZhY1BaZzRYVUZVQmZ4djB3cUFBMlBBRjhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wZDQ4MTAtOTAyYS00YjdkLTk4MTgt
M2NlZjU2MjVhZWQ2LzEvMzZhY1BaZzRYVUZVQmZ4djB3cUFBMlBBRjhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8wZDQ4MTAtOTAyYS00YjdkLTk4MTgtM2NlZjU2MjVhZWQ2
LzEvMzZhY1BaZzRYVUZVQmZ4djB3cUFBMlBBRjhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsLrMRh4
ka3oROCm9x+C8ZLWgs4bgs4lNUmdG6wyZluXhwzVrr6dW277WyKYK5k7c7jmDvpk
u0FT89MhHWlrIqnY6W6pNCUjNqFLUVzW9iP5p/2b5mS8dDfPurJWyRguLIZJP2eT
SWTKUcLL5yojwUD6mMenjRD8kwMNfYcAn9qp7ukyLLJ6UJegSr7HXzmgG295N2jV
xc43EyBo0nFaCx1Zozegmm+rbXJY3Oksf8JGrlY5zDHMUc445sMBD6aGtqxbroNg
7HgWOcGmWQtWdYTIjrylPcoLHa8ZgpfIgfYqbsH2lqT45pMVsMswbwBx82bQLa04
WR75gxJh3evXSg==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:38:33 2024 by rpki-client on console-ams.rpki-client.org