Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
File:                     oCcpAmWOFcs0vVCcOVC63iGnltI.mft (raw, json)
Hash identifier:          wBwFByuSvKp36uszVi5HMn0YYCA9u6of5wpv+spfBms=
Subject key identifier:   05:AC:56:DE:6D:4A:E0:45:42:EB:DC:20:7A:B1:45:34:6F:37:B9:35
Authority key identifier: A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2
Certificate issuer:       /CN=a0272902658e15cb34bd509c3950bade21a796d2
Certificate serial:       01935689BBFF1AF0FFA91E0B99B5C3034D1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 01:01:27 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:27 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:27 +0000
Files and hashes:         1: fFiq-zQjdnXFssuyxexhAtu0KNs.roa (hash: fOTcu6b0Fik1g9QByDEL9cm/ehFTel3KMicNvsTKacE=)
                          2: oCcpAmWOFcs0vVCcOVC63iGnltI.crl (hash: ewJOfRJOzDqFL5+OE4U1Ai6WDA/mettfN9WUVTlSseQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:bb:ff:1a:f0:ff:a9:1e:0b:99:b5:c3:03:4d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0272902658e15cb34bd509c3950bade21a796d2
        Validity
            Not Before: Nov 23 01:01:27 2024 GMT
            Not After : Nov 24 01:01:27 2024 GMT
        Subject: CN=05ac56de6d4ae04542ebdc207ab145346f37b935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:03:e3:39:a3:55:f5:43:4c:da:f1:31:51:48:
                    d0:b6:cc:33:a7:33:77:cc:97:40:5b:c9:3c:63:df:
                    6f:b5:e0:12:4d:fe:d8:47:e6:71:83:1a:f2:8f:9f:
                    69:d5:60:46:13:ff:b4:1b:94:93:dd:13:69:8a:bf:
                    d3:53:00:17:b3:2d:70:6a:14:79:9a:f7:86:09:d0:
                    2c:89:47:f5:11:5e:c3:bc:bb:65:c6:57:3f:eb:4a:
                    ba:f4:11:24:34:b6:92:ca:f0:b8:d2:07:b1:fb:b0:
                    23:99:18:4c:3a:45:93:09:de:21:d6:1b:d3:02:77:
                    4b:d2:32:21:43:23:13:a7:28:8f:1f:3b:01:54:94:
                    ed:a3:57:ce:1d:9c:29:7b:e1:19:fc:da:9b:67:cc:
                    99:71:6e:cd:96:d4:a5:40:2f:c5:ac:80:28:66:00:
                    db:91:5a:00:a3:d7:57:3d:f7:2e:c9:f7:ca:da:d1:
                    3b:32:af:f7:70:ae:08:e1:81:53:2d:ea:3b:38:f3:
                    d1:08:c0:14:82:a7:91:cd:ac:80:66:ea:b7:4c:30:
                    60:8a:66:bc:39:76:eb:ba:5b:e5:a6:d9:40:94:11:
                    1c:56:dd:4f:a6:0e:76:55:9b:ef:c1:10:3b:f7:a9:
                    ee:63:9b:9b:fa:55:7b:a1:c4:01:03:6d:c9:05:59:
                    1b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AC:56:DE:6D:4A:E0:45:42:EB:DC:20:7A:B1:45:34:6F:37:B9:35
            X509v3 Authority Key Identifier:
                keyid:A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:4f:c4:76:c9:33:e8:9d:34:0b:ec:fd:c9:97:8f:98:e9:03:
         33:b0:64:75:39:fe:3f:fb:36:66:6e:85:7e:ef:93:c3:f5:17:
         cf:d3:31:54:35:a4:bf:b3:14:d6:0b:10:50:12:4f:68:f4:84:
         60:c6:17:96:e3:32:00:78:05:b4:f6:d9:e0:d0:b3:6b:a6:fb:
         d2:23:a5:2e:d9:77:34:5e:e7:ac:7c:49:27:41:14:16:61:2e:
         a6:a0:cc:13:e3:61:5c:44:ee:1a:55:8a:28:a3:b1:07:14:a1:
         55:a6:6e:d6:9f:19:a0:7e:5f:7b:67:36:29:a5:bb:5e:53:d7:
         05:31:1d:82:6b:5b:5a:c0:89:af:5e:3a:6b:c4:8d:77:1e:7f:
         b8:b2:3f:a4:c0:d9:89:92:d3:ca:6f:fc:b8:da:3f:75:44:94:
         9f:cd:e3:7e:0c:7f:2e:5d:2e:d7:27:81:38:68:83:6c:57:49:
         a2:5c:4c:6d:47:f2:ad:49:f1:ab:ff:98:5e:5e:02:fe:07:cf:
         9f:05:1d:69:bf:bc:a6:db:da:8b:42:4c:b8:eb:7f:52:9d:d0:
         41:e6:27:4b:2c:f7:8f:05:ad:dc:33:88:b2:0e:a4:a7:6e:67:
         ff:e9:8a:20:a8:07:b6:a8:82:e5:8a:44:a2:d3:2e:75:bc:c5:
         7f:09:fc:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWibv/GvD/qR4LmbXDA00dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMjcyOTAyNjU4ZTE1Y2IzNGJkNTA5YzM5NTBiYWRlMjFh
Nzk2ZDIwHhcNMjQxMTIzMDEwMTI3WhcNMjQxMTI0MDEwMTI3WjAzMTEwLwYDVQQD
EygwNWFjNTZkZTZkNGFlMDQ1NDJlYmRjMjA3YWIxNDUzNDZmMzdiOTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAPjOaNV9UNM2vExUUjQtswzpzN3
zJdAW8k8Y99vteASTf7YR+Zxgxryj59p1WBGE/+0G5ST3RNpir/TUwAXsy1wahR5
mveGCdAsiUf1EV7DvLtlxlc/60q69BEkNLaSyvC40gex+7AjmRhMOkWTCd4h1hvT
AndL0jIhQyMTpyiPHzsBVJTto1fOHZwpe+EZ/NqbZ8yZcW7NltSlQC/FrIAoZgDb
kVoAo9dXPfcuyffK2tE7Mq/3cK4I4YFTLeo7OPPRCMAUgqeRzayAZuq3TDBgima8
OXbrulvlptlAlBEcVt1Ppg52VZvvwRA796nuY5ub+lV7ocQBA23JBVkb4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWsVt5tSuBFQuvcIHqxRTRvN7k1MB8GA1UdIwQY
MBaAFKAnKQJljhXLNL1QnDlQut4hp5bSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0NjcEFtV09GY3MwdlZDY09WQzYzaUdubHRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zZTlkMWMtNGIwOC00NWM3LWE5ZTgt
OTI3NTI2ZTZmMmQ5LzEvb0NjcEFtV09GY3MwdlZDY09WQzYzaUdubHRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zZTlkMWMtNGIwOC00NWM3LWE5ZTgtOTI3NTI2ZTZmMmQ5
LzEvb0NjcEFtV09GY3MwdlZDY09WQzYzaUdubHRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPU/Edskz
6J00C+z9yZePmOkDM7BkdTn+P/s2Zm6Ffu+Tw/UXz9MxVDWkv7MU1gsQUBJPaPSE
YMYXluMyAHgFtPbZ4NCza6b70iOlLtl3NF7nrHxJJ0EUFmEupqDME+NhXETuGlWK
KKOxBxShVaZu1p8ZoH5fe2c2KaW7XlPXBTEdgmtbWsCJr146a8SNdx5/uLI/pMDZ
iZLTym/8uNo/dUSUn83jfgx/Ll0u1yeBOGiDbFdJolxMbUfyrUnxq/+YXl4C/gfP
nwUdab+8ptvai0JMuOt/Up3QQeYnSyz3jwWt3DOIsg6kp25n/+mKIKgHtqiC5YpE
otMudbzFfwn8wA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:29 2024 by rpki-client on console-fra.rpki-client.org