Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
File:                     SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft (raw, json)
Hash identifier:          hrPNce9QHh6cXLTa1tOzpmfX8dQYjPiLTKacs31S0yg=
Subject key identifier:   04:84:22:B7:6F:53:FD:E2:03:C7:FA:F2:C5:78:40:06:A4:D9:18:A7
Authority key identifier: 48:FA:ED:67:14:F4:6A:2B:84:3F:14:E4:0E:54:E6:26:A0:C5:00:EE
Certificate issuer:       /CN=48faed6714f46a2b843f14e40e54e626a0c500ee
Certificate serial:       0194C3F5FB753CC6BF0E7EDCD488E0CB9FAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
Manifest number:          1186
Signing time:             Sun 02 Feb 2025 00:01:05 +0000
Manifest this update:     Sun 02 Feb 2025 00:01:05 +0000
Manifest next update:     Mon 03 Feb 2025 00:01:05 +0000
Files and hashes:         1: SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl (hash: 8I6xmEtpWGDXmpQm6wLMWRxe+sranJiN9Yule/SskT4=)
                          2: YcBJMOZnarbYkNxw905RMeZes7Q.roa (hash: FciS9wueWxFbzT7TwtYBQ+UslPbKowgQrJac0SFsxR8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:f5:fb:75:3c:c6:bf:0e:7e:dc:d4:88:e0:cb:9f:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48faed6714f46a2b843f14e40e54e626a0c500ee
        Validity
            Not Before: Feb  2 00:01:05 2025 GMT
            Not After : Feb  3 00:01:05 2025 GMT
        Subject: CN=048422b76f53fde203c7faf2c5784006a4d918a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bc:8b:d7:19:04:a3:7d:38:84:58:fe:95:49:
                    a6:70:46:a2:4f:d1:79:89:4d:9e:55:4f:2e:53:41:
                    16:2b:e7:71:f0:af:ba:b4:06:ed:07:46:77:e3:d9:
                    d9:2e:df:b4:84:e4:9d:a6:3c:9f:aa:8b:9f:07:97:
                    5b:ce:1d:cc:6d:97:59:3e:e8:b4:9e:8d:ad:cc:59:
                    6f:61:ad:85:b7:97:82:dc:e7:f8:ca:89:9a:4b:65:
                    f9:3f:d6:94:82:33:98:cd:b4:cb:20:bb:5d:67:93:
                    9c:0d:f7:8d:c3:d8:06:00:31:98:63:8e:bb:bc:96:
                    5b:ba:7e:83:a9:8b:3d:cb:7b:13:9d:91:22:20:53:
                    2f:f5:ed:aa:da:3e:fa:5f:e3:63:15:3c:15:13:8e:
                    60:c3:45:5e:6c:37:12:3e:91:ed:10:49:3f:b2:60:
                    97:af:f8:60:e8:90:10:09:92:e1:0b:58:14:a8:b2:
                    d6:f3:1f:f0:f1:8d:bd:cd:f8:c1:92:bf:d2:8c:be:
                    32:ad:8c:47:81:ff:5b:30:a8:ec:00:68:ab:1a:77:
                    23:8d:86:bd:af:d6:e7:94:2c:9b:73:ff:0b:21:c7:
                    87:43:f8:b6:b4:00:c1:c8:ef:2f:22:70:3d:31:9e:
                    f3:cf:5a:84:e4:09:5a:a1:d6:3a:c3:8e:77:11:5f:
                    79:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:84:22:B7:6F:53:FD:E2:03:C7:FA:F2:C5:78:40:06:A4:D9:18:A7
            X509v3 Authority Key Identifier:
                keyid:48:FA:ED:67:14:F4:6A:2B:84:3F:14:E4:0E:54:E6:26:A0:C5:00:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:af:67:85:55:64:f7:21:6b:ec:a5:f3:d0:b6:d2:95:3e:bb:
         a4:81:cc:13:b2:0c:d7:c6:9f:41:4e:04:ff:1d:10:c8:d5:16:
         69:9c:e4:8a:ef:9f:8a:ef:45:31:a0:7e:e8:60:75:64:cd:81:
         8a:df:0d:3a:67:09:2d:46:df:f9:10:42:b1:94:61:d1:b6:a9:
         15:a1:c3:e7:cc:6d:f6:7f:d1:14:0b:79:2e:60:59:a0:b8:ff:
         30:58:47:da:71:ba:4c:fe:54:b4:d3:f1:27:b0:b6:30:82:61:
         99:60:e9:e3:0d:1d:39:d8:0c:66:0e:53:fa:5c:5f:8f:7a:2a:
         3f:2a:b8:27:b7:f5:1e:77:19:1b:8b:d7:95:19:3d:74:df:99:
         16:e8:79:39:86:ed:13:68:5e:38:a4:7c:84:ea:85:fb:f1:44:
         a8:b2:6d:dd:d2:f9:90:21:a4:9d:94:1f:3f:6a:2d:9d:b0:6c:
         26:4c:e9:de:22:5e:b6:fb:80:5a:d1:13:16:f5:54:04:54:2e:
         65:d4:54:d5:ab:bd:c8:77:0b:23:ba:f7:7a:0b:24:69:8b:f1:
         1d:c4:2f:7e:b0:d0:c9:b9:cc:03:22:9d:9a:99:0f:d1:27:d2:
         46:36:5a:9e:44:a5:f6:ab:18:37:d6:c4:35:7a:47:b6:23:28:
         d7:1b:16:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTD9ft1PMa/Dn7c1Ijgy5+rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZmFlZDY3MTRmNDZhMmI4NDNmMTRlNDBlNTRlNjI2YTBj
NTAwZWUwHhcNMjUwMjAyMDAwMTA1WhcNMjUwMjAzMDAwMTA1WjAzMTEwLwYDVQQD
EygwNDg0MjJiNzZmNTNmZGUyMDNjN2ZhZjJjNTc4NDAwNmE0ZDkxOGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsryL1xkEo304hFj+lUmmcEaiT9F5
iU2eVU8uU0EWK+dx8K+6tAbtB0Z349nZLt+0hOSdpjyfqoufB5dbzh3MbZdZPui0
no2tzFlvYa2Ft5eC3Of4yomaS2X5P9aUgjOYzbTLILtdZ5OcDfeNw9gGADGYY467
vJZbun6DqYs9y3sTnZEiIFMv9e2q2j76X+NjFTwVE45gw0VebDcSPpHtEEk/smCX
r/hg6JAQCZLhC1gUqLLW8x/w8Y29zfjBkr/SjL4yrYxHgf9bMKjsAGirGncjjYa9
r9bnlCybc/8LIceHQ/i2tADByO8vInA9MZ7zz1qE5AlaodY6w453EV95QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASEIrdvU/3iA8f68sV4QAak2RinMB8GA1UdIwQY
MBaAFEj67WcU9GorhD8U5A5U5iagxQDuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1BydFp4VDBhaXVFUHhUa0RsVG1KcURGQU80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80ZmYzZDEtY2MyZC00ZWJhLTkxM2Ut
Mjc4MjQ3N2I5ZDFlLzEvU1BydFp4VDBhaXVFUHhUa0RsVG1KcURGQU80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC80ZmYzZDEtY2MyZC00ZWJhLTkxM2UtMjc4MjQ3N2I5ZDFl
LzEvU1BydFp4VDBhaXVFUHhUa0RsVG1KcURGQU80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO69nhVVk
9yFr7KXz0LbSlT67pIHME7IM18afQU4E/x0QyNUWaZzkiu+fiu9FMaB+6GB1ZM2B
it8NOmcJLUbf+RBCsZRh0bapFaHD58xt9n/RFAt5LmBZoLj/MFhH2nG6TP5UtNPx
J7C2MIJhmWDp4w0dOdgMZg5T+lxfj3oqPyq4J7f1HncZG4vXlRk9dN+ZFuh5OYbt
E2heOKR8hOqF+/FEqLJt3dL5kCGknZQfP2otnbBsJkzp3iJetvuAWtETFvVUBFQu
ZdRU1au9yHcLI7r3egskaYvxHcQvfrDQybnMAyKdmpkP0SfSRjZankSl9qsYN9bE
NXpHtiMo1xsW5w==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:18 2025 by rpki-client