Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
File:                     R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft (raw, json)
Hash identifier:          6as/kEQ0faLL5V7t66hWyWPN81bc7+jN2oUE5/trswo=
Subject key identifier:   60:B1:2D:CC:07:E9:34:EF:FE:4D:2F:B2:CF:7F:3B:80:86:58:B5:5F
Authority key identifier: 47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D
Certificate issuer:       /CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d
Certificate serial:       0194C5082675DD5196C5DAF4D672EAD1C1F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
Manifest number:          0ECB
Signing time:             Sun 02 Feb 2025 05:00:33 +0000
Manifest this update:     Sun 02 Feb 2025 05:00:33 +0000
Manifest next update:     Mon 03 Feb 2025 05:00:33 +0000
Files and hashes:         1: 4a0HJYQRvlOIxWqFzSTS62M9JlY.roa (hash: v/GVEGRuCChRazXZo6V06Cm9vDFae25oHTyVCpwMgzk=)
                          2: R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl (hash: AyJ145v7P2Q9JtRkK2sNlLmasTT9CmtrA5+NX3WMUYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c5:08:26:75:dd:51:96:c5:da:f4:d6:72:ea:d1:c1:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d
        Validity
            Not Before: Feb  2 05:00:33 2025 GMT
            Not After : Feb  3 05:00:33 2025 GMT
        Subject: CN=60b12dcc07e934effe4d2fb2cf7f3b808658b55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b9:28:df:12:45:c0:2a:63:52:fc:11:c0:17:
                    c0:f4:c8:6b:84:5a:d0:9a:4f:92:a5:e7:0c:9c:d0:
                    2a:b2:0a:78:1f:20:47:3d:d7:a5:70:e1:64:a8:4a:
                    de:62:b9:43:14:0c:9f:ed:4a:cf:37:31:ce:4c:29:
                    b4:7b:81:09:1b:63:b6:92:9a:11:67:34:c5:4c:b4:
                    c4:f2:07:f7:be:1d:c4:49:dc:27:1b:9a:2b:a6:09:
                    45:92:b9:43:bd:88:ca:1e:e2:ed:7e:9f:1c:23:db:
                    82:c9:69:50:3d:e5:47:3b:ca:c0:8e:d4:4c:42:23:
                    89:5e:15:73:cd:9c:6e:1b:64:9c:36:7c:4a:eb:e0:
                    02:9f:0f:c5:b8:16:60:e9:ad:87:d5:3f:cc:c3:76:
                    c9:de:ee:22:5f:31:76:b2:a0:20:00:e1:62:a4:0b:
                    7c:13:f3:86:c9:8c:ca:ee:d5:35:58:ea:76:e1:6a:
                    54:a8:75:5f:b2:03:31:0c:0d:de:0d:ef:5d:b8:e5:
                    c7:4f:e7:08:1e:62:63:18:79:b1:ce:4e:c5:15:0e:
                    c5:b4:79:c6:e4:47:4d:6e:0b:fa:72:42:24:fd:49:
                    5b:8d:cd:2f:72:8a:b2:78:5a:2d:51:30:52:a2:cf:
                    9c:63:93:d0:54:22:d6:a7:ac:24:ed:5b:47:25:5a:
                    6f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B1:2D:CC:07:E9:34:EF:FE:4D:2F:B2:CF:7F:3B:80:86:58:B5:5F
            X509v3 Authority Key Identifier:
                keyid:47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:1c:5e:0c:3f:3f:4c:f7:82:c4:70:30:72:c0:d9:08:92:e3:
         10:ed:b1:ae:5d:0f:1c:65:a4:3b:87:77:f2:49:5e:ab:2b:77:
         18:bc:ef:72:20:98:93:cd:94:97:0f:0a:5f:70:8e:78:5a:50:
         f5:5d:4d:69:19:20:54:7c:69:4b:f7:b9:e9:cf:e3:54:d7:99:
         a7:d3:a1:aa:02:63:28:77:4f:aa:6d:b1:ce:32:32:0a:15:f6:
         22:b6:0d:5a:3e:62:47:2f:83:cd:21:d4:a7:60:c1:21:03:28:
         b6:49:ab:85:1c:d6:c4:b9:ba:c0:34:54:e7:10:f6:ac:4a:18:
         8f:d1:c8:14:24:9b:04:be:0e:cd:65:c5:39:3e:b3:18:8c:04:
         15:05:81:77:7a:77:e6:7d:63:64:44:ec:9d:6b:5a:75:7e:68:
         6c:14:ab:9a:0d:fc:14:11:65:6b:07:fe:c8:38:5d:06:f9:a8:
         bc:77:4b:e0:27:df:22:eb:73:cb:0b:2a:ba:dd:82:02:5b:b7:
         d7:7c:e5:f2:74:b0:85:30:9e:dd:47:89:72:f1:39:21:4c:bc:
         bd:17:b2:5c:79:40:4a:56:98:50:9d:68:95:7d:10:65:72:8f:
         15:74:1d:63:06:61:ea:ea:05:c7:c4:0e:32:00:e0:fc:c9:b3:
         db:53:0a:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTFCCZ13VGWxdr01nLq0cH4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YmNkNzcwZjhlYTNkNDhlY2JiNGMzZWFiODk1ZjQyMmZm
YWM5MGQwHhcNMjUwMjAyMDUwMDMzWhcNMjUwMjAzMDUwMDMzWjAzMTEwLwYDVQQD
Eyg2MGIxMmRjYzA3ZTkzNGVmZmU0ZDJmYjJjZjdmM2I4MDg2NThiNTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7ko3xJFwCpjUvwRwBfA9MhrhFrQ
mk+SpecMnNAqsgp4HyBHPdelcOFkqEreYrlDFAyf7UrPNzHOTCm0e4EJG2O2kpoR
ZzTFTLTE8gf3vh3ESdwnG5orpglFkrlDvYjKHuLtfp8cI9uCyWlQPeVHO8rAjtRM
QiOJXhVzzZxuG2ScNnxK6+ACnw/FuBZg6a2H1T/Mw3bJ3u4iXzF2sqAgAOFipAt8
E/OGyYzK7tU1WOp24WpUqHVfsgMxDA3eDe9duOXHT+cIHmJjGHmxzk7FFQ7FtHnG
5EdNbgv6ckIk/Ulbjc0vcoqyeFotUTBSos+cY5PQVCLWp6wk7VtHJVpvQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCxLcwH6TTv/k0vss9/O4CGWLVfMB8GA1UdIwQY
MBaAFEe813D46j1I7LtMPquJX0Iv+skNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjd6WGNQanFQVWpzdTB3LXE0bGZRaV82eVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85N2E1YzktNmIyOC00YzYxLTk2ZTEt
YTZkMDAwMjAzZmI1LzEvUjd6WGNQanFQVWpzdTB3LXE0bGZRaV82eVEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85N2E1YzktNmIyOC00YzYxLTk2ZTEtYTZkMDAwMjAzZmI1
LzEvUjd6WGNQanFQVWpzdTB3LXE0bGZRaV82eVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRxeDD8/
TPeCxHAwcsDZCJLjEO2xrl0PHGWkO4d38kleqyt3GLzvciCYk82Ulw8KX3COeFpQ
9V1NaRkgVHxpS/e56c/jVNeZp9OhqgJjKHdPqm2xzjIyChX2IrYNWj5iRy+DzSHU
p2DBIQMotkmrhRzWxLm6wDRU5xD2rEoYj9HIFCSbBL4OzWXFOT6zGIwEFQWBd3p3
5n1jZETsnWtadX5obBSrmg38FBFlawf+yDhdBvmovHdL4CffIutzywsqut2CAlu3
13zl8nSwhTCe3UeJcvE5IUy8vReyXHlASlaYUJ1olX0QZXKPFXQdYwZh6uoFx8QO
MgDg/Mmz21MKtQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:45:18 2025 by rpki-client