Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
File:                     l_RnToI2vdw9IyegKwq_unmlSDw.mft (raw, json)
Hash identifier:          v3aQiaJotZIaGkn7c6F6xUKmzSJigvumITLM3/rd0SM=
Subject key identifier:   BC:C6:73:36:41:39:F3:CE:BF:8D:B2:58:5A:E8:1E:40:BE:38:FE:04
Authority key identifier: 97:F4:67:4E:82:36:BD:DC:3D:23:27:A0:2B:0A:BF:BA:79:A5:48:3C
Certificate issuer:       /CN=97f4674e8236bddc3d2327a02b0abfba79a5483c
Certificate serial:       0195116C095E69E3A09BFF64FF452E64CD59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
Manifest number:          1455
Signing time:             Mon 17 Feb 2025 01:00:47 +0000
Manifest this update:     Mon 17 Feb 2025 01:00:47 +0000
Manifest next update:     Tue 18 Feb 2025 01:00:47 +0000
Files and hashes:         1: QJQeMPlg9WGfXq72AZiCSewuDI8.roa (hash: r0Rvs4MlW/m7D+4R19PKkzv3HipqfF3UT75d6mitfBY=)
                          2: l_RnToI2vdw9IyegKwq_unmlSDw.crl (hash: Dl9r1lUcaonL2bPwWF7x6EPpNbeM+LJFgAtUvar5qHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:6c:09:5e:69:e3:a0:9b:ff:64:ff:45:2e:64:cd:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97f4674e8236bddc3d2327a02b0abfba79a5483c
        Validity
            Not Before: Feb 17 01:00:47 2025 GMT
            Not After : Feb 18 01:00:47 2025 GMT
        Subject: CN=bcc673364139f3cebf8db2585ae81e40be38fe04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e5:06:bf:52:0a:8c:d7:f8:17:8b:8f:1f:73:
                    ee:1a:5a:67:01:66:55:a6:e6:ee:a3:5b:c4:6f:19:
                    ec:a6:51:1e:a6:e1:00:97:b0:f6:b1:72:06:63:19:
                    87:18:2f:e6:a3:87:c9:b0:fb:ac:a9:fb:7c:3b:3b:
                    a4:70:44:e2:67:17:83:d9:f6:f4:38:b9:c0:00:4f:
                    3a:f1:db:d8:02:a4:4e:63:85:74:0c:1c:14:d1:55:
                    e6:b8:db:7c:1e:db:24:5b:fa:fb:d2:60:10:b0:3c:
                    76:59:c0:4a:75:1c:5a:16:f1:ae:84:ab:35:48:79:
                    55:67:a4:ce:36:a7:4c:4a:ef:50:4a:c3:86:60:23:
                    a0:f3:a1:27:80:0e:f7:cc:f7:fe:76:2d:45:b4:b3:
                    81:48:2f:1e:f7:a1:98:b5:ef:3a:dd:f1:be:27:9d:
                    f4:06:f1:3b:a7:f0:b4:c1:1b:7b:b6:6e:55:95:11:
                    96:c0:65:ed:2d:3a:d3:2d:7d:15:f7:3d:f9:29:ed:
                    b5:d4:80:04:68:c6:8f:bf:13:c1:c7:9c:9c:44:fc:
                    7c:a7:74:a5:c2:3e:ce:cd:cd:75:2a:c5:7d:77:73:
                    18:03:d9:d4:9a:30:0e:3d:49:10:39:12:83:ca:41:
                    c8:2b:21:8a:14:a8:4b:da:b0:86:4d:d8:fb:5f:9a:
                    c1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C6:73:36:41:39:F3:CE:BF:8D:B2:58:5A:E8:1E:40:BE:38:FE:04
            X509v3 Authority Key Identifier:
                keyid:97:F4:67:4E:82:36:BD:DC:3D:23:27:A0:2B:0A:BF:BA:79:A5:48:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c6:9d:ba:e2:20:ad:24:3a:e2:67:d2:d4:9e:48:98:7c:c6:
         6c:d3:35:87:c7:ac:59:97:8f:b4:e7:20:79:d1:85:27:eb:3f:
         21:ae:04:a7:75:03:ef:1c:b0:c5:47:54:d8:9b:11:07:4d:2a:
         e5:30:76:54:04:47:42:92:91:cb:18:29:c0:2c:7a:40:da:07:
         62:07:9b:f4:af:13:64:22:e9:ec:85:27:9b:8e:5b:3c:c1:74:
         7e:b3:3e:8d:18:9f:0d:85:72:99:97:34:0f:23:43:78:19:b5:
         92:fa:e1:8c:e0:44:e2:05:68:ed:e6:50:ed:bf:68:be:63:bb:
         a8:62:e3:94:e2:b6:f9:5e:1f:00:46:e9:dc:f8:1e:ad:15:a6:
         eb:ab:fd:b9:c8:1a:fa:b7:91:c9:9e:11:95:4f:64:f9:25:f3:
         77:9a:7f:a9:8d:3d:89:55:86:6d:1d:6b:61:66:04:8c:54:30:
         2c:fb:7e:7d:5f:93:e6:11:be:53:3e:5b:0b:51:01:0c:b2:c4:
         84:a5:c3:1a:80:4a:cb:57:2a:ff:16:71:5c:5f:60:cf:44:3e:
         25:d4:a1:96:2f:a2:d7:20:eb:a5:ba:df:5b:28:7c:53:ac:d6:
         a3:dd:04:9f:66:4f:69:4d:8f:03:1d:7b:8d:42:65:bf:ae:59:
         8c:41:09:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURbAleaeOgm/9k/0UuZM1ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZjQ2NzRlODIzNmJkZGMzZDIzMjdhMDJiMGFiZmJhNzlh
NTQ4M2MwHhcNMjUwMjE3MDEwMDQ3WhcNMjUwMjE4MDEwMDQ3WjAzMTEwLwYDVQQD
EyhiY2M2NzMzNjQxMzlmM2NlYmY4ZGIyNTg1YWU4MWU0MGJlMzhmZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+UGv1IKjNf4F4uPH3PuGlpnAWZV
pubuo1vEbxnsplEepuEAl7D2sXIGYxmHGC/mo4fJsPusqft8OzukcETiZxeD2fb0
OLnAAE868dvYAqROY4V0DBwU0VXmuNt8HtskW/r70mAQsDx2WcBKdRxaFvGuhKs1
SHlVZ6TONqdMSu9QSsOGYCOg86EngA73zPf+di1FtLOBSC8e96GYte863fG+J530
BvE7p/C0wRt7tm5VlRGWwGXtLTrTLX0V9z35Ke211IAEaMaPvxPBx5ycRPx8p3Sl
wj7Ozc11KsV9d3MYA9nUmjAOPUkQORKDykHIKyGKFKhL2rCGTdj7X5rBLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzGczZBOfPOv42yWFroHkC+OP4EMB8GA1UdIwQY
MBaAFJf0Z06CNr3cPSMnoCsKv7p5pUg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbF9SblRvSTJ2ZHc5SXllZ0t3cV91bm1sU0R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS83NWE5MjAtMmEzYS00MTI5LTgwMGUt
YWYyZWM1ZDhkYzNjLzEvbF9SblRvSTJ2ZHc5SXllZ0t3cV91bm1sU0R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS83NWE5MjAtMmEzYS00MTI5LTgwMGUtYWYyZWM1ZDhkYzNj
LzEvbF9SblRvSTJ2ZHc5SXllZ0t3cV91bm1sU0R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8aduuIg
rSQ64mfS1J5ImHzGbNM1h8esWZePtOcgedGFJ+s/Ia4Ep3UD7xywxUdU2JsRB00q
5TB2VARHQpKRyxgpwCx6QNoHYgeb9K8TZCLp7IUnm45bPMF0frM+jRifDYVymZc0
DyNDeBm1kvrhjOBE4gVo7eZQ7b9ovmO7qGLjlOK2+V4fAEbp3PgerRWm66v9ucga
+reRyZ4RlU9k+SXzd5p/qY09iVWGbR1rYWYEjFQwLPt+fV+T5hG+Uz5bC1EBDLLE
hKXDGoBKy1cq/xZxXF9gz0Q+JdShli+i1yDrpbrfWyh8U6zWo90En2ZPaU2PAx17
jUJlv65ZjEEJxw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:53 2025 by rpki-client