Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
File:                     sRaNBioMLmFmqCYsTXKY123t0E8.mft (raw, json)
Hash identifier:          cJNZeyfH6+L+qkZU+Ync0bJuSnABi1G8llWdVFqwkFY=
Subject key identifier:   30:FC:77:95:5E:37:5A:0E:44:1F:66:47:63:0C:68:1D:D9:90:0A:BA
Authority key identifier: B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
Certificate issuer:       /CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Certificate serial:       01951058FCD933CD3F054B8679EFB9B13CE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
Manifest number:          1457
Signing time:             Sun 16 Feb 2025 20:00:22 +0000
Manifest this update:     Sun 16 Feb 2025 20:00:22 +0000
Manifest next update:     Mon 17 Feb 2025 20:00:22 +0000
Files and hashes:         1: jYCp1px7d3_I6mefNTn8vuzWBOg.roa (hash: Pv+cwNn5v2uyPM9DJOrn9OfaFC2aCdBmSBHPyx9HtlM=)
                          2: rAkcIeR16JbVpYeePcru3Xd_9Fo.roa (hash: 5QKOAoJ3RyBbcQy0L3k19T9nHrTzNr6BOoQXHbBl8Lc=)
                          3: s25eqAa9Ba2subgM6OQ8ydOvSIs.roa (hash: 2d5Cwu5/K3ZqTMpiVXzf7ig4e2nE3AarjZ+2JLhcJaM=)
                          4: sRaNBioMLmFmqCYsTXKY123t0E8.crl (hash: fNB288MSqQTLlUjtKK01iL1SD8DfREeEPVO+OcqLjvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:58:fc:d9:33:cd:3f:05:4b:86:79:ef:b9:b1:3c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
        Validity
            Not Before: Feb 16 20:00:22 2025 GMT
            Not After : Feb 17 20:00:22 2025 GMT
        Subject: CN=30fc77955e375a0e441f6647630c681dd9900aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cc:61:23:83:f0:fb:fb:05:d0:84:ec:38:2e:
                    c9:76:cf:64:19:3d:f6:33:b1:4a:12:b6:2a:63:80:
                    35:ed:42:69:68:87:8c:a8:a2:4b:ad:9a:b5:02:dc:
                    9c:b7:84:0f:30:1c:29:38:bf:66:3e:63:91:67:a3:
                    12:aa:dd:cf:a5:a5:8e:7e:ed:29:3a:27:b2:c1:4c:
                    71:9c:dd:f9:e3:6f:3f:48:7f:2f:f0:d8:2b:04:7e:
                    42:d4:e7:b9:0f:59:38:be:47:97:dc:51:31:0b:9e:
                    4a:59:b8:46:3c:54:9a:5c:24:e3:79:35:25:e5:da:
                    46:66:c8:54:d1:a9:be:08:d1:a4:2f:e1:6b:15:47:
                    d9:03:4f:96:94:6a:8e:b8:09:83:4a:24:43:46:f8:
                    4e:0c:72:73:41:cb:e3:7a:8e:1e:ff:7a:9d:4a:56:
                    c7:db:98:96:71:23:df:d1:ca:f7:8c:7d:96:3e:57:
                    22:dd:ec:9c:80:41:fc:fd:71:90:3c:07:3e:4a:fa:
                    e7:9c:0b:fe:a2:85:39:51:68:e1:5c:01:e1:f9:2f:
                    3a:a6:5f:3e:77:84:db:28:d5:71:45:2d:55:ea:ae:
                    92:24:6f:d6:ad:e4:07:10:e7:c5:5c:6c:7f:50:21:
                    7f:94:89:55:b6:a2:9c:28:9a:1b:e6:31:f3:8a:7a:
                    63:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FC:77:95:5E:37:5A:0E:44:1F:66:47:63:0C:68:1D:D9:90:0A:BA
            X509v3 Authority Key Identifier:
                keyid:B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:85:9d:16:3e:f5:e7:a7:7c:a2:4d:ce:33:f5:0e:59:bf:d4:
         a0:03:1e:2a:1b:50:22:0f:22:70:fa:70:8c:90:28:84:1a:01:
         c7:88:4c:53:93:c2:af:06:91:a0:49:b8:20:a7:b6:16:62:ad:
         a0:ee:22:10:94:3c:a0:30:8c:a7:b6:fa:56:fb:54:12:72:13:
         4a:7c:94:d2:29:85:45:79:16:0d:c6:31:fb:f5:74:3e:8d:ef:
         d8:04:7f:00:af:93:62:e3:b4:c7:5a:15:7b:f4:6d:ef:69:c1:
         31:11:43:cb:b9:a5:bb:a6:82:ed:e1:bf:1b:bf:11:f2:d1:13:
         8b:7d:d5:5a:0a:3b:f1:a2:2f:56:00:ea:e7:d6:09:e3:c7:b4:
         ef:c4:79:cd:a9:43:c3:79:ac:9a:c3:1d:aa:a3:bd:ab:a2:6a:
         ef:2a:64:40:cb:e5:a2:14:eb:9c:56:4d:af:1a:75:43:de:0f:
         1d:46:70:a0:e9:99:a5:2f:15:88:a2:5d:21:c2:6a:cd:f0:e2:
         d7:84:b3:c9:b4:d9:06:14:3e:70:98:34:dc:a7:cf:5d:a1:b9:
         27:8d:05:25:77:02:de:de:af:83:1b:08:81:69:87:76:74:4f:
         e3:04:29:bc:99:03:19:6b:85:27:90:ac:34:c6:d0:98:db:a6:
         83:6f:8d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:58 2025 by rpki-client