Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
File:                     k0lZrev33pQ1VbyiUIgH65E85vI.mft (raw, json)
Hash identifier:          Cz9U0iX1lPFK/4XFMqEDMLsAsWhf4vZksNFVXIfk+TI=
Subject key identifier:   92:8F:53:6A:FE:C3:41:8E:8E:1D:75:8B:11:2B:1B:A4:9B:94:D7:81
Authority key identifier: 93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
Certificate issuer:       /CN=934959adebf7de943555bca2508807eb913ce6f2
Certificate serial:       0194C463297464A38B2FC6A896C94D577497
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
Manifest number:          1430
Signing time:             Sun 02 Feb 2025 02:00:20 +0000
Manifest this update:     Sun 02 Feb 2025 02:00:20 +0000
Manifest next update:     Mon 03 Feb 2025 02:00:20 +0000
Files and hashes:         1: dfUbk-VdzFxHfQpYYrY4XW0hmF4.roa (hash: ey6XnfMKe2KD1ABTE4f8EryWVZihQYn0Zy+yAjoGoiI=)
                          2: k0lZrev33pQ1VbyiUIgH65E85vI.crl (hash: nEnxp8/qGO0/c2M6vrK/R0EDua6p+ksH0LlYa7+4T48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:63:29:74:64:a3:8b:2f:c6:a8:96:c9:4d:57:74:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934959adebf7de943555bca2508807eb913ce6f2
        Validity
            Not Before: Feb  2 02:00:20 2025 GMT
            Not After : Feb  3 02:00:20 2025 GMT
        Subject: CN=928f536afec3418e8e1d758b112b1ba49b94d781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7f:8a:b2:9e:e2:61:b7:08:8a:94:70:3f:ac:
                    8b:4b:7b:98:4c:ea:32:2a:91:a1:c9:be:69:79:c9:
                    61:5b:e1:ed:82:ec:9a:0b:4d:73:b5:aa:a7:10:f9:
                    d4:66:53:ee:c5:0b:b0:1b:cb:ae:18:0a:a5:e8:7d:
                    fb:e1:89:e1:85:65:d7:43:07:84:94:b2:7f:99:2c:
                    c0:c9:a9:f9:a9:66:ad:cb:78:50:c4:13:1b:84:70:
                    19:b5:ec:1c:8c:ae:21:c4:50:80:0c:a0:9c:9a:f3:
                    fb:08:fe:64:5a:20:27:f2:ad:57:d3:62:2c:bc:a2:
                    32:5b:0b:19:4e:e0:82:ff:85:24:72:34:74:7f:fc:
                    1c:b5:94:67:0e:24:da:59:7d:63:bf:19:b4:e7:72:
                    19:a5:8f:7e:05:ea:10:41:47:bf:c5:37:13:4f:02:
                    91:60:3f:bd:54:56:1a:25:bd:c9:f1:8c:49:51:b3:
                    83:1c:db:fb:d7:27:4f:d6:12:7d:09:f0:80:87:e1:
                    85:15:a3:35:1a:8f:71:ee:36:ec:5d:b2:4c:15:42:
                    a8:bd:2e:3b:69:40:5e:18:f9:10:06:c0:14:61:0c:
                    bc:6f:fc:e1:f7:f5:f8:b4:20:7c:07:6e:9d:4e:41:
                    77:2f:03:c6:1d:14:7a:e6:0f:51:80:a5:e6:ee:35:
                    c0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:8F:53:6A:FE:C3:41:8E:8E:1D:75:8B:11:2B:1B:A4:9B:94:D7:81
            X509v3 Authority Key Identifier:
                keyid:93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:22:19:f5:20:62:14:0e:63:4b:a5:b9:68:aa:c4:67:68:2e:
         a0:d1:8a:85:3f:24:e0:69:1c:66:0a:ec:b9:e0:3d:13:e1:6b:
         57:6f:5c:92:c9:4d:f6:35:c4:3e:47:b8:52:b6:8f:be:3b:87:
         56:d9:f1:2c:54:03:de:e2:1e:35:a5:db:d3:d5:0f:97:e5:7d:
         ee:5c:5f:62:16:9a:61:72:5d:68:1a:57:1c:ef:71:58:ae:6f:
         6f:10:2d:47:3c:96:4a:a3:db:46:2b:ef:fd:ef:ed:8b:66:27:
         79:dc:d0:c6:f5:2a:ec:20:ed:95:09:50:33:e6:11:f3:fb:90:
         5a:ac:0a:f7:2e:1a:70:43:43:2a:04:cd:32:f3:61:bb:3f:17:
         57:6b:1a:be:f4:c8:f7:a3:3f:5c:62:a3:6c:ae:57:00:25:98:
         f7:3d:46:9e:a9:cb:d6:23:d6:d8:b0:31:55:bd:1a:0d:b3:c7:
         15:90:ee:97:bf:37:c3:a5:71:b8:85:f6:32:76:44:4d:f0:12:
         3a:61:94:2d:ac:fd:35:e8:ae:19:94:ae:9d:ef:4f:9e:69:bd:
         76:36:f4:64:dc:de:dd:f0:18:a7:26:3d:4b:32:40:0f:09:62:
         c8:70:28:8b:05:10:91:0e:d9:b3:da:64:7f:ce:2e:1c:2b:62:
         4e:c8:d9:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEYyl0ZKOLL8aolslNV3SXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNDk1OWFkZWJmN2RlOTQzNTU1YmNhMjUwODgwN2ViOTEz
Y2U2ZjIwHhcNMjUwMjAyMDIwMDIwWhcNMjUwMjAzMDIwMDIwWjAzMTEwLwYDVQQD
Eyg5MjhmNTM2YWZlYzM0MThlOGUxZDc1OGIxMTJiMWJhNDliOTRkNzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n+Ksp7iYbcIipRwP6yLS3uYTOoy
KpGhyb5peclhW+HtguyaC01ztaqnEPnUZlPuxQuwG8uuGAql6H374YnhhWXXQweE
lLJ/mSzAyan5qWaty3hQxBMbhHAZtewcjK4hxFCADKCcmvP7CP5kWiAn8q1X02Is
vKIyWwsZTuCC/4UkcjR0f/wctZRnDiTaWX1jvxm053IZpY9+BeoQQUe/xTcTTwKR
YD+9VFYaJb3J8YxJUbODHNv71ydP1hJ9CfCAh+GFFaM1Go9x7jbsXbJMFUKovS47
aUBeGPkQBsAUYQy8b/zh9/X4tCB8B26dTkF3LwPGHRR65g9RgKXm7jXATQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKPU2r+w0GOjh11ixErG6SblNeBMB8GA1UdIwQY
MBaAFJNJWa3r996UNVW8olCIB+uRPObyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazBsWnJldjMzcFExVmJ5aVVJZ0g2NUU4NXZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xNzU3NjItNjkyOS00ZTcwLWIzZWIt
ZmIwZWU1Zjk5N2RhLzEvazBsWnJldjMzcFExVmJ5aVVJZ0g2NUU4NXZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xNzU3NjItNjkyOS00ZTcwLWIzZWItZmIwZWU1Zjk5N2Rh
LzEvazBsWnJldjMzcFExVmJ5aVVJZ0g2NUU4NXZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhSIZ9SBi
FA5jS6W5aKrEZ2guoNGKhT8k4GkcZgrsueA9E+FrV29ckslN9jXEPke4UraPvjuH
VtnxLFQD3uIeNaXb09UPl+V97lxfYhaaYXJdaBpXHO9xWK5vbxAtRzyWSqPbRivv
/e/ti2YnedzQxvUq7CDtlQlQM+YR8/uQWqwK9y4acENDKgTNMvNhuz8XV2savvTI
96M/XGKjbK5XACWY9z1GnqnL1iPW2LAxVb0aDbPHFZDul783w6VxuIX2MnZETfAS
OmGULaz9NeiuGZSune9Pnmm9djb0ZNze3fAYpyY9SzJADwliyHAoiwUQkQ7Zs9pk
f84uHCtiTsjZdw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:57 2025 by rpki-client