Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
File:                     BYgfNX6maA3eUqKpv7u27UOF2Nk.mft (raw, json)
Hash identifier:          qdWuP/weA2y3ZxwK01MCnJtvkTdufjl+9cuNw2G+EBM=
Subject key identifier:   CC:A5:9B:64:E9:E9:9C:B3:6F:E2:88:F3:7E:DC:18:7F:CC:45:05:A6
Authority key identifier: 05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
Certificate issuer:       /CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Certificate serial:       019510C6A6772B590E6C0C007096D025F540
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
Manifest number:          1387
Signing time:             Sun 16 Feb 2025 22:00:08 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:08 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:08 +0000
Files and hashes:         1: 1PJhAmr4L-ICtBMJRLXv9Y_xOyw.roa (hash: jH6dNQsK1d9mmyP0BMdwyC4O3JBopXcfL8RZmEaPWBg=)
                          2: BYgfNX6maA3eUqKpv7u27UOF2Nk.crl (hash: 1aNsYjuLgv2tuueyPaXTooIUxxr5V4XMYkweI3I3HYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c6:a6:77:2b:59:0e:6c:0c:00:70:96:d0:25:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
        Validity
            Not Before: Feb 16 22:00:08 2025 GMT
            Not After : Feb 17 22:00:08 2025 GMT
        Subject: CN=cca59b64e9e99cb36fe288f37edc187fcc4505a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:41:b5:7c:e0:a0:30:d2:15:e1:e4:a5:09:9f:
                    e9:57:a5:75:b6:78:5c:97:7f:8d:1d:64:7a:3e:43:
                    e0:fa:2e:11:d2:05:4b:91:97:36:8c:ba:39:1e:54:
                    91:9d:ba:d3:d6:04:37:ed:4e:b1:3b:1b:73:a1:5d:
                    fb:65:56:1a:14:03:1a:e4:e5:3d:96:d3:3b:10:01:
                    31:a8:16:91:b3:a9:4c:fb:58:3f:12:1e:13:8d:55:
                    5d:89:66:f9:35:03:99:61:c4:9a:26:63:59:1d:30:
                    20:ef:b2:fc:8e:0e:2d:81:17:82:23:8c:38:ba:3d:
                    d3:bb:41:e4:d1:d8:c3:b0:10:3e:8c:17:ec:90:ae:
                    aa:68:65:e6:a1:13:34:37:84:88:04:de:4c:3d:1b:
                    39:3e:cd:67:1b:0e:51:ce:2c:8a:55:ee:a8:f9:81:
                    c1:3b:6f:ef:3e:ed:d1:20:71:8a:a2:e6:c1:c1:5e:
                    7d:e2:32:e9:87:37:25:4e:f8:62:6f:1f:34:35:73:
                    9b:34:9d:a3:25:34:71:c2:3c:0b:d0:aa:3b:31:8f:
                    f9:5d:98:49:b2:c8:a6:e4:25:47:08:0a:97:86:72:
                    4a:8a:e5:d4:be:08:47:bd:fe:b6:c1:c6:49:a2:a6:
                    27:11:95:0a:70:25:38:98:ba:97:d9:eb:ef:9d:8a:
                    b5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A5:9B:64:E9:E9:9C:B3:6F:E2:88:F3:7E:DC:18:7F:CC:45:05:A6
            X509v3 Authority Key Identifier:
                keyid:05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:65:28:83:9d:85:c5:d6:b0:fb:ee:3a:06:d1:94:5e:8c:f9:
         0d:66:b2:55:dd:2a:d0:01:4d:83:90:b3:40:f2:e8:f6:aa:06:
         b1:95:3f:6f:42:1e:fd:c3:f6:a5:c2:4e:c7:13:0b:78:7c:c7:
         65:06:1e:34:03:70:d6:df:73:75:92:76:2e:12:e5:0a:e3:53:
         fa:8d:f9:52:ff:bf:f0:9e:ac:6e:9d:e4:a1:ff:bc:57:46:23:
         a3:45:09:2b:6f:7c:0d:4d:7c:df:06:26:c9:3f:08:e7:6b:d6:
         ee:d8:38:07:f1:03:6c:3d:39:99:a6:2c:e2:b8:83:e5:f2:f1:
         72:0c:26:cf:4b:0d:88:ac:8e:f9:0b:1e:9d:32:d4:ad:d9:d7:
         5f:f3:75:e9:40:0f:bf:ee:a5:dd:44:63:2e:3b:b0:0b:2d:2f:
         3d:1e:35:d7:c8:42:8e:8c:a5:39:14:a5:4b:c6:03:5e:f2:de:
         a4:3c:76:8d:a0:fd:01:93:f1:d2:1d:3b:51:7c:ca:e4:43:08:
         ba:92:63:25:93:9f:cc:b2:0d:01:c4:df:86:71:2e:47:96:3a:
         c4:1c:2c:27:3b:91:37:8d:34:4f:b2:e8:8d:c4:84:13:bc:27:
         e0:5f:b3:47:1a:c8:ab:b5:c9:30:94:fe:01:8c:a7:45:6b:b8:
         69:7c:70:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxqZ3K1kObAwAcJbQJfVAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ODgxZjM1N2VhNjY4MGRkZTUyYTJhOWJmYmJiNmVkNDM4
NWQ4ZDkwHhcNMjUwMjE2MjIwMDA4WhcNMjUwMjE3MjIwMDA4WjAzMTEwLwYDVQQD
EyhjY2E1OWI2NGU5ZTk5Y2IzNmZlMjg4ZjM3ZWRjMTg3ZmNjNDUwNWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUG1fOCgMNIV4eSlCZ/pV6V1tnhc
l3+NHWR6PkPg+i4R0gVLkZc2jLo5HlSRnbrT1gQ37U6xOxtzoV37ZVYaFAMa5OU9
ltM7EAExqBaRs6lM+1g/Eh4TjVVdiWb5NQOZYcSaJmNZHTAg77L8jg4tgReCI4w4
uj3Tu0Hk0djDsBA+jBfskK6qaGXmoRM0N4SIBN5MPRs5Ps1nGw5RziyKVe6o+YHB
O2/vPu3RIHGKoubBwV594jLphzclTvhibx80NXObNJ2jJTRxwjwL0Ko7MY/5XZhJ
ssim5CVHCAqXhnJKiuXUvghHvf62wcZJoqYnEZUKcCU4mLqX2evvnYq1eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMylm2Tp6Zyzb+KI837cGH/MRQWmMB8GA1UdIwQY
MBaAFAWIHzV+pmgN3lKiqb+7tu1DhdjZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQllnZk5YNm1hQTNlVXFLcHY3dTI3VU9GMk5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9hYmMxMDMtY2U2Ni00ZmNjLThmZTEt
M2M5MWFkNGIzZTA4LzEvQllnZk5YNm1hQTNlVXFLcHY3dTI3VU9GMk5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9hYmMxMDMtY2U2Ni00ZmNjLThmZTEtM2M5MWFkNGIzZTA4
LzEvQllnZk5YNm1hQTNlVXFLcHY3dTI3VU9GMk5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgGUog52F
xdaw++46BtGUXoz5DWayVd0q0AFNg5CzQPLo9qoGsZU/b0Ie/cP2pcJOxxMLeHzH
ZQYeNANw1t9zdZJ2LhLlCuNT+o35Uv+/8J6sbp3kof+8V0Yjo0UJK298DU183wYm
yT8I52vW7tg4B/EDbD05maYs4riD5fLxcgwmz0sNiKyO+QsenTLUrdnXX/N16UAP
v+6l3URjLjuwCy0vPR4118hCjoylORSlS8YDXvLepDx2jaD9AZPx0h07UXzK5EMI
upJjJZOfzLINAcTfhnEuR5Y6xBwsJzuRN400T7LojcSEE7wn4F+zRxrIq7XJMJT+
AYynRWu4aXxwKw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:20 2025 by rpki-client