Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
File:                     L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft (raw, json)
Hash identifier:          74ijiT9tJR9sXaYfiNWqOroHKfc6EPLN6tve4/Lh6GM=
Subject key identifier:   13:BE:1A:15:68:F5:38:66:4B:14:B1:F9:A4:87:5E:2A:9C:61:AD:71
Authority key identifier: 2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC
Certificate issuer:       /CN=2f57a34b058aafa0a763124a7d5d4187f4faabac
Certificate serial:       0194C388394C7B07A807FF1C413E9BB7DDB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
Manifest number:          142F
Signing time:             Sat 01 Feb 2025 22:01:12 +0000
Manifest this update:     Sat 01 Feb 2025 22:01:12 +0000
Manifest next update:     Sun 02 Feb 2025 22:01:12 +0000
Files and hashes:         1: L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl (hash: 3c3WnSWyGx4IkwIo92uF1K0Azhux/6BhI5kNmOQG/qk=)
                          2: Vec_C6RiaudIxR6DQyYXgE_U-TY.roa (hash: MAwYc1OA3xQJeom5DQYcF+PCN/vQZIWajJ/StbTU5Q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 22:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:88:39:4c:7b:07:a8:07:ff:1c:41:3e:9b:b7:dd:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f57a34b058aafa0a763124a7d5d4187f4faabac
        Validity
            Not Before: Feb  1 22:01:12 2025 GMT
            Not After : Feb  2 22:01:12 2025 GMT
        Subject: CN=13be1a1568f538664b14b1f9a4875e2a9c61ad71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:44:ee:79:14:14:5f:06:dc:b1:db:70:5f:07:
                    d9:6a:23:80:de:40:e6:91:f3:a4:3e:2d:0a:6f:e3:
                    bc:9c:49:b4:18:92:26:7d:24:5f:81:e9:5a:5a:28:
                    9d:84:49:12:f8:c3:28:fd:96:ff:aa:08:40:59:cb:
                    37:f5:38:f3:85:4e:5e:e8:43:ae:1a:27:1c:07:06:
                    63:61:99:2b:1c:30:63:fc:84:93:e2:7a:99:01:af:
                    fc:2b:54:0f:5b:23:a1:92:7e:25:29:74:ca:ea:bd:
                    c7:7c:6e:72:58:3f:4d:50:80:5b:84:88:a5:d4:fc:
                    94:56:15:b5:1f:db:24:c4:b5:5f:54:e5:41:db:95:
                    5a:6c:cd:eb:16:48:f7:41:1e:f0:7a:3e:9d:10:e7:
                    e0:b8:e7:a3:86:b1:54:1f:2f:4d:d9:6f:f9:06:24:
                    bf:12:06:01:1a:0b:78:e9:0d:f9:84:e6:6c:fe:14:
                    29:68:62:79:bc:21:70:8c:43:e5:14:71:64:c3:f2:
                    bd:27:d3:f5:a2:8b:9b:7b:12:e9:f3:59:95:86:cc:
                    7b:81:87:2a:94:18:7c:d8:71:b4:75:2b:3d:00:80:
                    e2:33:35:11:1e:20:43:2e:a7:65:8b:21:da:b6:20:
                    32:bb:95:b2:85:84:00:4c:be:0a:90:d1:bf:ba:46:
                    74:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BE:1A:15:68:F5:38:66:4B:14:B1:F9:A4:87:5E:2A:9C:61:AD:71
            X509v3 Authority Key Identifier:
                keyid:2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ab:10:06:df:0a:1f:7b:13:2f:73:d2:72:1f:81:8f:68:48:
         10:65:41:60:b7:e7:9a:2d:25:59:da:02:8e:ab:04:07:18:45:
         32:7f:2f:17:b9:6a:e6:5e:50:04:25:49:c0:df:8f:cf:c5:87:
         a3:4c:4c:8c:5c:47:f5:c0:12:4f:fa:e0:b4:76:e4:15:18:ae:
         00:ae:3e:c6:1d:55:b3:e8:4f:ff:43:49:cd:6f:50:6b:ac:14:
         6d:79:af:f4:2f:e4:ae:54:ac:b7:9b:c8:e5:c8:c0:99:f1:cf:
         76:c3:46:66:ba:85:ce:8e:2e:37:e3:3b:3f:b0:ed:dc:d4:80:
         a5:0d:6d:21:87:78:5d:af:c2:62:9f:71:0b:4d:0a:68:66:d7:
         22:fd:e4:b5:bd:7a:73:64:7e:4e:a4:1b:2e:72:73:07:7f:14:
         1b:f1:66:ff:a9:69:7c:fb:b9:06:45:e0:49:04:63:2c:84:3c:
         42:8f:9b:a2:a0:47:fd:7e:a2:6a:48:68:cc:39:10:cd:b4:24:
         62:14:37:f1:aa:a7:a3:72:a8:38:f3:76:cc:96:23:87:65:24:
         0e:b7:3f:80:7c:44:55:d0:3e:bd:23:ef:7e:ed:50:dd:dc:56:
         b6:4e:d0:52:47:18:ab:76:5f:57:62:8f:b8:ad:87:28:5d:a9:
         20:bf:a1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:53:45 2025 by rpki-client