Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
File:                     zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft (raw, json)
Hash identifier:          5rJCd73z2s4Y0RqiJjv0dfKfLMfUzFTTHOwQiOyG8qY=
Subject key identifier:   8C:9A:A8:8C:8B:97:16:3E:C4:13:9F:E5:42:7E:EB:59:D5:5A:DF:30
Authority key identifier: CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A
Certificate issuer:       /CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
Certificate serial:       019510FDCC06696B511473DDFCB10805D23F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
Manifest number:          1456
Signing time:             Sun 16 Feb 2025 23:00:23 +0000
Manifest this update:     Sun 16 Feb 2025 23:00:23 +0000
Manifest next update:     Mon 17 Feb 2025 23:00:23 +0000
Files and hashes:         1: cvViwCnJHbOmjnS2VIR4xe7m6w0.roa (hash: fo4ubxrjnffY7zW1GcJNKmk2YbysHvDvLAY+YQK8Gj8=)
                          2: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl (hash: moYxKOtX6hpJK2n/5yJGsIfuXA8MzfAp78yNu0tcaPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:fd:cc:06:69:6b:51:14:73:dd:fc:b1:08:05:d2:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
        Validity
            Not Before: Feb 16 23:00:23 2025 GMT
            Not After : Feb 17 23:00:23 2025 GMT
        Subject: CN=8c9aa88c8b97163ec4139fe5427eeb59d55adf30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c3:4b:90:7f:00:b8:89:db:07:f7:d4:49:e1:
                    26:91:e6:37:1d:45:4e:66:ce:d3:1b:6c:fc:80:58:
                    66:84:8a:3b:a5:bc:77:d0:fb:8a:25:48:00:88:4a:
                    2f:0c:a7:5d:9a:cf:3a:3b:1e:3f:1d:27:5c:b6:2f:
                    2c:4b:8b:9e:97:ae:da:27:f9:91:f3:03:ee:74:48:
                    21:a6:7d:55:ad:37:71:0f:5b:fc:55:89:04:ac:ca:
                    a8:54:64:f5:99:be:49:6d:18:41:24:6d:22:9a:b3:
                    e3:33:90:72:21:15:ae:6f:da:67:49:1c:7a:13:6b:
                    59:99:0b:13:33:eb:31:bd:7f:e9:5c:c0:24:fd:58:
                    84:0b:c7:04:a2:10:89:1b:45:9d:6e:51:24:61:8a:
                    37:89:8c:8d:75:11:c3:fa:30:8a:26:dd:71:9b:64:
                    90:2b:86:61:e7:36:a6:a6:e0:75:a5:5c:11:1f:07:
                    7d:3c:a6:43:3b:a3:ea:3c:3c:76:e3:8c:f5:d8:be:
                    e0:67:9f:d0:98:92:21:bb:ba:99:73:27:59:ef:01:
                    38:c8:fb:16:85:3d:af:13:70:4b:38:99:7c:86:7f:
                    63:4f:c8:2e:7a:e6:6b:68:f1:36:6d:53:20:d8:ca:
                    9d:49:64:4e:bc:fb:9f:5e:e5:d9:b5:51:c9:29:35:
                    97:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9A:A8:8C:8B:97:16:3E:C4:13:9F:E5:42:7E:EB:59:D5:5A:DF:30
            X509v3 Authority Key Identifier:
                keyid:CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:45:0f:58:32:7f:7d:e2:b0:19:09:d6:66:bb:01:58:ae:33:
         18:ef:46:5c:83:51:d8:68:d6:be:25:37:c6:53:df:8d:22:50:
         13:75:17:63:bd:a2:22:f5:23:45:33:0b:ff:9f:af:1c:37:72:
         2f:0e:1f:83:4b:be:f8:de:92:2e:f7:35:f8:1f:83:70:a6:1c:
         bd:99:37:69:a5:ea:ad:80:98:1c:20:64:99:d8:86:62:74:76:
         f9:81:f4:b3:26:24:40:30:67:62:4a:82:4f:0d:a2:6e:e0:4e:
         da:40:ff:8c:4b:ef:21:07:94:b2:5f:f8:a1:a0:2f:0b:7d:7c:
         e5:da:96:f5:27:5a:0f:ec:88:ee:c9:a6:0c:4e:96:d3:71:9f:
         44:bd:4b:e3:a7:a8:2b:00:e7:7c:f0:2b:8f:03:d7:67:49:6f:
         e8:a7:f3:42:64:0e:2c:2a:cf:89:43:03:76:56:10:95:eb:31:
         48:09:a6:7f:42:52:ce:94:56:8c:0d:d5:bf:f9:9d:6f:15:98:
         7e:d3:c7:60:98:78:e9:ba:39:be:9a:64:47:af:92:d6:18:45:
         f0:b7:4a:61:96:70:9c:b3:ef:21:05:74:9c:31:49:c2:39:40:
         d6:66:f7:96:63:de:29:f6:56:96:e5:36:77:aa:a6:12:d7:63:
         da:e3:c8:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQ/cwGaWtRFHPd/LEIBdI/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMzIzMTYzYmJiNDY1ZjJhMGZhMmY5M2ZhNTBlZjNiMGQ0
YzZhOWEwHhcNMjUwMjE2MjMwMDIzWhcNMjUwMjE3MjMwMDIzWjAzMTEwLwYDVQQD
Eyg4YzlhYTg4YzhiOTcxNjNlYzQxMzlmZTU0MjdlZWI1OWQ1NWFkZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMNLkH8AuInbB/fUSeEmkeY3HUVO
Zs7TG2z8gFhmhIo7pbx30PuKJUgAiEovDKddms86Ox4/HSdcti8sS4uel67aJ/mR
8wPudEghpn1VrTdxD1v8VYkErMqoVGT1mb5JbRhBJG0imrPjM5ByIRWub9pnSRx6
E2tZmQsTM+sxvX/pXMAk/ViEC8cEohCJG0WdblEkYYo3iYyNdRHD+jCKJt1xm2SQ
K4Zh5zampuB1pVwRHwd9PKZDO6PqPDx244z12L7gZ5/QmJIhu7qZcydZ7wE4yPsW
hT2vE3BLOJl8hn9jT8gueuZraPE2bVMg2MqdSWROvPufXuXZtVHJKTWX3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyaqIyLlxY+xBOf5UJ+61nVWt8wMB8GA1UdIwQY
MBaAFMwyMWO7tGXyoPovk/pQ7zsNTGqaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekRJeFk3dTBaZktnLWktVC1sRHZPdzFNYXBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi83MTNiZDctZjczYi00NjE0LThlOTIt
MWVmMDA5MGI3MTU0LzEvekRJeFk3dTBaZktnLWktVC1sRHZPdzFNYXBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi83MTNiZDctZjczYi00NjE0LThlOTItMWVmMDA5MGI3MTU0
LzEvekRJeFk3dTBaZktnLWktVC1sRHZPdzFNYXBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALkUPWDJ/
feKwGQnWZrsBWK4zGO9GXINR2GjWviU3xlPfjSJQE3UXY72iIvUjRTML/5+vHDdy
Lw4fg0u++N6SLvc1+B+DcKYcvZk3aaXqrYCYHCBkmdiGYnR2+YH0syYkQDBnYkqC
Tw2ibuBO2kD/jEvvIQeUsl/4oaAvC3185dqW9SdaD+yI7smmDE6W03GfRL1L46eo
KwDnfPArjwPXZ0lv6KfzQmQOLCrPiUMDdlYQlesxSAmmf0JSzpRWjA3Vv/mdbxWY
ftPHYJh46bo5vppkR6+S1hhF8LdKYZZwnLPvIQV0nDFJwjlA1mb3lmPeKfZWluU2
d6qmEtdj2uPIfA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:01 2025 by rpki-client