Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft
File:                     qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft (raw, json)
Hash identifier:          gUUTOZ5dRC5KIhzN1o7xlNu9BwiMMwdVSMTlwnZC+e8=
Subject key identifier:   3D:2E:30:48:FD:AE:CD:A5:81:E3:A8:37:B1:1A:47:2B:AB:7C:02:D3
Authority key identifier: A8:1B:32:4E:C0:26:12:1F:FE:5D:CA:77:F0:E9:4A:6C:08:7E:70:D2
Certificate issuer:       /CN=a81b324ec026121ffe5dca77f0e94a6c087e70d2
Certificate serial:       01964B9084ADE1697C4C53D7D31E1AABAB3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft
Manifest number:          0ECA
Signing time:             Sat 19 Apr 2025 01:01:24 +0000
Manifest this update:     Sat 19 Apr 2025 01:01:24 +0000
Manifest next update:     Sun 20 Apr 2025 01:01:24 +0000
Files and hashes:         1: Ga7xjXDSDjdOVNrcTGr_g6sBFW8.roa (hash: 8Y/Mjf2+mYXubhHwDguXMxh+k+JgGQC7Q5HSVi+iXpA=)
                          2: qBsyTsAmEh_-Xcp38OlKbAh-cNI.crl (hash: k7O8YLUAm7QI1ViMRXM5JNb4aaGcmfAOY02C4L3+tE0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:90:84:ad:e1:69:7c:4c:53:d7:d3:1e:1a:ab:ab:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a81b324ec026121ffe5dca77f0e94a6c087e70d2
        Validity
            Not Before: Apr 19 01:01:24 2025 GMT
            Not After : Apr 20 01:01:24 2025 GMT
        Subject: CN=3d2e3048fdaecda581e3a837b11a472bab7c02d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:38:14:48:71:4a:38:70:c5:2f:c1:07:51:91:
                    b1:2a:f2:0e:de:88:94:eb:0f:e6:e6:30:77:17:60:
                    f5:37:7f:3d:f0:04:b2:8c:86:ad:bf:91:c7:be:40:
                    35:1e:9b:71:18:28:ae:bd:80:37:e3:4b:d4:35:e0:
                    d6:0d:62:18:e6:ad:f3:1b:77:c7:1c:4c:53:84:6a:
                    4e:4e:d6:37:f4:6d:ab:9b:f7:6f:61:29:0f:44:6c:
                    5c:88:2b:58:2a:e5:66:54:a8:5b:ce:35:11:52:4f:
                    29:02:65:5c:41:52:a2:16:fa:00:79:c7:f2:d2:9f:
                    f8:c0:ae:72:ab:f6:5c:77:55:c9:bf:04:79:bd:9d:
                    df:13:a0:95:92:ed:c6:dd:b9:52:55:e7:b2:1e:e5:
                    7a:14:d8:01:82:81:5a:fc:75:ed:4e:06:ac:47:8f:
                    dc:1a:48:99:78:84:63:81:03:30:d6:8b:9f:74:c3:
                    c1:6a:68:ba:9f:b7:eb:6a:56:da:14:06:17:03:c5:
                    76:a4:71:67:b0:c6:27:78:05:f1:d8:52:aa:12:57:
                    bc:01:09:ca:fa:75:65:b6:24:6b:66:3a:c1:aa:69:
                    1f:7f:a5:5c:46:21:cf:06:5c:86:d3:42:33:08:1e:
                    da:4f:9d:c0:8b:06:1e:ad:4a:e1:53:36:f8:7a:d7:
                    6e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:2E:30:48:FD:AE:CD:A5:81:E3:A8:37:B1:1A:47:2B:AB:7C:02:D3
            X509v3 Authority Key Identifier:
                keyid:A8:1B:32:4E:C0:26:12:1F:FE:5D:CA:77:F0:E9:4A:6C:08:7E:70:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:1f:d0:73:34:85:dc:1e:cf:3f:ab:04:98:02:7b:b5:6e:d4:
         93:2c:91:cf:00:1c:cc:23:12:1c:0c:15:59:a9:13:55:eb:01:
         b4:6b:e1:13:54:ba:bc:8e:57:49:b4:6b:a8:ca:7e:32:bc:19:
         01:8c:6f:84:b1:69:cf:08:f2:f9:25:7f:9d:0e:bb:b5:a2:90:
         e8:80:d0:87:33:46:78:a4:1e:f1:e1:d1:c2:c7:dd:0e:c7:9d:
         21:ae:fd:0c:2b:83:06:ee:3d:ce:0d:a3:7d:3d:e6:83:7d:d6:
         3d:d0:e0:d8:fb:32:cc:a1:3c:ed:4c:f7:6f:cd:ff:96:ff:04:
         a2:e9:c6:44:e7:b1:60:0c:b2:73:40:9a:eb:74:5d:83:30:73:
         bf:15:e6:62:29:ab:39:57:16:14:94:57:a9:36:fe:99:c0:8f:
         38:c7:75:e7:cd:de:b1:51:ff:fb:08:a7:c6:1c:0a:42:90:8f:
         ba:2e:ef:be:04:87:65:68:a6:4f:ce:b8:ef:af:42:dd:6e:52:
         5b:41:80:bf:88:7a:9f:93:28:a3:fa:38:00:72:7c:55:85:b8:
         a9:7b:e8:a0:ee:e6:17:53:79:9f:46:90:3b:63:99:d0:9b:8f:
         59:4f:91:63:2a:37:c0:95:82:f4:3e:89:06:a3:53:9d:1a:7c:
         84:a8:f9:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZLkISt4Wl8TFPX0x4aq6s7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MWIzMjRlYzAyNjEyMWZmZTVkY2E3N2YwZTk0YTZjMDg3
ZTcwZDIwHhcNMjUwNDE5MDEwMTI0WhcNMjUwNDIwMDEwMTI0WjAzMTEwLwYDVQQD
EygzZDJlMzA0OGZkYWVjZGE1ODFlM2E4MzdiMTFhNDcyYmFiN2MwMmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDgUSHFKOHDFL8EHUZGxKvIO3oiU
6w/m5jB3F2D1N3898ASyjIatv5HHvkA1HptxGCiuvYA340vUNeDWDWIY5q3zG3fH
HExThGpOTtY39G2rm/dvYSkPRGxciCtYKuVmVKhbzjURUk8pAmVcQVKiFvoAecfy
0p/4wK5yq/Zcd1XJvwR5vZ3fE6CVku3G3blSVeeyHuV6FNgBgoFa/HXtTgasR4/c
GkiZeIRjgQMw1oufdMPBami6n7fralbaFAYXA8V2pHFnsMYneAXx2FKqEle8AQnK
+nVltiRrZjrBqmkff6VcRiHPBlyG00IzCB7aT53AiwYerUrhUzb4etduPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0uMEj9rs2lgeOoN7EaRyurfALTMB8GA1UdIwQY
MBaAFKgbMk7AJhIf/l3Kd/DpSmwIfnDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUJzeVRzQW1FaF8tWGNwMzhPbEtiQWgtY05JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8xMTliMzEtNzc0Yy00YTQwLTg3YTAt
NzU4ZmJhNWEzOTUxLzEvcUJzeVRzQW1FaF8tWGNwMzhPbEtiQWgtY05JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8xMTliMzEtNzc0Yy00YTQwLTg3YTAtNzU4ZmJhNWEzOTUx
LzEvcUJzeVRzQW1FaF8tWGNwMzhPbEtiQWgtY05JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHx/QczSF
3B7PP6sEmAJ7tW7UkyyRzwAczCMSHAwVWakTVesBtGvhE1S6vI5XSbRrqMp+MrwZ
AYxvhLFpzwjy+SV/nQ67taKQ6IDQhzNGeKQe8eHRwsfdDsedIa79DCuDBu49zg2j
fT3mg33WPdDg2PsyzKE87Uz3b83/lv8EounGROexYAyyc0Ca63RdgzBzvxXmYimr
OVcWFJRXqTb+mcCPOMd1583esVH/+winxhwKQpCPui7vvgSHZWimT864769C3W5S
W0GAv4h6n5Moo/o4AHJ8VYW4qXvooO7mF1N5n0aQO2OZ0JuPWU+RYyo3wJWC9D6J
BqNTnRp8hKj5xQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 04:45:43 2025 by rpki-client