Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
File:                     Bc9q2cvp97KGPgzsNsFTxdBzauI.mft (raw, json)
Hash identifier:          SbHF3S3kfPaoP0Htniu2wQ6mwbK3CwDGbd9kJBQ8Ii4=
Subject key identifier:   57:57:F4:F2:B9:2D:CD:8E:84:44:42:C3:65:44:1A:F2:53:52:32:AE
Authority key identifier: 05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
Certificate issuer:       /CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Certificate serial:       01958F986F3C5424D695200EAA06947971EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
Manifest number:          1429
Signing time:             Thu 13 Mar 2025 13:01:26 +0000
Manifest this update:     Thu 13 Mar 2025 13:01:26 +0000
Manifest next update:     Fri 14 Mar 2025 13:01:26 +0000
Files and hashes:         1: Bc9q2cvp97KGPgzsNsFTxdBzauI.crl (hash: hlgUcB8hYfVWFdHGhdz/KjinEPWdy4AWdgSWjwBQvR8=)
                          2: FICKnMTDt6RllV7DRYxFFl_kXjI.roa (hash: VbuR+rFejgRWNBNYlJRCVwMyUQVXxPvp/no+ZnMl4bY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 13:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8f:98:6f:3c:54:24:d6:95:20:0e:aa:06:94:79:71:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
        Validity
            Not Before: Mar 13 13:01:26 2025 GMT
            Not After : Mar 14 13:01:26 2025 GMT
        Subject: CN=5757f4f2b92dcd8e844442c365441af2535232ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:28:e2:10:25:37:38:6f:00:31:e9:f8:8f:da:
                    b2:dd:67:aa:0b:21:9e:92:cb:73:61:b9:11:94:35:
                    66:78:63:0b:87:e4:56:4c:d6:68:8e:0e:22:23:11:
                    56:78:01:dd:fc:89:ec:18:24:fc:e5:88:19:2e:30:
                    bb:b4:54:73:87:37:19:35:76:09:95:cb:18:c7:95:
                    ec:f2:9e:53:94:8c:cc:3f:24:a3:c8:3b:25:eb:e5:
                    25:c8:b7:74:85:21:5f:f3:5c:6f:27:07:48:60:7e:
                    bf:87:38:24:aa:57:97:d2:85:10:1f:34:d6:68:dd:
                    3e:8c:cc:77:25:11:c8:7b:0f:20:27:46:ba:47:12:
                    ca:33:e5:6e:d6:52:e7:2a:53:08:b8:3f:4b:53:81:
                    2b:0f:6e:85:da:cf:e7:96:9b:e6:22:45:d7:87:b3:
                    d1:13:26:25:6f:c6:01:a6:f0:ec:7f:6a:3a:84:8f:
                    4d:47:67:c3:69:e6:d3:ff:5f:90:3f:a5:af:58:c5:
                    97:bd:de:35:25:81:a4:f1:9b:cd:6d:cb:a4:95:82:
                    cd:74:ca:94:e1:46:4b:c2:92:0b:8f:60:8c:c3:a7:
                    18:a7:0e:21:77:35:6b:41:ac:79:ca:85:4d:f8:b1:
                    51:bc:c1:38:79:bd:b1:68:d6:3c:2c:38:43:de:99:
                    61:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:57:F4:F2:B9:2D:CD:8E:84:44:42:C3:65:44:1A:F2:53:52:32:AE
            X509v3 Authority Key Identifier:
                keyid:05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:44:7f:cd:32:f2:73:5d:21:20:41:4c:1c:22:99:de:47:0e:
         8c:d2:50:d6:b7:15:43:36:81:70:d9:c5:6f:df:9a:0b:1a:97:
         cd:b8:a5:3c:72:7f:17:47:99:95:56:b3:bf:2f:b7:91:34:66:
         c8:a5:33:90:51:22:ba:34:97:62:e5:01:78:53:2e:0a:70:03:
         c4:56:38:f2:ce:11:73:fa:10:b6:2e:30:c2:4b:7d:39:03:b0:
         f3:56:b1:13:a7:02:e4:81:0f:4b:2d:a6:ce:35:3d:d9:4d:7e:
         5b:d9:64:21:25:a1:6f:c8:bf:c2:f2:64:7c:e5:5f:72:4b:cf:
         d4:15:8b:9a:57:27:2d:92:58:9a:42:7e:b0:80:e0:51:af:fc:
         c5:70:cb:25:7f:bb:81:71:b3:7d:fa:7a:94:ff:83:28:20:eb:
         72:9b:a1:18:f6:4a:33:72:c9:55:bd:65:b8:cd:96:83:1c:17:
         8e:ae:60:2c:ee:7c:5c:03:6e:3d:dd:90:19:21:dd:35:29:a3:
         d5:95:d7:3a:f7:1e:71:7f:11:7a:f3:2d:1c:ec:a7:1f:3d:10:
         fa:88:f6:92:5a:0e:77:15:fd:4b:85:5d:68:e5:8a:44:38:68:
         01:ab:27:cf:ad:9d:34:ed:8d:17:59:68:d2:a2:73:bb:54:27:
         c8:9e:ba:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWPmG88VCTWlSAOqgaUeXHuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1Y2Y2YWQ5Y2JlOWY3YjI4NjNlMGNlYzM2YzE1M2M1ZDA3
MzZhZTIwHhcNMjUwMzEzMTMwMTI2WhcNMjUwMzE0MTMwMTI2WjAzMTEwLwYDVQQD
Eyg1NzU3ZjRmMmI5MmRjZDhlODQ0NDQyYzM2NTQ0MWFmMjUzNTIzMmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwijiECU3OG8AMen4j9qy3WeqCyGe
kstzYbkRlDVmeGMLh+RWTNZojg4iIxFWeAHd/InsGCT85YgZLjC7tFRzhzcZNXYJ
lcsYx5Xs8p5TlIzMPySjyDsl6+UlyLd0hSFf81xvJwdIYH6/hzgkqleX0oUQHzTW
aN0+jMx3JRHIew8gJ0a6RxLKM+Vu1lLnKlMIuD9LU4ErD26F2s/nlpvmIkXXh7PR
EyYlb8YBpvDsf2o6hI9NR2fDaebT/1+QP6WvWMWXvd41JYGk8ZvNbcuklYLNdMqU
4UZLwpILj2CMw6cYpw4hdzVrQax5yoVN+LFRvME4eb2xaNY8LDhD3plhIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdX9PK5Lc2OhERCw2VEGvJTUjKuMB8GA1UdIwQY
MBaAFAXPatnL6feyhj4M7DbBU8XQc2riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmM5cTJjdnA5N0tHUGd6c05zRlR4ZEJ6YXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80YmVjM2ItNGY1Ny00OGQ2LWJkY2Yt
NzQ4YWYxZjg0MDBlLzEvQmM5cTJjdnA5N0tHUGd6c05zRlR4ZEJ6YXVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80YmVjM2ItNGY1Ny00OGQ2LWJkY2YtNzQ4YWYxZjg0MDBl
LzEvQmM5cTJjdnA5N0tHUGd6c05zRlR4ZEJ6YXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0R/zTLy
c10hIEFMHCKZ3kcOjNJQ1rcVQzaBcNnFb9+aCxqXzbilPHJ/F0eZlVazvy+3kTRm
yKUzkFEiujSXYuUBeFMuCnADxFY48s4Rc/oQti4wwkt9OQOw81axE6cC5IEPSy2m
zjU92U1+W9lkISWhb8i/wvJkfOVfckvP1BWLmlcnLZJYmkJ+sIDgUa/8xXDLJX+7
gXGzffp6lP+DKCDrcpuhGPZKM3LJVb1luM2WgxwXjq5gLO58XANuPd2QGSHdNSmj
1ZXXOvcecX8RevMtHOynHz0Q+oj2kloOdxX9S4VdaOWKRDhoAasnz62dNO2NF1lo
0qJzu1QnyJ66Dg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:39:38 2025 by rpki-client