Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
File:                     Sv7PZkKkULU7B21EZILZwaid7XQ.mft (raw, json)
Hash identifier:          wUHqLQndB5r3vNM5BqfLXJOnGovG+Bk6DrUQX11+wAE=
Subject key identifier:   83:A4:CC:5F:FB:16:27:43:5D:E2:D7:37:9A:9D:2D:1A:92:B5:4F:07
Authority key identifier: 4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74
Certificate issuer:       /CN=4afecf6642a450b53b076d446482d9c1a89ded74
Certificate serial:       0194BB2965BC8CE855FB63760F8469DC0B15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
Manifest number:          13BC
Signing time:             Fri 31 Jan 2025 07:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:39 +0000
Files and hashes:         1: Sv7PZkKkULU7B21EZILZwaid7XQ.crl (hash: oo2pJjsVGNjMZsag9gn/mMgkBSVlPvpcBatQtLH/jOY=)
                          2: p61VML8uLf1Dr4htLC12P2Sv8GU.roa (hash: RPd5GMtMlOZE/03iU2ovXiDZPGo3A/MLaIBoa6BmxD0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:65:bc:8c:e8:55:fb:63:76:0f:84:69:dc:0b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4afecf6642a450b53b076d446482d9c1a89ded74
        Validity
            Not Before: Jan 31 07:00:39 2025 GMT
            Not After : Feb  1 07:00:39 2025 GMT
        Subject: CN=83a4cc5ffb1627435de2d7379a9d2d1a92b54f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:32:39:e7:8c:5a:27:1b:08:32:d1:9f:e9:fa:
                    b3:47:47:50:38:1e:17:30:c0:78:56:c5:de:98:eb:
                    28:f0:92:1f:e7:25:8b:3c:88:a3:24:88:b7:60:85:
                    d3:05:98:c5:e7:5f:44:58:fc:28:a0:c9:01:07:20:
                    60:89:d9:85:20:1f:23:f4:37:b8:fd:b9:f6:11:cb:
                    b3:2b:40:a7:d0:09:88:df:34:e7:9a:50:a7:02:6a:
                    aa:ef:c2:e0:b0:59:ef:89:ac:6e:e8:46:89:90:ef:
                    fe:6a:41:7e:8c:eb:22:77:02:fb:ee:28:5b:05:0b:
                    be:0d:48:d6:64:db:f4:22:eb:48:c7:f4:ec:27:33:
                    0e:aa:34:af:06:ff:b2:64:68:2e:3c:3f:71:2b:a7:
                    7b:b3:6b:a3:9f:ec:3f:68:fa:00:33:1f:60:ec:f1:
                    00:03:a4:d7:64:c7:21:f8:b5:0c:63:93:07:56:a1:
                    28:34:ba:27:67:20:e5:6c:86:7b:0e:b9:55:6c:93:
                    43:4d:66:83:79:6a:04:2e:89:b0:c1:dc:75:80:16:
                    26:98:c6:9b:2c:67:e5:3d:99:fa:b8:81:12:1b:79:
                    8e:d5:01:9c:ff:7d:46:89:b4:0a:ed:d1:eb:88:d7:
                    35:a7:bb:55:5a:36:77:c7:ef:85:f4:49:ca:9e:c0:
                    f1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A4:CC:5F:FB:16:27:43:5D:E2:D7:37:9A:9D:2D:1A:92:B5:4F:07
            X509v3 Authority Key Identifier:
                keyid:4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ad:ad:00:43:3c:2b:23:11:7c:e1:c2:63:4a:ea:a4:05:d5:
         5b:6b:1e:14:04:4a:76:f7:83:51:7e:59:9e:28:9e:2d:23:e9:
         fe:66:32:a1:8d:0f:5c:ba:d4:92:09:5f:f1:e0:ed:6e:3d:66:
         9f:21:4f:12:0d:12:2a:c2:26:01:55:1d:00:8e:74:c5:e5:6e:
         ba:7b:d7:99:8a:79:db:0b:28:a9:68:f4:6e:86:ee:c2:f5:e3:
         0c:41:a0:4c:43:a1:a5:9e:dc:8c:05:f3:df:7d:c7:d4:91:99:
         92:a4:af:03:5d:49:0f:64:72:60:02:b2:c2:32:0a:99:9b:b4:
         3d:af:65:f7:aa:60:52:b1:28:7b:0a:f4:05:f2:61:36:bb:3b:
         18:e2:b8:46:7d:d8:7c:2a:14:22:62:e1:bd:7e:9d:af:e1:9d:
         42:7e:ed:8c:97:db:ff:10:6d:f5:11:aa:d1:63:64:df:0c:78:
         d4:e5:43:7c:d5:43:c3:41:a7:70:ce:a3:f5:77:bd:07:2f:b2:
         84:ef:ba:a9:55:d7:25:21:f4:0d:d9:9c:49:20:93:d9:6c:88:
         cb:f8:d9:1a:af:2e:26:48:b1:b6:33:b3:b3:0d:a1:1f:77:9d:
         92:2f:6c:01:15:d0:4f:7b:c0:cd:68:8f:f4:9a:d3:ff:53:c0:
         e8:f2:90:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KWW8jOhV+2N2D4Rp3AsVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZmVjZjY2NDJhNDUwYjUzYjA3NmQ0NDY0ODJkOWMxYTg5
ZGVkNzQwHhcNMjUwMTMxMDcwMDM5WhcNMjUwMjAxMDcwMDM5WjAzMTEwLwYDVQQD
Eyg4M2E0Y2M1ZmZiMTYyNzQzNWRlMmQ3Mzc5YTlkMmQxYTkyYjU0ZjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zI554xaJxsIMtGf6fqzR0dQOB4X
MMB4VsXemOso8JIf5yWLPIijJIi3YIXTBZjF519EWPwooMkBByBgidmFIB8j9De4
/bn2EcuzK0Cn0AmI3zTnmlCnAmqq78LgsFnviaxu6EaJkO/+akF+jOsidwL77ihb
BQu+DUjWZNv0IutIx/TsJzMOqjSvBv+yZGguPD9xK6d7s2ujn+w/aPoAMx9g7PEA
A6TXZMch+LUMY5MHVqEoNLonZyDlbIZ7DrlVbJNDTWaDeWoELomwwdx1gBYmmMab
LGflPZn6uIESG3mO1QGc/31GibQK7dHriNc1p7tVWjZ3x++F9EnKnsDxZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOkzF/7FidDXeLXN5qdLRqStU8HMB8GA1UdIwQY
MBaAFEr+z2ZCpFC1OwdtRGSC2cGone10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3Y3UFprS2tVTFU3QjIxRVpJTFp3YWlkN1hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81ZDZmNmMtYjAwNi00NTYzLTkxYWQt
NDI4YTExMWFjNWUwLzEvU3Y3UFprS2tVTFU3QjIxRVpJTFp3YWlkN1hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS81ZDZmNmMtYjAwNi00NTYzLTkxYWQtNDI4YTExMWFjNWUw
LzEvU3Y3UFprS2tVTFU3QjIxRVpJTFp3YWlkN1hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf62tAEM8
KyMRfOHCY0rqpAXVW2seFARKdveDUX5ZniieLSPp/mYyoY0PXLrUkglf8eDtbj1m
nyFPEg0SKsImAVUdAI50xeVuunvXmYp52wsoqWj0bobuwvXjDEGgTEOhpZ7cjAXz
333H1JGZkqSvA11JD2RyYAKywjIKmZu0Pa9l96pgUrEoewr0BfJhNrs7GOK4Rn3Y
fCoUImLhvX6dr+GdQn7tjJfb/xBt9RGq0WNk3wx41OVDfNVDw0GncM6j9Xe9By+y
hO+6qVXXJSH0DdmcSSCT2WyIy/jZGq8uJkixtjOzsw2hH3edki9sARXQT3vAzWiP
9JrT/1PA6PKQnA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:08 2025 by rpki-client on console-fra.rpki-client.org