Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
File:                     CbARCuS4F5SlCIMfy17cyNX9Lxs.mft (raw, json)
Hash identifier:          RpAg7zLAI19haoxr6eV/YANWYdgnrTl/ZnSYNFcrAow=
Subject key identifier:   E3:C9:60:81:74:F5:CA:AB:07:41:AA:4B:65:22:1C:2E:B8:63:74:C0
Authority key identifier: 09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B
Certificate issuer:       /CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
Certificate serial:       0194BB60438CF5A0DB315382F59491441723
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 08:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:35 +0000
Files and hashes:         1: CbARCuS4F5SlCIMfy17cyNX9Lxs.crl (hash: vXZBDOcoviVst5Wdgy2GJ9gI8oOH5zOUpVUtCsIXTkk=)
                          2: zyLhO2pA8EoiaCGmhzCvFXO3PZQ.roa (hash: zOCqTwjJOxNebqI94cAaf6aPymCO5NPJ+zXjaPobnkw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:60:43:8c:f5:a0:db:31:53:82:f5:94:91:44:17:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
        Validity
            Not Before: Jan 31 08:00:35 2025 GMT
            Not After : Feb  1 08:00:35 2025 GMT
        Subject: CN=e3c9608174f5caab0741aa4b65221c2eb86374c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3e:00:78:26:b6:1a:38:8c:cd:19:e9:74:e4:
                    ff:f8:b2:a9:02:4f:58:5e:bc:d3:04:80:5c:a6:ee:
                    61:87:3d:9c:1b:29:01:03:7b:6e:34:d0:30:0c:35:
                    10:6d:9e:68:1b:f9:4d:3b:de:2e:93:1b:f6:f7:ef:
                    3c:a7:ad:ba:d1:3a:ec:e0:da:b9:84:0c:3f:84:e7:
                    a6:9b:99:e8:82:19:36:5e:a7:bf:6f:d4:af:9e:23:
                    e9:bb:ce:e5:49:99:a1:30:af:bf:37:52:52:f7:c2:
                    c6:9a:c5:65:c4:f1:76:99:6b:6f:c5:20:8d:3c:99:
                    ff:61:a5:ff:98:1c:49:2f:d8:18:3d:6e:5b:84:51:
                    f5:43:9d:94:19:f9:62:45:de:ce:6c:c3:78:15:00:
                    b3:0f:43:92:81:0b:46:86:0e:eb:9a:31:ec:21:22:
                    d6:53:3c:79:0e:fe:6e:9b:be:f7:db:00:53:ce:f4:
                    45:05:c6:97:c2:49:ea:be:0c:96:7e:e3:2b:3f:60:
                    49:ac:28:19:ff:89:71:3b:6b:bd:e8:5c:53:5c:42:
                    5c:95:19:68:74:80:61:b0:e5:37:5a:52:04:5d:c7:
                    1c:2b:be:2c:f8:16:70:5f:e7:b9:57:cc:b6:1a:db:
                    bc:ca:c9:70:e0:69:31:91:6b:a5:67:79:51:c9:9a:
                    d1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C9:60:81:74:F5:CA:AB:07:41:AA:4B:65:22:1C:2E:B8:63:74:C0
            X509v3 Authority Key Identifier:
                keyid:09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:37:c2:ce:57:4b:34:08:0b:1c:45:69:74:1b:9c:2c:d9:fe:
         62:97:f6:8f:ba:47:a4:7a:a3:36:e9:30:a5:e9:7d:f9:3b:c1:
         58:ac:81:9b:ad:5c:38:f2:99:28:13:aa:de:03:f9:a2:e3:68:
         94:24:42:72:93:ca:b8:33:0f:39:64:8d:2b:4f:cf:31:9d:bd:
         be:2f:95:4c:a5:d1:14:5b:07:a2:8d:63:dd:bc:ff:18:42:de:
         50:1e:ea:e2:39:b5:ad:66:e8:05:fc:13:36:65:cd:90:f4:ab:
         a1:db:33:2f:27:92:ae:70:f7:14:48:07:2f:75:6c:fd:fc:4b:
         4e:9c:93:cc:37:92:fe:19:de:be:a8:78:c9:26:63:cf:60:1a:
         a5:c8:fa:07:e7:aa:3e:2c:ec:ba:6a:a9:1d:a7:6a:2e:03:c8:
         04:27:3e:56:b6:05:54:d7:4f:75:f7:a7:1a:43:0a:88:1c:61:
         08:15:42:db:1d:4d:11:b4:34:53:5f:a2:47:ca:3a:50:b7:30:
         01:c7:a6:a5:80:c6:2d:a8:b7:a3:ea:b5:36:f6:99:c6:71:46:
         27:61:43:af:d5:ec:2e:91:cc:a8:f3:9a:da:eb:e9:b6:1f:c5:
         fe:d4:39:75:0d:98:75:b0:48:ca:36:0f:5e:66:56:83:9e:13:
         e7:92:bb:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7YEOM9aDbMVOC9ZSRRBcjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YjAxMTBhZTRiODE3OTRhNTA4ODMxZmNiNWVkY2M4ZDVm
ZDJmMWIwHhcNMjUwMTMxMDgwMDM1WhcNMjUwMjAxMDgwMDM1WjAzMTEwLwYDVQQD
EyhlM2M5NjA4MTc0ZjVjYWFiMDc0MWFhNGI2NTIyMWMyZWI4NjM3NGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT4AeCa2GjiMzRnpdOT/+LKpAk9Y
XrzTBIBcpu5hhz2cGykBA3tuNNAwDDUQbZ5oG/lNO94ukxv29+88p6260Trs4Nq5
hAw/hOemm5noghk2Xqe/b9SvniPpu87lSZmhMK+/N1JS98LGmsVlxPF2mWtvxSCN
PJn/YaX/mBxJL9gYPW5bhFH1Q52UGfliRd7ObMN4FQCzD0OSgQtGhg7rmjHsISLW
Uzx5Dv5um7732wBTzvRFBcaXwknqvgyWfuMrP2BJrCgZ/4lxO2u96FxTXEJclRlo
dIBhsOU3WlIEXcccK74s+BZwX+e5V8y2Gtu8yslw4GkxkWulZ3lRyZrRbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPJYIF09cqrB0GqS2UiHC64Y3TAMB8GA1UdIwQY
MBaAFAmwEQrkuBeUpQiDH8te3MjV/S8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2JBUkN1UzRGNVNsQ0lNZnkxN2N5Tlg5THhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9iM2NlMWItZjFmNy00MGNiLWIzZDAt
NmQyMGY1YzE5N2Y2LzEvQ2JBUkN1UzRGNVNsQ0lNZnkxN2N5Tlg5THhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9iM2NlMWItZjFmNy00MGNiLWIzZDAtNmQyMGY1YzE5N2Y2
LzEvQ2JBUkN1UzRGNVNsQ0lNZnkxN2N5Tlg5THhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATDfCzldL
NAgLHEVpdBucLNn+Ypf2j7pHpHqjNukwpel9+TvBWKyBm61cOPKZKBOq3gP5ouNo
lCRCcpPKuDMPOWSNK0/PMZ29vi+VTKXRFFsHoo1j3bz/GELeUB7q4jm1rWboBfwT
NmXNkPSrodszLyeSrnD3FEgHL3Vs/fxLTpyTzDeS/hnevqh4ySZjz2Aapcj6B+eq
PizsumqpHadqLgPIBCc+VrYFVNdPdfenGkMKiBxhCBVC2x1NEbQ0U1+iR8o6ULcw
AcempYDGLai3o+q1NvaZxnFGJ2FDr9XsLpHMqPOa2uvpth/F/tQ5dQ2YdbBIyjYP
XmZWg54T55K7+g==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:03 2025 by rpki-client on console-fra.rpki-client.org