Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
File:                     G1NNR62NtYlKX8k0LkVY-U5PF_E.mft (raw, json)
Hash identifier:          CwyQHViiqbY8/PiQm7KiU7R+/G2oUIdGIa5gQqV10vU=
Subject key identifier:   48:95:82:AC:E2:BE:B0:A5:5D:BD:4B:22:9A:F2:F4:D1:E1:A6:4C:0C
Authority key identifier: 1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1
Certificate issuer:       /CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1
Certificate serial:       0194BB970385425E12FE5DE52CD116008BA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
Manifest number:          1380
Signing time:             Fri 31 Jan 2025 09:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:23 +0000
Files and hashes:         1: G1NNR62NtYlKX8k0LkVY-U5PF_E.crl (hash: shoMat7XG5TeKLmHUrsPa2WXJYMC2bPrrHiIxEUCMiU=)
                          2: tpcLfnSFe1LhX4JafoXime7wXxw.roa (hash: 5bEgNy5LIfp1SJAYM4F8oQrbGx7UDr0Zn6gyPZH4W9s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:97:03:85:42:5e:12:fe:5d:e5:2c:d1:16:00:8b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1
        Validity
            Not Before: Jan 31 09:00:23 2025 GMT
            Not After : Feb  1 09:00:23 2025 GMT
        Subject: CN=489582ace2beb0a55dbd4b229af2f4d1e1a64c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7b:9a:bd:36:e2:d4:22:db:98:f5:f7:19:21:
                    a0:b8:97:e2:7a:db:9f:6b:6f:98:b0:e1:79:be:1e:
                    47:f3:c6:5e:15:a2:e1:92:85:22:4c:f6:13:ff:a8:
                    e5:47:7b:6a:1e:8f:63:7d:81:2a:13:00:40:86:56:
                    37:b2:61:f3:06:c6:75:d0:83:5f:0e:42:a6:7c:27:
                    63:f8:57:14:81:7e:1d:24:8e:d7:d7:1f:1d:d5:79:
                    bd:d3:ac:3d:62:9a:5f:0e:61:4b:ed:c0:88:cd:68:
                    14:ef:7a:98:6d:5e:54:ea:90:95:ff:23:3c:5a:85:
                    c9:ad:f2:82:62:fb:bf:0c:57:f7:c1:1c:f9:ed:a2:
                    1e:ad:dc:91:0a:26:6a:d3:3e:28:07:7a:58:18:57:
                    3e:e1:59:dc:6e:47:e1:ff:8f:36:82:73:5e:82:aa:
                    a3:cb:2e:fa:0d:19:ca:a3:68:84:1d:00:0a:df:64:
                    a7:70:11:03:41:ee:19:18:4d:8f:d8:b3:0c:a4:c0:
                    a7:1d:8c:61:02:82:58:21:06:28:ec:a4:29:53:7a:
                    7e:b5:31:ea:7b:02:e0:99:90:16:17:31:bf:e7:f6:
                    17:ac:e5:74:16:e4:2f:3f:f0:81:be:5a:97:c3:e0:
                    00:4c:fd:5b:4c:ac:8f:4a:d9:69:fe:91:69:b1:86:
                    9c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:95:82:AC:E2:BE:B0:A5:5D:BD:4B:22:9A:F2:F4:D1:E1:A6:4C:0C
            X509v3 Authority Key Identifier:
                keyid:1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a3:58:05:86:52:7d:52:88:16:4a:b4:e9:96:6e:f1:fe:5c:
         4c:fa:13:81:c5:d0:5d:41:b5:76:40:56:4e:21:b7:e6:ef:c8:
         cf:ad:34:37:37:d0:c3:4a:5f:ae:2e:35:1e:62:ce:d0:05:bc:
         df:c1:5f:2a:62:24:f2:f8:65:44:90:65:24:b8:10:bf:35:b4:
         c4:a3:b2:c3:19:48:24:95:5e:0c:0d:51:2a:9c:ea:c6:f7:3d:
         b4:02:01:0d:76:ca:29:00:de:a6:10:10:40:18:18:68:e6:44:
         74:37:03:01:92:12:64:bf:e9:3f:32:58:ea:49:09:94:02:44:
         63:a6:3d:a1:e1:95:8e:92:d8:04:d1:7f:b0:6e:72:44:6e:3b:
         c5:fe:4f:15:2c:ae:03:dd:7c:92:88:d0:79:73:38:1f:57:49:
         a9:b2:68:fa:67:ff:64:bb:c7:f5:43:43:86:3e:76:93:65:49:
         0e:53:cd:58:d2:7e:50:f4:56:26:d3:07:77:15:3a:ac:c2:d9:
         85:18:84:ea:00:65:56:88:1c:07:80:45:94:fc:3e:31:db:18:
         3a:05:3b:02:39:c6:0d:8b:73:f3:ce:0b:ff:48:89:7a:d3:35:
         53:54:81:ce:b6:35:31:64:71:07:d1:50:83:a3:b5:2d:33:cd:
         0f:07:20:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lwOFQl4S/l3lLNEWAIuoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNTM0ZDQ3YWQ4ZGI1ODk0YTVmYzkzNDJlNDU1OGY5NGU0
ZjE3ZjEwHhcNMjUwMTMxMDkwMDIzWhcNMjUwMjAxMDkwMDIzWjAzMTEwLwYDVQQD
Eyg0ODk1ODJhY2UyYmViMGE1NWRiZDRiMjI5YWYyZjRkMWUxYTY0YzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXuavTbi1CLbmPX3GSGguJfietuf
a2+YsOF5vh5H88ZeFaLhkoUiTPYT/6jlR3tqHo9jfYEqEwBAhlY3smHzBsZ10INf
DkKmfCdj+FcUgX4dJI7X1x8d1Xm906w9YppfDmFL7cCIzWgU73qYbV5U6pCV/yM8
WoXJrfKCYvu/DFf3wRz57aIerdyRCiZq0z4oB3pYGFc+4Vncbkfh/482gnNegqqj
yy76DRnKo2iEHQAK32SncBEDQe4ZGE2P2LMMpMCnHYxhAoJYIQYo7KQpU3p+tTHq
ewLgmZAWFzG/5/YXrOV0FuQvP/CBvlqXw+AATP1bTKyPStlp/pFpsYacVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiVgqzivrClXb1LIpry9NHhpkwMMB8GA1UdIwQY
MBaAFBtTTUetjbWJSl/JNC5FWPlOTxfxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzFOTlI2Mk50WWxLWDhrMExrVlktVTVQRl9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82YjQwMjMtYWRlZi00ZTRkLThjZjYt
MzI2Njk3MzdjNTE3LzEvRzFOTlI2Mk50WWxLWDhrMExrVlktVTVQRl9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi82YjQwMjMtYWRlZi00ZTRkLThjZjYtMzI2Njk3MzdjNTE3
LzEvRzFOTlI2Mk50WWxLWDhrMExrVlktVTVQRl9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg6NYBYZS
fVKIFkq06ZZu8f5cTPoTgcXQXUG1dkBWTiG35u/Iz600NzfQw0pfri41HmLO0AW8
38FfKmIk8vhlRJBlJLgQvzW0xKOywxlIJJVeDA1RKpzqxvc9tAIBDXbKKQDephAQ
QBgYaOZEdDcDAZISZL/pPzJY6kkJlAJEY6Y9oeGVjpLYBNF/sG5yRG47xf5PFSyu
A918kojQeXM4H1dJqbJo+mf/ZLvH9UNDhj52k2VJDlPNWNJ+UPRWJtMHdxU6rMLZ
hRiE6gBlVogcB4BFlPw+MdsYOgU7AjnGDYtz884L/0iJetM1U1SBzrY1MWRxB9FQ
g6O1LTPNDwcgnA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:01 2025 by rpki-client on console-fra.rpki-client.org