Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
File:                     8L-tMcFMk9qlNEugT0tSNUaW368.mft (raw, json)
Hash identifier:          TES7AsVu1Mf8f1wMiGh+6EMG35RGfzCZ8MzGZEQfvcE=
Subject key identifier:   1F:B5:91:7E:8C:EC:F3:37:A2:72:BB:4E:57:C6:5C:22:44:5D:AA:48
Authority key identifier: F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF
Certificate issuer:       /CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
Certificate serial:       0194BAF21ABD9124E60370A39EB6FCB3824E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 06:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:16 +0000
Files and hashes:         1: 8L-tMcFMk9qlNEugT0tSNUaW368.crl (hash: uXPqGiR7czbx0+vQtYEOYsBQnZjBa4oLf9QkQGpwD2o=)
                          2: UW4EyDU9bcfR_a5RruA-KGiV3Uw.roa (hash: yNneGYRFbH3ZhAuncPonvd3a6cecW1xrZDzoeBjGnHI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:1a:bd:91:24:e6:03:70:a3:9e:b6:fc:b3:82:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
        Validity
            Not Before: Jan 31 06:00:16 2025 GMT
            Not After : Feb  1 06:00:16 2025 GMT
        Subject: CN=1fb5917e8cecf337a272bb4e57c65c22445daa48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b7:16:d0:29:59:c3:c2:d8:38:d6:16:fe:e2:
                    ae:be:1e:e0:19:a8:8b:88:40:75:0d:b2:4f:85:9b:
                    38:31:7a:96:73:42:ff:94:33:e4:56:03:e9:9f:fb:
                    bd:73:c8:06:c1:58:50:4b:b9:bc:70:9a:89:a0:26:
                    e3:df:e4:a8:89:2a:0b:bd:d1:a2:f4:24:7f:fa:54:
                    e2:3e:4c:2a:a3:e9:68:dd:f5:08:30:fe:92:1b:63:
                    22:04:d6:63:9e:c1:54:2e:5d:29:67:a0:1a:e1:e1:
                    9c:26:99:0b:05:f3:3c:8b:67:2a:74:19:32:4b:c5:
                    01:23:a8:ee:29:a4:6c:9b:c6:45:cf:53:56:e7:a4:
                    e1:56:a6:1f:c8:a8:71:88:75:3d:22:67:4f:9c:ef:
                    c3:51:69:e0:fb:ef:53:e2:2e:d9:aa:59:b2:6b:b0:
                    4a:ad:e5:18:c6:5b:1c:f7:52:c8:c9:75:1c:b2:c0:
                    49:72:e1:bb:9d:62:73:49:00:55:59:43:41:69:a7:
                    de:d4:33:77:2b:f8:11:12:63:27:50:97:27:66:e3:
                    11:de:bd:ef:21:0a:73:be:44:21:ff:6e:4f:6d:ce:
                    4f:0a:8a:8e:6a:c5:dd:d9:ec:2d:28:94:0a:c8:8a:
                    41:ca:76:a7:0f:90:b1:dc:27:b6:6a:96:63:69:4f:
                    84:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B5:91:7E:8C:EC:F3:37:A2:72:BB:4E:57:C6:5C:22:44:5D:AA:48
            X509v3 Authority Key Identifier:
                keyid:F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:4d:9b:10:b7:34:10:af:4e:ef:b8:9b:5b:37:50:ef:57:ea:
         a2:22:b3:02:c6:2f:3f:a7:12:ac:96:ae:dc:49:38:0f:3a:40:
         61:d8:8c:9e:81:e1:56:bc:f6:0e:07:6d:06:0b:81:89:eb:a7:
         b9:da:e2:bf:b2:27:26:a0:f7:2a:e6:30:2e:46:73:b9:77:c7:
         4f:0c:57:07:cb:5d:f0:19:70:0a:8a:e6:3a:18:99:ab:ea:f1:
         cd:ae:49:50:3f:dd:7a:e9:4e:cc:a7:03:84:d5:d7:01:f9:e6:
         01:2c:87:42:90:d7:c5:d4:4a:4d:d4:75:4b:c3:52:f0:25:8f:
         6d:ba:ab:f3:68:44:ab:21:1e:49:2e:aa:c7:01:98:96:45:c3:
         6b:bc:01:04:a9:df:f5:87:66:db:b9:dd:f5:9a:62:9a:f3:1b:
         b6:22:4c:e5:49:01:e4:de:b7:cf:35:a7:a7:5a:03:d5:c3:5b:
         11:7d:47:eb:d7:bf:39:bd:92:d7:c5:f1:04:f5:17:9a:10:ab:
         de:38:03:85:bc:80:51:49:34:d6:5a:cf:1a:54:d0:44:cd:88:
         c8:85:cd:84:06:07:e0:e2:35:62:0b:54:5f:f4:8d:5f:91:ac:
         90:02:c3:2d:db:15:87:42:f5:23:15:bc:f0:5f:34:c6:21:fd:
         69:ba:97:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68hq9kSTmA3Cjnrb8s4JOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYmZhZDMxYzE0YzkzZGFhNTM0NGJhMDRmNGI1MjM1NDY5
NmRmYWYwHhcNMjUwMTMxMDYwMDE2WhcNMjUwMjAxMDYwMDE2WjAzMTEwLwYDVQQD
EygxZmI1OTE3ZThjZWNmMzM3YTI3MmJiNGU1N2M2NWMyMjQ0NWRhYTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLcW0ClZw8LYONYW/uKuvh7gGaiL
iEB1DbJPhZs4MXqWc0L/lDPkVgPpn/u9c8gGwVhQS7m8cJqJoCbj3+SoiSoLvdGi
9CR/+lTiPkwqo+lo3fUIMP6SG2MiBNZjnsFULl0pZ6Aa4eGcJpkLBfM8i2cqdBky
S8UBI6juKaRsm8ZFz1NW56ThVqYfyKhxiHU9ImdPnO/DUWng++9T4i7Zqlmya7BK
reUYxlsc91LIyXUcssBJcuG7nWJzSQBVWUNBaafe1DN3K/gREmMnUJcnZuMR3r3v
IQpzvkQh/25Pbc5PCoqOasXd2ewtKJQKyIpBynanD5Cx3Ce2apZjaU+EtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+1kX6M7PM3onK7TlfGXCJEXapIMB8GA1UdIwQY
MBaAFPC/rTHBTJPapTRLoE9LUjVGlt+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEwtdE1jRk1rOXFsTkV1Z1QwdFNOVWFXMzY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9kYzM1ZWItNmVjZi00NDUyLTg1OTkt
NzBkNTljYzRmN2NjLzEvOEwtdE1jRk1rOXFsTkV1Z1QwdFNOVWFXMzY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9kYzM1ZWItNmVjZi00NDUyLTg1OTktNzBkNTljYzRmN2Nj
LzEvOEwtdE1jRk1rOXFsTkV1Z1QwdFNOVWFXMzY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYU2bELc0
EK9O77ibWzdQ71fqoiKzAsYvP6cSrJau3Ek4DzpAYdiMnoHhVrz2DgdtBguBieun
udriv7InJqD3KuYwLkZzuXfHTwxXB8td8BlwCormOhiZq+rxza5JUD/deulOzKcD
hNXXAfnmASyHQpDXxdRKTdR1S8NS8CWPbbqr82hEqyEeSS6qxwGYlkXDa7wBBKnf
9Ydm27nd9ZpimvMbtiJM5UkB5N63zzWnp1oD1cNbEX1H69e/Ob2S18XxBPUXmhCr
3jgDhbyAUUk01lrPGlTQRM2IyIXNhAYH4OI1YgtUX/SNX5GskALDLdsVh0L1IxW8
8F80xiH9abqXIw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:45 2025 by rpki-client on console-fra.rpki-client.org