Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
File:                     bCynx_AN7ET0jEnyKldylIaaqbo.mft (raw, json)
Hash identifier:          sOyZtI+VaeqsvQosrL+3eJ3Owh1BwZGsZM5oxCiJiaE=
Subject key identifier:   53:BD:09:17:7E:F9:7B:BC:3B:93:6D:B9:CE:65:57:A1:F4:63:18:B8
Authority key identifier: 6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA
Certificate issuer:       /CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
Certificate serial:       01958B1650B70A91E999DBAD01F9A41ECA36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
Manifest number:          1494
Signing time:             Wed 12 Mar 2025 16:00:50 +0000
Manifest this update:     Wed 12 Mar 2025 16:00:50 +0000
Manifest next update:     Thu 13 Mar 2025 16:00:50 +0000
Files and hashes:         1: CFjxJzCmd6HUFa7VuE6yI0I0AMQ.roa (hash: MIyflourwhBuhTA+A0FwkrenrfoY9JbHcdU1eop0jPQ=)
                          2: bCynx_AN7ET0jEnyKldylIaaqbo.crl (hash: pJ/exoftSg0ywjkvwurVQscwri1s9A+UlaA5v2phj7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 16:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:16:50:b7:0a:91:e9:99:db:ad:01:f9:a4:1e:ca:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
        Validity
            Not Before: Mar 12 16:00:50 2025 GMT
            Not After : Mar 13 16:00:50 2025 GMT
        Subject: CN=53bd09177ef97bbc3b936db9ce6557a1f46318b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cd:81:c5:5d:a8:0f:a9:26:62:b8:2f:51:82:
                    a2:0f:87:7d:a5:ef:0f:0b:3d:ca:df:37:91:6b:39:
                    db:a2:99:71:39:b5:0f:85:9f:bb:f5:17:e9:83:57:
                    18:ec:e0:b0:91:33:94:85:41:39:51:79:41:5b:78:
                    22:ab:2e:22:8e:3c:6c:1f:f4:aa:87:ac:ed:5b:8c:
                    47:29:8c:a0:04:4a:d8:10:ad:05:54:37:1c:d4:d4:
                    ef:db:13:3e:78:41:3e:82:a2:86:9f:0a:cf:41:fa:
                    c6:73:78:7f:93:e8:7a:ae:1d:8d:01:38:e5:11:54:
                    44:31:e3:db:18:1a:88:e3:d4:7e:85:da:9f:d4:79:
                    51:2f:0b:b3:3d:6f:77:5b:10:fa:91:d0:2c:f1:3a:
                    78:a5:7a:2c:2d:9b:d2:8f:fb:6d:78:c0:08:6d:e7:
                    56:2a:43:b5:58:64:fc:c6:7b:bf:4d:b1:c1:63:56:
                    7e:7e:63:2a:84:48:3c:e3:c1:f2:a4:81:5f:8c:4a:
                    e8:e4:14:90:bd:c0:20:fe:38:5b:44:d2:fb:39:e3:
                    57:e3:08:0b:6f:eb:43:5b:60:31:c2:83:69:6e:b1:
                    5b:37:c8:c2:ca:ff:06:1e:ab:d6:52:ee:8f:05:e2:
                    73:ea:f5:46:bd:b5:f2:cb:ed:64:9f:36:a5:26:e0:
                    c2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BD:09:17:7E:F9:7B:BC:3B:93:6D:B9:CE:65:57:A1:F4:63:18:B8
            X509v3 Authority Key Identifier:
                keyid:6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:12:f0:a1:eb:b2:4a:ff:e1:68:bf:aa:2b:7a:c7:d0:38:6d:
         87:41:e2:45:70:14:dd:4b:ae:58:52:77:b6:e8:f6:b5:a4:46:
         b6:dd:d1:29:e9:09:c2:0b:9b:65:1d:fc:e6:22:29:0c:48:52:
         41:c2:7b:0e:07:e3:01:1e:11:78:6d:8d:cc:45:ae:41:66:81:
         01:1a:50:a6:25:ee:e3:de:f1:e0:f2:94:eb:7a:ac:7f:33:c6:
         d3:03:82:b5:7a:aa:cb:63:a4:2f:51:c4:21:bf:02:96:75:43:
         f7:69:6d:f8:4c:65:a4:a0:e3:9b:41:64:ce:6b:65:38:77:75:
         7f:49:c0:a4:18:a3:44:fa:2d:0e:bc:5f:dc:10:3a:1c:92:f3:
         b6:60:2d:9b:45:74:41:15:a1:3a:0b:2d:cf:7a:98:d4:40:0d:
         76:81:a1:03:89:6f:1b:e6:cc:8b:d0:1e:27:3b:3b:d9:53:a1:
         97:00:d0:42:b9:4e:52:03:47:93:82:71:4e:f7:0a:91:5a:c4:
         2d:d3:c7:c6:40:6b:d5:5f:93:18:76:f4:4f:5c:f2:f6:bc:eb:
         36:00:25:77:3b:9c:71:b6:2f:1e:67:91:59:f3:63:02:4c:c7:
         ca:5a:2e:39:d0:87:8e:4f:52:62:45:fe:b1:61:ea:47:fd:c5:
         b8:64:4c:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLFlC3CpHpmdutAfmkHso2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMmNhN2M3ZjAwZGVjNDRmNDhjNDlmMjJhNTc3Mjk0ODY5
YWE5YmEwHhcNMjUwMzEyMTYwMDUwWhcNMjUwMzEzMTYwMDUwWjAzMTEwLwYDVQQD
Eyg1M2JkMDkxNzdlZjk3YmJjM2I5MzZkYjljZTY1NTdhMWY0NjMxOGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA282BxV2oD6kmYrgvUYKiD4d9pe8P
Cz3K3zeRaznboplxObUPhZ+79Rfpg1cY7OCwkTOUhUE5UXlBW3giqy4ijjxsH/Sq
h6ztW4xHKYygBErYEK0FVDcc1NTv2xM+eEE+gqKGnwrPQfrGc3h/k+h6rh2NATjl
EVREMePbGBqI49R+hdqf1HlRLwuzPW93WxD6kdAs8Tp4pXosLZvSj/tteMAIbedW
KkO1WGT8xnu/TbHBY1Z+fmMqhEg848HypIFfjEro5BSQvcAg/jhbRNL7OeNX4wgL
b+tDW2AxwoNpbrFbN8jCyv8GHqvWUu6PBeJz6vVGvbXyy+1knzalJuDCEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFO9CRd++Xu8O5Ntuc5lV6H0Yxi4MB8GA1UdIwQY
MBaAFGwsp8fwDexE9IxJ8ipXcpSGmqm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YTU1OTktZDM4OS00ODM2LTgwMzMt
NDNkYzJiNWVlYjViLzEvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC85YTU1OTktZDM4OS00ODM2LTgwMzMtNDNkYzJiNWVlYjVi
LzEvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARLwoeuy
Sv/haL+qK3rH0Dhth0HiRXAU3UuuWFJ3tuj2taRGtt3RKekJwgubZR385iIpDEhS
QcJ7DgfjAR4ReG2NzEWuQWaBARpQpiXu497x4PKU63qsfzPG0wOCtXqqy2OkL1HE
Ib8ClnVD92lt+ExlpKDjm0FkzmtlOHd1f0nApBijRPotDrxf3BA6HJLztmAtm0V0
QRWhOgstz3qY1EANdoGhA4lvG+bMi9AeJzs72VOhlwDQQrlOUgNHk4JxTvcKkVrE
LdPHxkBr1V+TGHb0T1zy9rzrNgAldzuccbYvHmeRWfNjAkzHylouOdCHjk9SYkX+
sWHqR/3FuGRM7w==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:24 2025 by rpki-client