Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
File:                     mZeck6ki-_c0k75q1l6zv-und8U.mft (raw, json)
Hash identifier:          GLW4QSWTJSzaYOX/uLJ46gZ7JyOkvOTfAg+uvK23xCA=
Subject key identifier:   C3:94:E6:3C:B4:C1:B9:CF:B5:7F:8A:12:B5:A6:42:D0:F1:BC:BC:68
Authority key identifier: 99:97:9C:93:A9:22:FB:F7:34:93:BE:6A:D6:5E:B3:BF:EB:A7:77:C5
Certificate issuer:       /CN=99979c93a922fbf73493be6ad65eb3bfeba777c5
Certificate serial:       0194C3F5B235F8EDC5062E6B700FFD3E0D7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
Manifest number:          142B
Signing time:             Sun 02 Feb 2025 00:00:46 +0000
Manifest this update:     Sun 02 Feb 2025 00:00:46 +0000
Manifest next update:     Mon 03 Feb 2025 00:00:46 +0000
Files and hashes:         1: mZeck6ki-_c0k75q1l6zv-und8U.crl (hash: mA4l5XGr2t6KvCQtnkl1rym0F/Ykudqu/X0r1xVUYSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:f5:b2:35:f8:ed:c5:06:2e:6b:70:0f:fd:3e:0d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99979c93a922fbf73493be6ad65eb3bfeba777c5
        Validity
            Not Before: Feb  2 00:00:46 2025 GMT
            Not After : Feb  3 00:00:46 2025 GMT
        Subject: CN=c394e63cb4c1b9cfb57f8a12b5a642d0f1bcbc68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d5:2f:6f:87:8d:1f:c8:ab:47:fc:39:38:65:
                    07:fc:62:83:e4:61:bd:5d:cc:ab:af:3c:41:6e:e0:
                    63:6e:ab:d1:87:9e:e4:c2:be:01:f7:ee:ac:ec:03:
                    f4:97:b7:9e:f9:57:b9:53:62:e9:58:15:bf:60:60:
                    7b:84:61:1e:96:55:bb:50:97:26:49:57:7e:24:55:
                    21:f9:5b:65:b1:65:93:f9:0c:4d:64:9b:3e:e4:53:
                    5b:79:ef:eb:d3:be:15:16:10:96:c8:1b:4e:d5:34:
                    3d:43:55:b2:53:e3:7e:8e:06:a0:c7:f2:fc:a3:db:
                    d4:12:ad:39:48:16:6b:f4:dd:df:91:e8:16:e3:40:
                    ee:55:2e:2f:78:89:d1:39:79:3f:fb:33:43:2d:0d:
                    6b:3e:f4:c8:9c:00:21:b7:17:fa:41:00:12:29:bc:
                    5a:da:7b:d3:2b:db:07:cb:ce:a1:df:a8:e9:a0:b2:
                    b1:09:77:0a:07:cf:0d:56:55:3c:f9:dc:03:bc:56:
                    3e:77:8a:46:7d:9b:a7:5d:15:65:a7:1d:93:54:46:
                    bd:13:fb:b6:2b:26:7e:ee:36:37:2e:bf:c7:4d:8d:
                    7f:00:01:75:5a:08:a1:26:c4:7e:e3:25:e1:c3:90:
                    90:96:84:b1:e6:0e:85:7b:71:a4:91:d9:16:fd:ca:
                    a1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:94:E6:3C:B4:C1:B9:CF:B5:7F:8A:12:B5:A6:42:D0:F1:BC:BC:68
            X509v3 Authority Key Identifier:
                keyid:99:97:9C:93:A9:22:FB:F7:34:93:BE:6A:D6:5E:B3:BF:EB:A7:77:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:7a:6a:06:76:0a:3c:9b:7c:a6:53:4b:23:55:6c:e6:fd:e9:
         c0:11:48:f4:1b:96:53:ff:8c:e4:28:4f:7c:bf:b2:d4:dc:68:
         4e:b5:72:a6:c2:81:9e:23:70:a0:a6:b2:02:05:8c:e4:59:33:
         03:8d:21:aa:a5:e7:ea:dc:1a:c1:ed:03:25:57:3f:3f:40:fa:
         26:20:9b:ac:0a:4d:0e:86:ac:08:8c:41:ff:75:85:c0:e0:a9:
         10:77:aa:a3:ce:a8:dc:e2:59:d0:55:07:88:72:30:6d:86:7f:
         3c:61:41:07:e6:fb:45:0b:33:6b:86:3c:a1:eb:82:f4:9b:98:
         01:9b:de:45:d3:7d:98:fb:58:3b:df:92:0f:55:09:ce:00:16:
         ca:63:ed:a6:19:1b:ce:fb:f7:a4:a9:62:1f:a1:65:24:25:1f:
         58:7a:e1:37:4a:37:50:68:fa:14:74:1d:68:92:d4:24:47:90:
         a7:57:59:52:a3:07:b8:0d:e9:ff:94:72:4a:51:82:7e:ce:b9:
         c6:77:b5:94:de:50:f1:0e:bf:0e:78:80:a4:b7:dc:c5:30:a1:
         05:cf:b0:71:1d:e7:05:53:2b:6e:47:d7:c4:44:bc:4c:db:8c:
         b6:f8:d3:e1:77:00:dd:db:c5:64:a1:8f:3a:d1:b4:66:5c:92:
         21:bd:13:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:05:26 2025 by rpki-client