Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft
File:                     SlyG9c47cLXbUxXWqp1XoAG81oY.mft (raw, json)
Hash identifier:          ZN8bNA7x+FZ5Mdje5kYL1ostiWHjx6AI6uShEowQbJE=
Subject key identifier:   24:F1:7F:8B:BE:A9:51:40:B3:2B:F3:66:94:9A:8D:BA:A1:CD:E4:9C
Authority key identifier: 4A:5C:86:F5:CE:3B:70:B5:DB:53:15:D6:AA:9D:57:A0:01:BC:D6:86
Certificate issuer:       /CN=4a5c86f5ce3b70b5db5315d6aa9d57a001bcd686
Certificate serial:       0194C4D17884CB14D36DAA340F110EBA7E57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SlyG9c47cLXbUxXWqp1XoAG81oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft
Manifest number:          0534
Signing time:             Sun 02 Feb 2025 04:00:49 +0000
Manifest this update:     Sun 02 Feb 2025 04:00:49 +0000
Manifest next update:     Mon 03 Feb 2025 04:00:49 +0000
Files and hashes:         1: SlyG9c47cLXbUxXWqp1XoAG81oY.crl (hash: UKhH5aNhIHpNvdI7nB6P38l4pUtqe53LjloEcm68Aj0=)
                          2: npLLh9RrcQH8xkykt9enwrNvhXQ.roa (hash: +AU9dB6ggcPcc7d+ifQcSn4cZAw7WXAjX0hF7llZTBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SlyG9c47cLXbUxXWqp1XoAG81oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:d1:78:84:cb:14:d3:6d:aa:34:0f:11:0e:ba:7e:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a5c86f5ce3b70b5db5315d6aa9d57a001bcd686
        Validity
            Not Before: Feb  2 04:00:49 2025 GMT
            Not After : Feb  3 04:00:49 2025 GMT
        Subject: CN=24f17f8bbea95140b32bf366949a8dbaa1cde49c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:82:e1:cf:c1:fa:83:cc:ea:9e:0a:31:c6:
                    a4:b0:5c:a2:ce:6c:ad:0e:10:fa:e0:fb:10:d4:50:
                    bf:fa:e2:71:2f:8d:0a:53:39:e5:b8:81:59:28:b8:
                    ec:fc:f0:77:1d:e8:5c:48:53:dc:95:21:58:03:6e:
                    b5:cc:93:05:e3:78:21:dd:91:be:77:af:46:3b:c0:
                    b1:ab:ad:ed:d1:16:bc:74:07:46:dc:5a:24:7e:e3:
                    2f:b9:d3:bd:04:60:4b:66:1b:22:15:dd:a6:f6:1c:
                    dd:64:98:39:a2:db:a4:38:e0:7d:be:4b:cd:aa:7a:
                    c0:64:2f:38:27:09:ca:50:0c:8c:47:c6:73:df:2a:
                    e7:a2:9a:94:6e:21:36:53:89:0d:fa:91:37:f1:f7:
                    c2:df:9f:ca:d4:74:db:26:c9:5e:ab:f1:b1:3a:0e:
                    2c:dd:95:10:f6:95:db:57:c2:ae:9b:9e:be:47:0d:
                    0c:60:85:04:b9:3c:31:d5:36:e4:7b:3a:92:16:a5:
                    10:e1:7b:30:7f:cc:eb:60:44:58:93:d0:50:ff:30:
                    02:1f:62:fe:f8:45:79:40:29:e2:73:95:bc:22:45:
                    6b:11:d3:74:20:30:c2:c6:54:07:5c:28:08:7a:19:
                    0c:66:ea:ed:51:5a:4b:2d:b5:1e:c2:b0:6d:4b:50:
                    fe:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F1:7F:8B:BE:A9:51:40:B3:2B:F3:66:94:9A:8D:BA:A1:CD:E4:9C
            X509v3 Authority Key Identifier:
                keyid:4A:5C:86:F5:CE:3B:70:B5:DB:53:15:D6:AA:9D:57:A0:01:BC:D6:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlyG9c47cLXbUxXWqp1XoAG81oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b7:ab:42:4f:71:0f:35:91:14:c2:2e:0d:5d:9a:c7:bf:f0:
         80:f7:51:58:9e:79:d7:bf:bb:c2:6a:9a:93:71:78:5b:49:5f:
         49:54:15:8a:da:93:39:b1:8e:96:d5:1f:c4:29:15:71:e6:e2:
         fc:1d:f2:ad:76:7e:b7:b9:b2:20:b3:df:6f:94:1b:86:62:2a:
         eb:7a:54:f6:35:e4:a4:fc:ed:81:e6:af:aa:1e:43:30:84:63:
         d6:7b:7c:97:f8:c0:cd:8e:71:d0:9f:ee:36:31:04:02:50:79:
         89:a6:b1:45:8b:db:7e:02:e0:d6:82:66:ae:9f:80:3c:3b:5f:
         b8:fe:cb:3e:d1:6f:47:97:b3:d8:69:0c:b1:c1:cd:2a:7f:a3:
         7e:36:53:61:90:6e:35:e0:d8:4d:83:26:0d:ee:3e:2e:cc:30:
         c6:1c:62:6e:d1:a4:b4:63:81:b6:7a:59:59:1c:5a:a4:56:b7:
         2f:c1:5f:dd:c7:71:c1:3d:cf:1a:c9:85:32:80:01:c0:d8:2f:
         ed:ba:fb:69:ee:b9:8e:e3:a7:ce:d1:48:51:22:b0:40:f3:a6:
         db:4d:d6:07:4f:06:37:1d:e7:54:32:e5:86:78:c6:e3:78:44:
         96:a5:f4:b7:d0:3c:6c:73:06:30:28:60:3f:18:78:e4:30:3a:
         af:1f:ca:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTE0XiEyxTTbao0DxEOun5XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNWM4NmY1Y2UzYjcwYjVkYjUzMTVkNmFhOWQ1N2EwMDFi
Y2Q2ODYwHhcNMjUwMjAyMDQwMDQ5WhcNMjUwMjAzMDQwMDQ5WjAzMTEwLwYDVQQD
EygyNGYxN2Y4YmJlYTk1MTQwYjMyYmYzNjY5NDlhOGRiYWExY2RlNDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtICC4c/B+oPM6p4KMcaksFyizmyt
DhD64PsQ1FC/+uJxL40KUznluIFZKLjs/PB3HehcSFPclSFYA261zJMF43gh3ZG+
d69GO8Cxq63t0Ra8dAdG3FokfuMvudO9BGBLZhsiFd2m9hzdZJg5otukOOB9vkvN
qnrAZC84JwnKUAyMR8Zz3yrnopqUbiE2U4kN+pE38ffC35/K1HTbJsleq/GxOg4s
3ZUQ9pXbV8Kum56+Rw0MYIUEuTwx1TbkezqSFqUQ4Xswf8zrYERYk9BQ/zACH2L+
+EV5QCnic5W8IkVrEdN0IDDCxlQHXCgIehkMZurtUVpLLbUewrBtS1D+vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTxf4u+qVFAsyvzZpSajbqhzeScMB8GA1UdIwQY
MBaAFEpchvXOO3C121MV1qqdV6ABvNaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2x5RzljNDdjTFhiVXhYV3FwMVhvQUc4MW9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85ZTJiYzItNWJjMi00YjZmLTgxYTct
NDc3ODNlMjNmYjU5LzEvU2x5RzljNDdjTFhiVXhYV3FwMVhvQUc4MW9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi85ZTJiYzItNWJjMi00YjZmLTgxYTctNDc3ODNlMjNmYjU5
LzEvU2x5RzljNDdjTFhiVXhYV3FwMVhvQUc4MW9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7erQk9x
DzWRFMIuDV2ax7/wgPdRWJ5517+7wmqak3F4W0lfSVQVitqTObGOltUfxCkVcebi
/B3yrXZ+t7myILPfb5QbhmIq63pU9jXkpPztgeavqh5DMIRj1nt8l/jAzY5x0J/u
NjEEAlB5iaaxRYvbfgLg1oJmrp+APDtfuP7LPtFvR5ez2GkMscHNKn+jfjZTYZBu
NeDYTYMmDe4+LswwxhxibtGktGOBtnpZWRxapFa3L8Ff3cdxwT3PGsmFMoABwNgv
7br7ae65juOnztFIUSKwQPOm203WB08GNx3nVDLlhnjG43hElqX0t9A8bHMGMChg
Pxh45DA6rx/K9g==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:41:33 2025 by rpki-client