Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft
File:                     dwrtd5md59Z-nfM_VVkd7e62JqU.mft (raw, json)
Hash identifier:          Ce8a/h/Lb7hCx3F3BJJYZt4rdRczFZfuJFnRBFbyWrg=
Subject key identifier:   CC:11:5F:EA:51:D4:23:35:72:64:E1:6F:7D:E8:76:03:0C:29:A6:93
Authority key identifier: 77:0A:ED:77:99:9D:E7:D6:7E:9D:F3:3F:55:59:1D:ED:EE:B6:26:A5
Certificate issuer:       /CN=770aed77999de7d67e9df33f55591dedeeb626a5
Certificate serial:       01951210C2E332739903EB7EF47D1FFF29DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dwrtd5md59Z-nfM_VVkd7e62JqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft
Manifest number:          0659
Signing time:             Mon 17 Feb 2025 04:00:43 +0000
Manifest this update:     Mon 17 Feb 2025 04:00:43 +0000
Manifest next update:     Tue 18 Feb 2025 04:00:43 +0000
Files and hashes:         1: HD-O2jkuswq0DBtkA_qMAtYHpi0.roa (hash: vMxKnkHwvEkLxZMUSLynqgj1bxvvWTA51P3OBUUHA7o=)
                          2: dwrtd5md59Z-nfM_VVkd7e62JqU.crl (hash: EjSAmi3x4t+2ph6f7Y+ZOQvdnJKMWO+1NzJSPTQznNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dwrtd5md59Z-nfM_VVkd7e62JqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:10:c2:e3:32:73:99:03:eb:7e:f4:7d:1f:ff:29:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=770aed77999de7d67e9df33f55591dedeeb626a5
        Validity
            Not Before: Feb 17 04:00:43 2025 GMT
            Not After : Feb 18 04:00:43 2025 GMT
        Subject: CN=cc115fea51d423357264e16f7de876030c29a693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:24:39:8a:50:5c:a3:d0:be:34:c2:de:11:b8:
                    e6:bf:6d:5c:81:8e:83:55:70:d3:3a:e3:3c:d2:cf:
                    1d:09:1a:13:f1:ba:c8:63:dd:2f:81:6e:52:c6:71:
                    55:d0:5f:22:0c:5d:a4:24:38:b5:e8:80:6e:99:62:
                    ac:ab:06:dc:6e:f8:1c:99:d6:93:a3:3d:fc:57:00:
                    b8:98:55:c2:c7:f0:a7:49:f3:b3:4c:bb:a3:bc:fc:
                    fb:a3:9e:82:05:60:03:38:d4:1d:bb:75:7b:ba:64:
                    8e:a9:3a:89:6e:c9:e4:53:b4:bf:d6:b1:f5:54:a6:
                    7e:e6:57:ea:b2:65:6a:38:d2:17:83:c8:87:11:47:
                    cf:5a:e8:e0:79:b5:c2:96:1a:50:4b:9a:9f:6c:69:
                    3a:f1:d4:f1:b9:7c:d6:f1:4c:22:cd:21:bf:5c:bd:
                    b2:22:4a:60:e9:ad:af:be:db:e1:4c:c8:b5:ac:80:
                    62:42:46:2d:a0:35:04:04:b7:a0:3c:e5:7b:0e:35:
                    64:59:17:60:a3:cd:69:f6:8d:8c:e8:91:36:c7:57:
                    ec:9b:11:dd:d4:b7:ac:c8:47:79:41:b0:35:b7:62:
                    22:11:4d:91:42:1a:ab:c8:d0:5f:0b:68:d2:e9:e8:
                    13:3d:ee:b6:2e:99:e9:95:d6:38:c9:4d:72:87:0b:
                    a1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:11:5F:EA:51:D4:23:35:72:64:E1:6F:7D:E8:76:03:0C:29:A6:93
            X509v3 Authority Key Identifier:
                keyid:77:0A:ED:77:99:9D:E7:D6:7E:9D:F3:3F:55:59:1D:ED:EE:B6:26:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwrtd5md59Z-nfM_VVkd7e62JqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ee:e0:71:f8:d9:b7:05:b5:29:cd:1d:d1:c1:81:39:82:bf:
         ad:f1:15:67:9d:7a:75:70:6b:a6:f0:fb:a0:59:6c:ab:e6:8e:
         17:24:47:c3:90:a8:a0:d1:a2:d2:87:a3:06:e3:b9:f1:9f:e4:
         b4:c2:04:40:a9:ec:90:e8:9d:e5:92:9f:8d:fa:83:08:6a:3c:
         95:72:f1:f3:06:5a:4a:e1:e9:75:40:88:09:a5:f5:72:1d:39:
         d4:a6:fd:8c:c1:dc:4e:b4:2e:68:31:69:d9:3b:56:5d:cd:19:
         51:c8:fb:0e:93:7c:0c:41:55:7c:74:4e:ea:b1:f0:7d:85:d6:
         b3:c0:97:98:c6:63:12:54:9d:e3:46:3e:57:9d:e1:09:95:33:
         e6:c7:f0:4e:3c:c0:10:ae:a7:e4:d9:b6:1a:2b:48:2c:22:1f:
         66:15:36:02:a5:31:a1:c6:d2:ca:be:62:c6:d3:5a:0a:16:c1:
         be:33:47:80:d4:f3:5f:e7:19:53:0a:15:a0:73:ab:a4:79:55:
         6d:69:5a:7a:b7:51:d7:5a:c7:08:b5:8e:61:df:b5:07:7c:82:
         5b:11:c7:5c:f9:d8:3d:a0:19:b9:3a:b3:d0:51:d9:4c:45:1e:
         08:00:d4:32:6b:2d:7b:4e:7f:40:cb:87:21:32:e6:d4:16:92:
         67:6a:62:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSEMLjMnOZA+t+9H0f/ynfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MGFlZDc3OTk5ZGU3ZDY3ZTlkZjMzZjU1NTkxZGVkZWVi
NjI2YTUwHhcNMjUwMjE3MDQwMDQzWhcNMjUwMjE4MDQwMDQzWjAzMTEwLwYDVQQD
EyhjYzExNWZlYTUxZDQyMzM1NzI2NGUxNmY3ZGU4NzYwMzBjMjlhNjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyQ5ilBco9C+NMLeEbjmv21cgY6D
VXDTOuM80s8dCRoT8brIY90vgW5SxnFV0F8iDF2kJDi16IBumWKsqwbcbvgcmdaT
oz38VwC4mFXCx/CnSfOzTLujvPz7o56CBWADONQdu3V7umSOqTqJbsnkU7S/1rH1
VKZ+5lfqsmVqONIXg8iHEUfPWujgebXClhpQS5qfbGk68dTxuXzW8UwizSG/XL2y
Ikpg6a2vvtvhTMi1rIBiQkYtoDUEBLegPOV7DjVkWRdgo81p9o2M6JE2x1fsmxHd
1LesyEd5QbA1t2IiEU2RQhqryNBfC2jS6egTPe62LpnpldY4yU1yhwuhrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwRX+pR1CM1cmThb33odgMMKaaTMB8GA1UdIwQY
MBaAFHcK7XeZnefWfp3zP1VZHe3utialMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHdydGQ1bWQ1OVotbmZNX1ZWa2Q3ZTYySnFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wMGQ5MjctZWQxYi00YjE5LWFkNmIt
ODQyOWJhNzkzMTlmLzEvZHdydGQ1bWQ1OVotbmZNX1ZWa2Q3ZTYySnFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8wMGQ5MjctZWQxYi00YjE5LWFkNmItODQyOWJhNzkzMTlm
LzEvZHdydGQ1bWQ1OVotbmZNX1ZWa2Q3ZTYySnFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFe7gcfjZ
twW1Kc0d0cGBOYK/rfEVZ516dXBrpvD7oFlsq+aOFyRHw5CooNGi0oejBuO58Z/k
tMIEQKnskOid5ZKfjfqDCGo8lXLx8wZaSuHpdUCICaX1ch051Kb9jMHcTrQuaDFp
2TtWXc0ZUcj7DpN8DEFVfHRO6rHwfYXWs8CXmMZjElSd40Y+V53hCZUz5sfwTjzA
EK6n5Nm2GitILCIfZhU2AqUxocbSyr5ixtNaChbBvjNHgNTzX+cZUwoVoHOrpHlV
bWlaerdR11rHCLWOYd+1B3yCWxHHXPnYPaAZuTqz0FHZTEUeCADUMmste05/QMuH
ITLm1BaSZ2pisw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:19 2025 by rpki-client