Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
File:                     zMp2Pz2ylloeTrC_dsHLhouq5G0.mft (raw, json)
Hash identifier:          aKcFp0TIP3cwPYWd+xl3Ljh9lI1Ak8Fe8KIZVUMipT4=
Subject key identifier:   CB:08:07:5E:35:1C:52:10:93:2A:88:EE:95:98:9E:94:1C:33:60:78
Authority key identifier: CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
Certificate issuer:       /CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Certificate serial:       019510C78606DAD113B708437EBA5C25681E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
Manifest number:          1456
Signing time:             Sun 16 Feb 2025 22:01:06 +0000
Manifest this update:     Sun 16 Feb 2025 22:01:06 +0000
Manifest next update:     Mon 17 Feb 2025 22:01:06 +0000
Files and hashes:         1: P2xLD0kn7OL7p2q913Y9a8RAM_8.roa (hash: DQ5vYJ7ltkuV9kkBJCqGKszNfulwSwCWnXFITIg1caY=)
                          2: zMp2Pz2ylloeTrC_dsHLhouq5G0.crl (hash: KMbocZf4rcQHXjWsnfv4FKbtaaAZ2XFgTWVcQRUmohc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:86:06:da:d1:13:b7:08:43:7e:ba:5c:25:68:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
        Validity
            Not Before: Feb 16 22:01:06 2025 GMT
            Not After : Feb 17 22:01:06 2025 GMT
        Subject: CN=cb08075e351c5210932a88ee95989e941c336078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:82:34:45:61:28:3f:4f:e1:10:88:a6:d8:ac:
                    d0:cf:56:07:06:6c:7d:16:9b:5e:32:8b:55:04:1a:
                    ff:ec:5b:79:3d:56:1b:4a:99:c0:56:b6:7e:58:e9:
                    a3:c0:3f:94:b7:2d:ea:59:12:d4:8b:19:a1:74:fe:
                    c2:e0:bb:fc:28:54:d8:23:68:9c:0a:d0:4c:02:30:
                    ec:60:87:2a:e5:c4:78:26:c4:6a:6a:6d:19:21:57:
                    cb:e9:6f:a3:e4:94:4b:97:16:82:67:86:b2:c7:13:
                    9d:5b:f1:eb:a6:03:ec:54:a7:e3:94:ee:ca:7a:e7:
                    7e:1d:93:9a:fe:54:ec:78:6d:4b:37:df:46:95:34:
                    6c:6b:4e:39:c5:51:d9:c4:44:5f:6b:69:bf:7e:95:
                    68:52:a8:ed:65:aa:4a:3a:f1:04:c5:b4:a1:78:71:
                    39:dd:bb:91:db:ce:1e:45:e3:48:a4:80:c8:7e:e0:
                    55:b7:b7:35:80:a2:7c:64:54:e6:6f:55:c5:c1:65:
                    e8:71:ff:92:40:81:f5:3c:1c:3b:6c:df:f5:de:10:
                    d7:ce:1a:2a:42:74:b3:74:f2:47:48:55:79:d0:6c:
                    4c:0e:d0:44:3a:ac:f4:52:e0:73:5a:b4:80:f5:d8:
                    36:eb:ec:ca:8e:28:f4:f6:a7:45:a3:05:1b:3a:95:
                    55:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:08:07:5E:35:1C:52:10:93:2A:88:EE:95:98:9E:94:1C:33:60:78
            X509v3 Authority Key Identifier:
                keyid:CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:5f:c3:b2:af:c4:fa:62:6b:ba:9a:19:95:d1:3e:02:1a:90:
         cc:13:c9:cb:16:14:7c:93:70:5f:4f:2e:2b:b7:86:cb:b2:25:
         6e:4d:e9:58:e7:e5:11:ad:17:49:7a:7b:bf:74:86:ab:ef:03:
         0d:e3:60:24:e9:d9:63:6c:6e:65:e9:96:8b:25:e4:2f:a9:32:
         39:88:5a:71:15:65:64:b7:0b:a2:b1:a6:b2:39:ee:94:1f:22:
         a9:37:c0:9c:26:4c:39:71:e5:ea:8f:45:13:44:3b:94:38:5d:
         8c:7d:26:e1:a9:a8:7e:33:68:ae:a6:f5:28:d7:ed:cd:b9:72:
         60:2a:13:e6:f0:4c:41:6e:94:fd:f4:71:ee:38:73:75:b6:e8:
         94:74:b2:78:8e:41:16:33:a3:32:f1:c0:60:16:9a:f6:e1:f0:
         25:a4:9b:fe:62:55:92:1a:ad:d4:13:42:80:b7:5e:ef:4a:fa:
         2c:12:96:ca:36:cb:01:ff:0e:29:e1:bf:90:e4:32:76:85:e4:
         75:b5:dc:51:2e:4e:c3:8c:05:e9:d0:dc:8a:aa:7c:85:e6:f4:
         cd:42:66:24:48:89:28:59:a1:a0:5a:ab:5c:60:7f:bf:c7:91:
         af:55:5d:b9:71:10:6f:15:dd:05:a1:24:0d:91:18:04:20:ad:
         66:cc:bb:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQx4YG2tETtwhDfrpcJWgeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjY2E3NjNmM2RiMjk2NWExZTRlYjBiZjc2YzFjYjg2OGJh
YWU0NmQwHhcNMjUwMjE2MjIwMTA2WhcNMjUwMjE3MjIwMTA2WjAzMTEwLwYDVQQD
EyhjYjA4MDc1ZTM1MWM1MjEwOTMyYTg4ZWU5NTk4OWU5NDFjMzM2MDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYI0RWEoP0/hEIim2KzQz1YHBmx9
FpteMotVBBr/7Ft5PVYbSpnAVrZ+WOmjwD+Uty3qWRLUixmhdP7C4Lv8KFTYI2ic
CtBMAjDsYIcq5cR4JsRqam0ZIVfL6W+j5JRLlxaCZ4ayxxOdW/HrpgPsVKfjlO7K
eud+HZOa/lTseG1LN99GlTRsa045xVHZxERfa2m/fpVoUqjtZapKOvEExbSheHE5
3buR284eReNIpIDIfuBVt7c1gKJ8ZFTmb1XFwWXocf+SQIH1PBw7bN/13hDXzhoq
QnSzdPJHSFV50GxMDtBEOqz0UuBzWrSA9dg26+zKjij09qdFowUbOpVVvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsIB141HFIQkyqI7pWYnpQcM2B4MB8GA1UdIwQY
MBaAFMzKdj89spZaHk6wv3bBy4aLquRtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xYzA5MGMtNzRkYi00NTMxLTk2Zjct
ZmFjNjNjMDNjMjVhLzEvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8xYzA5MGMtNzRkYi00NTMxLTk2ZjctZmFjNjNjMDNjMjVh
LzEvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn1/Dsq/E
+mJrupoZldE+AhqQzBPJyxYUfJNwX08uK7eGy7Ilbk3pWOflEa0XSXp7v3SGq+8D
DeNgJOnZY2xuZemWiyXkL6kyOYhacRVlZLcLorGmsjnulB8iqTfAnCZMOXHl6o9F
E0Q7lDhdjH0m4amofjNorqb1KNftzblyYCoT5vBMQW6U/fRx7jhzdbbolHSyeI5B
FjOjMvHAYBaa9uHwJaSb/mJVkhqt1BNCgLde70r6LBKWyjbLAf8OKeG/kOQydoXk
dbXcUS5Ow4wF6dDciqp8heb0zUJmJEiJKFmhoFqrXGB/v8eRr1VduXEQbxXdBaEk
DZEYBCCtZsy7Xw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:08 2025 by rpki-client