Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft
File:                     NVi7R941Tgng_CyywfoU1x2Sbug.mft (raw, json)
Hash identifier:          7Esk/Y8anT1HXNYIwGFjdce+Ne24RZK/4sY3anzxXys=
Subject key identifier:   09:6C:F5:98:55:BA:4C:40:AA:3B:7A:74:49:CA:4C:47:41:2E:2E:67
Authority key identifier: 35:58:BB:47:DE:35:4E:09:E0:FC:2C:B2:C1:FA:14:D7:1D:92:6E:E8
Certificate issuer:       /CN=3558bb47de354e09e0fc2cb2c1fa14d71d926ee8
Certificate serial:       0195116BF37A56F222831BDB5C7F252B8CCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft
Manifest number:          145E
Signing time:             Mon 17 Feb 2025 01:00:42 +0000
Manifest this update:     Mon 17 Feb 2025 01:00:42 +0000
Manifest next update:     Tue 18 Feb 2025 01:00:42 +0000
Files and hashes:         1: 0iLUxeXNyLeCeJPOBWFetpkhzr8.roa (hash: GzvKjvrXUQtFRvTqnLO3SZbgmgXYnbU1huTzG2YJ5xg=)
                          2: NVi7R941Tgng_CyywfoU1x2Sbug.crl (hash: ZUT8LD0iY8O9jtLWTGDcTTh+nKUoArHQ4P6U2y+3Xss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:6b:f3:7a:56:f2:22:83:1b:db:5c:7f:25:2b:8c:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3558bb47de354e09e0fc2cb2c1fa14d71d926ee8
        Validity
            Not Before: Feb 17 01:00:42 2025 GMT
            Not After : Feb 18 01:00:42 2025 GMT
        Subject: CN=096cf59855ba4c40aa3b7a7449ca4c47412e2e67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e3:19:fd:5b:b0:3f:63:71:81:9a:e6:eb:7a:
                    a9:17:6c:80:fb:ae:1c:56:4e:ef:eb:a3:d4:30:fa:
                    30:9e:89:51:89:57:bf:0c:dd:8e:5f:da:2c:66:a6:
                    da:2a:16:3f:a7:d1:4e:d8:c7:c5:9f:2a:3f:55:19:
                    c7:2a:da:df:71:db:37:cc:cd:f6:c1:ad:6f:e4:c7:
                    14:0f:bf:82:b5:4e:1f:1b:23:2b:57:71:ff:0a:55:
                    a3:1c:fd:ea:66:cf:c3:da:16:54:eb:e9:80:00:db:
                    56:dc:5a:6a:00:0f:91:94:1c:35:df:12:9b:39:3f:
                    a3:b3:5f:9e:55:67:cc:08:b3:e5:96:e7:5e:aa:7c:
                    ae:60:4f:6a:4a:04:2e:95:e5:b8:18:0c:0f:46:7b:
                    9c:50:3f:3c:a0:4d:72:6f:ac:e8:9e:9f:1f:25:e1:
                    d3:48:b1:84:a5:05:2f:f3:55:8b:9e:90:cc:8e:78:
                    73:c9:59:e7:fb:bd:31:73:e2:8e:9e:e4:78:13:04:
                    ba:fa:e5:40:0a:c2:a9:3d:77:3d:21:27:4d:90:24:
                    66:47:71:07:36:58:f5:e2:be:8a:13:b0:50:a8:5d:
                    dc:ec:21:fe:58:98:0b:3d:5a:7d:71:2c:ab:b5:6d:
                    f5:93:8f:45:55:8e:51:84:d4:7c:71:89:48:11:2e:
                    70:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6C:F5:98:55:BA:4C:40:AA:3B:7A:74:49:CA:4C:47:41:2E:2E:67
            X509v3 Authority Key Identifier:
                keyid:35:58:BB:47:DE:35:4E:09:E0:FC:2C:B2:C1:FA:14:D7:1D:92:6E:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:5d:9d:0e:ab:7c:bf:90:d5:1a:4b:cc:82:9c:3d:99:72:ac:
         39:91:d6:ae:1b:08:bc:9d:ff:92:97:7f:11:05:c5:ef:3a:e2:
         36:2f:e0:a9:14:d5:9a:2b:ab:54:3b:7e:b7:06:7f:82:5e:d4:
         8c:f4:f7:1f:ae:1f:07:c8:ff:40:e1:e6:b7:a1:b7:f8:60:d5:
         4f:d6:7b:79:67:68:e6:28:42:32:b0:a1:8a:6b:df:df:3f:05:
         c1:22:bf:8a:03:5b:17:5f:f4:34:98:fa:36:e8:4f:b7:2f:92:
         1a:b5:52:33:ba:f1:45:a4:65:50:c3:5b:49:0b:c1:32:69:b4:
         2a:7b:63:44:e4:11:c1:73:53:a6:90:5f:96:9d:cf:b0:92:0d:
         1a:8a:16:4e:df:dc:6b:13:b1:5c:f2:79:a8:22:ec:0b:71:46:
         15:a7:e8:a5:cd:d0:02:d2:c4:08:4d:a6:92:94:c9:00:c6:db:
         ae:8c:33:b1:4c:00:57:d0:0a:dd:fd:74:60:bc:82:bc:fb:ef:
         93:4d:63:ff:11:45:a7:ac:03:31:38:bc:da:52:74:65:2a:62:
         90:6d:7a:fa:4c:df:77:98:db:88:fb:fd:df:86:7c:99:f2:88:
         4c:36:83:ec:e3:47:b3:a5:54:55:6b:47:aa:bc:e2:8a:08:85:
         13:9c:f3:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURa/N6VvIigxvbXH8lK4zKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NThiYjQ3ZGUzNTRlMDllMGZjMmNiMmMxZmExNGQ3MWQ5
MjZlZTgwHhcNMjUwMjE3MDEwMDQyWhcNMjUwMjE4MDEwMDQyWjAzMTEwLwYDVQQD
EygwOTZjZjU5ODU1YmE0YzQwYWEzYjdhNzQ0OWNhNGM0NzQxMmUyZTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eMZ/VuwP2NxgZrm63qpF2yA+64c
Vk7v66PUMPownolRiVe/DN2OX9osZqbaKhY/p9FO2MfFnyo/VRnHKtrfcds3zM32
wa1v5McUD7+CtU4fGyMrV3H/ClWjHP3qZs/D2hZU6+mAANtW3FpqAA+RlBw13xKb
OT+js1+eVWfMCLPlludeqnyuYE9qSgQuleW4GAwPRnucUD88oE1yb6zonp8fJeHT
SLGEpQUv81WLnpDMjnhzyVnn+70xc+KOnuR4EwS6+uVACsKpPXc9ISdNkCRmR3EH
Nlj14r6KE7BQqF3c7CH+WJgLPVp9cSyrtW31k49FVY5RhNR8cYlIES5wNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAls9ZhVukxAqjt6dEnKTEdBLi5nMB8GA1UdIwQY
MBaAFDVYu0feNU4J4PwsssH6FNcdkm7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlZpN1I5NDFUZ25nX0N5eXdmb1UxeDJTYnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hMGZhY2EtZGI3Zi00ZWQ4LWIxMWEt
ZWVjNDZjYTgyYTMzLzEvTlZpN1I5NDFUZ25nX0N5eXdmb1UxeDJTYnVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9hMGZhY2EtZGI3Zi00ZWQ4LWIxMWEtZWVjNDZjYTgyYTMz
LzEvTlZpN1I5NDFUZ25nX0N5eXdmb1UxeDJTYnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArl2dDqt8
v5DVGkvMgpw9mXKsOZHWrhsIvJ3/kpd/EQXF7zriNi/gqRTVmiurVDt+twZ/gl7U
jPT3H64fB8j/QOHmt6G3+GDVT9Z7eWdo5ihCMrChimvf3z8FwSK/igNbF1/0NJj6
NuhPty+SGrVSM7rxRaRlUMNbSQvBMmm0KntjROQRwXNTppBflp3PsJINGooWTt/c
axOxXPJ5qCLsC3FGFafopc3QAtLECE2mkpTJAMbbrowzsUwAV9AK3f10YLyCvPvv
k01j/xFFp6wDMTi82lJ0ZSpikG16+kzfd5jbiPv934Z8mfKITDaD7ONHs6VUVWtH
qrziigiFE5zzhQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:09 2025 by rpki-client