Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b247da-3192-4813-bff4-2c7e2e4a9747/1/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.mft
File:                     bW0fEQ9ZXGNcy-n7swkNu1_PvW4.mft (raw, json)
Hash identifier:          4+dItplvhvUIY1+D+JjqR2LXg4qS51H+boVFCaAWM48=
Subject key identifier:   92:53:7E:4A:C7:F9:D7:35:F9:2E:57:FF:BB:A9:CE:F5:B9:EF:8C:DD
Authority key identifier: 6D:6D:1F:11:0F:59:5C:63:5C:CB:E9:FB:B3:09:0D:BB:5F:CF:BD:6E
Certificate issuer:       /CN=6d6d1f110f595c635ccbe9fbb3090dbb5fcfbd6e
Certificate serial:       019510C783F9EFCB43268B57E3FE5A68803D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/b247da-3192-4813-bff4-2c7e2e4a9747/1/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.mft
Manifest number:          1062
Signing time:             Sun 16 Feb 2025 22:01:05 +0000
Manifest this update:     Sun 16 Feb 2025 22:01:05 +0000
Manifest next update:     Mon 17 Feb 2025 22:01:05 +0000
Files and hashes:         1: bW0fEQ9ZXGNcy-n7swkNu1_PvW4.crl (hash: +GP1W3XoEtZUDtWozyu7wsq2TdauNUdUHISTfyUkkiU=)
                          2: kV9IeOq2qrDzgUKUC9FckebNTOI.roa (hash: ildEDGlVb/9bcfGRoRI8UjbfBgl6sywfS4QBtHfoEuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/b247da-3192-4813-bff4-2c7e2e4a9747/1/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/b247da-3192-4813-bff4-2c7e2e4a9747/1/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:83:f9:ef:cb:43:26:8b:57:e3:fe:5a:68:80:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d6d1f110f595c635ccbe9fbb3090dbb5fcfbd6e
        Validity
            Not Before: Feb 16 22:01:05 2025 GMT
            Not After : Feb 17 22:01:05 2025 GMT
        Subject: CN=92537e4ac7f9d735f92e57ffbba9cef5b9ef8cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d9:22:5d:49:c8:7c:59:41:06:5b:94:2c:eb:
                    a5:4f:fe:67:ae:6b:c4:d2:e9:52:c8:9f:d0:63:4d:
                    b2:b1:43:07:dd:29:5a:e0:4a:4b:e1:9d:34:b4:d3:
                    34:37:5d:44:33:09:ae:d7:65:b9:5a:81:b2:72:77:
                    62:2f:13:31:87:9e:f4:93:39:64:12:f7:77:6e:ab:
                    34:3b:1b:05:18:18:9e:29:ff:89:f2:43:9c:88:e4:
                    14:cb:60:9b:43:9e:b0:da:71:61:7f:78:b0:74:95:
                    54:68:88:0b:8a:0f:d7:69:1e:83:94:54:09:60:c0:
                    42:10:1b:ab:28:b6:cc:ac:9c:e8:07:2c:34:ce:94:
                    7a:a5:9c:26:bc:d8:b8:8e:19:1a:08:48:91:77:46:
                    6e:73:67:2d:ea:10:7e:bc:00:30:25:54:ad:be:ab:
                    ab:ef:59:9a:92:13:36:c2:28:88:65:f8:be:ab:aa:
                    57:96:db:e3:5d:85:83:e7:c9:5c:d2:31:b5:e8:5f:
                    3d:94:95:1c:e0:8e:c7:e7:99:73:e1:bc:d6:8e:61:
                    90:eb:d3:00:5a:bf:26:2d:24:ab:2b:ee:01:50:09:
                    45:44:5e:18:2d:e2:26:df:09:6d:23:db:91:e6:c2:
                    5a:0d:05:ac:66:bc:23:57:eb:b1:cf:49:94:50:f1:
                    05:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:53:7E:4A:C7:F9:D7:35:F9:2E:57:FF:BB:A9:CE:F5:B9:EF:8C:DD
            X509v3 Authority Key Identifier:
                keyid:6D:6D:1F:11:0F:59:5C:63:5C:CB:E9:FB:B3:09:0D:BB:5F:CF:BD:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b247da-3192-4813-bff4-2c7e2e4a9747/1/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b247da-3192-4813-bff4-2c7e2e4a9747/1/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:61:b4:fc:5d:6a:53:49:34:c1:94:b2:92:56:15:68:6e:94:
         82:09:20:db:3c:fd:f4:a0:40:73:53:80:36:da:4c:be:b1:69:
         e2:9e:d5:d4:99:ea:e2:9e:d2:94:8e:4d:dd:82:49:c7:f8:d7:
         6f:e8:3c:7c:d9:2f:c9:ad:eb:82:c5:fd:23:fa:61:cb:2f:9e:
         3c:6a:f4:06:67:05:5f:4d:a8:48:85:c4:d1:4b:45:81:33:28:
         13:cd:1c:55:5a:e7:25:c7:65:b6:35:d3:9f:1c:22:91:af:ca:
         2c:2e:a9:07:0c:26:05:9e:7d:d4:e1:27:2e:75:85:46:5c:73:
         e9:13:51:ec:65:4c:26:6c:64:fd:17:91:4b:f9:a6:6f:e7:e4:
         5e:0e:59:53:b0:71:8c:9a:17:d3:97:49:0b:b1:94:19:cb:7c:
         7d:ed:cc:b3:43:65:7c:a8:bf:71:a3:a2:d6:18:04:0e:5d:11:
         9c:58:46:7c:df:09:86:ea:56:49:6a:4d:03:2e:a5:9c:8e:03:
         1d:31:29:45:14:cf:60:69:f8:e4:f4:8d:0f:18:17:c2:90:d0:
         c2:11:0a:2b:c4:37:c7:ff:72:ba:56:04:db:68:20:bd:5d:7c:
         53:b2:e6:2c:62:63:c4:9b:46:d6:20:20:a3:4e:0c:4f:ad:c5:
         52:d7:6f:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQx4P578tDJotX4/5aaIA9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNmQxZjExMGY1OTVjNjM1Y2NiZTlmYmIzMDkwZGJiNWZj
ZmJkNmUwHhcNMjUwMjE2MjIwMTA1WhcNMjUwMjE3MjIwMTA1WjAzMTEwLwYDVQQD
Eyg5MjUzN2U0YWM3ZjlkNzM1ZjkyZTU3ZmZiYmE5Y2VmNWI5ZWY4Y2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNkiXUnIfFlBBluULOulT/5nrmvE
0ulSyJ/QY02ysUMH3Sla4EpL4Z00tNM0N11EMwmu12W5WoGycndiLxMxh570kzlk
Evd3bqs0OxsFGBieKf+J8kOciOQUy2CbQ56w2nFhf3iwdJVUaIgLig/XaR6DlFQJ
YMBCEBurKLbMrJzoByw0zpR6pZwmvNi4jhkaCEiRd0Zuc2ct6hB+vAAwJVStvqur
71makhM2wiiIZfi+q6pXltvjXYWD58lc0jG16F89lJUc4I7H55lz4bzWjmGQ69MA
Wr8mLSSrK+4BUAlFRF4YLeIm3wltI9uR5sJaDQWsZrwjV+uxz0mUUPEFCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJTfkrH+dc1+S5X/7upzvW574zdMB8GA1UdIwQY
MBaAFG1tHxEPWVxjXMvp+7MJDbtfz71uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlcwZkVROVpYR05jeS1uN3N3a051MV9Qdlc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9iMjQ3ZGEtMzE5Mi00ODEzLWJmZjQt
MmM3ZTJlNGE5NzQ3LzEvYlcwZkVROVpYR05jeS1uN3N3a051MV9Qdlc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9iMjQ3ZGEtMzE5Mi00ODEzLWJmZjQtMmM3ZTJlNGE5NzQ3
LzEvYlcwZkVROVpYR05jeS1uN3N3a051MV9Qdlc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWG0/F1q
U0k0wZSyklYVaG6Uggkg2zz99KBAc1OANtpMvrFp4p7V1Jnq4p7SlI5N3YJJx/jX
b+g8fNkvya3rgsX9I/phyy+ePGr0BmcFX02oSIXE0UtFgTMoE80cVVrnJcdltjXT
nxwika/KLC6pBwwmBZ591OEnLnWFRlxz6RNR7GVMJmxk/ReRS/mmb+fkXg5ZU7Bx
jJoX05dJC7GUGct8fe3Ms0NlfKi/caOi1hgEDl0RnFhGfN8JhupWSWpNAy6lnI4D
HTEpRRTPYGn45PSNDxgXwpDQwhEKK8Q3x/9yulYE22ggvV18U7LmLGJjxJtG1iAg
o04MT63FUtdvVQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:42 2025 by rpki-client