Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft
File:                     J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft (raw, json)
Hash identifier:          jS8S5TGvDQ2CXRXfgf4C7Wn6V6VavDxxCr7ppVmpvxA=
Subject key identifier:   F2:43:ED:3D:FB:16:1F:EA:EC:DF:DE:D3:70:3D:F6:1B:68:12:2B:74
Authority key identifier: 27:61:85:05:D3:B4:C0:00:21:75:90:F7:B7:B5:9B:F6:1F:F2:F3:75
Certificate issuer:       /CN=27618505d3b4c000217590f7b7b59bf61ff2f375
Certificate serial:       019511350CEC49E2B1FD3D1014264A71BA3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft
Manifest number:          1457
Signing time:             Mon 17 Feb 2025 00:00:44 +0000
Manifest this update:     Mon 17 Feb 2025 00:00:44 +0000
Manifest next update:     Tue 18 Feb 2025 00:00:44 +0000
Files and hashes:         1: 5K6nIVbP5K11dvspcfl4G-MfJZw.roa (hash: 1GirTU1av48FvuHpXhFOsW26MgpLG9B9BqlLOufNX8M=)
                          2: J2GFBdO0wAAhdZD3t7Wb9h_y83U.crl (hash: MaNwLZecm7rciy2TytnREL4mUQxR4RAhr4B0BzhySqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:35:0c:ec:49:e2:b1:fd:3d:10:14:26:4a:71:ba:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27618505d3b4c000217590f7b7b59bf61ff2f375
        Validity
            Not Before: Feb 17 00:00:44 2025 GMT
            Not After : Feb 18 00:00:44 2025 GMT
        Subject: CN=f243ed3dfb161feaecdfded3703df61b68122b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:94:a5:0d:73:c4:5f:32:2e:d8:33:c3:fa:f5:
                    de:41:b2:59:46:81:bf:a3:14:49:8e:f5:4f:91:e2:
                    e2:61:83:2e:fd:20:80:bf:71:80:6e:3b:47:79:c0:
                    99:2f:14:66:d8:3f:6f:b5:3e:f4:54:a8:34:15:9f:
                    65:60:8b:9a:12:f1:a7:6e:95:f8:63:fd:55:2c:bb:
                    e1:8e:4c:2f:0c:57:6d:32:49:82:27:8a:f8:5e:7f:
                    d1:a9:2e:97:99:5b:ef:37:40:bc:33:04:29:63:ab:
                    25:19:2e:75:46:18:ba:16:e8:89:96:06:f0:fa:1a:
                    22:81:f2:26:df:b6:3d:a7:c2:16:77:6b:33:77:6b:
                    65:18:33:96:bd:99:65:af:e9:1e:a1:df:e8:ec:07:
                    18:4b:ff:b4:76:08:71:d3:0c:c3:07:d1:27:df:30:
                    92:a7:22:37:55:e4:7a:f8:ac:cc:0a:c7:75:fb:6d:
                    53:cc:22:0d:4f:72:8a:c9:99:32:96:d7:97:ab:6e:
                    2f:8b:a2:7d:da:7c:53:ad:f3:b3:ca:ea:20:79:05:
                    1f:66:67:01:a1:15:b3:ec:6a:93:76:b4:32:e5:5a:
                    84:94:1d:e0:24:7d:e6:68:ae:5f:64:c4:df:1f:d7:
                    af:77:f5:3e:76:5f:dd:4c:70:8c:0e:cf:ad:7b:3b:
                    36:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:43:ED:3D:FB:16:1F:EA:EC:DF:DE:D3:70:3D:F6:1B:68:12:2B:74
            X509v3 Authority Key Identifier:
                keyid:27:61:85:05:D3:B4:C0:00:21:75:90:F7:B7:B5:9B:F6:1F:F2:F3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d7:78:3f:41:e1:2c:72:62:5e:ee:7f:9c:35:39:5d:e0:c5:
         9e:23:b0:2c:51:01:cf:aa:8e:91:70:7d:4e:6d:1e:f1:af:b7:
         0a:7c:8b:5e:75:71:fc:1e:ae:73:2e:23:0c:aa:3a:b9:b0:79:
         4e:c5:3a:68:57:7b:4f:84:04:e5:45:90:c2:17:47:f6:86:ee:
         1a:f8:bd:4c:e2:b2:d9:dc:1d:52:e0:72:75:62:66:35:0a:72:
         dc:7f:56:35:f8:e4:33:fa:a8:bf:f1:03:ab:ea:0c:a1:11:59:
         84:b4:4f:0f:cb:36:d3:69:17:4f:0a:61:23:46:c9:7d:37:6d:
         84:c4:b0:d5:b7:c1:d7:27:7f:ad:f9:86:65:ac:30:a3:e1:de:
         8d:9a:67:e5:8c:aa:2f:1d:8e:20:32:f1:6a:5f:93:a5:e9:83:
         05:6f:b0:8b:05:3e:99:77:a2:cd:fc:8a:06:8c:6b:f9:b4:a5:
         f0:24:87:07:cb:88:e6:ad:0a:5a:9e:0c:3f:6e:03:b8:7b:25:
         3a:9b:32:ed:e9:ee:4d:ec:6d:40:92:e1:ea:3b:11:af:58:3f:
         5b:f4:7e:53:84:4e:ef:20:c1:4e:9d:86:c4:89:de:2e:65:2d:
         cc:a6:31:0f:d2:a8:c8:0e:f1:9f:c3:01:dd:fe:68:9c:6a:db:
         13:b2:b7:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNQzsSeKx/T0QFCZKcbo9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NjE4NTA1ZDNiNGMwMDAyMTc1OTBmN2I3YjU5YmY2MWZm
MmYzNzUwHhcNMjUwMjE3MDAwMDQ0WhcNMjUwMjE4MDAwMDQ0WjAzMTEwLwYDVQQD
EyhmMjQzZWQzZGZiMTYxZmVhZWNkZmRlZDM3MDNkZjYxYjY4MTIyYjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZSlDXPEXzIu2DPD+vXeQbJZRoG/
oxRJjvVPkeLiYYMu/SCAv3GAbjtHecCZLxRm2D9vtT70VKg0FZ9lYIuaEvGnbpX4
Y/1VLLvhjkwvDFdtMkmCJ4r4Xn/RqS6XmVvvN0C8MwQpY6slGS51Rhi6FuiJlgbw
+hoigfIm37Y9p8IWd2szd2tlGDOWvZllr+keod/o7AcYS/+0dghx0wzDB9En3zCS
pyI3VeR6+KzMCsd1+21TzCINT3KKyZkylteXq24vi6J92nxTrfOzyuogeQUfZmcB
oRWz7GqTdrQy5VqElB3gJH3maK5fZMTfH9evd/U+dl/dTHCMDs+tezs2cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJD7T37Fh/q7N/e03A99htoEit0MB8GA1UdIwQY
MBaAFCdhhQXTtMAAIXWQ97e1m/Yf8vN1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjJHRkJkTzB3QUFoZFpEM3Q3V2I5aF95ODNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83ZTYyNjItZWNkZC00MzM0LThiOWYt
OWQ1ZTU5Zjc2ZTZiLzEvSjJHRkJkTzB3QUFoZFpEM3Q3V2I5aF95ODNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83ZTYyNjItZWNkZC00MzM0LThiOWYtOWQ1ZTU5Zjc2ZTZi
LzEvSjJHRkJkTzB3QUFoZFpEM3Q3V2I5aF95ODNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNd4P0Hh
LHJiXu5/nDU5XeDFniOwLFEBz6qOkXB9Tm0e8a+3CnyLXnVx/B6ucy4jDKo6ubB5
TsU6aFd7T4QE5UWQwhdH9obuGvi9TOKy2dwdUuBydWJmNQpy3H9WNfjkM/qov/ED
q+oMoRFZhLRPD8s202kXTwphI0bJfTdthMSw1bfB1yd/rfmGZawwo+HejZpn5Yyq
Lx2OIDLxal+TpemDBW+wiwU+mXeizfyKBoxr+bSl8CSHB8uI5q0KWp4MP24DuHsl
Opsy7enuTextQJLh6jsRr1g/W/R+U4RO7yDBTp2GxIneLmUtzKYxD9KoyA7xn8MB
3f5onGrbE7K3QQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:43 2025 by rpki-client