Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
File:                     xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft (raw, json)
Hash identifier:          CDqvk8VYMLi/Jq2JXSHrChfL/+15DXe6+O6kgLUdM+8=
Subject key identifier:   4D:DF:C3:54:0C:24:76:62:3B:59:D5:DF:A2:6F:F8:06:70:99:2E:53
Authority key identifier: C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
Certificate issuer:       /CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
Certificate serial:       0194C387E1CE142ADA03EC6DAA1033EADB80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
Manifest number:          13
Signing time:             Sat 01 Feb 2025 22:00:49 +0000
Manifest this update:     Sat 01 Feb 2025 22:00:49 +0000
Manifest next update:     Sun 02 Feb 2025 22:00:49 +0000
Files and hashes:         1: UTJh4MdSXt43NfiQTTlDvj1k9rY.roa (hash: N+wxIM6737IrF1om020wGAk+mgn7C7h6YeyPjzTJ2mQ=)
                          2: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl (hash: oeZKR7WG/nGFfp6/W9KynX8Ds/b61weD8dY4IxJGxjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 22:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:87:e1:ce:14:2a:da:03:ec:6d:aa:10:33:ea:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
        Validity
            Not Before: Feb  1 22:00:49 2025 GMT
            Not After : Feb  2 22:00:49 2025 GMT
        Subject: CN=4ddfc3540c2476623b59d5dfa26ff80670992e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:0e:65:f0:74:fb:52:4c:0b:fd:58:f4:79:e9:
                    37:cc:23:2a:ae:17:67:cf:36:c6:bc:7c:05:85:d4:
                    eb:8d:87:66:e9:86:1e:be:73:b3:b0:50:9d:60:83:
                    dd:0e:3d:4a:8d:72:43:9c:b2:0c:70:4d:fb:fa:f2:
                    1d:7d:ea:4a:fb:06:d6:bf:e4:b3:50:66:49:9f:1a:
                    f3:45:98:32:f0:33:1c:4b:b6:e4:c0:98:e2:9c:11:
                    89:69:a1:c4:9e:5d:e3:36:a0:8d:00:16:b8:87:43:
                    3d:59:7a:12:de:fc:9e:8e:82:ae:02:79:85:4a:e0:
                    c9:9b:df:3b:a6:35:64:98:c5:7c:88:1b:7b:2f:92:
                    75:ee:25:34:21:8e:af:ae:2e:1e:29:69:8d:98:67:
                    68:bc:2b:ea:13:a0:ae:a7:1d:2e:94:78:0e:58:1d:
                    d4:bc:61:67:41:4e:47:ae:6d:2f:4e:76:55:b6:0f:
                    d6:67:d3:d5:6e:6a:f1:e5:51:96:8c:22:04:9f:6c:
                    a4:e6:f7:e0:d2:a1:05:d8:9d:c8:33:81:68:57:cf:
                    c0:92:0b:54:a7:b0:6d:5a:e2:ee:7c:ad:25:77:14:
                    39:ba:97:b8:46:df:62:0c:0c:08:ab:45:78:07:fc:
                    d4:2e:bc:6d:79:f2:d6:ca:9d:1d:a4:4a:22:88:d0:
                    60:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DF:C3:54:0C:24:76:62:3B:59:D5:DF:A2:6F:F8:06:70:99:2E:53
            X509v3 Authority Key Identifier:
                keyid:C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:a8:d4:c3:e4:58:e8:b8:48:5b:4d:84:a2:ed:54:29:27:cd:
         d4:e9:0f:b8:6a:ee:c2:e9:65:f1:c7:dc:05:67:34:da:0b:a8:
         c0:bd:83:f7:ad:73:cb:83:97:be:12:88:0b:d0:15:dd:18:c7:
         42:f3:8a:c7:0b:46:bd:7e:ee:60:37:36:b3:08:a9:4c:18:6b:
         0f:38:b9:9d:98:0a:8c:ce:ef:1c:4a:d7:40:9a:7a:1a:e0:c2:
         dc:2e:ff:ca:f4:c6:38:ea:b3:33:06:ed:0a:7b:dd:88:da:f9:
         d3:de:51:d2:f2:ed:0c:87:c9:c2:0b:ab:87:1f:dd:75:de:2f:
         ae:40:27:39:ec:fc:2a:47:c1:11:3f:02:b2:c8:61:17:de:8b:
         a8:7d:0d:e8:62:81:b0:5a:07:b4:e8:09:76:ba:0a:52:0c:2f:
         28:cd:78:86:ff:0f:1f:26:5b:50:0a:b3:94:ab:d9:f4:a6:54:
         ce:6d:91:9e:ec:18:f6:87:71:d1:c9:ef:32:cd:77:02:f9:19:
         00:56:f4:03:49:a1:a7:c5:9e:f0:f8:a8:fc:ea:39:14:77:94:
         71:44:e7:ce:82:74:f6:46:02:04:9c:66:0c:e5:20:69:bc:3b:
         5d:55:c2:39:82:3e:ac:72:77:e7:a2:5f:ad:dd:7e:9a:13:22:
         10:91:49:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDh+HOFCraA+xtqhAz6tuAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MGU3MjM3ZjE0NTlhZmY0ZDVhZTA5NGJkMmM4NTI1NmUy
ZTJlM2QwHhcNMjUwMjAxMjIwMDQ5WhcNMjUwMjAyMjIwMDQ5WjAzMTEwLwYDVQQD
Eyg0ZGRmYzM1NDBjMjQ3NjYyM2I1OWQ1ZGZhMjZmZjgwNjcwOTkyZTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/A5l8HT7UkwL/Vj0eek3zCMqrhdn
zzbGvHwFhdTrjYdm6YYevnOzsFCdYIPdDj1KjXJDnLIMcE37+vIdfepK+wbWv+Sz
UGZJnxrzRZgy8DMcS7bkwJjinBGJaaHEnl3jNqCNABa4h0M9WXoS3vyejoKuAnmF
SuDJm987pjVkmMV8iBt7L5J17iU0IY6vri4eKWmNmGdovCvqE6Cupx0ulHgOWB3U
vGFnQU5Hrm0vTnZVtg/WZ9PVbmrx5VGWjCIEn2yk5vfg0qEF2J3IM4FoV8/AkgtU
p7BtWuLufK0ldxQ5upe4Rt9iDAwIq0V4B/zULrxtefLWyp0dpEoiiNBgcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3fw1QMJHZiO1nV36Jv+AZwmS5TMB8GA1UdIwQY
MBaAFMUOcjfxRZr/TVrglL0shSVuLi49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFE1eU5fRkZtdjlOV3VDVXZTeUZKVzR1TGowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wMzY1MGMtZDdiYi00ZjEzLWIyMDAt
NTBkMDE4YmIwYmY2LzEveFE1eU5fRkZtdjlOV3VDVXZTeUZKVzR1TGowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8wMzY1MGMtZDdiYi00ZjEzLWIyMDAtNTBkMDE4YmIwYmY2
LzEveFE1eU5fRkZtdjlOV3VDVXZTeUZKVzR1TGowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgajUw+RY
6LhIW02Eou1UKSfN1OkPuGruwull8cfcBWc02guowL2D961zy4OXvhKIC9AV3RjH
QvOKxwtGvX7uYDc2swipTBhrDzi5nZgKjM7vHErXQJp6GuDC3C7/yvTGOOqzMwbt
CnvdiNr5095R0vLtDIfJwgurhx/ddd4vrkAnOez8KkfBET8CsshhF96LqH0N6GKB
sFoHtOgJdroKUgwvKM14hv8PHyZbUAqzlKvZ9KZUzm2RnuwY9odx0cnvMs13AvkZ
AFb0A0mhp8We8Pio/Oo5FHeUcUTnzoJ09kYCBJxmDOUgabw7XVXCOYI+rHJ356Jf
rd1+mhMiEJFJJQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 05:47:17 2025 by rpki-client