Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
File:                     xqJJoOrNiry-oNgu9xAW04bo75Q.mft (raw, json)
Hash identifier:          0vs2XBGnxKTcmdcOeXzN4G+KGrKIFqflSDmPNmI0RZA=
Subject key identifier:   B1:B5:AC:CA:DD:EF:B4:40:4B:2B:5B:10:9E:A6:93:88:6F:C6:F5:35
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Certificate issuer:       /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial:       0194C49A1B08AE0B09DD4A538A977555BA1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
Manifest number:          1438
Signing time:             Sun 02 Feb 2025 03:00:21 +0000
Manifest this update:     Sun 02 Feb 2025 03:00:21 +0000
Manifest next update:     Mon 03 Feb 2025 03:00:21 +0000
Files and hashes:         1: 5zc-Crb5aoCnZJgW8FLSKZdyvmQ.roa (hash: 2NGAlI2hdHDlD8sS8ypuBUMUFfaks46LhBx0UYSSPaA=)
                          2: LLhwUpHqz22GnC5TEmimdFlrtqk.roa (hash: fvLKEFRwIYrK/dNIazKMMzJzXGAsDgMXq4phPeziOkU=)
                          3: MqhH7LZrBnXXGBOARTaALjBOu0k.roa (hash: eb5e3IYtX1JLVkPpTH90MSfTGSJlQRW4w6AkJQsqHDE=)
                          4: P19E_mZ30tdEHCoKWD_RBelIVm8.roa (hash: wn50ZQD7mmlSVGQuWKsydCfGSzOAX4sma0GjvM42Xlc=)
                          5: TsuT9Vw01G7XqqTGmTLgG8Nw8uM.roa (hash: ibCOP7I9k1NxSVR0Ud+oed1vqdJZQQbZepYSXJmVuOo=)
                          6: b_Rjl7l5s2ruXfIZC3d6OBIlvjw.roa (hash: RN1eBvJ7M9cQIHDZtgB/+TlsTuYLflAWSHeZCPPxyMY=)
                          7: xqJJoOrNiry-oNgu9xAW04bo75Q.crl (hash: /o9jTQYjwU268yvh92hQIMY+mi0NclmZ6taY39czy4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:9a:1b:08:ae:0b:09:dd:4a:53:8a:97:75:55:ba:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
        Validity
            Not Before: Feb  2 03:00:21 2025 GMT
            Not After : Feb  3 03:00:21 2025 GMT
        Subject: CN=b1b5accaddefb4404b2b5b109ea693886fc6f535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c7:14:d6:48:c4:78:57:4d:2c:06:1f:4e:dc:
                    12:34:6c:e4:93:50:32:0f:f1:eb:35:8b:ee:32:a2:
                    07:9f:d5:94:e2:2e:c9:39:0a:fa:7d:00:23:90:da:
                    b0:f2:c4:62:1c:7c:95:d4:06:60:af:f6:10:6f:31:
                    fc:96:45:91:30:a0:c9:96:6c:ef:94:b5:7b:33:f7:
                    df:67:a8:1e:24:9c:08:b7:dc:15:63:07:42:68:4a:
                    b7:68:1b:1c:7c:41:57:a5:1d:6e:ef:73:22:33:ae:
                    2b:ba:78:7c:70:55:55:e2:67:a3:34:05:b4:9a:b3:
                    f8:e1:14:c1:5a:ea:3e:78:33:31:3f:94:36:c6:b0:
                    31:e7:ec:61:bd:17:23:6b:2e:4c:ea:78:8e:db:19:
                    e9:33:ad:91:16:33:94:7c:45:6a:65:66:b4:15:dc:
                    6b:29:70:e0:fd:05:5f:b3:c7:0d:13:68:26:a4:f7:
                    ee:b3:84:f9:11:89:f0:14:38:12:4d:c6:53:d1:4c:
                    d3:8f:84:5c:33:be:5b:d9:eb:74:eb:6b:c7:14:5e:
                    03:3f:0f:d9:99:0f:50:30:d3:03:4a:0a:c2:8a:03:
                    ac:cd:7c:ec:ec:53:83:65:93:27:9a:ff:29:57:02:
                    51:e8:6f:61:e2:7e:4b:69:b0:57:8f:59:e9:30:ec:
                    c9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B5:AC:CA:DD:EF:B4:40:4B:2B:5B:10:9E:A6:93:88:6F:C6:F5:35
            X509v3 Authority Key Identifier:
                keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:cb:3d:64:b0:9c:39:31:3a:dd:53:5a:ec:5a:1d:9c:32:45:
         39:24:6d:96:62:a1:67:32:4d:9b:70:ad:fd:f2:3a:f2:7e:52:
         2d:4b:29:9b:85:fe:1e:f7:0d:ab:19:3e:7e:a6:31:33:ba:76:
         6d:81:f3:1e:29:f6:d3:e7:bf:d8:61:c8:21:96:e6:f1:9c:ca:
         d8:69:18:c2:33:d8:80:ac:e2:f4:db:58:7a:25:87:4b:55:52:
         39:22:56:0e:36:bf:c3:4e:ad:ec:42:66:98:63:32:95:ab:95:
         ae:36:9d:a2:ae:2a:09:9e:a4:4e:3e:d9:7f:a4:32:a6:8b:10:
         c7:90:ef:95:96:c7:cd:3f:e9:35:8e:a3:9f:af:bd:ee:b8:f0:
         39:57:25:be:ce:7c:09:e0:d3:36:be:29:5b:a0:2f:c9:8b:4e:
         73:95:e2:bc:63:0e:85:34:e3:ed:cc:c6:04:20:e2:bf:18:61:
         b6:ac:f4:1d:6d:f9:2f:6b:23:9b:12:53:77:fb:b2:74:ca:74:
         77:d9:3c:58:d4:e6:e3:da:ae:39:94:4f:5b:c3:9a:15:cd:41:
         bd:0e:b0:95:53:27:3d:d3:fd:8b:4d:c8:7c:88:a3:b3:8f:9a:
         42:90:90:6f:6e:37:78:ca:64:e1:1e:7d:ac:cc:fb:40:cd:56:
         56:dd:5e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:24 2025 by rpki-client