Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
File:                     YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft (raw, json)
Hash identifier:          08qSWsbN3vNWoyQR4uSk8NwZEeKAV2Yj5YXtZk8NS4Q=
Subject key identifier:   F5:53:56:3F:C5:23:26:C2:E3:F5:66:61:87:FB:71:CE:DD:E7:B0:9C
Authority key identifier: 61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
Certificate issuer:       /CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Certificate serial:       0194C463853E9E1A4003386325EE8F194C58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
Manifest number:          142E
Signing time:             Sun 02 Feb 2025 02:00:44 +0000
Manifest this update:     Sun 02 Feb 2025 02:00:44 +0000
Manifest next update:     Mon 03 Feb 2025 02:00:44 +0000
Files and hashes:         1: YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl (hash: kplZ7TkmsEUDZ0OwHkHI+mwse5QKxX3RWAayj4VCF6I=)
                          2: lpQpCVUUyuieF-my1hQ69F4PEZk.roa (hash: WA4/OyJVwgJx0ERp2sKecmZzmYmPwtki2xCkuF+SczM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:63:85:3e:9e:1a:40:03:38:63:25:ee:8f:19:4c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
        Validity
            Not Before: Feb  2 02:00:44 2025 GMT
            Not After : Feb  3 02:00:44 2025 GMT
        Subject: CN=f553563fc52326c2e3f5666187fb71cedde7b09c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9c:0d:f8:18:d1:81:c2:a4:48:7b:c2:20:fb:
                    a0:4f:1a:4a:bb:fe:22:bd:b1:b5:0f:9d:e8:5f:c2:
                    68:01:8d:51:55:36:fb:79:03:a2:bd:6f:23:87:f5:
                    cd:30:29:5a:71:11:8c:09:dd:42:bd:d8:e7:3d:0d:
                    9a:8e:ed:28:36:7a:4f:06:bc:28:5c:01:5b:8c:09:
                    ac:0e:88:cd:6e:3b:d9:52:b2:38:2f:1c:ed:f0:12:
                    75:cd:42:7d:c2:96:82:a5:7f:ae:5c:f3:3e:c4:ce:
                    25:34:13:a0:46:d4:6e:c7:70:f6:4c:93:14:ff:fb:
                    be:39:d6:48:7f:dd:55:29:c6:73:0d:3e:d2:d7:56:
                    ad:d8:43:f9:d3:cc:08:bc:67:ef:2b:41:8e:b1:d3:
                    1b:2b:5a:38:1b:dd:fe:70:c8:a0:c8:8f:72:6a:7e:
                    d2:44:94:4f:71:e0:b6:96:f8:f7:73:4f:d4:1d:a4:
                    e3:14:04:ff:fd:3d:e7:63:f7:50:b5:fc:13:9e:df:
                    93:7e:57:89:80:34:d0:b1:0f:50:83:03:29:23:ce:
                    ff:57:20:22:16:05:c2:d7:9a:00:68:dc:93:9b:07:
                    eb:c8:c5:40:14:20:b5:f3:b1:83:f3:a4:c8:5d:57:
                    c9:60:58:62:5a:49:1b:1e:a9:7e:3b:54:10:d4:26:
                    35:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:53:56:3F:C5:23:26:C2:E3:F5:66:61:87:FB:71:CE:DD:E7:B0:9C
            X509v3 Authority Key Identifier:
                keyid:61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:43:8b:c8:a3:dc:1f:ba:37:69:66:bc:3f:e6:6e:a1:74:26:
         e1:c1:42:f8:99:2e:45:35:71:a8:89:8c:6f:ea:88:88:41:88:
         e3:5a:ee:ad:35:3a:1c:43:55:e6:91:58:29:d1:bb:56:58:eb:
         63:7a:5b:72:39:b8:3d:82:68:06:a2:9a:10:e5:60:3e:29:d7:
         f6:35:f1:0e:8d:49:37:5b:51:e1:f0:94:b5:5e:06:45:4c:10:
         47:9f:ec:0b:96:50:65:0b:8e:e1:2e:5b:59:b4:a4:26:8b:dd:
         51:97:2a:64:23:2b:8e:c2:c2:2e:39:7a:5e:15:27:00:fb:9f:
         73:c1:e7:7b:9e:84:8a:5c:80:09:c5:9c:99:3c:d7:ea:73:37:
         7f:e0:bd:3a:de:f6:2e:30:e6:db:3f:3e:ff:5e:77:12:29:db:
         99:5b:3d:29:7c:88:c4:d6:eb:2c:9d:7f:19:6e:85:e5:f3:94:
         18:9a:7d:e6:f8:21:96:05:32:e2:77:24:22:57:bc:9d:53:42:
         24:99:fa:94:cc:38:18:9b:a5:ed:19:77:28:7a:24:a4:72:8d:
         0e:4b:2c:68:c9:52:e3:14:4b:ce:81:dc:74:1d:e8:ff:01:dc:
         7a:23:ea:38:ec:81:05:9f:4d:dc:2b:86:87:0c:16:ee:3e:63:
         fd:06:62:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEY4U+nhpAAzhjJe6PGUxYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMmFlZjRjN2JmZTdlMDcyZjYyZDJkZDUwNWFiNTdlMzdl
YTM4NWUwHhcNMjUwMjAyMDIwMDQ0WhcNMjUwMjAzMDIwMDQ0WjAzMTEwLwYDVQQD
EyhmNTUzNTYzZmM1MjMyNmMyZTNmNTY2NjE4N2ZiNzFjZWRkZTdiMDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5wN+BjRgcKkSHvCIPugTxpKu/4i
vbG1D53oX8JoAY1RVTb7eQOivW8jh/XNMClacRGMCd1CvdjnPQ2aju0oNnpPBrwo
XAFbjAmsDojNbjvZUrI4Lxzt8BJ1zUJ9wpaCpX+uXPM+xM4lNBOgRtRux3D2TJMU
//u+OdZIf91VKcZzDT7S11at2EP508wIvGfvK0GOsdMbK1o4G93+cMigyI9yan7S
RJRPceC2lvj3c0/UHaTjFAT//T3nY/dQtfwTnt+TfleJgDTQsQ9QgwMpI87/VyAi
FgXC15oAaNyTmwfryMVAFCC187GD86TIXVfJYFhiWkkbHql+O1QQ1CY15wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVTVj/FIybC4/VmYYf7cc7d57CcMB8GA1UdIwQY
MBaAFGEq70x7/n4HL2LS3VBatX436jheMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVNydlRIdi1mZ2N2WXRMZFVGcTFmamZxT0Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83MjA3YTktMjdmNC00NGVjLWJmNzgt
YTIwN2M3YTE5ZWQyLzEvWVNydlRIdi1mZ2N2WXRMZFVGcTFmamZxT0Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC83MjA3YTktMjdmNC00NGVjLWJmNzgtYTIwN2M3YTE5ZWQy
LzEvWVNydlRIdi1mZ2N2WXRMZFVGcTFmamZxT0Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckOLyKPc
H7o3aWa8P+ZuoXQm4cFC+JkuRTVxqImMb+qIiEGI41rurTU6HENV5pFYKdG7Vljr
Y3pbcjm4PYJoBqKaEOVgPinX9jXxDo1JN1tR4fCUtV4GRUwQR5/sC5ZQZQuO4S5b
WbSkJovdUZcqZCMrjsLCLjl6XhUnAPufc8Hne56EilyACcWcmTzX6nM3f+C9Ot72
LjDm2z8+/153EinbmVs9KXyIxNbrLJ1/GW6F5fOUGJp95vghlgUy4nckIle8nVNC
JJn6lMw4GJul7Rl3KHokpHKNDkssaMlS4xRLzoHcdB3o/wHceiPqOOyBBZ9N3CuG
hwwW7j5j/QZiHg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:59 2025 by rpki-client