Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
File:                     djLJDvGdK9b2aKSCbi0NFWNelH0.mft (raw, json)
Hash identifier:          6XDF9oRnTjAzQfqkUIcIFeDvWKFMQn6guE/dzV3tWJw=
Subject key identifier:   A6:6E:77:A8:42:13:7D:C4:1F:22:A8:AE:1E:14:ED:6B:03:4C:D9:83
Authority key identifier: 76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D
Certificate issuer:       /CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
Certificate serial:       0194BA84438F2D9ABDACB346ADC4BE101D54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 04:00:17 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:17 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:17 +0000
Files and hashes:         1: djLJDvGdK9b2aKSCbi0NFWNelH0.crl (hash: oSqrvE0OEVe3kwyJNO+1LJ7vxlfrgdtJ5XbBtIOJqhY=)
                          2: wBaE5svUrTDa4cJiCAHlEwrForw.roa (hash: sNv0g7ZzW3+C7EQOHQU5ckniP/nqJPJ/xsRMEfe9338=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:43:8f:2d:9a:bd:ac:b3:46:ad:c4:be:10:1d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
        Validity
            Not Before: Jan 31 04:00:17 2025 GMT
            Not After : Feb  1 04:00:17 2025 GMT
        Subject: CN=a66e77a842137dc41f22a8ae1e14ed6b034cd983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:71:fc:12:0b:4a:8f:e9:48:bf:88:cd:14:b0:
                    c6:75:7c:c2:c5:c1:4c:0f:a7:57:0c:f8:dd:f4:d1:
                    56:e7:12:2e:37:09:45:86:3b:ab:0c:c7:ca:89:8f:
                    ea:26:e5:68:9d:f4:e2:1d:83:08:6b:56:f2:42:d9:
                    d9:00:69:f7:e3:31:79:dc:d1:a6:e9:9a:91:1e:56:
                    19:b7:05:08:59:d5:4b:80:0f:a9:b9:20:05:66:be:
                    1c:22:c7:37:4d:ec:23:cc:3b:5b:48:14:5e:04:8a:
                    22:d6:5c:57:e1:48:ee:f2:21:84:55:f3:41:cd:0a:
                    c1:da:a6:0e:3e:e8:ab:e7:78:6e:4a:e7:4a:8f:76:
                    93:2f:b9:30:46:2d:bf:81:65:76:5e:b0:4f:3c:ed:
                    61:07:6d:b9:51:e2:67:4b:39:23:d8:dd:4b:ff:85:
                    e8:58:d7:fe:63:04:85:dd:6b:cd:56:7f:35:7a:23:
                    d6:0c:5c:82:79:68:ba:e9:47:3e:a8:c7:b8:16:9a:
                    7d:50:e1:d3:89:5d:11:7d:7e:8b:e0:4c:c5:e5:a3:
                    07:32:c0:57:22:32:3f:f4:ed:1e:e2:7e:de:d7:fe:
                    93:a3:34:20:10:a7:34:a4:f5:54:b1:8d:cc:b2:bf:
                    3e:fc:2e:5c:74:a7:e0:90:4d:90:d5:17:bc:28:52:
                    6c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6E:77:A8:42:13:7D:C4:1F:22:A8:AE:1E:14:ED:6B:03:4C:D9:83
            X509v3 Authority Key Identifier:
                keyid:76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:05:1c:03:9a:bc:10:11:91:67:a7:0a:a2:03:4c:6e:27:1e:
         38:6d:db:2f:c5:dc:6d:49:3b:d4:07:68:e2:9c:ec:5e:48:38:
         7e:61:ed:86:e7:00:9c:5e:50:c5:23:b5:d5:37:d7:3f:bd:8c:
         60:74:c8:43:ad:69:40:13:cd:86:2b:b0:9a:77:04:cc:3e:4e:
         eb:05:96:10:bb:10:a0:60:47:8d:e2:15:f9:d3:28:59:6a:b4:
         65:43:38:12:d2:e3:64:c2:f5:d2:31:5d:b3:90:1f:1e:fc:a3:
         ab:20:08:58:64:35:ee:60:01:dd:bf:2a:1e:fa:6c:05:92:a6:
         1e:94:ae:d0:53:b7:4c:02:96:14:a5:c8:f3:5f:41:37:1d:25:
         63:d4:62:be:dc:cc:f9:29:aa:66:72:08:e3:d9:c3:cf:e9:5c:
         4a:c9:64:eb:26:46:40:2d:6f:ba:08:7c:97:59:82:aa:83:32:
         57:a9:07:32:c9:db:9c:f3:81:da:d2:88:b9:6f:c0:57:81:6f:
         24:72:bd:30:12:ad:0b:f5:33:d6:fb:cb:b7:c4:e6:b8:54:fa:
         73:d8:7f:6c:22:23:fc:f1:8d:f2:96:71:43:62:3b:48:d9:b8:
         7f:0e:0d:fc:53:cd:9f:ba:67:1b:b2:f7:b1:4f:a9:49:57:c6:
         91:fc:e1:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hEOPLZq9rLNGrcS+EB1UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MzJjOTBlZjE5ZDJiZDZmNjY4YTQ4MjZlMmQwZDE1NjM1
ZTk0N2QwHhcNMjUwMTMxMDQwMDE3WhcNMjUwMjAxMDQwMDE3WjAzMTEwLwYDVQQD
EyhhNjZlNzdhODQyMTM3ZGM0MWYyMmE4YWUxZTE0ZWQ2YjAzNGNkOTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3H8EgtKj+lIv4jNFLDGdXzCxcFM
D6dXDPjd9NFW5xIuNwlFhjurDMfKiY/qJuVonfTiHYMIa1byQtnZAGn34zF53NGm
6ZqRHlYZtwUIWdVLgA+puSAFZr4cIsc3TewjzDtbSBReBIoi1lxX4Uju8iGEVfNB
zQrB2qYOPuir53huSudKj3aTL7kwRi2/gWV2XrBPPO1hB225UeJnSzkj2N1L/4Xo
WNf+YwSF3WvNVn81eiPWDFyCeWi66Uc+qMe4Fpp9UOHTiV0RfX6L4EzF5aMHMsBX
IjI/9O0e4n7e1/6TozQgEKc0pPVUsY3Msr8+/C5cdKfgkE2Q1Re8KFJslwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZud6hCE33EHyKorh4U7WsDTNmDMB8GA1UdIwQY
MBaAFHYyyQ7xnSvW9mikgm4tDRVjXpR9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGpMSkR2R2RLOWIyYUtTQ2JpME5GV05lbEgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC85ODQ0Y2QtMjRmOC00ZTUyLWI0MmIt
YzdiZjAyMWVlNjY0LzEvZGpMSkR2R2RLOWIyYUtTQ2JpME5GV05lbEgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC85ODQ0Y2QtMjRmOC00ZTUyLWI0MmItYzdiZjAyMWVlNjY0
LzEvZGpMSkR2R2RLOWIyYUtTQ2JpME5GV05lbEgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAwUcA5q8
EBGRZ6cKogNMbiceOG3bL8XcbUk71Ado4pzsXkg4fmHthucAnF5QxSO11TfXP72M
YHTIQ61pQBPNhiuwmncEzD5O6wWWELsQoGBHjeIV+dMoWWq0ZUM4EtLjZML10jFd
s5AfHvyjqyAIWGQ17mAB3b8qHvpsBZKmHpSu0FO3TAKWFKXI819BNx0lY9RivtzM
+SmqZnII49nDz+lcSslk6yZGQC1vugh8l1mCqoMyV6kHMsnbnPOB2tKIuW/AV4Fv
JHK9MBKtC/Uz1vvLt8TmuFT6c9h/bCIj/PGN8pZxQ2I7SNm4fw4N/FPNn7pnG7L3
sU+pSVfGkfzhCA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:01 2025 by rpki-client on console-fra.rpki-client.org