Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
File:                     a33-S2iyCJXt7fOgAyMql54Xw4w.mft (raw, json)
Hash identifier:          3kOd3QOcnftlJkeYY0FQnwrdPEGSepATwP+qxxhBR0o=
Subject key identifier:   7C:EF:40:62:C6:93:E7:93:4A:F3:9E:9F:61:93:BF:40:C6:A1:81:3C
Authority key identifier: 6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
Certificate issuer:       /CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Certificate serial:       0194BAF259FEF24E9FA41283D19D94F38652
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
Manifest number:          1303
Signing time:             Fri 31 Jan 2025 06:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:32 +0000
Files and hashes:         1: a33-S2iyCJXt7fOgAyMql54Xw4w.crl (hash: Fy01IXomOOmvDc9NiTiJmiD/U3NJWkK/mYPwS80WNnc=)
                          2: zXCsm9SAAByjdh9cxrFixEv4QxU.roa (hash: LUvS7mAwFZ6C/F9nm3WkyPABrI+5LNzyM7MV+k5m7w4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:59:fe:f2:4e:9f:a4:12:83:d1:9d:94:f3:86:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
        Validity
            Not Before: Jan 31 06:00:32 2025 GMT
            Not After : Feb  1 06:00:32 2025 GMT
        Subject: CN=7cef4062c693e7934af39e9f6193bf40c6a1813c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:78:2f:8b:75:c1:bf:30:73:87:fc:4c:67:47:
                    a9:1c:08:0e:0b:47:b7:8a:12:8c:40:39:12:d3:eb:
                    5e:7c:05:fd:b8:63:5d:7a:b6:1b:ba:8a:1a:c0:ab:
                    31:c0:4b:83:29:cb:6b:2f:23:4f:96:28:5e:f8:51:
                    73:57:83:c3:b0:3c:06:88:14:e9:d6:93:e6:7d:ba:
                    73:9d:46:10:4a:d8:4d:1b:a4:29:4e:c4:a2:7f:07:
                    e3:9c:a9:e5:44:05:1e:ee:b7:61:f2:9f:63:43:9e:
                    59:64:03:f8:ae:78:80:30:b6:02:c4:c4:e7:25:18:
                    aa:db:04:2e:7f:6b:0f:1c:dd:f4:05:e4:42:c8:fa:
                    25:a3:f0:2c:35:92:c7:48:d4:eb:ac:e7:a7:a0:d4:
                    ee:b7:5c:aa:e1:72:07:86:c2:5f:a9:a5:51:6f:db:
                    3d:ee:86:8a:6d:68:1a:ee:cb:00:9b:88:9e:34:54:
                    b3:b7:28:33:0f:a8:58:66:13:d8:ed:23:df:8d:3c:
                    98:b1:ed:07:89:67:de:1a:22:94:51:e9:25:55:a7:
                    75:92:3f:ab:b1:a8:90:dd:da:53:3c:54:48:34:b1:
                    2d:5f:a2:98:30:49:fe:2f:d7:0a:3d:f3:17:7b:bf:
                    63:23:3c:29:61:b1:2e:d4:3b:f8:bd:e2:57:02:b8:
                    da:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:EF:40:62:C6:93:E7:93:4A:F3:9E:9F:61:93:BF:40:C6:A1:81:3C
            X509v3 Authority Key Identifier:
                keyid:6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:2b:6c:37:f1:b1:df:44:f2:10:0f:14:84:e6:0e:2e:82:df:
         87:3b:77:79:1e:71:ac:64:c9:6d:9e:a0:4d:1c:75:46:7c:f1:
         f0:dd:d6:18:f7:01:2d:dd:32:57:04:d3:2c:e4:94:59:0b:f2:
         b3:f4:b6:d2:35:cf:73:06:b2:35:0d:90:23:9b:08:22:9d:39:
         14:9f:81:87:10:53:20:f6:ab:6b:dd:a8:86:f4:73:e0:ec:75:
         c5:c1:17:60:ec:b4:a0:30:7b:ff:4a:63:e6:a6:fd:61:07:64:
         17:ae:98:3f:4e:0e:4d:0d:85:d2:79:f3:f5:91:45:d7:79:7a:
         6c:69:c5:9b:d6:56:d0:29:16:f7:a5:23:3f:e5:c0:4a:a1:fd:
         76:79:0e:fc:ef:24:01:52:a8:c2:ef:c5:e8:f7:5e:d3:49:af:
         fa:05:89:b8:31:b2:1c:cf:e4:f9:0f:ee:fa:37:49:64:b8:5a:
         76:64:d6:2e:8b:28:af:32:d3:bc:bf:08:d2:53:67:ab:96:87:
         70:87:01:7a:f8:e7:3d:c6:6d:df:49:a7:80:f8:c5:73:be:10:
         15:63:c4:c5:0c:54:fb:21:d3:6d:d2:18:d6:01:00:8e:3b:8f:
         96:c1:10:d7:d9:8f:8e:a8:3a:6b:bc:ca:4b:b9:ef:71:df:ce:
         b7:2b:ec:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68ln+8k6fpBKD0Z2U84ZSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiN2RmZTRiNjhiMjA4OTVlZGVkZjNhMDAzMjMyYTk3OWUx
N2MzOGMwHhcNMjUwMTMxMDYwMDMyWhcNMjUwMjAxMDYwMDMyWjAzMTEwLwYDVQQD
Eyg3Y2VmNDA2MmM2OTNlNzkzNGFmMzllOWY2MTkzYmY0MGM2YTE4MTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3gvi3XBvzBzh/xMZ0epHAgOC0e3
ihKMQDkS0+tefAX9uGNderYbuooawKsxwEuDKctrLyNPlihe+FFzV4PDsDwGiBTp
1pPmfbpznUYQSthNG6QpTsSifwfjnKnlRAUe7rdh8p9jQ55ZZAP4rniAMLYCxMTn
JRiq2wQuf2sPHN30BeRCyPolo/AsNZLHSNTrrOenoNTut1yq4XIHhsJfqaVRb9s9
7oaKbWga7ssAm4ieNFSztygzD6hYZhPY7SPfjTyYse0HiWfeGiKUUeklVad1kj+r
saiQ3dpTPFRINLEtX6KYMEn+L9cKPfMXe79jIzwpYbEu1Dv4veJXArjatwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzvQGLGk+eTSvOen2GTv0DGoYE8MB8GA1UdIwQY
MBaAFGt9/ktosgiV7e3zoAMjKpeeF8OMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTMzLVMyaXlDSlh0N2ZPZ0F5TXFsNTRYdzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9hMWJkMTYtODRiNC00NjEyLWE3ZjAt
OWM3NmQxMGVjNTMyLzEvYTMzLVMyaXlDSlh0N2ZPZ0F5TXFsNTRYdzR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9hMWJkMTYtODRiNC00NjEyLWE3ZjAtOWM3NmQxMGVjNTMy
LzEvYTMzLVMyaXlDSlh0N2ZPZ0F5TXFsNTRYdzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYytsN/Gx
30TyEA8UhOYOLoLfhzt3eR5xrGTJbZ6gTRx1Rnzx8N3WGPcBLd0yVwTTLOSUWQvy
s/S20jXPcwayNQ2QI5sIIp05FJ+BhxBTIPara92ohvRz4Ox1xcEXYOy0oDB7/0pj
5qb9YQdkF66YP04OTQ2F0nnz9ZFF13l6bGnFm9ZW0CkW96UjP+XASqH9dnkO/O8k
AVKowu/F6Pde00mv+gWJuDGyHM/k+Q/u+jdJZLhadmTWLosorzLTvL8I0lNnq5aH
cIcBevjnPcZt30mngPjFc74QFWPExQxU+yHTbdIY1gEAjjuPlsEQ19mPjqg6a7zK
S7nvcd/OtyvsBg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:35 2025 by rpki-client on console-fra.rpki-client.org