Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
File:                     MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft (raw, json)
Hash identifier:          PPv5fXRKuTW9uwCledGxvae20kutBTxDMNj4PAtZids=
Subject key identifier:   93:D5:94:6B:3B:CA:7B:29:44:C0:D7:83:8D:97:33:7C:D4:A2:8E:4E
Authority key identifier: 31:83:EF:C5:2D:D5:D2:D4:F7:E0:C4:5D:22:C9:C2:9F:1D:CE:8E:59
Certificate issuer:       /CN=3183efc52dd5d2d4f7e0c45d22c9c29f1dce8e59
Certificate serial:       0194BB6027355D4A2D2567FD02D3CFC02C78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
Manifest number:          067E
Signing time:             Fri 31 Jan 2025 08:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:28 +0000
Files and hashes:         1: MYPvxS3V0tT34MRdIsnCnx3Ojlk.crl (hash: R+8qNVxE5FAStYf5fDozqhRRrfluaWbNJbHircXXNjo=)
                          2: mThuVq__AdJ8m0fUEig5mExB-MI.roa (hash: uwNlHWqFKBBy+qRVS5eJabxoyu+NHhSLJrsP7OWfbIo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:60:27:35:5d:4a:2d:25:67:fd:02:d3:cf:c0:2c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183efc52dd5d2d4f7e0c45d22c9c29f1dce8e59
        Validity
            Not Before: Jan 31 08:00:28 2025 GMT
            Not After : Feb  1 08:00:28 2025 GMT
        Subject: CN=93d5946b3bca7b2944c0d7838d97337cd4a28e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:90:c4:b8:8b:38:9b:20:e1:a1:f0:cd:cd:80:
                    8b:14:a9:5b:79:21:bb:78:ce:cb:de:9d:76:c2:09:
                    a8:c6:31:0e:79:c0:d2:6c:1c:8f:23:8d:eb:43:40:
                    87:90:2e:5f:ba:9c:30:ac:11:71:4c:12:f4:ea:dd:
                    2d:af:bc:20:80:cb:e4:78:d6:db:86:dd:c1:bf:b5:
                    b7:5d:a3:06:a0:09:cf:cd:e4:1a:65:ed:95:29:12:
                    4e:9b:e7:d4:e8:58:09:83:a7:1f:b2:86:be:b5:07:
                    8f:db:05:cd:5d:a0:bb:fe:c9:c5:54:7a:e2:79:ab:
                    95:a0:bb:8b:d9:6c:b0:58:9b:a2:7f:66:04:b1:d5:
                    d7:83:e1:c5:04:91:03:fc:11:de:9e:39:9e:3e:42:
                    d4:28:82:50:45:8f:7d:72:f5:38:4a:e8:54:74:e9:
                    8c:de:0a:fd:0d:ef:3d:68:6b:3c:9c:cd:e4:95:e8:
                    41:aa:3a:7c:e6:4e:db:35:a2:f3:81:5f:ba:31:e1:
                    f4:6b:e8:92:a5:14:68:98:d8:79:89:bd:dc:fc:71:
                    6a:04:cb:07:1f:ab:1e:7b:e8:80:de:32:12:07:48:
                    da:e5:de:7d:90:fa:46:ec:d4:1f:3a:93:b8:f1:63:
                    f4:2b:ad:52:81:2f:a5:8d:36:61:fe:30:6e:53:8c:
                    32:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D5:94:6B:3B:CA:7B:29:44:C0:D7:83:8D:97:33:7C:D4:A2:8E:4E
            X509v3 Authority Key Identifier:
                keyid:31:83:EF:C5:2D:D5:D2:D4:F7:E0:C4:5D:22:C9:C2:9F:1D:CE:8E:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:36:66:07:be:f2:81:75:11:6c:79:38:f5:f9:1c:84:6e:7e:
         6f:4e:a8:23:30:f3:5a:a1:9a:51:4d:9c:0f:3a:04:22:55:1a:
         5b:b8:3c:67:8c:9b:49:d7:ab:e6:83:cf:b0:c9:5e:d6:f4:a8:
         91:62:c3:2d:2e:4f:ff:4e:b4:55:e4:39:8f:18:be:bd:65:8e:
         4c:3c:bb:43:11:60:ce:98:5b:70:1c:a4:03:dd:de:f5:8e:72:
         3d:06:f2:ab:50:23:51:9a:c6:9b:3a:30:34:0c:ac:14:40:fa:
         73:45:e6:94:1b:3d:30:f8:ae:40:10:a2:30:4b:b0:7c:4f:cd:
         67:da:17:5a:99:79:e2:db:13:77:91:18:a5:3f:b3:98:78:91:
         a0:50:76:d0:5d:df:d5:ce:6c:15:73:14:dc:1b:0e:9f:4d:2b:
         9a:fb:60:9a:84:79:51:15:ca:36:c1:76:6e:fb:89:e1:25:d5:
         90:2d:b1:41:1c:a4:80:79:d4:77:74:ea:b7:7e:97:60:3d:f0:
         c4:1e:51:c2:b0:26:61:af:27:df:a9:0a:d4:8e:7e:3d:1e:98:
         11:ad:75:72:c2:82:16:94:fd:eb:5f:03:7c:d9:92:70:fe:a2:
         b4:1a:4e:cc:44:0a:59:28:0e:8d:6e:08:71:91:31:27:6d:db:
         83:0d:f4:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7YCc1XUotJWf9AtPPwCx4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODNlZmM1MmRkNWQyZDRmN2UwYzQ1ZDIyYzljMjlmMWRj
ZThlNTkwHhcNMjUwMTMxMDgwMDI4WhcNMjUwMjAxMDgwMDI4WjAzMTEwLwYDVQQD
Eyg5M2Q1OTQ2YjNiY2E3YjI5NDRjMGQ3ODM4ZDk3MzM3Y2Q0YTI4ZTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpDEuIs4myDhofDNzYCLFKlbeSG7
eM7L3p12wgmoxjEOecDSbByPI43rQ0CHkC5fupwwrBFxTBL06t0tr7wggMvkeNbb
ht3Bv7W3XaMGoAnPzeQaZe2VKRJOm+fU6FgJg6cfsoa+tQeP2wXNXaC7/snFVHri
eauVoLuL2WywWJuif2YEsdXXg+HFBJED/BHenjmePkLUKIJQRY99cvU4SuhUdOmM
3gr9De89aGs8nM3klehBqjp85k7bNaLzgV+6MeH0a+iSpRRomNh5ib3c/HFqBMsH
H6see+iA3jISB0ja5d59kPpG7NQfOpO48WP0K61SgS+ljTZh/jBuU4wyNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPVlGs7ynspRMDXg42XM3zUoo5OMB8GA1UdIwQY
MBaAFDGD78Ut1dLU9+DEXSLJwp8dzo5ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlQdnhTM1YwdFQzNE1SZElzbkNueDNPamxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83YmFjNzEtOTk0ZS00ZDQ3LWJjZmUt
ZjhmM2YwNDAxY2MzLzEvTVlQdnhTM1YwdFQzNE1SZElzbkNueDNPamxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC83YmFjNzEtOTk0ZS00ZDQ3LWJjZmUtZjhmM2YwNDAxY2Mz
LzEvTVlQdnhTM1YwdFQzNE1SZElzbkNueDNPamxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzZmB77y
gXURbHk49fkchG5+b06oIzDzWqGaUU2cDzoEIlUaW7g8Z4ybSder5oPPsMle1vSo
kWLDLS5P/060VeQ5jxi+vWWOTDy7QxFgzphbcBykA93e9Y5yPQbyq1AjUZrGmzow
NAysFED6c0XmlBs9MPiuQBCiMEuwfE/NZ9oXWpl54tsTd5EYpT+zmHiRoFB20F3f
1c5sFXMU3BsOn00rmvtgmoR5URXKNsF2bvuJ4SXVkC2xQRykgHnUd3Tqt36XYD3w
xB5RwrAmYa8n36kK1I5+PR6YEa11csKCFpT9618DfNmScP6itBpOzEQKWSgOjW4I
cZExJ23bgw30iQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:05 2025 by rpki-client on console-fra.rpki-client.org