Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
File:                     lCWIuR2pzKgbSeYDqYjiseq93Jg.mft (raw, json)
Hash identifier:          MOQUuK4EzYPqRzsKgGSpHMVy9U/F6ydLDDfqFsHW2tw=
Subject key identifier:   84:D0:58:CE:67:36:58:EF:43:02:DD:CA:95:B4:F0:7A:6E:11:6C:F6
Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Certificate issuer:       /CN=942588b91da9cca81b49e603a988e2b1eabddc98
Certificate serial:       0194BABB96EA6BAA91819637036313564730
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
Manifest number:          146E
Signing time:             Fri 31 Jan 2025 05:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:43 +0000
Files and hashes:         1: BALv_ExnaNt7Ei9_oNy_lLXXzHs.roa (hash: 4ScxU84ECumBhevfK8YgF20L9hrETFzXn9HYLLsyrBg=)
                          2: UPeMe9exPA-XO-Wpe9l87kFbuLg.roa (hash: T5LXO+IIz5Jw7BGuFA7+Eefp0y4OKrkkqOT1rRFNsZQ=)
                          3: lCWIuR2pzKgbSeYDqYjiseq93Jg.crl (hash: aOg3N7dFrQDsAH0o3LwxGDB2cIfnwGtBKz/7YRcGEXo=)
                          4: ncHzeeVjiZyRXYe4vScc4yls9iI.roa (hash: xHq845vbcqMqo7ofQZT122TooKV6Hc+EdpS/v8a5LnU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:96:ea:6b:aa:91:81:96:37:03:63:13:56:47:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98
        Validity
            Not Before: Jan 31 05:00:43 2025 GMT
            Not After : Feb  1 05:00:43 2025 GMT
        Subject: CN=84d058ce673658ef4302ddca95b4f07a6e116cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:98:8b:b7:b0:02:44:ae:6a:be:77:67:6b:fb:
                    04:a9:91:f5:fb:4c:36:57:a9:b0:72:b7:aa:55:25:
                    e9:d2:97:af:20:c2:1f:2d:52:f1:bd:99:c8:d8:6d:
                    cf:d1:3b:90:85:f3:63:75:8c:96:68:c2:ea:50:57:
                    af:54:40:ec:b2:dd:af:d6:ce:cf:5d:63:2c:1c:6a:
                    b2:1b:04:e1:02:da:82:75:88:9d:d5:7e:2b:f2:dd:
                    c6:2a:9f:d4:da:5c:21:9d:e1:09:56:f5:e4:3f:d6:
                    1d:2f:49:a5:c6:c9:db:38:51:07:fb:e2:a8:7f:9a:
                    00:10:71:a1:e6:3b:da:dc:0c:3a:67:72:26:6b:44:
                    90:42:54:28:5d:78:4f:41:8e:d1:dc:19:d0:d9:05:
                    4a:55:32:0e:bd:ef:6e:98:9b:14:ec:8a:5e:6e:f5:
                    cf:57:63:c7:c5:25:ce:71:22:a0:8a:2f:be:fa:6b:
                    dc:d8:74:e2:e8:83:7d:e5:03:d5:c1:11:d0:89:81:
                    17:aa:60:ba:3b:1d:b1:ab:9a:de:30:0b:ec:84:8f:
                    02:39:58:a0:bb:41:fc:74:46:53:6e:3e:b1:8a:ef:
                    fa:34:cc:3a:77:13:a7:b2:e9:10:93:59:69:07:c3:
                    d6:71:fd:18:a8:af:5c:f1:c8:0e:e1:ea:2d:61:87:
                    73:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D0:58:CE:67:36:58:EF:43:02:DD:CA:95:B4:F0:7A:6E:11:6C:F6
            X509v3 Authority Key Identifier:
                keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:2b:91:89:15:2a:25:8e:34:d2:e8:e9:06:9e:ca:16:ec:d5:
         07:bd:43:2c:1a:f2:ba:94:ce:cb:63:c8:01:41:1f:b6:e1:4f:
         31:91:92:a7:eb:01:b2:34:b3:42:4c:64:46:e9:ed:c1:b9:ab:
         f8:24:bf:f8:b0:d5:cf:d7:f2:0b:08:45:7c:49:4b:39:70:f8:
         58:fe:86:bc:5e:14:91:f8:82:7a:13:1c:88:d4:09:03:7f:c5:
         d0:3a:5c:cf:a9:24:41:d3:05:11:0c:31:39:36:40:0e:4c:8f:
         bb:a0:e8:15:86:f5:b6:b8:06:e0:56:d7:47:0b:bf:e4:1f:dc:
         d0:f2:7a:5b:0e:8c:d6:06:6d:92:b9:25:ed:65:3f:df:75:0e:
         ec:18:6a:58:c6:e6:2a:2d:e8:12:f4:5b:77:fc:ad:bf:9b:cb:
         45:b0:c4:81:ac:05:18:67:3b:7f:75:10:9b:1e:10:1b:ad:d2:
         4a:22:f9:0a:2a:a3:bb:89:41:1e:33:a5:27:c4:d0:2f:04:1b:
         7b:ba:c8:71:7b:23:ad:c7:39:30:bd:13:a8:51:32:ce:37:7d:
         a5:52:b0:e1:4e:24:f5:76:d4:4a:8f:95:24:f2:2f:80:e2:0b:
         e6:0d:01:d9:f0:ad:7d:9e:76:f7:2d:9a:8d:7c:bd:cf:c4:f9:
         f2:25:6b:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u5bqa6qRgZY3A2MTVkcwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MjU4OGI5MWRhOWNjYTgxYjQ5ZTYwM2E5ODhlMmIxZWFi
ZGRjOTgwHhcNMjUwMTMxMDUwMDQzWhcNMjUwMjAxMDUwMDQzWjAzMTEwLwYDVQQD
Eyg4NGQwNThjZTY3MzY1OGVmNDMwMmRkY2E5NWI0ZjA3YTZlMTE2Y2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpiLt7ACRK5qvndna/sEqZH1+0w2
V6mwcreqVSXp0pevIMIfLVLxvZnI2G3P0TuQhfNjdYyWaMLqUFevVEDsst2v1s7P
XWMsHGqyGwThAtqCdYid1X4r8t3GKp/U2lwhneEJVvXkP9YdL0mlxsnbOFEH++Ko
f5oAEHGh5jva3Aw6Z3Ima0SQQlQoXXhPQY7R3BnQ2QVKVTIOve9umJsU7IpebvXP
V2PHxSXOcSKgii+++mvc2HTi6IN95QPVwRHQiYEXqmC6Ox2xq5reMAvshI8COVig
u0H8dEZTbj6xiu/6NMw6dxOnsukQk1lpB8PWcf0YqK9c8cgO4eotYYdziwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITQWM5nNljvQwLdypW08HpuEWz2MB8GA1UdIwQY
MBaAFJQliLkdqcyoG0nmA6mI4rHqvdyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbENXSXVSMnB6S2diU2VZRHFZamlzZXE5M0pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC80YmJhN2MtYTgxZi00MGUxLTg4MTQt
NjVkYWFkNjMyOTU3LzEvbENXSXVSMnB6S2diU2VZRHFZamlzZXE5M0pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC80YmJhN2MtYTgxZi00MGUxLTg4MTQtNjVkYWFkNjMyOTU3
LzEvbENXSXVSMnB6S2diU2VZRHFZamlzZXE5M0pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSuRiRUq
JY400ujpBp7KFuzVB71DLBryupTOy2PIAUEftuFPMZGSp+sBsjSzQkxkRuntwbmr
+CS/+LDVz9fyCwhFfElLOXD4WP6GvF4UkfiCehMciNQJA3/F0Dpcz6kkQdMFEQwx
OTZADkyPu6DoFYb1trgG4FbXRwu/5B/c0PJ6Ww6M1gZtkrkl7WU/33UO7BhqWMbm
Ki3oEvRbd/ytv5vLRbDEgawFGGc7f3UQmx4QG63SSiL5Ciqju4lBHjOlJ8TQLwQb
e7rIcXsjrcc5ML0TqFEyzjd9pVKw4U4k9XbUSo+VJPIvgOIL5g0B2fCtfZ529y2a
jXy9z8T58iVrXQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:11 2025 by rpki-client on console-fra.rpki-client.org