Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft
File:                     klzs7-UigXQF0m_JK7UQSskM_cU.mft (raw, json)
Hash identifier:          aoLlfZkvj8O263DcsUgxizO7ptefsJGHYFIsUxbVAD8=
Subject key identifier:   D7:FA:C9:80:E9:62:BE:BC:9D:3A:DA:8E:47:0D:7B:45:89:DE:9B:3A
Authority key identifier: 92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5
Certificate issuer:       /CN=925cecefe522817405d26fc92bb5104ac90cfdc5
Certificate serial:       0194BB28EE51D179288DC24C5FCD11E5C857
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft
Manifest number:          13C8
Signing time:             Fri 31 Jan 2025 07:00:09 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:09 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:09 +0000
Files and hashes:         1: EfOMbgh_pKQt-7ajxMUeTepJbo4.roa (hash: RicjsAR+fFB8KuftKBMTKVHP55uAJ9KWTl0BH2re0WQ=)
                          2: klzs7-UigXQF0m_JK7UQSskM_cU.crl (hash: n5zYXhBt1+W46NFrN94GnW0IY91cZMei/VtTbTmE3iw=)
                          3: r1IMpiCHpPweMRkuWsw73RYDo3A.roa (hash: H3EX+meKiUt0EpGIqmimp5m+RpOOJnWjXaAa27zBx8A=)
                          4: uW5xZeMVu996ePnsDNWix3IxddE.roa (hash: eZBsZLTI5FHa2cO1NIRNHlb8bthiS8UjIJ0pt0v6Shw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:28:ee:51:d1:79:28:8d:c2:4c:5f:cd:11:e5:c8:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=925cecefe522817405d26fc92bb5104ac90cfdc5
        Validity
            Not Before: Jan 31 07:00:09 2025 GMT
            Not After : Feb  1 07:00:09 2025 GMT
        Subject: CN=d7fac980e962bebc9d3ada8e470d7b4589de9b3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7c:fb:f9:2e:52:46:5e:fb:7a:ad:8a:3b:94:
                    de:40:a2:0a:d6:74:99:bc:53:b2:f4:49:20:f3:d6:
                    40:a7:ed:26:96:9d:5b:93:89:9f:f8:c6:a1:91:b7:
                    1d:e9:33:f2:c3:94:b8:6d:fe:9f:89:41:92:d7:72:
                    ac:4a:d6:61:c9:d3:9f:b9:71:25:77:2f:86:62:a5:
                    73:6b:e4:f9:18:68:17:3a:5a:bf:a2:ca:e8:ca:39:
                    7c:67:c7:f3:8e:e4:ad:39:59:0e:54:8f:f9:6f:15:
                    3d:f3:5c:84:eb:7f:0d:ec:81:53:15:bb:fb:75:fa:
                    82:25:12:f7:a7:ed:45:0f:b7:2a:a8:28:82:2e:db:
                    37:84:8a:ae:8e:c2:d3:70:0b:1b:99:a5:af:34:68:
                    3e:9a:3a:12:7f:8e:d5:48:ca:f3:6b:31:dc:60:b2:
                    89:03:5b:da:6b:4c:1a:b1:b6:f1:b3:c7:76:4c:7f:
                    9b:11:eb:98:81:3f:cd:b2:20:76:37:2d:14:1f:1a:
                    a0:36:bc:31:d7:1e:bd:39:e3:b5:b3:ea:1f:a3:6b:
                    d4:5b:24:e0:52:06:af:4a:14:82:67:7e:1e:0e:58:
                    bb:94:31:b0:5c:39:a6:82:f8:ed:0c:9d:d2:47:77:
                    03:28:4c:11:92:49:75:3d:c8:6f:20:15:21:8d:b9:
                    a3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FA:C9:80:E9:62:BE:BC:9D:3A:DA:8E:47:0D:7B:45:89:DE:9B:3A
            X509v3 Authority Key Identifier:
                keyid:92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:f1:b1:49:83:61:85:05:05:7b:ef:9d:b8:d1:bb:3b:59:9a:
         79:09:f3:a2:ab:01:a1:0d:af:24:17:4e:65:35:82:a6:3e:c9:
         f4:14:40:45:90:e7:7a:10:35:eb:89:8b:cd:8f:2b:59:fe:ec:
         f7:b7:6a:49:b3:1c:f9:1e:47:e0:b7:ee:81:d8:5a:cf:2e:2f:
         5a:60:34:a6:1a:28:4a:c5:2a:6a:6f:ef:b2:30:21:b1:5f:d1:
         17:76:64:01:1a:ea:f4:98:c5:aa:78:53:17:51:44:a1:7e:35:
         93:94:ed:31:c7:01:44:7d:b1:e6:1c:ec:bf:81:7e:51:7b:06:
         a0:a7:a6:08:c6:68:c3:16:8e:4e:b4:88:41:84:0d:58:04:3d:
         9d:0f:42:19:1d:55:51:3f:bf:ab:3f:0b:7a:cd:47:fd:f2:ea:
         ff:28:8f:3d:b7:1e:a1:3b:f3:23:28:db:e7:55:92:d1:fa:e6:
         dc:2e:12:55:02:c9:42:e8:44:fd:4f:c7:50:05:6b:7c:b0:4a:
         64:bd:20:a8:31:3e:38:7b:72:05:34:43:69:97:af:69:af:a1:
         4d:46:0e:3c:df:f0:06:c4:aa:89:4a:b7:bf:16:66:50:d1:9a:
         4c:d2:7b:a6:38:e7:51:0e:53:16:d3:f0:2f:2c:41:a7:52:39:
         9d:9a:77:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KO5R0XkojcJMX80R5chXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNWNlY2VmZTUyMjgxNzQwNWQyNmZjOTJiYjUxMDRhYzkw
Y2ZkYzUwHhcNMjUwMTMxMDcwMDA5WhcNMjUwMjAxMDcwMDA5WjAzMTEwLwYDVQQD
EyhkN2ZhYzk4MGU5NjJiZWJjOWQzYWRhOGU0NzBkN2I0NTg5ZGU5YjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXz7+S5SRl77eq2KO5TeQKIK1nSZ
vFOy9Ekg89ZAp+0mlp1bk4mf+Mahkbcd6TPyw5S4bf6fiUGS13KsStZhydOfuXEl
dy+GYqVza+T5GGgXOlq/osroyjl8Z8fzjuStOVkOVI/5bxU981yE638N7IFTFbv7
dfqCJRL3p+1FD7cqqCiCLts3hIqujsLTcAsbmaWvNGg+mjoSf47VSMrzazHcYLKJ
A1vaa0wasbbxs8d2TH+bEeuYgT/NsiB2Ny0UHxqgNrwx1x69OeO1s+ofo2vUWyTg
UgavShSCZ34eDli7lDGwXDmmgvjtDJ3SR3cDKEwRkkl1PchvIBUhjbmjbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNf6yYDpYr68nTrajkcNe0WJ3ps6MB8GA1UdIwQY
MBaAFJJc7O/lIoF0BdJvySu1EErJDP3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2x6czctVWlnWFFGMG1fSks3VVFTc2tNX2NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mMDc2N2MtYjAxOS00NjNjLWEwYjEt
OGQ0YmZkMGFhY2U4LzEva2x6czctVWlnWFFGMG1fSks3VVFTc2tNX2NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9mMDc2N2MtYjAxOS00NjNjLWEwYjEtOGQ0YmZkMGFhY2U4
LzEva2x6czctVWlnWFFGMG1fSks3VVFTc2tNX2NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2fGxSYNh
hQUFe++duNG7O1maeQnzoqsBoQ2vJBdOZTWCpj7J9BRARZDnehA164mLzY8rWf7s
97dqSbMc+R5H4Lfugdhazy4vWmA0phooSsUqam/vsjAhsV/RF3ZkARrq9JjFqnhT
F1FEoX41k5TtMccBRH2x5hzsv4F+UXsGoKemCMZowxaOTrSIQYQNWAQ9nQ9CGR1V
UT+/qz8Les1H/fLq/yiPPbceoTvzIyjb51WS0frm3C4SVQLJQuhE/U/HUAVrfLBK
ZL0gqDE+OHtyBTRDaZevaa+hTUYOPN/wBsSqiUq3vxZmUNGaTNJ7pjjnUQ5TFtPw
LyxBp1I5nZp3eQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:51 2025 by rpki-client on console-fra.rpki-client.org