Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
File:                     b8zf_aakxIkUtejN59pdgguclxg.mft (raw, json)
Hash identifier:          d8bP1kbjbMcpG1BxUI4RWXPvWABlhXue+P5P3MUtBVQ=
Subject key identifier:   72:5A:2F:74:8F:F1:8C:5A:61:0A:50:D0:B0:1D:1E:33:05:EE:26:33
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Certificate issuer:       /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial:       0194BA849572B26365033490CEF2A41E4E8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
Manifest number:          1437
Signing time:             Fri 31 Jan 2025 04:00:38 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:38 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:38 +0000
Files and hashes:         1: BXSZYJBrkxCTId8MwQ-ZKF-lyaA.roa (hash: K/ehq7lqym6tZf2i4FjRalgaK0MPhMmRpzdIX0vLOk8=)
                          2: DYLjWvwGvcKYsqCmuztGnKr95UA.roa (hash: OwrMp0gdCY+Dd9BXuTtFc90A7ASg0umQC4it/lmUd+I=)
                          3: E7He_auz_OwW9cMRlHWztZpOFkM.roa (hash: YndW7vifdss6iyHFXtCeGuBzSn3EKvbp10ZlduxVmbE=)
                          4: K221sfSU8a2Lsy0QMVbBz-yAHyg.roa (hash: kybj+mQFwM3CNEIgEWcR7xMFvyhG9N8dFqe0X/0hhYM=)
                          5: b8zf_aakxIkUtejN59pdgguclxg.crl (hash: d85ihuL+yslBilQBEjmu/jTwK2Nk+OyglSYeRih0vEQ=)
                          6: j93BEME5b_K-Zki214QPN4kzqeg.roa (hash: hcvpDseLA+C6KaXIoA6Bv3d4XdBkZlvTz5OO4bMB8oo=)
                          7: kwjmGqQ4mv8FjfAdkGnsuf4wnOA.roa (hash: VWlBMBrFm2Tvrm5/6iJMAKobmPutaGrBQh5gSXrSjbQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:95:72:b2:63:65:03:34:90:ce:f2:a4:1e:4e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
        Validity
            Not Before: Jan 31 04:00:38 2025 GMT
            Not After : Feb  1 04:00:38 2025 GMT
        Subject: CN=725a2f748ff18c5a610a50d0b01d1e3305ee2633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7a:27:b0:69:e6:8e:2e:c2:76:e5:e9:78:c8:
                    a3:42:0c:72:4d:92:c6:f8:4b:20:5a:90:67:a1:7a:
                    35:65:ab:04:0d:c2:45:80:d3:54:29:e0:91:6f:d1:
                    e1:63:c4:93:04:06:a1:25:4c:52:9c:de:b5:07:3c:
                    1d:03:b4:a5:3f:f7:ad:99:fc:dd:0e:fc:6e:85:e5:
                    23:aa:4f:f3:d7:d1:e4:bd:44:07:54:5c:23:c7:1c:
                    f9:c4:1d:ef:cf:5f:19:7a:72:49:e1:69:e2:77:47:
                    b4:c0:dd:08:af:e6:fa:29:47:ac:be:44:a7:d6:c9:
                    0a:0f:23:92:48:42:07:1e:9e:d2:3c:9f:25:5c:cb:
                    57:94:20:a6:52:e1:fc:53:d4:91:9d:f4:d3:9e:42:
                    ee:c1:64:0b:78:7d:bf:bb:a2:b0:5c:44:c3:53:cd:
                    53:5f:da:bc:dd:9d:62:4d:05:e3:29:cf:dc:d9:9e:
                    c2:d0:94:02:62:fe:e5:37:25:61:8f:a2:56:2d:a0:
                    62:61:12:68:25:9b:f5:1d:b2:50:ab:ad:e3:36:51:
                    86:e8:b1:0b:df:52:21:f0:2c:aa:43:28:63:76:8b:
                    69:6d:f4:86:d1:87:f9:0e:55:85:80:f9:ba:38:f4:
                    c6:ca:76:9d:e3:9d:e8:bf:61:62:4e:29:5e:94:d2:
                    fc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5A:2F:74:8F:F1:8C:5A:61:0A:50:D0:B0:1D:1E:33:05:EE:26:33
            X509v3 Authority Key Identifier:
                keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:bf:85:48:6d:f3:3d:e7:be:7c:ac:3f:58:04:b4:63:ad:2b:
         e0:b1:9f:34:4b:15:4c:98:55:8b:dc:d5:36:bb:12:4a:b4:35:
         b5:e4:8e:48:52:ea:87:f1:f7:34:0d:10:ba:3a:51:7b:30:6e:
         cc:bd:f7:4a:59:06:aa:6f:df:88:7e:64:2f:36:ea:b8:5c:49:
         73:f5:d6:0f:d8:c6:e4:e2:60:18:28:75:f1:e0:e7:8c:2d:d4:
         41:03:df:bc:19:b3:e4:8f:d7:83:f4:ea:7d:98:24:8d:5a:e9:
         13:dc:f5:ae:38:90:f5:26:5f:43:19:9b:d0:6f:c3:14:05:63:
         68:3c:2e:d4:e0:77:7e:f0:6c:1c:a9:b0:fa:e5:2c:da:0f:58:
         3d:11:5c:b5:af:1f:65:19:96:45:2e:7d:69:62:a5:0c:b7:be:
         af:97:c3:01:64:90:87:06:98:d5:12:4a:9b:7b:2b:fe:91:31:
         18:6a:a4:72:21:8e:86:26:d1:17:ef:d4:40:10:9d:07:d4:7a:
         89:0e:43:25:52:4d:96:01:e7:d7:a9:b2:a7:58:b6:24:08:4a:
         e8:01:6b:b3:e1:50:41:cb:e2:1d:2c:b3:46:47:83:c6:7e:41:
         ab:5b:36:0e:92:5d:2d:0d:d5:e7:c3:3d:dd:50:0b:c4:c8:ac:
         34:8c:31:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hJVysmNlAzSQzvKkHk6PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmY2NkZmZkYTZhNGM0ODkxNGI1ZThjZGU3ZGE1ZDgyMGI5
Yzk3MTgwHhcNMjUwMTMxMDQwMDM4WhcNMjUwMjAxMDQwMDM4WjAzMTEwLwYDVQQD
Eyg3MjVhMmY3NDhmZjE4YzVhNjEwYTUwZDBiMDFkMWUzMzA1ZWUyNjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03onsGnmji7CduXpeMijQgxyTZLG
+EsgWpBnoXo1ZasEDcJFgNNUKeCRb9HhY8STBAahJUxSnN61BzwdA7SlP/etmfzd
DvxuheUjqk/z19HkvUQHVFwjxxz5xB3vz18ZenJJ4Wnid0e0wN0Ir+b6KUesvkSn
1skKDyOSSEIHHp7SPJ8lXMtXlCCmUuH8U9SRnfTTnkLuwWQLeH2/u6KwXETDU81T
X9q83Z1iTQXjKc/c2Z7C0JQCYv7lNyVhj6JWLaBiYRJoJZv1HbJQq63jNlGG6LEL
31Ih8CyqQyhjdotpbfSG0Yf5DlWFgPm6OPTGynad453ov2FiTilelNL8VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJaL3SP8YxaYQpQ0LAdHjMF7iYzMB8GA1UdIwQY
MBaAFG/M3/2mpMSJFLXozefaXYILnJcYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jYjAxNTMtODAzYS00YmI2LWIxOWQt
YTc3NGU0MWQyNjRjLzEvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9jYjAxNTMtODAzYS00YmI2LWIxOWQtYTc3NGU0MWQyNjRj
LzEvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj7+FSG3z
Pee+fKw/WAS0Y60r4LGfNEsVTJhVi9zVNrsSSrQ1teSOSFLqh/H3NA0QujpRezBu
zL33SlkGqm/fiH5kLzbquFxJc/XWD9jG5OJgGCh18eDnjC3UQQPfvBmz5I/Xg/Tq
fZgkjVrpE9z1rjiQ9SZfQxmb0G/DFAVjaDwu1OB3fvBsHKmw+uUs2g9YPRFcta8f
ZRmWRS59aWKlDLe+r5fDAWSQhwaY1RJKm3sr/pExGGqkciGOhibRF+/UQBCdB9R6
iQ5DJVJNlgHn16myp1i2JAhK6AFrs+FQQcviHSyzRkeDxn5Bq1s2DpJdLQ3V58M9
3VALxMisNIwxtQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:26 2025 by rpki-client on console-fra.rpki-client.org