Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
File:                     AyUDQljydbfIfl9PcHBsDPWI78M.mft (raw, json)
Hash identifier:          t5n4ueJUduvUvMWpSaSL9yGVCDZ1zJhNVqUEh/+g218=
Subject key identifier:   3C:77:51:67:AB:45:F2:99:3D:2F:03:01:60:0D:26:86:49:E1:C3:A9
Authority key identifier: 03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
Certificate issuer:       /CN=0325034258f275b7c87e5f4f70706c0cf588efc3
Certificate serial:       0194BABB2A4EF93525EE56E55031B918E85B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
Manifest number:          13E4
Signing time:             Fri 31 Jan 2025 05:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:15 +0000
Files and hashes:         1: AyUDQljydbfIfl9PcHBsDPWI78M.crl (hash: 2Yjd3GxXOfvDBSDtbQQ9l/oKgWUBinefsU6f6nncFlU=)
                          2: MOCwLZlblZQoo_YoYCbZ92anb2M.roa (hash: jgAeaLjB49XZgaBhwkQWDfGLFnhl3KHjjoTO22L98Wk=)
                          3: XMzMrB_8MPuaKVcXQLSpfY45uHg.roa (hash: Kg28zSoDTugIChfPSBvRhPy84bB18/D8eH/rgKbNXTo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:2a:4e:f9:35:25:ee:56:e5:50:31:b9:18:e8:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0325034258f275b7c87e5f4f70706c0cf588efc3
        Validity
            Not Before: Jan 31 05:00:15 2025 GMT
            Not After : Feb  1 05:00:15 2025 GMT
        Subject: CN=3c775167ab45f2993d2f0301600d268649e1c3a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bb:99:13:04:45:84:c4:b9:58:1f:b3:11:1a:
                    a4:7b:c8:bb:49:0e:76:7f:cb:7a:f9:ae:b5:f9:73:
                    cd:a1:3d:3a:a5:e5:64:de:d7:ba:66:f9:7d:5c:ec:
                    1b:f9:cb:59:29:45:ae:b1:fa:a4:59:6c:3e:26:05:
                    0d:a4:26:c2:df:9b:06:9d:a3:69:1d:42:ee:ec:91:
                    70:11:c5:c1:bb:6d:39:87:47:c7:28:40:b8:cb:c7:
                    a9:50:48:94:64:c9:3c:01:72:2c:63:51:e7:15:32:
                    08:1f:c2:8c:2d:5c:81:fb:23:c5:8b:59:43:8e:1a:
                    18:9d:64:0a:e4:84:9e:fa:23:ba:5c:93:3f:d3:87:
                    f9:eb:22:a1:db:0c:90:e7:33:c8:c4:d0:a7:e6:9d:
                    8d:9d:fc:14:0f:aa:62:3b:31:71:84:17:65:f0:e3:
                    18:2d:72:3d:e7:a2:81:e9:9e:59:d0:32:9c:5c:49:
                    cf:87:93:8e:b0:8e:20:c5:69:ba:15:44:46:a1:d1:
                    ca:64:38:2d:97:bd:82:bf:03:a2:41:c9:dd:d5:d0:
                    44:90:76:6e:19:4a:25:33:2f:28:25:7b:b1:51:cf:
                    b8:db:95:94:34:75:9a:64:71:ae:50:24:94:60:bd:
                    bc:1b:34:67:90:c3:c9:41:4f:b1:0a:2a:02:50:5a:
                    b0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:77:51:67:AB:45:F2:99:3D:2F:03:01:60:0D:26:86:49:E1:C3:A9
            X509v3 Authority Key Identifier:
                keyid:03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:20:de:7d:c9:c6:50:aa:18:27:3f:fc:3e:4d:a1:db:61:5d:
         67:8c:a6:8e:08:27:b3:8f:c5:4b:ec:a4:af:07:45:73:dc:e2:
         49:a5:e5:22:4a:4e:a4:46:4f:dd:e4:a4:87:6d:68:90:bd:68:
         a5:bf:10:4d:45:7e:8a:74:d7:00:41:64:0b:07:7b:85:fc:a1:
         86:59:69:7a:2b:2e:ea:c3:e9:7f:41:0b:ef:41:d1:52:d0:4e:
         9c:7e:02:a9:b9:41:5e:86:46:88:10:bd:50:6c:88:7e:27:e1:
         57:61:be:5c:d3:24:9b:0c:4b:44:0a:06:04:9e:c5:4e:34:c1:
         21:27:7e:22:8f:16:6a:dd:13:0a:6a:77:1d:7d:9e:ab:9f:c6:
         0d:cd:5a:73:07:6c:9b:c7:fc:62:21:3b:86:43:bf:67:80:f1:
         11:d3:8f:97:e6:a1:98:87:68:25:b8:bc:87:ef:c1:d0:77:70:
         ef:00:8a:93:8b:82:e7:c1:85:5a:f8:7b:2e:97:41:94:e8:2e:
         d5:9b:70:71:3a:64:f7:a5:b2:fb:b5:33:8a:8f:03:f0:27:c4:
         d8:b8:61:32:56:ff:58:da:0d:47:41:d6:b2:02:f0:b4:5e:9a:
         b3:02:13:a2:76:16:24:57:8c:97:66:dd:81:5d:90:9f:09:f1:
         20:a3:62:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6uypO+TUl7lblUDG5GOhbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjUwMzQyNThmMjc1YjdjODdlNWY0ZjcwNzA2YzBjZjU4
OGVmYzMwHhcNMjUwMTMxMDUwMDE1WhcNMjUwMjAxMDUwMDE1WjAzMTEwLwYDVQQD
EygzYzc3NTE2N2FiNDVmMjk5M2QyZjAzMDE2MDBkMjY4NjQ5ZTFjM2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbuZEwRFhMS5WB+zERqke8i7SQ52
f8t6+a61+XPNoT06peVk3te6Zvl9XOwb+ctZKUWusfqkWWw+JgUNpCbC35sGnaNp
HULu7JFwEcXBu205h0fHKEC4y8epUEiUZMk8AXIsY1HnFTIIH8KMLVyB+yPFi1lD
jhoYnWQK5ISe+iO6XJM/04f56yKh2wyQ5zPIxNCn5p2NnfwUD6piOzFxhBdl8OMY
LXI956KB6Z5Z0DKcXEnPh5OOsI4gxWm6FURGodHKZDgtl72CvwOiQcnd1dBEkHZu
GUolMy8oJXuxUc+425WUNHWaZHGuUCSUYL28GzRnkMPJQU+xCioCUFqwYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDx3UWerRfKZPS8DAWANJoZJ4cOpMB8GA1UdIwQY
MBaAFAMlA0JY8nW3yH5fT3BwbAz1iO/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlVRFFsanlkYmZJZmw5UGNIQnNEUFdJNzhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9kZGE0MTItNDU0NS00OGE2LWJkZTIt
OWEzN2M2MDY5YmMxLzEvQXlVRFFsanlkYmZJZmw5UGNIQnNEUFdJNzhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9kZGE0MTItNDU0NS00OGE2LWJkZTItOWEzN2M2MDY5YmMx
LzEvQXlVRFFsanlkYmZJZmw5UGNIQnNEUFdJNzhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbyDefcnG
UKoYJz/8Pk2h22FdZ4ymjggns4/FS+ykrwdFc9ziSaXlIkpOpEZP3eSkh21okL1o
pb8QTUV+inTXAEFkCwd7hfyhhllpeisu6sPpf0EL70HRUtBOnH4CqblBXoZGiBC9
UGyIfifhV2G+XNMkmwxLRAoGBJ7FTjTBISd+Io8Wat0TCmp3HX2eq5/GDc1acwds
m8f8YiE7hkO/Z4DxEdOPl+ahmIdoJbi8h+/B0Hdw7wCKk4uC58GFWvh7LpdBlOgu
1ZtwcTpk96Wy+7Uzio8D8CfE2LhhMlb/WNoNR0HWsgLwtF6aswITonYWJFeMl2bd
gV2QnwnxIKNiAQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:26 2025 by rpki-client on console-fra.rpki-client.org