Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/Jp3NyuNYMRDjJsXsGOndV4_rrK8.mft
File:                     Jp3NyuNYMRDjJsXsGOndV4_rrK8.mft (raw, json)
Hash identifier:          yjlLBvhCyo+5/cj/bkJuzvIqnLEmVrBG9WipjQZmYcY=
Subject key identifier:   05:A5:AE:FD:74:50:A7:4E:57:70:89:F3:5D:8F:F1:12:AD:96:16:F6
Authority key identifier: 26:9D:CD:CA:E3:58:31:10:E3:26:C5:EC:18:E9:DD:57:8F:EB:AC:AF
Certificate issuer:       /CN=269dcdcae3583110e326c5ec18e9dd578febacaf
Certificate serial:       0194BB6018E8ED0CA58232077C12ECBC059F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jp3NyuNYMRDjJsXsGOndV4_rrK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/Jp3NyuNYMRDjJsXsGOndV4_rrK8.mft
Manifest number:          FA
Signing time:             Fri 31 Jan 2025 08:00:24 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:24 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:24 +0000
Files and hashes:         1: Jp3NyuNYMRDjJsXsGOndV4_rrK8.crl (hash: gfDCbHzb76dA69+a5yPLZnnKnHTm9U8OLurFJ1lIYC0=)
                          2: Pwru1ms3rswTdeP7mDo9T3oJ3Tc.roa (hash: CQ+EuLT6MmBG/IgV6dpFIa8pWMEUV5bK+xKWi6IuG/o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/Jp3NyuNYMRDjJsXsGOndV4_rrK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/Jp3NyuNYMRDjJsXsGOndV4_rrK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jp3NyuNYMRDjJsXsGOndV4_rrK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:60:18:e8:ed:0c:a5:82:32:07:7c:12:ec:bc:05:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269dcdcae3583110e326c5ec18e9dd578febacaf
        Validity
            Not Before: Jan 31 08:00:24 2025 GMT
            Not After : Feb  1 08:00:24 2025 GMT
        Subject: CN=05a5aefd7450a74e577089f35d8ff112ad9616f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:98:b6:c0:da:97:5d:4e:26:10:00:4f:67:3d:
                    fa:70:e9:87:85:f7:89:89:d0:b2:53:04:96:5e:91:
                    33:db:a0:f5:5d:3d:f2:a1:a9:68:30:cc:05:74:f8:
                    71:8e:dd:ff:1a:a1:58:57:3b:c5:e7:4a:5d:7c:f9:
                    5b:68:72:21:33:04:85:84:2c:80:bc:20:4e:87:ed:
                    42:4f:52:2e:a1:5c:b2:56:96:11:c5:13:dc:5a:c8:
                    03:05:b2:35:30:b6:31:66:98:9f:b2:7c:61:86:2b:
                    51:07:f0:21:8a:ef:5e:54:f2:b9:d9:ee:bf:bc:bb:
                    5c:0e:2f:ce:4a:3b:f8:39:1d:00:4e:0a:86:3b:8a:
                    0c:00:99:ee:80:8e:4d:e0:e1:ac:47:74:c0:6a:3f:
                    a8:46:c2:7a:32:fd:01:48:c0:5e:bb:8b:c4:f8:9d:
                    85:33:bc:52:84:61:85:45:8b:a0:e5:78:cb:0a:f7:
                    d8:20:7f:97:bb:68:0c:c5:14:17:63:23:5a:e2:2e:
                    08:e1:8b:e5:f4:45:56:1d:c7:79:55:b8:62:4f:95:
                    8a:63:b5:46:94:4c:fb:c1:e9:e1:76:7f:1e:15:1a:
                    48:c4:7f:88:a3:01:e8:21:73:1b:a4:fd:1e:5c:21:
                    b8:65:23:72:ff:df:0a:47:2b:b6:26:17:0e:36:69:
                    d3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A5:AE:FD:74:50:A7:4E:57:70:89:F3:5D:8F:F1:12:AD:96:16:F6
            X509v3 Authority Key Identifier:
                keyid:26:9D:CD:CA:E3:58:31:10:E3:26:C5:EC:18:E9:DD:57:8F:EB:AC:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jp3NyuNYMRDjJsXsGOndV4_rrK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/Jp3NyuNYMRDjJsXsGOndV4_rrK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/Jp3NyuNYMRDjJsXsGOndV4_rrK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:2e:a3:63:5a:12:6c:e0:c9:63:13:71:60:4d:31:1e:e2:ef:
         db:b2:54:36:ac:fb:cd:68:f9:0e:56:64:ff:2b:cc:8e:e1:f2:
         ff:d8:cb:c3:ab:b9:51:bc:55:c0:59:6b:3a:37:16:24:39:f2:
         40:3b:fe:c5:14:ff:23:f2:84:ae:5a:be:48:23:3b:6e:5a:89:
         8d:26:25:12:1b:7d:e9:2b:44:52:e1:7f:b0:2f:a6:03:20:b3:
         1f:0c:dc:4b:25:b9:e9:94:4a:56:98:18:dd:59:21:52:31:bd:
         b7:de:b4:09:55:c2:d9:d2:1f:c8:d8:a3:b0:34:52:75:e2:21:
         44:93:5e:72:84:a7:c2:93:4b:d0:e2:72:fa:3b:a0:80:5e:e9:
         fe:82:b4:85:dd:1f:0e:05:cf:c4:7d:fe:ed:d3:e9:4e:46:da:
         f8:24:d5:91:66:36:61:9d:87:de:1e:93:d2:ee:e3:dd:42:04:
         31:87:33:3d:8e:6d:3e:ac:ed:7d:71:80:0f:db:5e:9c:3a:17:
         9f:d2:72:8c:bb:0e:8a:42:34:8a:fc:e3:6d:f6:79:5d:6f:56:
         af:e1:36:aa:82:02:16:2b:66:92:dd:51:28:e4:68:53:60:2f:
         e5:6f:45:2a:14:c0:0b:1d:cb:72:04:6a:2b:de:6f:a0:d7:b5:
         ee:ad:06:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7YBjo7QylgjIHfBLsvAWfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2OWRjZGNhZTM1ODMxMTBlMzI2YzVlYzE4ZTlkZDU3OGZl
YmFjYWYwHhcNMjUwMTMxMDgwMDI0WhcNMjUwMjAxMDgwMDI0WjAzMTEwLwYDVQQD
EygwNWE1YWVmZDc0NTBhNzRlNTc3MDg5ZjM1ZDhmZjExMmFkOTYxNmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpi2wNqXXU4mEABPZz36cOmHhfeJ
idCyUwSWXpEz26D1XT3yoaloMMwFdPhxjt3/GqFYVzvF50pdfPlbaHIhMwSFhCyA
vCBOh+1CT1IuoVyyVpYRxRPcWsgDBbI1MLYxZpifsnxhhitRB/Ahiu9eVPK52e6/
vLtcDi/OSjv4OR0ATgqGO4oMAJnugI5N4OGsR3TAaj+oRsJ6Mv0BSMBeu4vE+J2F
M7xShGGFRYug5XjLCvfYIH+Xu2gMxRQXYyNa4i4I4Yvl9EVWHcd5VbhiT5WKY7VG
lEz7wenhdn8eFRpIxH+IowHoIXMbpP0eXCG4ZSNy/98KRyu2JhcONmnT3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWlrv10UKdOV3CJ812P8RKtlhb2MB8GA1UdIwQY
MBaAFCadzcrjWDEQ4ybF7Bjp3VeP66yvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnAzTnl1TllNUkRqSnNYc0dPbmRWNF9ycks4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9mMTc3M2YtNzIxNi00ZjVmLThiOWIt
YjM2YWI1MDZlNGVjLzEvSnAzTnl1TllNUkRqSnNYc0dPbmRWNF9ycks4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9mMTc3M2YtNzIxNi00ZjVmLThiOWItYjM2YWI1MDZlNGVj
LzEvSnAzTnl1TllNUkRqSnNYc0dPbmRWNF9ycks4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXC6jY1oS
bODJYxNxYE0xHuLv27JUNqz7zWj5DlZk/yvMjuHy/9jLw6u5UbxVwFlrOjcWJDny
QDv+xRT/I/KErlq+SCM7blqJjSYlEht96StEUuF/sC+mAyCzHwzcSyW56ZRKVpgY
3VkhUjG9t960CVXC2dIfyNijsDRSdeIhRJNecoSnwpNL0OJy+juggF7p/oK0hd0f
DgXPxH3+7dPpTkba+CTVkWY2YZ2H3h6T0u7j3UIEMYczPY5tPqztfXGAD9tenDoX
n9JyjLsOikI0ivzjbfZ5XW9Wr+E2qoICFitmkt1RKORoU2Av5W9FKhTACx3LcgRq
K95voNe17q0GVw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:35 2025 by rpki-client on console-fra.rpki-client.org