Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
File:                     gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft (raw, json)
Hash identifier:          EhnpZocy6XBxmKxIaubOxRp8kXdpFT04WDqGvjcAoD8=
Subject key identifier:   68:E1:39:E2:21:2F:75:8D:28:82:58:67:F0:54:60:D4:21:57:41:D1
Authority key identifier: 81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
Certificate issuer:       /CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Certificate serial:       0194BB97299AB6A3CF48E8DA639F22F8B0B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
Manifest number:          08D1
Signing time:             Fri 31 Jan 2025 09:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:33 +0000
Files and hashes:         1: FmQ80l0dYXHJ_YszXOyTcMs1MTU.roa (hash: fSjkPRX7Cv4pegplKIsFbpWztpRWIWp5drmzYAiL38E=)
                          2: M2T_h-HT-LjV3MxmhC3AaCL7DR0.roa (hash: JUe0w/L/a5YNGKCvQ5Od3tGqP8OCxA0GZG5F9koR5ws=)
                          3: gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl (hash: ZHG6ExBCFBFvvmQdyDslUbBf+YCnsup8pUilPO8groE=)
                          4: hfZ9JmRYsdrX_WsZKnGJG03yjoY.roa (hash: KsXjtR8VJ0gF1kTfS5RfLRCRZJ2gEjdzhxwY2pQ41Hg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:97:29:9a:b6:a3:cf:48:e8:da:63:9f:22:f8:b0:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
        Validity
            Not Before: Jan 31 09:00:33 2025 GMT
            Not After : Feb  1 09:00:33 2025 GMT
        Subject: CN=68e139e2212f758d28825867f05460d4215741d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:df:e7:8f:06:aa:91:b6:70:9a:7d:4c:2b:ce:
                    42:a7:13:86:e6:d3:3b:3d:b2:4c:47:51:37:ef:af:
                    c4:d6:64:85:66:7d:4e:a0:90:70:cd:dd:36:67:36:
                    e1:5c:6c:09:e6:44:03:a9:5a:d5:23:28:2f:c1:71:
                    9e:3c:66:52:29:0c:e3:07:a7:c1:77:c9:31:6f:bf:
                    68:94:3a:89:a0:75:9d:e5:e2:e6:34:b8:d4:13:6c:
                    69:0b:a9:6e:c4:cc:1a:96:55:e2:11:b3:d2:bf:34:
                    e3:6b:69:86:de:80:e5:e9:4f:e8:0b:82:f3:ab:ed:
                    05:32:e0:fb:74:39:ab:4a:5d:65:74:b6:5e:5d:f0:
                    6a:99:f4:3d:fe:a9:f4:44:42:85:7d:22:33:b5:86:
                    89:ca:f1:d4:89:35:db:d4:0d:76:86:89:82:9a:b2:
                    4b:64:e8:9d:ad:56:da:a2:e2:07:50:8b:d8:de:be:
                    99:84:20:fd:e9:01:b5:04:21:93:3c:97:de:59:7f:
                    4b:fb:f0:e2:b7:6b:87:f1:ad:08:15:fd:a4:cb:e4:
                    ad:30:a6:49:69:43:23:c1:34:5d:8a:ae:67:b1:97:
                    d6:ab:a6:e9:ef:3e:0f:3d:7a:dd:b8:08:f3:8e:20:
                    9e:0a:42:8c:be:fc:2c:e9:24:6d:cc:35:5a:1f:7c:
                    52:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E1:39:E2:21:2F:75:8D:28:82:58:67:F0:54:60:D4:21:57:41:D1
            X509v3 Authority Key Identifier:
                keyid:81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:4c:8a:10:15:c8:18:96:07:df:5b:e4:8f:fa:58:62:c6:b2:
         2a:cf:e5:2f:f0:ee:d4:23:2c:b6:b3:6b:2a:e5:ac:51:11:49:
         aa:76:04:41:bf:76:c5:b4:2d:a0:40:71:83:c9:42:08:0a:02:
         5d:70:be:3d:ad:d0:03:cd:79:93:b3:cc:02:41:da:99:8e:72:
         f9:0c:3b:c0:cd:6f:b8:01:ed:e6:5d:9f:1e:9b:1d:d9:d7:3b:
         8b:f2:3d:0a:82:6c:f5:9d:b8:22:eb:ea:ce:d4:27:81:91:21:
         0d:39:c6:8e:f3:f7:35:42:ce:b1:c3:fa:f5:5e:ea:95:32:2b:
         e7:99:d4:ae:50:e1:98:3e:db:80:fd:d4:f1:69:ff:d8:3b:9e:
         ea:ac:69:13:11:5c:f1:a3:94:78:d2:21:a7:fe:1f:65:0c:05:
         54:9f:50:05:ea:00:88:fd:b2:22:3c:1a:f5:88:0e:75:9c:e2:
         94:67:67:f7:b8:6a:3e:50:70:fd:43:d9:ec:6d:d5:cc:6d:61:
         39:d9:01:62:a3:d9:95:c0:04:0d:42:dd:3f:00:0f:e8:31:53:
         35:dd:24:29:87:74:fa:22:90:04:37:74:bf:2c:d5:27:21:18:
         f2:01:9b:08:37:d8:b3:14:4c:cd:d9:b8:a7:a8:f4:4c:88:1c:
         46:f0:0b:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lymatqPPSOjaY58i+LC4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNmQyMjBiMmI1YTQ2ZmJlYjI3ZWYyZDk2OWZhMjFkZDMz
OGM1YjMwHhcNMjUwMTMxMDkwMDMzWhcNMjUwMjAxMDkwMDMzWjAzMTEwLwYDVQQD
Eyg2OGUxMzllMjIxMmY3NThkMjg4MjU4NjdmMDU0NjBkNDIxNTc0MWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN/njwaqkbZwmn1MK85CpxOG5tM7
PbJMR1E376/E1mSFZn1OoJBwzd02ZzbhXGwJ5kQDqVrVIygvwXGePGZSKQzjB6fB
d8kxb79olDqJoHWd5eLmNLjUE2xpC6luxMwallXiEbPSvzTja2mG3oDl6U/oC4Lz
q+0FMuD7dDmrSl1ldLZeXfBqmfQ9/qn0REKFfSIztYaJyvHUiTXb1A12homCmrJL
ZOidrVbaouIHUIvY3r6ZhCD96QG1BCGTPJfeWX9L+/Dit2uH8a0IFf2ky+StMKZJ
aUMjwTRdiq5nsZfWq6bp7z4PPXrduAjzjiCeCkKMvvws6SRtzDVaH3xS/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjhOeIhL3WNKIJYZ/BUYNQhV0HRMB8GA1UdIwQY
MBaAFIFtIgsrWkb76yfvLZafoh3TOMWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1cwaUN5dGFSdnZySi04dGxwLWlIZE00eGJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NzEzMTEtZjQ3Zi00NmRiLThjNTct
ZTk3ODIwNDFjYzI0LzEvZ1cwaUN5dGFSdnZySi04dGxwLWlIZE00eGJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC85NzEzMTEtZjQ3Zi00NmRiLThjNTctZTk3ODIwNDFjYzI0
LzEvZ1cwaUN5dGFSdnZySi04dGxwLWlIZE00eGJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACEyKEBXI
GJYH31vkj/pYYsayKs/lL/Du1CMstrNrKuWsURFJqnYEQb92xbQtoEBxg8lCCAoC
XXC+Pa3QA815k7PMAkHamY5y+Qw7wM1vuAHt5l2fHpsd2dc7i/I9CoJs9Z24Iuvq
ztQngZEhDTnGjvP3NULOscP69V7qlTIr55nUrlDhmD7bgP3U8Wn/2Due6qxpExFc
8aOUeNIhp/4fZQwFVJ9QBeoAiP2yIjwa9YgOdZzilGdn97hqPlBw/UPZ7G3VzG1h
OdkBYqPZlcAEDULdPwAP6DFTNd0kKYd0+iKQBDd0vyzVJyEY8gGbCDfYsxRMzdm4
p6j0TIgcRvALVA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:10 2025 by rpki-client on console-fra.rpki-client.org