Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
File:                     _CgqeUs_erTNb-tsX9az0lavxGE.mft (raw, json)
Hash identifier:          lvGEz1HcdCpW6NciznFDibn0+sDAvuLFX/QT73YTrcY=
Subject key identifier:   57:90:65:D2:BB:44:D4:E4:18:68:8B:86:24:4C:75:D0:5D:67:65:73
Authority key identifier: FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
Certificate issuer:       /CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Certificate serial:       0194BB602B5ECB2150775CDA0D2FB0CE6191
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
Manifest number:          1431
Signing time:             Fri 31 Jan 2025 08:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:29 +0000
Files and hashes:         1: 1I8OPnDk25KUaKP9KE9gSOqXVLI.roa (hash: 0yrI/7HXUwwqDrYf/yalYH7CLKdk023DF4KCFCOKOCc=)
                          2: _CgqeUs_erTNb-tsX9az0lavxGE.crl (hash: qQkTbxuSckr0LxwgkZNkMOAT+EuV9NCf1hSHrYwLVMY=)
                          3: hwW7rl4dydXPDWLAf8zsSWJhDvg.roa (hash: OrollrL3LXZ0GIs6mD9MqV/PdNZ2gHOaykUK12v4KKs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:60:2b:5e:cb:21:50:77:5c:da:0d:2f:b0:ce:61:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
        Validity
            Not Before: Jan 31 08:00:29 2025 GMT
            Not After : Feb  1 08:00:29 2025 GMT
        Subject: CN=579065d2bb44d4e418688b86244c75d05d676573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4c:ce:df:b4:36:a4:21:0b:eb:10:8b:db:d0:
                    f4:d8:65:ce:0a:d5:f3:5c:44:6f:90:ba:73:19:ca:
                    29:c5:7a:7d:81:88:50:c0:3c:2a:91:7a:94:bd:95:
                    72:de:64:f4:4f:a0:74:7d:ce:1d:a0:e2:e2:8f:a4:
                    49:76:a1:81:f0:55:ca:81:dd:6c:b3:47:61:8e:13:
                    e2:92:f4:aa:f3:2c:a4:e7:1d:c3:04:c9:c0:50:5d:
                    73:1a:b3:e6:9c:d5:75:e8:eb:7a:11:0c:ff:e6:41:
                    55:f4:bf:2a:de:23:75:d4:5b:41:02:24:4b:0b:06:
                    4d:62:22:c0:a0:93:69:1a:57:a6:33:d2:23:22:9f:
                    67:03:2d:67:9c:a2:e4:b4:c7:b5:a6:32:3e:d7:d3:
                    06:13:15:9a:80:0b:f1:11:01:a5:5f:cf:45:9a:92:
                    07:84:f5:5c:76:30:c9:03:4d:01:1d:9d:e2:03:73:
                    df:80:14:2a:7f:c8:96:a5:ae:d6:aa:fc:99:a2:f8:
                    11:f0:ff:b1:17:4f:58:19:00:aa:d2:89:ea:20:50:
                    34:11:91:74:ab:10:32:c4:55:15:48:99:07:1f:e4:
                    fa:c4:9f:a6:29:fd:54:e3:09:a6:ee:de:99:c0:9a:
                    a6:98:a0:28:1a:c0:ed:be:98:0b:75:ac:5e:59:02:
                    a3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:90:65:D2:BB:44:D4:E4:18:68:8B:86:24:4C:75:D0:5D:67:65:73
            X509v3 Authority Key Identifier:
                keyid:FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:f0:00:54:42:79:30:dc:e0:e6:06:5e:75:89:db:42:ed:80:
         fc:2b:96:1e:d3:04:ca:f8:25:b1:11:0f:bb:14:d6:68:70:47:
         56:a2:82:3c:e5:61:3f:13:c2:b0:a1:b9:c0:d4:2b:a1:12:39:
         b8:0e:10:51:ca:e1:a8:d0:8f:8a:ef:88:89:df:85:11:8b:39:
         ef:6d:56:44:1d:a7:2d:3f:e1:46:8c:72:3b:4b:8a:e0:a4:a2:
         d3:4e:35:a4:b7:78:4d:43:92:b3:e6:98:1d:09:7a:b0:02:8a:
         1e:c6:9f:8d:4c:95:08:fa:d0:c6:a9:f9:c7:73:54:d9:e4:67:
         27:83:01:22:5a:0e:f8:a0:13:05:7c:bd:90:b1:af:e0:b4:6a:
         2a:21:e0:dc:60:ea:2d:10:3f:17:27:03:50:d5:f0:a0:63:65:
         36:d4:1a:0c:d9:40:d4:42:45:71:98:70:ff:fc:9c:84:50:86:
         a4:29:8a:01:58:d3:b3:00:e0:0c:3c:ec:e5:48:d7:11:f0:31:
         2e:1c:56:73:ab:d8:33:36:2c:f9:47:bd:42:13:82:74:76:0f:
         4a:57:39:a1:37:f9:f6:a6:c5:99:12:3a:15:5a:6a:93:50:f6:
         63:03:2b:5f:ea:05:b8:e8:3a:2c:9b:8b:55:35:23:3f:ee:15:
         fa:28:c0:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7YCteyyFQd1zaDS+wzmGRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMjgyYTc5NGIzZjdhYjRjZDZmZWI2YzVmZDZiM2QyNTZh
ZmM0NjEwHhcNMjUwMTMxMDgwMDI5WhcNMjUwMjAxMDgwMDI5WjAzMTEwLwYDVQQD
Eyg1NzkwNjVkMmJiNDRkNGU0MTg2ODhiODYyNDRjNzVkMDVkNjc2NTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20zO37Q2pCEL6xCL29D02GXOCtXz
XERvkLpzGcopxXp9gYhQwDwqkXqUvZVy3mT0T6B0fc4doOLij6RJdqGB8FXKgd1s
s0dhjhPikvSq8yyk5x3DBMnAUF1zGrPmnNV16Ot6EQz/5kFV9L8q3iN11FtBAiRL
CwZNYiLAoJNpGlemM9IjIp9nAy1nnKLktMe1pjI+19MGExWagAvxEQGlX89FmpIH
hPVcdjDJA00BHZ3iA3PfgBQqf8iWpa7WqvyZovgR8P+xF09YGQCq0onqIFA0EZF0
qxAyxFUVSJkHH+T6xJ+mKf1U4wmm7t6ZwJqmmKAoGsDtvpgLdaxeWQKjbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFeQZdK7RNTkGGiLhiRMddBdZ2VzMB8GA1UdIwQY
MBaAFPwoKnlLP3q0zW/rbF/Ws9JWr8RhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0NncWVVc19lclROYi10c1g5YXowbGF2eEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lNDg1ZTEtYTY1Zi00M2Q0LWI1NzIt
ZDMzMjZjNTliY2QyLzEvX0NncWVVc19lclROYi10c1g5YXowbGF2eEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9lNDg1ZTEtYTY1Zi00M2Q0LWI1NzItZDMzMjZjNTliY2Qy
LzEvX0NncWVVc19lclROYi10c1g5YXowbGF2eEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPAAVEJ5
MNzg5gZedYnbQu2A/CuWHtMEyvglsREPuxTWaHBHVqKCPOVhPxPCsKG5wNQroRI5
uA4QUcrhqNCPiu+Iid+FEYs5721WRB2nLT/hRoxyO0uK4KSi0041pLd4TUOSs+aY
HQl6sAKKHsafjUyVCPrQxqn5x3NU2eRnJ4MBIloO+KATBXy9kLGv4LRqKiHg3GDq
LRA/FycDUNXwoGNlNtQaDNlA1EJFcZhw//ychFCGpCmKAVjTswDgDDzs5UjXEfAx
LhxWc6vYMzYs+Ue9QhOCdHYPSlc5oTf59qbFmRI6FVpqk1D2YwMrX+oFuOg6LJuL
VTUjP+4V+ijAkg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:43 2025 by rpki-client on console-fra.rpki-client.org