Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
File:                     0CDxCDLEm61vFalgWMW6GFcqxSo.mft (raw, json)
Hash identifier:          GSAygFvRxsUAlQYHBbGWkJ1COtOpfOSRyDAjcCRHicY=
Subject key identifier:   EE:3E:FA:29:9F:97:08:F4:1F:3C:35:53:D8:B3:5E:8C:C2:A3:32:B7
Authority key identifier: D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
Certificate issuer:       /CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Certificate serial:       0194BABB6C0500D245DECFFF1F8D14B94A94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
Manifest number:          0782
Signing time:             Fri 31 Jan 2025 05:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:32 +0000
Files and hashes:         1: 0CDxCDLEm61vFalgWMW6GFcqxSo.crl (hash: Qd4V3GLtN/MTZZ9CEay0aNy63nPcTIP00RCxi7t2enc=)
                          2: 8LyQu6M29k1339l_CEp2NXxrXCM.roa (hash: sefzNsDqr2VAFaOlXDNefpIYjAbww43X8pxj4t3RtgQ=)
                          3: TNuoVQLMoCvPw9pqbv1lB1R6WTo.roa (hash: lpAiG+1V0l8l8KBHMEE2mx4+9kmKvUMXZxyrbPf7z7g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:6c:05:00:d2:45:de:cf:ff:1f:8d:14:b9:4a:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d020f10832c49bad6f15a96058c5ba18572ac52a
        Validity
            Not Before: Jan 31 05:00:32 2025 GMT
            Not After : Feb  1 05:00:32 2025 GMT
        Subject: CN=ee3efa299f9708f41f3c3553d8b35e8cc2a332b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c5:64:e5:23:ab:2e:ad:ca:0b:b3:ad:61:18:
                    ca:29:92:e8:e4:0b:27:25:48:8f:00:03:f4:6d:8e:
                    b9:e9:14:04:51:c6:3d:05:f8:aa:f7:b1:df:b6:d3:
                    96:b3:71:e0:69:fb:79:de:4a:90:84:76:a4:7f:9b:
                    07:20:e4:8f:d4:83:67:83:6a:87:64:c5:a7:c7:dc:
                    67:26:b8:3d:54:33:89:57:a6:5c:44:04:81:7a:13:
                    ca:6d:ff:65:70:74:f8:2c:be:c3:46:49:5d:10:f3:
                    eb:42:1d:45:f8:45:b7:60:9e:50:98:94:9a:1e:27:
                    d7:72:2e:f7:c0:c7:d8:a6:8c:8c:db:94:af:62:e1:
                    88:b6:22:8c:ea:a9:ab:3d:5c:8c:19:72:6b:7f:c8:
                    63:a5:05:87:2d:85:32:83:69:54:cf:63:4d:bd:9e:
                    1f:d4:23:20:f1:3a:f5:19:94:a1:8e:fb:de:d8:b4:
                    0d:58:21:36:b4:7b:df:8e:2f:e3:58:a2:d3:c7:97:
                    82:b6:85:a2:08:72:c4:53:81:0d:02:dc:4f:16:4a:
                    d2:d2:7a:61:7d:7e:ff:2d:d5:2f:41:cc:7f:22:b2:
                    8e:93:1d:f3:c7:b3:7e:fc:0d:d7:4c:76:af:03:77:
                    3f:63:af:a8:a2:40:2f:92:79:d5:cb:0c:39:42:5f:
                    d7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3E:FA:29:9F:97:08:F4:1F:3C:35:53:D8:B3:5E:8C:C2:A3:32:B7
            X509v3 Authority Key Identifier:
                keyid:D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:09:08:23:0a:6b:96:fe:e7:fc:0d:89:ab:c9:fa:9c:34:f4:
         0e:5b:78:6c:47:22:cf:f0:ce:24:dc:be:60:08:ca:a3:fc:07:
         85:ad:b8:1a:25:13:ed:59:9a:b8:40:b3:c4:03:c6:9f:aa:91:
         e8:4f:42:db:ad:a3:8c:9a:fb:92:e0:ac:b2:ef:b0:be:7f:70:
         0f:f4:1b:ff:d7:56:82:e4:6f:cd:4d:44:f4:2e:9f:30:05:db:
         35:ac:bb:77:ca:f0:40:ac:1e:b6:c5:15:ed:a8:36:8b:8d:6b:
         cf:61:10:ad:23:ae:fb:56:07:84:32:36:db:9d:75:de:f9:55:
         c9:78:b5:4b:81:86:1c:c4:21:c5:a8:cd:30:42:b7:b7:49:de:
         f1:b6:0d:ff:1c:26:75:0e:28:d4:24:5f:a7:73:8a:42:57:18:
         46:35:57:72:c5:b6:39:80:7a:31:65:43:40:e2:83:23:01:92:
         b7:60:a6:44:94:e6:39:e3:a1:61:a9:77:5e:a8:c7:84:66:10:
         d5:6a:75:dc:f8:c8:9b:f2:02:97:e8:f7:2f:bc:83:c0:f2:e6:
         0e:6b:31:e9:3b:4d:72:55:cd:14:ec:a0:63:99:ae:35:ee:af:
         72:bf:6b:25:84:9c:02:80:11:b3:e3:c7:b8:ab:01:89:3f:8d:
         7f:10:42:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u2wFANJF3s//H40UuUqUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMjBmMTA4MzJjNDliYWQ2ZjE1YTk2MDU4YzViYTE4NTcy
YWM1MmEwHhcNMjUwMTMxMDUwMDMyWhcNMjUwMjAxMDUwMDMyWjAzMTEwLwYDVQQD
EyhlZTNlZmEyOTlmOTcwOGY0MWYzYzM1NTNkOGIzNWU4Y2MyYTMzMmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8Vk5SOrLq3KC7OtYRjKKZLo5Asn
JUiPAAP0bY656RQEUcY9Bfiq97HfttOWs3Hgaft53kqQhHakf5sHIOSP1INng2qH
ZMWnx9xnJrg9VDOJV6ZcRASBehPKbf9lcHT4LL7DRkldEPPrQh1F+EW3YJ5QmJSa
HifXci73wMfYpoyM25SvYuGItiKM6qmrPVyMGXJrf8hjpQWHLYUyg2lUz2NNvZ4f
1CMg8Tr1GZShjvve2LQNWCE2tHvfji/jWKLTx5eCtoWiCHLEU4ENAtxPFkrS0nph
fX7/LdUvQcx/IrKOkx3zx7N+/A3XTHavA3c/Y6+ookAvknnVyww5Ql/XMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4++imflwj0Hzw1U9izXozCozK3MB8GA1UdIwQY
MBaAFNAg8QgyxJutbxWpYFjFuhhXKsUqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMENEeENETEVtNjF2RmFsZ1dNVzZHRmNxeFNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8yYzExYzEtNDI1MC00Mzg3LWE0ZGIt
MjcwMWQ1OTFkZWFlLzEvMENEeENETEVtNjF2RmFsZ1dNVzZHRmNxeFNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8yYzExYzEtNDI1MC00Mzg3LWE0ZGItMjcwMWQ1OTFkZWFl
LzEvMENEeENETEVtNjF2RmFsZ1dNVzZHRmNxeFNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAkIIwpr
lv7n/A2Jq8n6nDT0Dlt4bEciz/DOJNy+YAjKo/wHha24GiUT7VmauECzxAPGn6qR
6E9C262jjJr7kuCssu+wvn9wD/Qb/9dWguRvzU1E9C6fMAXbNay7d8rwQKwetsUV
7ag2i41rz2EQrSOu+1YHhDI225113vlVyXi1S4GGHMQhxajNMEK3t0ne8bYN/xwm
dQ4o1CRfp3OKQlcYRjVXcsW2OYB6MWVDQOKDIwGSt2CmRJTmOeOhYal3XqjHhGYQ
1Wp13PjIm/ICl+j3L7yDwPLmDmsx6TtNclXNFOygY5muNe6vcr9rJYScAoARs+PH
uKsBiT+NfxBCng==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:33 2025 by rpki-client on console-fra.rpki-client.org