Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft
File:                     _VnTVh_4rdtfGww2o90laLdMpRU.mft (raw, json)
Hash identifier:          6HXe2TMAiQCL1/9qydk1zQqGcEkfSswBC/YtzLwyBuI=
Subject key identifier:   02:54:96:62:7B:B0:11:51:65:CD:73:2E:91:C4:1B:B8:96:0B:95:F5
Authority key identifier: FD:59:D3:56:1F:F8:AD:DB:5F:1B:0C:36:A3:DD:25:68:B7:4C:A5:15
Certificate issuer:       /CN=fd59d3561ff8addb5f1b0c36a3dd2568b74ca515
Certificate serial:       0195116B9A56218F3F9D51A4D11A6DE07129
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_VnTVh_4rdtfGww2o90laLdMpRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft
Manifest number:          0939
Signing time:             Mon 17 Feb 2025 01:00:19 +0000
Manifest this update:     Mon 17 Feb 2025 01:00:19 +0000
Manifest next update:     Tue 18 Feb 2025 01:00:19 +0000
Files and hashes:         1: _VnTVh_4rdtfGww2o90laLdMpRU.crl (hash: E1ET89I+cCQZhq/7SJHpMfgWPHjVrOnRlvjVmSYEefk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_VnTVh_4rdtfGww2o90laLdMpRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:6b:9a:56:21:8f:3f:9d:51:a4:d1:1a:6d:e0:71:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd59d3561ff8addb5f1b0c36a3dd2568b74ca515
        Validity
            Not Before: Feb 17 01:00:19 2025 GMT
            Not After : Feb 18 01:00:19 2025 GMT
        Subject: CN=025496627bb0115165cd732e91c41bb8960b95f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:da:ff:bc:2c:ae:7c:0e:6d:a8:a0:5a:cd:b2:
                    fd:c4:d7:fd:af:0c:1e:c2:ea:d9:76:b6:c9:bc:ac:
                    de:a3:40:fb:bc:2c:e5:57:26:93:e7:11:78:f7:f7:
                    3c:cf:af:ce:78:49:10:39:6b:30:72:cf:07:8e:ae:
                    6d:d6:72:19:17:46:36:65:bf:7f:8f:de:dd:f9:6b:
                    bb:a7:c6:ef:17:0d:3d:b1:fb:98:d1:42:4b:bf:d1:
                    a4:2c:69:44:a0:c4:23:d2:10:31:4d:a5:2e:82:1b:
                    ed:fb:3c:e8:90:b0:55:c1:52:d2:56:87:e5:1f:fa:
                    14:5b:9f:b7:eb:05:31:fd:19:34:90:a8:49:c3:c1:
                    49:30:fc:7a:66:f5:59:55:d5:da:3d:b8:77:11:75:
                    77:f2:1b:27:c7:ba:88:88:d4:4c:ee:1a:a4:74:a5:
                    61:dd:1c:81:9e:58:13:ba:ae:5e:ed:cb:ac:3c:45:
                    e7:e0:c3:26:c3:fc:c7:df:60:fd:c3:e7:70:ba:38:
                    c6:08:93:c8:94:35:34:b2:a0:7e:74:97:f5:77:a1:
                    d9:63:31:7c:33:b6:46:22:5d:82:17:15:cc:94:b9:
                    65:9a:58:f0:46:95:51:23:50:28:25:06:57:bd:13:
                    d4:e9:b1:1a:05:77:55:d5:f4:42:28:ea:bd:04:5b:
                    17:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:54:96:62:7B:B0:11:51:65:CD:73:2E:91:C4:1B:B8:96:0B:95:F5
            X509v3 Authority Key Identifier:
                keyid:FD:59:D3:56:1F:F8:AD:DB:5F:1B:0C:36:A3:DD:25:68:B7:4C:A5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VnTVh_4rdtfGww2o90laLdMpRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:43:ec:57:2a:09:0a:c4:94:94:d5:1b:50:de:76:29:7f:b9:
         d9:31:57:84:0e:22:86:64:1c:fc:8f:88:78:1c:4f:ef:1d:a7:
         3c:06:fe:b9:29:ab:0d:54:d1:6e:09:cc:1b:92:b0:cf:a4:8f:
         4e:79:4b:24:f5:fe:f3:21:11:c2:97:13:eb:c4:eb:04:c1:d0:
         a2:0c:fb:71:63:3b:5c:b4:25:6a:54:2f:5d:1b:88:e0:4f:bb:
         bf:d1:65:e4:57:c7:76:3e:31:31:f6:6a:c3:30:7b:dd:69:39:
         f5:c9:09:a3:f3:2e:ff:b7:17:0b:87:bf:b0:72:aa:a4:b5:62:
         3c:53:1d:74:37:db:8f:41:73:77:ca:6b:e0:e8:48:b3:f8:8b:
         5b:6d:b8:1d:7e:7d:7a:e6:a6:c3:62:12:ee:ba:1c:a8:c0:c8:
         4c:7d:21:33:da:bc:18:e0:62:86:36:06:95:64:96:6b:66:1a:
         9e:94:55:11:e9:b2:52:3e:4f:29:34:7f:35:24:da:a4:7b:2c:
         8d:be:4c:dc:1c:b2:50:a0:4c:45:62:83:08:ef:f2:e4:56:78:
         ab:ac:6d:d9:dc:e1:76:04:86:94:60:89:51:f6:24:ef:68:41:
         fd:c2:c6:de:05:5d:a1:f1:03:c8:e6:9e:dc:08:1c:47:32:0e:
         01:58:d3:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURa5pWIY8/nVGk0Rpt4HEpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkNTlkMzU2MWZmOGFkZGI1ZjFiMGMzNmEzZGQyNTY4Yjc0
Y2E1MTUwHhcNMjUwMjE3MDEwMDE5WhcNMjUwMjE4MDEwMDE5WjAzMTEwLwYDVQQD
EygwMjU0OTY2MjdiYjAxMTUxNjVjZDczMmU5MWM0MWJiODk2MGI5NWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktr/vCyufA5tqKBazbL9xNf9rwwe
wurZdrbJvKzeo0D7vCzlVyaT5xF49/c8z6/OeEkQOWswcs8Hjq5t1nIZF0Y2Zb9/
j97d+Wu7p8bvFw09sfuY0UJLv9GkLGlEoMQj0hAxTaUughvt+zzokLBVwVLSVofl
H/oUW5+36wUx/Rk0kKhJw8FJMPx6ZvVZVdXaPbh3EXV38hsnx7qIiNRM7hqkdKVh
3RyBnlgTuq5e7cusPEXn4MMmw/zH32D9w+dwujjGCJPIlDU0sqB+dJf1d6HZYzF8
M7ZGIl2CFxXMlLllmljwRpVRI1AoJQZXvRPU6bEaBXdV1fRCKOq9BFsXFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJUlmJ7sBFRZc1zLpHEG7iWC5X1MB8GA1UdIwQY
MBaAFP1Z01Yf+K3bXxsMNqPdJWi3TKUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1ZuVFZoXzRyZHRmR3d3Mm85MGxhTGRNcFJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9hZjJiMzYtNmU4Yi00NjAxLWIwNzQt
ZDYxMmEyMWViZWFlLzEvX1ZuVFZoXzRyZHRmR3d3Mm85MGxhTGRNcFJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9hZjJiMzYtNmU4Yi00NjAxLWIwNzQtZDYxMmEyMWViZWFl
LzEvX1ZuVFZoXzRyZHRmR3d3Mm85MGxhTGRNcFJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPEPsVyoJ
CsSUlNUbUN52KX+52TFXhA4ihmQc/I+IeBxP7x2nPAb+uSmrDVTRbgnMG5Kwz6SP
TnlLJPX+8yERwpcT68TrBMHQogz7cWM7XLQlalQvXRuI4E+7v9Fl5FfHdj4xMfZq
wzB73Wk59ckJo/Mu/7cXC4e/sHKqpLViPFMddDfbj0Fzd8pr4OhIs/iLW224HX59
euamw2IS7rocqMDITH0hM9q8GOBihjYGlWSWa2YanpRVEemyUj5PKTR/NSTapHss
jb5M3ByyUKBMRWKDCO/y5FZ4q6xt2dzhdgSGlGCJUfYk72hB/cLG3gVdofEDyOae
3AgcRzIOAVjTQA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:43 2025 by rpki-client