Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft
File:                     D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft (raw, json)
Hash identifier:          TUye4RldTXVqs4E4rQ6fivcD3qCZhW60OIae/ijNJzg=
Subject key identifier:   C4:44:3A:CD:5F:04:7D:B4:D0:1E:5D:AB:E6:DC:20:44:50:96:DF:D7
Authority key identifier: D2:DD:07:86:10:AA:EC:47:B5:40:3F:29:7F:92:08:B7:A5:8F:B3:3A
Certificate issuer:       /CN=d2dd078610aaec47b5403f297f9208b7a58fb33a
Certificate serial:       518C7FB76FE1A2CB64F21F6D5B1FC361E6D3D5A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft
Manifest number:          01C6
Signing time:             Wed 16 Apr 2025 04:29:06 +0000
Manifest this update:     Wed 16 Apr 2025 04:24:06 +0000
Manifest next update:     Thu 17 Apr 2025 07:02:06 +0000
Files and hashes:         1: D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl (hash: jnnlA+ovkHJiSJc444eqwiQz2acJChsfJxacfbzrlYA=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 07:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:8c:7f:b7:6f:e1:a2:cb:64:f2:1f:6d:5b:1f:c3:61:e6:d3:d5:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2dd078610aaec47b5403f297f9208b7a58fb33a
        Validity
            Not Before: Apr 16 04:24:06 2025 GMT
            Not After : Apr 17 07:02:06 2025 GMT
        Subject: CN=C4443ACD5F047DB4D01E5DABE6DC20445096DFD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:12:51:c7:89:e1:73:f3:66:40:5e:34:cf:f4:
                    30:51:64:a8:12:be:ac:99:8d:75:c2:0d:3a:4e:ab:
                    9f:3f:f6:09:83:fe:8d:2d:7e:36:ee:7d:0d:53:c3:
                    06:18:7e:e6:bf:ee:58:ba:f2:d8:a8:4d:2c:83:de:
                    5d:f1:2b:35:5d:b2:6a:e6:fb:90:4b:31:b9:44:43:
                    4e:8d:69:10:a6:b1:a2:71:a9:21:bd:bc:21:f9:1a:
                    c2:ed:58:5d:b9:5b:05:ab:22:48:9d:2c:4f:66:4c:
                    c9:7a:d4:3a:34:f2:ce:51:91:f3:e5:ce:78:d1:ef:
                    dc:79:9f:f5:19:ef:1d:ca:ee:aa:41:58:92:05:0f:
                    8a:44:4f:88:08:59:55:08:64:11:d3:53:ec:4f:f1:
                    9f:21:98:62:d9:6a:bd:46:10:4e:d5:c1:05:f6:b0:
                    f0:be:29:0e:bb:9d:fb:80:9a:55:aa:0f:6f:10:82:
                    15:6d:3b:1f:4c:ec:20:e5:2e:f5:e9:57:23:8b:eb:
                    80:89:40:3c:d0:34:f0:37:cd:e7:27:2f:84:d2:9f:
                    df:61:bb:97:6f:f1:3d:e4:77:d2:7c:a0:4a:f1:1a:
                    12:84:4a:d2:c7:67:00:0d:2e:da:88:0a:d9:81:79:
                    0f:88:b2:68:b3:cb:02:9a:1e:72:eb:10:f4:79:ee:
                    37:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:44:3A:CD:5F:04:7D:B4:D0:1E:5D:AB:E6:DC:20:44:50:96:DF:D7
            X509v3 Authority Key Identifier:
                keyid:D2:DD:07:86:10:AA:EC:47:B5:40:3F:29:7F:92:08:B7:A5:8F:B3:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:65:09:ec:89:7f:61:2f:15:5d:b5:08:a5:b3:1b:57:83:af:
         26:d5:ea:eb:77:2c:a5:df:a2:6a:c1:8b:d8:c2:db:13:52:76:
         34:dd:d7:a3:68:dc:00:4a:8e:6c:e8:ca:8a:4a:b0:f3:23:e5:
         f8:4e:14:5f:fc:8a:2b:44:ef:80:eb:1a:e5:f7:60:10:07:d1:
         8c:bf:82:b2:02:db:80:70:4b:d3:56:e7:4e:2a:83:75:f6:bd:
         7a:a0:d3:85:57:25:34:86:c7:76:79:a3:87:41:c3:72:02:15:
         a3:2b:11:f1:78:66:17:54:ea:f5:37:93:d2:0a:50:82:14:cb:
         fe:20:d4:b0:8b:bc:1f:75:97:3c:90:de:f3:46:61:5a:7d:13:
         fc:16:a3:d0:5f:9d:b5:70:a4:cc:23:82:3a:3d:0d:2a:d3:a6:
         76:ff:2a:3f:6e:87:5c:ef:4e:b0:a8:db:fa:b3:1d:47:f4:e8:
         58:d0:b5:0f:ab:b1:04:e7:47:3a:c4:98:7a:e5:8a:b7:81:61:
         e4:10:41:01:42:c2:0f:7d:76:8c:fd:ad:7d:14:69:6b:26:22:
         0b:9d:dd:cb:93:44:cb:33:bf:f7:d9:24:78:ce:30:73:cf:78:
         0c:ae:c4:a4:3a:d1:c5:d5:a6:eb:99:fe:f2:7c:15:52:c7:32:
         70:ab:ff:37
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUUYx/t2/hostk8h9tWx/DYebT1aYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDJkZDA3ODYxMGFhZWM0N2I1NDAzZjI5N2Y5MjA4Yjdh
NThmYjMzYTAeFw0yNTA0MTYwNDI0MDZaFw0yNTA0MTcwNzAyMDZaMDMxMTAvBgNV
BAMTKEM0NDQzQUNENUYwNDdEQjREMDFFNURBQkU2REMyMDQ0NTA5NkRGRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUElHHieFz82ZAXjTP9DBRZKgS
vqyZjXXCDTpOq58/9gmD/o0tfjbufQ1TwwYYfua/7li68tioTSyD3l3xKzVdsmrm
+5BLMblEQ06NaRCmsaJxqSG9vCH5GsLtWF25WwWrIkidLE9mTMl61Do08s5RkfPl
znjR79x5n/UZ7x3K7qpBWJIFD4pET4gIWVUIZBHTU+xP8Z8hmGLZar1GEE7VwQX2
sPC+KQ67nfuAmlWqD28QghVtOx9M7CDlLvXpVyOL64CJQDzQNPA3zecnL4TSn99h
u5dv8T3kd9J8oErxGhKEStLHZwANLtqICtmBeQ+IsmizywKaHnLrEPR57jcvAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUxEQ6zV8EfbTQHl2r5twgRFCW39cwHwYDVR0j
BBgwFoAU0t0HhhCq7Ee1QD8pf5IIt6WPszowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4YmFhNTc5YzAxOGNkY2YyYzgzNTRiNTIvMS9EMkREMDc4NjEw
QUFFQzQ3QjU0MDNGMjk3RjkyMDhCN0E1OEZCMzNBLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMHQwSGhoQ3E3RWUxUUQ4cGY1SUl0NldQc3pvLmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4YmFhNTc5YzAxOGNkY2YyYzgzNTRiNTIv
MS9EMkREMDc4NjEwQUFFQzQ3QjU0MDNGMjk3RjkyMDhCN0E1OEZCMzNBLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAGmUJ7Il/YS8VXbUIpbMbV4OvJtXq63cspd+iasGL2MLbE1J2NN3Xo2jc
AEqObOjKikqw8yPl+E4UX/yKK0TvgOsa5fdgEAfRjL+CsgLbgHBL01bnTiqDdfa9
eqDThVclNIbHdnmjh0HDcgIVoysR8XhmF1Tq9TeT0gpQghTL/iDUsIu8H3WXPJDe
80ZhWn0T/Baj0F+dtXCkzCOCOj0NKtOmdv8qP26HXO9OsKjb+rMdR/ToWNC1D6ux
BOdHOsSYeuWKt4Fh5BBBAULCD312jP2tfRRpayYiC53dy5NEyzO/99kkeM4wc894
DK7EpDrRxdWm65n+8nwVUscycKv/Nw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 17:41:33 2025 by rpki-client