Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft
File:                     SwzK47EZgtZx464payKbCvw1mwc.mft (raw, json)
Hash identifier:          a7P35lxExgoy/wXetGjF29+I+EMI2nFnRqbCIlpbV4U=
Subject key identifier:   F4:DA:19:6C:CB:37:20:20:7A:90:E5:4D:2A:2F:9E:C8:D0:8D:9B:7F
Authority key identifier: 4B:0C:CA:E3:B1:19:82:D6:71:E3:AE:29:6B:22:9B:0A:FC:35:9B:07
Certificate issuer:       /CN=4b0ccae3b11982d671e3ae296b229b0afc359b07
Certificate serial:       0194C4D15F77923C992D46FF7A2CCC32F992
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SwzK47EZgtZx464payKbCvw1mwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft
Manifest number:          0E27
Signing time:             Sun 02 Feb 2025 04:00:43 +0000
Manifest this update:     Sun 02 Feb 2025 04:00:43 +0000
Manifest next update:     Mon 03 Feb 2025 04:00:43 +0000
Files and hashes:         1: SwzK47EZgtZx464payKbCvw1mwc.crl (hash: PBZYKMEdHWyDvd+Q/WuWRyHkoXUYy0jnKQgjx0URxW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SwzK47EZgtZx464payKbCvw1mwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:d1:5f:77:92:3c:99:2d:46:ff:7a:2c:cc:32:f9:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0ccae3b11982d671e3ae296b229b0afc359b07
        Validity
            Not Before: Feb  2 04:00:43 2025 GMT
            Not After : Feb  3 04:00:43 2025 GMT
        Subject: CN=f4da196ccb3720207a90e54d2a2f9ec8d08d9b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d1:67:7e:d6:9f:61:73:50:10:ea:26:3f:fb:
                    a1:9a:11:08:a0:44:6f:fd:51:a2:6c:63:b7:8c:4b:
                    a1:e2:c8:2c:2e:68:dd:07:2b:20:02:9b:10:5a:e4:
                    7c:84:a1:20:55:54:7d:02:11:2f:c8:9e:99:a0:bb:
                    3c:8f:9d:25:62:d2:e7:e9:6c:e2:4e:77:0a:6b:5f:
                    3b:3a:ff:d2:ed:0d:80:81:71:a5:7c:28:8a:51:50:
                    37:08:f0:4c:62:83:0d:0b:77:0c:38:5c:d6:11:75:
                    ef:4f:a3:8e:e5:19:bf:65:9d:a5:fb:f7:ea:81:d8:
                    5f:d9:97:5c:38:e7:f9:93:fb:98:70:31:9e:4f:09:
                    b2:63:11:a8:88:91:50:3e:41:41:da:4d:a3:41:fd:
                    3a:e6:a0:d2:d0:ff:7f:f1:d7:3b:52:e5:54:ea:3b:
                    43:5f:be:f9:44:a4:b6:62:1a:60:f8:69:95:4e:0c:
                    23:f1:5f:e5:9d:3f:93:0b:b2:4b:06:99:00:ae:14:
                    6b:2c:28:5f:b7:60:52:7e:5c:1b:1a:09:e6:94:fc:
                    53:6e:cd:d6:6c:83:94:bb:d3:e4:bd:86:2d:38:44:
                    cf:70:a6:21:dd:20:81:ec:08:54:30:cd:bb:89:ed:
                    a3:34:eb:b1:60:34:cb:dc:93:85:b2:f4:01:ae:ef:
                    94:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DA:19:6C:CB:37:20:20:7A:90:E5:4D:2A:2F:9E:C8:D0:8D:9B:7F
            X509v3 Authority Key Identifier:
                keyid:4B:0C:CA:E3:B1:19:82:D6:71:E3:AE:29:6B:22:9B:0A:FC:35:9B:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwzK47EZgtZx464payKbCvw1mwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f666de-77b5-4480-9242-b254b994dcdc/1/SwzK47EZgtZx464payKbCvw1mwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:40:94:0c:3e:2e:ee:93:af:bd:9c:ca:c1:d1:06:22:fa:f4:
         66:fd:02:67:94:0c:67:51:94:7e:bb:c1:19:f9:8f:ba:62:97:
         b9:01:9b:24:0c:d4:87:dd:50:a6:af:57:5e:c7:89:63:c8:cf:
         d5:5b:ef:c4:12:7b:9e:04:39:12:49:2b:4a:52:1d:49:8f:24:
         e3:54:b3:7c:79:69:17:d1:87:22:9e:4e:d0:41:37:66:74:63:
         a4:98:66:31:a6:d4:f9:64:6b:12:ae:d1:8a:09:b3:54:af:73:
         43:c6:cf:46:aa:45:8b:f1:a8:44:c2:99:2b:6c:3f:73:74:85:
         14:9f:26:b0:7e:d8:3f:5e:64:f2:10:ba:d6:31:5f:2d:95:e5:
         57:93:f5:9c:5b:44:63:25:66:a7:c3:ce:18:e5:0a:c5:9e:49:
         2f:1b:6b:7e:04:33:85:b1:1e:27:ed:47:d3:ef:cd:51:4d:7f:
         18:1b:9f:29:86:35:f7:5a:f9:f7:12:b2:fe:2b:cd:21:a1:fa:
         06:43:58:3c:f9:60:b3:44:3b:b0:53:ff:60:62:8a:7e:86:8c:
         56:7f:7d:6f:5f:f8:05:c1:24:2b:99:ab:66:22:f4:f2:d0:b2:
         45:a1:52:d1:5c:bf:08:48:02:b2:70:95:b9:9b:d2:5b:1c:99:
         2d:31:54:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:55:26 2025 by rpki-client