Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
File:                     tpQiR24a5eoNWOT4_fkfBfEC_vs.mft (raw, json)
Hash identifier:          t5RKISDsrZiqOU8NFZIk9W+MmONs/dsyYS7pcSF5hVs=
Subject key identifier:   AB:DF:3B:21:00:27:25:BF:BB:19:5B:2D:1D:35:96:25:10:16:21:0E
Authority key identifier: B6:94:22:47:6E:1A:E5:EA:0D:58:E4:F8:FD:F9:1F:05:F1:02:FE:FB
Certificate issuer:       /CN=b69422476e1ae5ea0d58e4f8fdf91f05f102fefb
Certificate serial:       0194C463C5117D5FA849D06A2778FC3DEB93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
Manifest number:          142B
Signing time:             Sun 02 Feb 2025 02:01:00 +0000
Manifest this update:     Sun 02 Feb 2025 02:01:00 +0000
Manifest next update:     Mon 03 Feb 2025 02:01:00 +0000
Files and hashes:         1: tpQiR24a5eoNWOT4_fkfBfEC_vs.crl (hash: +m/7YypoKeC/AY7bk75CldU0jNOf0DUbTS/W+VCoMKc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:63:c5:11:7d:5f:a8:49:d0:6a:27:78:fc:3d:eb:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b69422476e1ae5ea0d58e4f8fdf91f05f102fefb
        Validity
            Not Before: Feb  2 02:01:00 2025 GMT
            Not After : Feb  3 02:01:00 2025 GMT
        Subject: CN=abdf3b21002725bfbb195b2d1d3596251016210e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5f:eb:68:d6:02:c0:92:82:db:df:59:ab:fa:
                    41:6f:76:36:ca:4a:5b:14:dc:17:16:e3:85:6b:cd:
                    aa:90:e2:68:44:16:9a:7d:ad:d5:79:d5:86:a1:08:
                    a4:08:25:45:4e:96:83:35:fa:ad:61:de:3b:38:60:
                    3c:a3:25:cf:31:a0:ee:de:42:bc:1f:84:c0:40:9c:
                    55:fc:7c:bd:20:5c:d9:db:97:58:25:5c:84:78:cb:
                    d6:5b:14:af:c7:00:95:cb:03:b6:56:66:89:c2:46:
                    1f:c9:3d:51:0e:86:3f:b9:b1:20:67:95:fa:c4:5a:
                    1e:73:03:de:0c:88:66:d6:8a:3e:84:ee:5b:10:6d:
                    18:10:e2:5a:f8:39:fa:81:24:ad:45:9d:c7:8a:16:
                    5b:d7:77:2f:19:ce:a4:15:78:b1:0b:9e:fc:44:e1:
                    76:88:9e:ab:2b:78:c9:19:1b:53:d8:da:a9:a5:b1:
                    a6:5c:e1:dd:14:9b:0f:18:f4:8f:01:d8:2a:eb:f7:
                    70:33:f3:9f:60:8c:27:a5:d1:48:c0:81:54:32:97:
                    99:7b:ea:fe:78:24:71:27:01:e0:7c:6f:23:30:97:
                    52:3b:07:e2:0e:97:7a:26:13:01:1f:b2:44:9e:62:
                    2a:4a:d3:f1:ec:28:df:c9:ea:1e:20:54:11:af:9c:
                    bf:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DF:3B:21:00:27:25:BF:BB:19:5B:2D:1D:35:96:25:10:16:21:0E
            X509v3 Authority Key Identifier:
                keyid:B6:94:22:47:6E:1A:E5:EA:0D:58:E4:F8:FD:F9:1F:05:F1:02:FE:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:c1:8f:a5:67:ae:71:3f:3b:4e:86:79:18:61:bf:7c:94:8c:
         6a:5f:e3:65:3d:ee:8b:24:b8:a7:a9:1e:01:82:97:b3:8f:fb:
         e2:1d:ef:7d:b5:3a:d4:2a:08:98:0e:86:39:71:90:44:1a:10:
         5b:af:f9:50:e2:f2:73:3c:1a:28:20:c4:57:67:79:0b:fe:7f:
         1c:bd:e2:a3:b8:3e:78:5f:73:75:0b:3f:26:87:de:b2:ee:92:
         ba:aa:0f:d1:a7:19:05:0c:f9:90:8f:91:64:74:aa:df:cb:91:
         53:70:34:71:3e:f5:22:a4:d5:05:67:e4:4e:1d:83:d6:df:2b:
         55:a7:a0:78:98:70:2e:3d:23:f8:6c:2d:e8:7c:1d:af:b4:43:
         d6:de:7f:13:cc:95:62:bb:4e:4c:a7:25:7a:49:89:68:7a:44:
         25:da:96:ee:9e:68:ae:24:e2:88:60:a5:51:01:8c:56:98:51:
         fe:f0:38:07:8b:0b:af:05:4c:c1:ae:d9:de:48:a0:13:c7:ae:
         d8:e0:ee:fe:3c:5f:2d:5f:2a:c9:5d:01:e5:9f:5d:cb:a5:84:
         ad:f2:54:1a:5f:e1:0b:f0:da:a3:b3:b5:33:af:c5:ce:2c:e1:
         1f:f2:0d:2c:2f:97:df:d4:27:12:b5:e0:e0:6d:9c:61:cd:47:
         78:83:c8:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEY8URfV+oSdBqJ3j8PeuTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2OTQyMjQ3NmUxYWU1ZWEwZDU4ZTRmOGZkZjkxZjA1ZjEw
MmZlZmIwHhcNMjUwMjAyMDIwMTAwWhcNMjUwMjAzMDIwMTAwWjAzMTEwLwYDVQQD
EyhhYmRmM2IyMTAwMjcyNWJmYmIxOTViMmQxZDM1OTYyNTEwMTYyMTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF/raNYCwJKC299Zq/pBb3Y2ykpb
FNwXFuOFa82qkOJoRBaafa3VedWGoQikCCVFTpaDNfqtYd47OGA8oyXPMaDu3kK8
H4TAQJxV/Hy9IFzZ25dYJVyEeMvWWxSvxwCVywO2VmaJwkYfyT1RDoY/ubEgZ5X6
xFoecwPeDIhm1oo+hO5bEG0YEOJa+Dn6gSStRZ3HihZb13cvGc6kFXixC578ROF2
iJ6rK3jJGRtT2NqppbGmXOHdFJsPGPSPAdgq6/dwM/OfYIwnpdFIwIFUMpeZe+r+
eCRxJwHgfG8jMJdSOwfiDpd6JhMBH7JEnmIqStPx7CjfyeoeIFQRr5y/rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvfOyEAJyW/uxlbLR01liUQFiEOMB8GA1UdIwQY
MBaAFLaUIkduGuXqDVjk+P35HwXxAv77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHBRaVIyNGE1ZW9OV09UNF9ma2ZCZkVDX3ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lNDlhZmUtMTVhZS00ODVhLWFmNzYt
NjY1MTZmZmNlNzUwLzEvdHBRaVIyNGE1ZW9OV09UNF9ma2ZCZkVDX3ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lNDlhZmUtMTVhZS00ODVhLWFmNzYtNjY1MTZmZmNlNzUw
LzEvdHBRaVIyNGE1ZW9OV09UNF9ma2ZCZkVDX3ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo8GPpWeu
cT87ToZ5GGG/fJSMal/jZT3uiyS4p6keAYKXs4/74h3vfbU61CoImA6GOXGQRBoQ
W6/5UOLyczwaKCDEV2d5C/5/HL3io7g+eF9zdQs/Jofesu6SuqoP0acZBQz5kI+R
ZHSq38uRU3A0cT71IqTVBWfkTh2D1t8rVaegeJhwLj0j+Gwt6Hwdr7RD1t5/E8yV
YrtOTKclekmJaHpEJdqW7p5oriTiiGClUQGMVphR/vA4B4sLrwVMwa7Z3kigE8eu
2ODu/jxfLV8qyV0B5Z9dy6WErfJUGl/hC/Dao7O1M6/FzizhH/INLC+X39QnErXg
4G2cYc1HeIPIWg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:03:06 2025 by rpki-client