Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft
File:                     SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft (raw, json)
Hash identifier:          ZtW7evIibfsDLKsM30hdY18ztMJz5dKIvT6WTknUkhQ=
Subject key identifier:   92:A7:EF:07:8D:DB:53:F5:76:14:C8:9C:9B:D3:4C:7B:43:52:83:EB
Authority key identifier: 48:94:9D:3C:87:35:03:DB:D2:96:BD:A6:0E:B7:77:BC:54:1D:51:4E
Certificate issuer:       /CN=48949d3c873503dbd296bda60eb777bc541d514e
Certificate serial:       019512471D958CF0B62788E72CBF727C4E79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SJSdPIc1A9vSlr2mDrd3vFQdUU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft
Manifest number:          0212
Signing time:             Mon 17 Feb 2025 05:00:05 +0000
Manifest this update:     Mon 17 Feb 2025 05:00:05 +0000
Manifest next update:     Tue 18 Feb 2025 05:00:05 +0000
Files and hashes:         1: SJSdPIc1A9vSlr2mDrd3vFQdUU4.crl (hash: aCwcmpK2osY3TfgT/P9vHhJzTNVjiAvGl2nD01lGqFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SJSdPIc1A9vSlr2mDrd3vFQdUU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:47:1d:95:8c:f0:b6:27:88:e7:2c:bf:72:7c:4e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48949d3c873503dbd296bda60eb777bc541d514e
        Validity
            Not Before: Feb 17 05:00:05 2025 GMT
            Not After : Feb 18 05:00:05 2025 GMT
        Subject: CN=92a7ef078ddb53f57614c89c9bd34c7b435283eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:68:47:cc:fd:4a:a7:17:63:6c:5f:e7:26:81:
                    b4:c2:f8:1f:93:02:25:e4:b9:a6:36:19:ee:87:e4:
                    c8:ef:2c:1b:83:ef:86:8e:24:dc:9c:76:90:35:9d:
                    cd:e2:93:b4:8a:b9:77:91:aa:65:a5:5b:74:28:05:
                    65:e0:0e:81:23:99:76:e0:f8:fa:3e:fb:25:8c:f9:
                    78:07:a1:91:8c:94:e4:01:f1:80:d5:f7:46:6b:2d:
                    10:1f:a0:45:92:99:51:90:22:00:fd:63:92:68:1d:
                    23:32:f7:73:21:44:5a:d4:ab:02:29:2e:6b:9e:fd:
                    f0:be:10:71:b6:fc:dd:be:8f:76:3c:e9:bc:a6:1d:
                    45:37:04:90:52:3e:68:84:ae:6f:87:5a:d3:d1:e5:
                    81:11:3d:7b:ea:21:db:5d:80:41:1d:cf:98:9a:96:
                    7c:39:d8:d0:c4:59:46:7a:8e:f8:41:0d:fb:e7:10:
                    dd:17:a8:32:fe:93:9a:ca:5b:a8:3a:38:41:05:fb:
                    ad:dc:68:b8:38:b7:48:38:0d:d9:2b:ae:36:2a:6f:
                    5b:3f:ef:fb:02:81:0a:47:b6:ad:fa:64:75:38:a2:
                    e7:4b:36:67:5f:fa:c2:04:62:fc:96:eb:d0:93:40:
                    14:19:cf:fc:3e:23:9c:f9:1a:87:f5:fd:c2:61:91:
                    f6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A7:EF:07:8D:DB:53:F5:76:14:C8:9C:9B:D3:4C:7B:43:52:83:EB
            X509v3 Authority Key Identifier:
                keyid:48:94:9D:3C:87:35:03:DB:D2:96:BD:A6:0E:B7:77:BC:54:1D:51:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJSdPIc1A9vSlr2mDrd3vFQdUU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:73:90:93:5b:f4:1e:5b:57:68:c6:39:3b:5c:81:bf:de:2d:
         0b:82:e8:d6:59:3a:1b:2f:7b:bd:4d:bd:67:48:82:08:35:32:
         32:6d:ae:45:18:fa:cc:7c:13:70:68:ac:a8:32:c8:98:d1:d2:
         42:43:0d:86:2d:8a:f0:62:39:b3:bb:7f:e9:23:00:9f:ff:92:
         ee:42:56:a1:d2:fd:d5:38:21:a6:b3:d9:f1:33:10:eb:4b:a7:
         03:00:79:a1:01:5e:57:d9:58:c8:86:25:52:20:4e:f3:97:ff:
         9d:c6:89:49:10:f4:ce:a4:09:9a:36:49:ae:b8:73:6b:f8:cd:
         74:a5:11:27:75:cf:e9:c2:ce:bb:e5:cf:19:07:0e:ae:bb:96:
         16:63:54:13:f0:ea:d9:2e:70:83:5b:f7:c5:a2:d5:32:00:71:
         1b:16:e8:88:37:15:5d:70:c6:52:c1:0e:97:ab:fd:71:96:e3:
         32:e3:b1:df:e9:38:d5:85:66:d7:53:01:20:a3:26:dd:f6:f6:
         d0:a1:d4:b8:f3:e9:14:e4:c0:c2:d9:a5:88:de:e5:54:95:3f:
         f9:a8:3b:6a:a1:d9:23:fb:cc:68:cf:63:ac:46:ec:ef:dc:e7:
         a1:b8:83:9c:f5:b0:0f:17:48:27:05:13:51:42:0a:ea:af:8f:
         cd:42:74:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSRx2VjPC2J4jnLL9yfE55MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4OTQ5ZDNjODczNTAzZGJkMjk2YmRhNjBlYjc3N2JjNTQx
ZDUxNGUwHhcNMjUwMjE3MDUwMDA1WhcNMjUwMjE4MDUwMDA1WjAzMTEwLwYDVQQD
Eyg5MmE3ZWYwNzhkZGI1M2Y1NzYxNGM4OWM5YmQzNGM3YjQzNTI4M2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2hHzP1KpxdjbF/nJoG0wvgfkwIl
5LmmNhnuh+TI7ywbg++GjiTcnHaQNZ3N4pO0irl3kaplpVt0KAVl4A6BI5l24Pj6
PvsljPl4B6GRjJTkAfGA1fdGay0QH6BFkplRkCIA/WOSaB0jMvdzIURa1KsCKS5r
nv3wvhBxtvzdvo92POm8ph1FNwSQUj5ohK5vh1rT0eWBET176iHbXYBBHc+YmpZ8
OdjQxFlGeo74QQ375xDdF6gy/pOayluoOjhBBfut3Gi4OLdIOA3ZK642Km9bP+/7
AoEKR7at+mR1OKLnSzZnX/rCBGL8luvQk0AUGc/8PiOc+RqH9f3CYZH2hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKn7weN21P1dhTInJvTTHtDUoPrMB8GA1UdIwQY
MBaAFEiUnTyHNQPb0pa9pg63d7xUHVFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0pTZFBJYzFBOXZTbHIybURyZDN2RlFkVVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lNGU2MzctNzI5Yi00N2JlLWEwYWIt
NTM0OTYyMDE5NDYwLzEvU0pTZFBJYzFBOXZTbHIybURyZDN2RlFkVVU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lNGU2MzctNzI5Yi00N2JlLWEwYWItNTM0OTYyMDE5NDYw
LzEvU0pTZFBJYzFBOXZTbHIybURyZDN2RlFkVVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzXOQk1v0
HltXaMY5O1yBv94tC4Lo1lk6Gy97vU29Z0iCCDUyMm2uRRj6zHwTcGisqDLImNHS
QkMNhi2K8GI5s7t/6SMAn/+S7kJWodL91TghprPZ8TMQ60unAwB5oQFeV9lYyIYl
UiBO85f/ncaJSRD0zqQJmjZJrrhza/jNdKURJ3XP6cLOu+XPGQcOrruWFmNUE/Dq
2S5wg1v3xaLVMgBxGxboiDcVXXDGUsEOl6v9cZbjMuOx3+k41YVm11MBIKMm3fb2
0KHUuPPpFOTAwtmliN7lVJU/+ag7aqHZI/vMaM9jrEbs79znobiDnPWwDxdIJwUT
UUIK6q+PzUJ0SQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:16 2025 by rpki-client