Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
File:                     Rns5TPikBRwWfUaLx7iSpx3uTQM.mft (raw, json)
Hash identifier:          DOZL3+Q17/BbK1/8uJRfsDajKhSJnNeILvVMXuUsHOI=
Subject key identifier:   FB:CE:AF:15:DC:A3:38:90:4D:CF:46:78:97:76:00:ED:61:1C:99:62
Authority key identifier: 46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03
Certificate issuer:       /CN=467b394cf8a4051c167d468bc7b892a71dee4d03
Certificate serial:       019511D96A77A3440B352BA4A50746AEF55B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
Manifest number:          0845
Signing time:             Mon 17 Feb 2025 03:00:15 +0000
Manifest this update:     Mon 17 Feb 2025 03:00:15 +0000
Manifest next update:     Tue 18 Feb 2025 03:00:15 +0000
Files and hashes:         1: Rns5TPikBRwWfUaLx7iSpx3uTQM.crl (hash: HiFWwPeYDUmcxAiAnqmR5zvJ2uZQGCPZ8xF2kEKwkGA=)
                          2: dgAEK4wIhzdNcfF05upWmZfXZZk.roa (hash: U/vt5a1C9rZX//TwbwJI8SM4gcB/oWBETRm681WJLz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:d9:6a:77:a3:44:0b:35:2b:a4:a5:07:46:ae:f5:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=467b394cf8a4051c167d468bc7b892a71dee4d03
        Validity
            Not Before: Feb 17 03:00:15 2025 GMT
            Not After : Feb 18 03:00:15 2025 GMT
        Subject: CN=fbceaf15dca338904dcf4678977600ed611c9962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:85:66:18:ca:03:0e:cf:82:57:11:5c:60:9b:
                    d2:a1:2f:b9:85:11:af:93:27:af:0f:06:ab:47:be:
                    ab:a3:21:ec:db:56:08:a5:eb:43:b3:5c:09:50:83:
                    d7:be:11:f5:75:db:a7:59:54:60:86:c0:ab:fd:6e:
                    42:6e:16:cd:35:fc:ab:47:db:4e:59:19:66:49:d7:
                    b3:89:dd:5a:55:05:48:f2:b6:8e:0b:40:9c:04:35:
                    1d:bb:74:4f:19:ce:36:9e:fd:a9:8f:b4:ec:ac:81:
                    78:a1:3b:84:00:bf:bb:cc:c5:78:f1:46:02:a8:69:
                    3d:1a:ca:32:a0:04:e8:eb:f1:b7:d1:7f:ff:f9:0e:
                    61:14:76:77:8f:cb:77:b2:87:8a:8b:78:c7:f2:61:
                    8e:c9:4c:7f:be:07:46:9f:2e:92:13:20:db:71:17:
                    53:91:a3:dc:19:8a:fa:03:92:01:af:ee:16:33:9c:
                    70:e2:0c:d7:0d:a9:7b:20:db:04:04:c0:50:4d:b9:
                    8b:5d:b1:24:bb:03:63:06:11:40:9c:c7:23:d8:3c:
                    2f:3d:35:bc:ef:45:5b:f4:14:66:fa:10:66:ad:73:
                    48:6f:b6:19:a5:60:c3:6e:2d:24:29:71:16:94:6c:
                    f5:33:aa:ee:61:a4:a9:65:4e:b4:e7:84:8a:20:c6:
                    21:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:CE:AF:15:DC:A3:38:90:4D:CF:46:78:97:76:00:ED:61:1C:99:62
            X509v3 Authority Key Identifier:
                keyid:46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ad:7a:0b:6a:18:f9:7f:40:8d:75:b9:db:19:bf:67:91:c6:
         cf:c0:5f:06:6e:ce:85:6d:3a:7d:81:0b:5b:2a:d7:f6:8f:b4:
         90:90:99:20:56:24:30:72:36:84:fc:71:f5:69:7e:62:57:50:
         29:ec:99:16:32:50:a1:93:9c:2e:76:97:56:93:54:65:0c:8a:
         1b:07:9b:3d:70:2f:e6:61:4d:49:af:3b:eb:4e:ce:4c:e4:cb:
         74:a0:c0:1b:d2:21:cb:e5:3c:c1:82:cc:cd:36:7f:2a:14:6c:
         e4:23:2c:05:fe:30:38:29:6b:a1:e8:d1:b3:a7:a1:70:fa:ba:
         26:56:f8:7c:58:a3:81:2d:9a:2b:fd:87:70:66:c9:39:f9:f8:
         22:8e:ef:77:1b:4a:b0:cc:ee:27:7f:3d:2b:1e:54:4d:dc:f7:
         e8:49:99:02:fe:39:02:55:56:0d:f0:c8:77:3c:46:50:ef:f9:
         57:01:07:28:bd:e8:ab:f4:75:64:0c:78:eb:85:90:00:3f:02:
         31:b9:a8:04:4b:68:6c:cb:2a:de:60:e9:e9:65:06:d2:5e:1f:
         a2:08:b8:06:2a:c7:a0:4e:57:88:24:b7:ea:b9:a6:66:08:06:
         2b:1d:55:d7:12:24:67:ca:8f:4e:c8:3f:a3:12:00:2c:5d:89:
         88:d4:b7:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2Wp3o0QLNSukpQdGrvVbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2N2IzOTRjZjhhNDA1MWMxNjdkNDY4YmM3Yjg5MmE3MWRl
ZTRkMDMwHhcNMjUwMjE3MDMwMDE1WhcNMjUwMjE4MDMwMDE1WjAzMTEwLwYDVQQD
EyhmYmNlYWYxNWRjYTMzODkwNGRjZjQ2Nzg5Nzc2MDBlZDYxMWM5OTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIVmGMoDDs+CVxFcYJvSoS+5hRGv
kyevDwarR76royHs21YIpetDs1wJUIPXvhH1ddunWVRghsCr/W5CbhbNNfyrR9tO
WRlmSdezid1aVQVI8raOC0CcBDUdu3RPGc42nv2pj7TsrIF4oTuEAL+7zMV48UYC
qGk9GsoyoATo6/G30X//+Q5hFHZ3j8t3soeKi3jH8mGOyUx/vgdGny6SEyDbcRdT
kaPcGYr6A5IBr+4WM5xw4gzXDal7INsEBMBQTbmLXbEkuwNjBhFAnMcj2DwvPTW8
70Vb9BRm+hBmrXNIb7YZpWDDbi0kKXEWlGz1M6ruYaSpZU6054SKIMYhwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvOrxXcoziQTc9GeJd2AO1hHJliMB8GA1UdIwQY
MBaAFEZ7OUz4pAUcFn1Gi8e4kqcd7k0DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm5zNVRQaWtCUndXZlVhTHg3aVNweDN1VFFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zNWM4MDUtZjYwYy00NDJjLWFjNWQt
MGYwMWI1NjA2NTdjLzEvUm5zNVRQaWtCUndXZlVhTHg3aVNweDN1VFFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zNWM4MDUtZjYwYy00NDJjLWFjNWQtMGYwMWI1NjA2NTdj
LzEvUm5zNVRQaWtCUndXZlVhTHg3aVNweDN1VFFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoq16C2oY
+X9AjXW52xm/Z5HGz8BfBm7OhW06fYELWyrX9o+0kJCZIFYkMHI2hPxx9Wl+YldQ
KeyZFjJQoZOcLnaXVpNUZQyKGwebPXAv5mFNSa87607OTOTLdKDAG9Ihy+U8wYLM
zTZ/KhRs5CMsBf4wOClroejRs6ehcPq6Jlb4fFijgS2aK/2HcGbJOfn4Io7vdxtK
sMzuJ389Kx5UTdz36EmZAv45AlVWDfDIdzxGUO/5VwEHKL3oq/R1ZAx464WQAD8C
MbmoBEtobMsq3mDp6WUG0l4fogi4BirHoE5XiCS36rmmZggGKx1V1xIkZ8qPTsg/
oxIALF2JiNS3RQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:07 2025 by rpki-client