Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
File:                     1eKDzL8RaYtvIuwXtfY-OlPkESA.mft (raw, json)
Hash identifier:          wBDV+AEPGuiUiMk9q6u7rm8QgA/9E9HlT6l0usuDSd4=
Subject key identifier:   DC:B6:F4:E9:F3:A9:DA:C1:5E:AC:FA:CF:82:91:2B:41:D0:6D:87:EF
Authority key identifier: D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
Certificate issuer:       /CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Certificate serial:       019510C74B011824E241807DF9137F3F18F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
Manifest number:          1452
Signing time:             Sun 16 Feb 2025 22:00:51 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:51 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:51 +0000
Files and hashes:         1: 1eKDzL8RaYtvIuwXtfY-OlPkESA.crl (hash: TEZpR0z4poYn2z2y0xmBjOry2ivzAVfdJew0WgGwQ40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:4b:01:18:24:e2:41:80:7d:f9:13:7f:3f:18:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
        Validity
            Not Before: Feb 16 22:00:51 2025 GMT
            Not After : Feb 17 22:00:51 2025 GMT
        Subject: CN=dcb6f4e9f3a9dac15eacfacf82912b41d06d87ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9b:99:92:0f:bb:51:87:23:59:a2:e1:f1:26:
                    63:3c:7a:c1:e6:54:e4:d6:e6:3d:88:e8:da:c2:c5:
                    05:f1:a3:ab:19:22:91:5c:ad:9f:15:43:a9:94:9c:
                    e2:1a:ba:91:1c:06:f2:81:99:fd:2c:51:44:69:ab:
                    49:78:d8:f3:ae:5a:47:3a:4c:f4:e5:b9:ba:5f:d3:
                    3e:79:ae:67:48:cf:17:44:7b:1f:0e:c8:17:02:db:
                    51:38:56:fb:1e:01:f5:2a:ca:64:82:a2:cf:be:0d:
                    bf:db:34:68:49:3e:3e:13:be:bc:34:bd:ad:c4:4c:
                    f4:37:c2:42:db:83:ab:b8:d3:18:d4:02:84:b0:97:
                    07:4f:6a:9e:45:38:f8:90:9d:2a:eb:05:95:72:f4:
                    8e:33:4f:06:7a:df:84:f0:dd:fa:f4:f0:08:18:b7:
                    c8:e3:44:d7:4a:f1:92:aa:52:1b:41:de:74:2d:27:
                    2b:14:a4:e1:f1:ff:28:c8:46:1a:b2:a4:c4:4d:a4:
                    8b:95:1d:82:ee:5c:dc:0e:6a:75:41:04:e8:af:2f:
                    6f:53:f7:94:eb:ca:92:23:ac:92:47:ec:b2:df:3e:
                    7e:b4:98:7b:81:db:00:b4:89:e6:07:51:14:b8:c7:
                    40:84:e9:3f:9d:e1:8b:51:db:f0:62:1a:16:4f:6e:
                    a7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B6:F4:E9:F3:A9:DA:C1:5E:AC:FA:CF:82:91:2B:41:D0:6D:87:EF
            X509v3 Authority Key Identifier:
                keyid:D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:12:e2:4b:5d:08:7f:a3:3f:59:7b:74:c4:78:80:9e:76:ad:
         fe:eb:72:39:f6:dd:c6:82:a7:ec:85:c9:16:a1:f3:b1:a6:ca:
         4b:4f:87:fb:62:32:30:09:08:d0:aa:7e:8d:09:af:68:87:89:
         6c:09:fe:3c:be:13:9d:50:c7:d6:3a:21:35:c6:0a:40:c0:7e:
         f2:32:4f:f9:c0:a9:63:af:20:be:34:96:b0:4c:dd:fc:5d:d2:
         ee:13:41:96:6d:8e:e2:36:79:db:ee:32:8e:42:a3:8a:08:9b:
         12:69:9b:7c:43:1c:24:e3:20:ca:4b:c3:7d:5c:3e:0a:21:14:
         80:ac:ec:d4:67:4f:8f:cb:15:cb:2b:7e:9a:33:57:15:a9:3e:
         74:e2:07:fa:55:30:71:1d:3f:d6:d1:64:fb:55:1f:66:20:61:
         38:19:e9:0b:6b:96:10:b4:bd:27:2f:e8:ad:ba:d2:4f:fc:34:
         58:3d:e2:86:3b:b0:62:6f:55:9b:ef:77:f4:ba:6c:77:15:1d:
         58:fd:48:90:43:5f:bd:4b:d9:29:71:90:55:fb:32:08:c5:07:
         62:68:21:f0:30:f4:36:e7:e9:ac:d6:b3:70:6b:85:6c:6b:4b:
         d9:f4:62:2e:0e:c3:db:30:a2:70:36:18:2c:91:86:d0:2a:84:
         8b:c9:e4:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQx0sBGCTiQYB9+RN/PxjyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZTI4M2NjYmYxMTY5OGI2ZjIyZWMxN2I1ZjYzZTNhNTNl
NDExMjAwHhcNMjUwMjE2MjIwMDUxWhcNMjUwMjE3MjIwMDUxWjAzMTEwLwYDVQQD
EyhkY2I2ZjRlOWYzYTlkYWMxNWVhY2ZhY2Y4MjkxMmI0MWQwNmQ4N2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JuZkg+7UYcjWaLh8SZjPHrB5lTk
1uY9iOjawsUF8aOrGSKRXK2fFUOplJziGrqRHAbygZn9LFFEaatJeNjzrlpHOkz0
5bm6X9M+ea5nSM8XRHsfDsgXAttROFb7HgH1KspkgqLPvg2/2zRoST4+E768NL2t
xEz0N8JC24OruNMY1AKEsJcHT2qeRTj4kJ0q6wWVcvSOM08Get+E8N369PAIGLfI
40TXSvGSqlIbQd50LScrFKTh8f8oyEYasqTETaSLlR2C7lzcDmp1QQTory9vU/eU
68qSI6ySR+yy3z5+tJh7gdsAtInmB1EUuMdAhOk/neGLUdvwYhoWT26nuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNy29OnzqdrBXqz6z4KRK0HQbYfvMB8GA1UdIwQY
MBaAFNXig8y/EWmLbyLsF7X2PjpT5BEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWVLRHpMOFJhWXR2SXV3WHRmWS1PbFBrRVNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi82ZGFiZDAtNTU2NS00OTI1LWE3MDIt
MGY2MmJiZDliNTY4LzEvMWVLRHpMOFJhWXR2SXV3WHRmWS1PbFBrRVNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi82ZGFiZDAtNTU2NS00OTI1LWE3MDItMGY2MmJiZDliNTY4
LzEvMWVLRHpMOFJhWXR2SXV3WHRmWS1PbFBrRVNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkhLiS10I
f6M/WXt0xHiAnnat/utyOfbdxoKn7IXJFqHzsabKS0+H+2IyMAkI0Kp+jQmvaIeJ
bAn+PL4TnVDH1johNcYKQMB+8jJP+cCpY68gvjSWsEzd/F3S7hNBlm2O4jZ52+4y
jkKjigibEmmbfEMcJOMgykvDfVw+CiEUgKzs1GdPj8sVyyt+mjNXFak+dOIH+lUw
cR0/1tFk+1UfZiBhOBnpC2uWELS9Jy/orbrST/w0WD3ihjuwYm9Vm+939LpsdxUd
WP1IkENfvUvZKXGQVfsyCMUHYmgh8DD0NufprNazcGuFbGtL2fRiLg7D2zCicDYY
LJGG0CqEi8nkew==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:54 2025 by rpki-client