Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft
File:                     V9mTMZ3MkpdpQxiyRus29V_xNw4.mft (raw, json)
Hash identifier:          GwMlwd7umTz4GuctC4/e7HqD1qYHXa4OHN09ulQMP2w=
Subject key identifier:   0A:73:0C:54:37:2E:9C:29:7D:9C:EE:87:14:27:FD:A2:BC:81:2B:C0
Authority key identifier: 57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E
Certificate issuer:       /CN=57d993319dcc9297694318b246eb36f55ff1370e
Certificate serial:       019512473FDDB41AED50AEE632FDEB57B298
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft
Manifest number:          0E4A
Signing time:             Mon 17 Feb 2025 05:00:13 +0000
Manifest this update:     Mon 17 Feb 2025 05:00:13 +0000
Manifest next update:     Tue 18 Feb 2025 05:00:13 +0000
Files and hashes:         1: V9mTMZ3MkpdpQxiyRus29V_xNw4.crl (hash: i2gRADmdiqpa1csf9ZsgwFMHbsIqz25cfymZWhQmUa0=)
                          2: VzLG7lyXvVkTshnFEB9kwkc4pkQ.roa (hash: wIvPT3vGaYWNNjOSrAOSHFQIN6FXu9GPlBXc77PLE/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:47:3f:dd:b4:1a:ed:50:ae:e6:32:fd:eb:57:b2:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d993319dcc9297694318b246eb36f55ff1370e
        Validity
            Not Before: Feb 17 05:00:13 2025 GMT
            Not After : Feb 18 05:00:13 2025 GMT
        Subject: CN=0a730c54372e9c297d9cee871427fda2bc812bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ee:78:9d:cb:e8:d8:05:3e:d8:4a:05:ed:65:
                    0c:ae:3c:16:0d:e6:79:02:66:b7:03:bf:21:b0:d2:
                    66:80:05:eb:9f:c2:c0:04:cd:f5:26:43:39:42:02:
                    c7:c3:7a:6c:26:eb:8d:79:ba:cd:4d:a3:c5:29:23:
                    d1:ae:01:54:cf:e1:79:0d:5b:67:94:bf:c5:90:7d:
                    12:4d:62:80:32:b4:d7:72:28:2e:80:89:5e:51:e5:
                    2a:d3:3a:3a:b0:05:d6:08:7c:6a:18:4d:e1:e0:e2:
                    dc:44:56:e0:bf:54:c9:73:9c:23:29:d6:09:13:57:
                    fa:95:25:47:c2:f2:f4:66:9c:6e:71:19:bb:4f:f1:
                    09:90:46:9a:bf:54:9a:ad:dc:7d:c2:78:1c:20:ab:
                    31:2f:65:92:fe:32:26:e3:48:89:ca:3a:d4:73:3a:
                    e0:a1:f6:c5:17:c6:0a:b8:bf:7f:fe:8e:4b:9d:3f:
                    e5:fe:db:c7:b5:51:90:ec:1d:5f:fe:39:dd:40:80:
                    ae:96:09:67:02:3f:7a:8b:b4:4a:d3:6e:e6:49:73:
                    14:d4:3d:21:0f:54:d0:09:50:b9:64:b0:6a:ac:dd:
                    5e:11:3f:a0:73:cb:17:be:cd:22:1c:1a:06:24:83:
                    32:c5:47:e3:2a:ae:a0:c7:ac:93:cc:20:1e:ee:67:
                    c4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:73:0C:54:37:2E:9C:29:7D:9C:EE:87:14:27:FD:A2:BC:81:2B:C0
            X509v3 Authority Key Identifier:
                keyid:57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:4c:eb:ec:70:68:25:00:f6:a6:9b:5d:ff:67:78:1e:e5:4f:
         e9:a5:cc:91:9e:74:96:01:ab:b3:29:b4:e5:5b:ca:26:3c:6f:
         b9:e5:3f:08:d0:3b:ef:fd:86:d5:d8:db:68:8d:7a:c7:48:11:
         a6:28:f2:ab:6e:b4:2b:30:4f:c6:4f:fe:ad:5e:9c:a4:f7:9a:
         42:2b:cc:be:34:45:f6:d1:d5:e5:c0:e2:44:bc:19:66:25:c1:
         c2:ec:6c:27:ea:18:17:04:a4:f1:70:b2:39:90:94:5d:6e:39:
         bd:22:e6:c5:50:4f:f2:0d:e8:48:74:ec:b9:88:bc:c3:6a:4b:
         ed:db:aa:b8:1c:f1:d1:95:4f:8b:75:5e:96:bf:cc:3a:ef:6a:
         77:5e:b3:06:b7:1e:56:58:fb:a3:de:93:ad:43:03:65:88:53:
         1b:94:a5:7c:df:99:ef:99:80:dd:35:42:8a:94:68:5f:bc:e7:
         28:61:a4:36:a7:88:9e:ed:ea:cb:6f:1c:f3:02:d5:23:b3:f4:
         58:e7:c8:c8:6a:b7:02:0a:07:13:98:0c:4c:00:92:df:de:da:
         ef:ab:27:96:13:18:cf:58:2a:d6:a7:d3:f9:5c:4b:18:d1:21:
         1c:eb:5c:65:8c:5c:a3:77:f7:2f:f9:16:89:02:b3:98:86:a3:
         22:b9:ba:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSRz/dtBrtUK7mMv3rV7KYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZDk5MzMxOWRjYzkyOTc2OTQzMThiMjQ2ZWIzNmY1NWZm
MTM3MGUwHhcNMjUwMjE3MDUwMDEzWhcNMjUwMjE4MDUwMDEzWjAzMTEwLwYDVQQD
EygwYTczMGM1NDM3MmU5YzI5N2Q5Y2VlODcxNDI3ZmRhMmJjODEyYmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe54ncvo2AU+2EoF7WUMrjwWDeZ5
Ama3A78hsNJmgAXrn8LABM31JkM5QgLHw3psJuuNebrNTaPFKSPRrgFUz+F5DVtn
lL/FkH0STWKAMrTXcigugIleUeUq0zo6sAXWCHxqGE3h4OLcRFbgv1TJc5wjKdYJ
E1f6lSVHwvL0ZpxucRm7T/EJkEaav1Sardx9wngcIKsxL2WS/jIm40iJyjrUczrg
ofbFF8YKuL9//o5LnT/l/tvHtVGQ7B1f/jndQICulglnAj96i7RK027mSXMU1D0h
D1TQCVC5ZLBqrN1eET+gc8sXvs0iHBoGJIMyxUfjKq6gx6yTzCAe7mfEgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApzDFQ3LpwpfZzuhxQn/aK8gSvAMB8GA1UdIwQY
MBaAFFfZkzGdzJKXaUMYskbrNvVf8TcOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjltVE1aM01rcGRwUXhpeVJ1czI5Vl94Tnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wZDMyZmUtYzlkYS00NDkzLWFiOGEt
MDNhZmFjZWE3MDEwLzEvVjltVE1aM01rcGRwUXhpeVJ1czI5Vl94Tnc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8wZDMyZmUtYzlkYS00NDkzLWFiOGEtMDNhZmFjZWE3MDEw
LzEvVjltVE1aM01rcGRwUXhpeVJ1czI5Vl94Tnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr0zr7HBo
JQD2pptd/2d4HuVP6aXMkZ50lgGrsym05VvKJjxvueU/CNA77/2G1djbaI16x0gR
pijyq260KzBPxk/+rV6cpPeaQivMvjRF9tHV5cDiRLwZZiXBwuxsJ+oYFwSk8XCy
OZCUXW45vSLmxVBP8g3oSHTsuYi8w2pL7duquBzx0ZVPi3Velr/MOu9qd16zBrce
Vlj7o96TrUMDZYhTG5SlfN+Z75mA3TVCipRoX7znKGGkNqeInu3qy28c8wLVI7P0
WOfIyGq3AgoHE5gMTACS397a76snlhMYz1gq1qfT+VxLGNEhHOtcZYxco3f3L/kW
iQKzmIajIrm6Yw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:00 2025 by rpki-client