Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
File:                     d4LgCn_HYX2UJguB_SKjo_PcaG0.mft (raw, json)
Hash identifier:          eFRK+pyBCI+LX9Hy7DwneAAZKOTxj1Ims43+J+mlruc=
Subject key identifier:   EE:D8:A0:29:FC:F9:0B:55:2B:E7:B0:0B:5D:AB:EA:9C:3D:68:49:23
Authority key identifier: 77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
Certificate issuer:       /CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Certificate serial:       0194C387CB6C5D87BF22FAAD82B3129DCA4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
Manifest number:          08BC
Signing time:             Sat 01 Feb 2025 22:00:43 +0000
Manifest this update:     Sat 01 Feb 2025 22:00:43 +0000
Manifest next update:     Sun 02 Feb 2025 22:00:43 +0000
Files and hashes:         1: d4LgCn_HYX2UJguB_SKjo_PcaG0.crl (hash: deBcEmxY8KWACl4cOzu2737/qb1UDX6Ure4LxyV/teY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 22:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:87:cb:6c:5d:87:bf:22:fa:ad:82:b3:12:9d:ca:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
        Validity
            Not Before: Feb  1 22:00:43 2025 GMT
            Not After : Feb  2 22:00:43 2025 GMT
        Subject: CN=eed8a029fcf90b552be7b00b5dabea9c3d684923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cb:92:c2:13:4b:a1:0e:f1:62:27:96:b3:94:
                    97:3d:98:47:6b:6c:98:c5:00:08:1b:2c:75:0c:d2:
                    54:32:52:5b:49:52:0d:44:d2:d8:71:b1:b0:a3:f5:
                    f0:77:72:f0:be:7f:62:47:8e:7d:23:0c:ef:d5:36:
                    f4:a6:9e:ec:a4:e0:8a:57:c8:43:ad:4d:12:33:f2:
                    2f:12:29:fa:66:5c:3f:0f:34:b5:6e:32:ca:30:4a:
                    f2:23:4c:83:8f:de:47:95:ee:a9:17:41:09:07:6c:
                    cc:d7:db:a2:4e:1b:5f:98:fd:53:43:59:6a:37:bd:
                    d4:64:1b:d6:95:4d:98:5e:3c:0d:ed:e1:d4:2a:17:
                    f1:c1:49:b0:90:d0:ff:1f:86:6d:7d:e6:cb:c1:23:
                    42:5f:00:88:ca:50:70:a5:cd:19:a8:26:77:95:8d:
                    6f:ce:34:7a:44:1c:1d:da:5d:4f:07:51:2a:56:d4:
                    8c:1d:23:67:00:ad:34:4b:01:d5:a2:ad:2a:0e:d4:
                    98:43:77:02:4d:3a:ab:38:ec:50:4f:02:08:6e:63:
                    55:73:f6:6b:3e:e8:8d:83:b4:c9:e4:4d:bf:ef:af:
                    0b:04:41:17:a5:07:98:ef:57:e6:cd:d0:5a:c3:1a:
                    ee:f2:4a:b3:2c:1e:73:5e:99:41:92:6f:bb:39:c1:
                    9d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D8:A0:29:FC:F9:0B:55:2B:E7:B0:0B:5D:AB:EA:9C:3D:68:49:23
            X509v3 Authority Key Identifier:
                keyid:77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:01:51:cc:8f:17:4d:be:c2:6c:70:ff:c1:06:75:91:56:90:
         5f:51:e4:c2:cd:e0:2d:a3:78:51:46:1d:9e:49:ea:71:54:35:
         0d:eb:fc:c1:37:55:e2:17:bf:a0:e8:36:cf:5e:3d:f9:46:35:
         9f:f7:ba:96:80:97:0a:e1:af:9e:22:02:0f:cb:ec:4c:b6:31:
         00:06:cb:86:28:05:7b:04:f0:77:5b:2e:ce:19:c4:c0:64:6c:
         90:7d:2c:f0:de:55:c7:36:7c:53:3a:3f:da:28:fb:1a:ee:51:
         7c:0d:40:b3:f0:ff:55:b9:28:98:e9:b5:f4:76:d7:96:54:f5:
         95:01:09:18:8a:7a:16:f8:49:85:3e:15:ac:fb:ff:25:a2:a0:
         09:21:be:89:bc:64:c1:b3:b3:2b:9a:49:d6:80:7b:2f:81:b1:
         d7:7a:a6:3a:45:02:31:af:b3:fe:16:ba:5d:67:da:ff:32:0d:
         6b:f3:16:99:00:6f:5d:f0:5c:e0:00:a0:5d:8d:4c:06:b9:da:
         49:cd:31:52:94:42:17:49:e8:46:2b:a1:24:62:a4:da:9b:0b:
         15:85:29:bd:be:80:b0:ca:94:c5:63:8f:d4:c1:13:ba:ea:6e:
         c8:38:94:8e:58:a4:e5:9f:80:87:e0:5c:31:89:34:81:29:6e:
         5d:4e:f2:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDh8tsXYe/IvqtgrMSncpOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ODJlMDBhN2ZjNzYxN2Q5NDI2MGI4MWZkMjJhM2EzZjNk
YzY4NmQwHhcNMjUwMjAxMjIwMDQzWhcNMjUwMjAyMjIwMDQzWjAzMTEwLwYDVQQD
EyhlZWQ4YTAyOWZjZjkwYjU1MmJlN2IwMGI1ZGFiZWE5YzNkNjg0OTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsuSwhNLoQ7xYieWs5SXPZhHa2yY
xQAIGyx1DNJUMlJbSVINRNLYcbGwo/Xwd3Lwvn9iR459Iwzv1Tb0pp7spOCKV8hD
rU0SM/IvEin6Zlw/DzS1bjLKMEryI0yDj95Hle6pF0EJB2zM19uiThtfmP1TQ1lq
N73UZBvWlU2YXjwN7eHUKhfxwUmwkND/H4ZtfebLwSNCXwCIylBwpc0ZqCZ3lY1v
zjR6RBwd2l1PB1EqVtSMHSNnAK00SwHVoq0qDtSYQ3cCTTqrOOxQTwIIbmNVc/Zr
PuiNg7TJ5E2/768LBEEXpQeY71fmzdBawxru8kqzLB5zXplBkm+7OcGdDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7YoCn8+QtVK+ewC12r6pw9aEkjMB8GA1UdIwQY
MBaAFHeC4Ap/x2F9lCYLgf0io6Pz3GhtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDRMZ0NuX0hZWDJVSmd1Ql9TS2pvX1BjYUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hZGU2MGEtZmQ4Yy00MjJlLWJjYTgt
OWEwMjg0YjNhZGMxLzEvZDRMZ0NuX0hZWDJVSmd1Ql9TS2pvX1BjYUcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9hZGU2MGEtZmQ4Yy00MjJlLWJjYTgtOWEwMjg0YjNhZGMx
LzEvZDRMZ0NuX0hZWDJVSmd1Ql9TS2pvX1BjYUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgFRzI8X
Tb7CbHD/wQZ1kVaQX1Hkws3gLaN4UUYdnknqcVQ1Dev8wTdV4he/oOg2z149+UY1
n/e6loCXCuGvniICD8vsTLYxAAbLhigFewTwd1suzhnEwGRskH0s8N5VxzZ8Uzo/
2ij7Gu5RfA1As/D/VbkomOm19HbXllT1lQEJGIp6FvhJhT4VrPv/JaKgCSG+ibxk
wbOzK5pJ1oB7L4Gx13qmOkUCMa+z/ha6XWfa/zINa/MWmQBvXfBc4ACgXY1MBrna
Sc0xUpRCF0noRiuhJGKk2psLFYUpvb6AsMqUxWOP1METuupuyDiUjlik5Z+Ah+Bc
MYk0gSluXU7yLQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:44:01 2025 by rpki-client