Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
File:                     zWv2DrCPHiOrqLp5fBFyREzhW3E.mft (raw, json)
Hash identifier:          ONNJicpBVd+2e8nU7TR0ZL+Itk7Yi2JyXXpn2ypfD3k=
Subject key identifier:   2D:E8:6B:22:D1:0E:C2:19:3E:AA:CE:48:D2:FE:AE:0E:E3:B7:92:13
Authority key identifier: CD:6B:F6:0E:B0:8F:1E:23:AB:A8:BA:79:7C:11:72:44:4C:E1:5B:71
Certificate issuer:       /CN=cd6bf60eb08f1e23aba8ba797c1172444ce15b71
Certificate serial:       019510C6A031FB6B7A5F9B9DDFDB7872385B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
Manifest number:          0F04
Signing time:             Sun 16 Feb 2025 22:00:07 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:07 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:07 +0000
Files and hashes:         1: zWv2DrCPHiOrqLp5fBFyREzhW3E.crl (hash: pm3I0F3WL21MygwxA/Rt8cTy58jQsE8yFT1qO+hhyJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c6:a0:31:fb:6b:7a:5f:9b:9d:df:db:78:72:38:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd6bf60eb08f1e23aba8ba797c1172444ce15b71
        Validity
            Not Before: Feb 16 22:00:07 2025 GMT
            Not After : Feb 17 22:00:07 2025 GMT
        Subject: CN=2de86b22d10ec2193eaace48d2feae0ee3b79213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fa:93:25:a4:5f:13:64:14:88:9f:60:31:a3:
                    19:74:e9:14:46:cd:e4:65:7f:01:4f:bb:73:c1:be:
                    a2:8e:30:45:a9:35:b4:9a:7d:09:f6:b0:a7:c7:67:
                    10:58:db:4c:ea:e3:c5:f5:3b:17:99:5b:a0:06:5f:
                    d3:17:e6:da:95:a8:31:cc:16:c7:55:3f:04:f8:2c:
                    f8:4f:17:85:4e:a4:5c:26:29:35:bd:28:2c:22:48:
                    34:71:10:c6:89:3c:15:1c:ac:8c:d4:33:c5:b0:58:
                    4c:47:05:5e:df:a9:91:13:52:0d:2d:cc:e7:f3:e2:
                    f7:5e:2a:92:0b:80:ee:17:b4:82:e1:de:5d:10:33:
                    2d:34:de:85:de:34:b5:62:34:dc:e7:19:ae:5d:a5:
                    cf:7b:7c:cf:96:b9:e3:55:20:fc:30:d6:8e:90:57:
                    8b:81:20:25:c3:5b:e6:7b:d9:2a:3e:0d:fa:af:ec:
                    c1:86:e8:c6:08:98:cd:d3:80:6b:b7:02:c7:64:39:
                    82:b6:94:5e:0e:7b:fe:61:a7:18:89:9d:93:f5:30:
                    90:c2:0e:f5:60:07:6e:a9:48:31:d0:ae:c7:64:00:
                    76:0c:db:c5:6f:35:51:38:f0:0c:5b:81:fd:3c:e9:
                    3f:17:be:c9:5a:fb:e9:71:3b:3b:3d:b4:6e:50:5f:
                    c9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E8:6B:22:D1:0E:C2:19:3E:AA:CE:48:D2:FE:AE:0E:E3:B7:92:13
            X509v3 Authority Key Identifier:
                keyid:CD:6B:F6:0E:B0:8F:1E:23:AB:A8:BA:79:7C:11:72:44:4C:E1:5B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:24:73:fe:3f:f2:88:b7:bf:06:4d:e0:68:8e:2b:53:9e:07:
         56:dc:03:7c:de:96:cb:d5:38:d0:2a:4a:92:33:75:08:8d:f0:
         2a:f9:d4:64:68:1e:6e:f8:00:b3:af:d9:56:10:a8:e3:ad:a7:
         59:e2:0d:9e:31:cd:97:b1:e4:23:08:78:b8:b0:5a:72:d2:af:
         e5:1a:b4:26:0e:59:37:95:a1:fd:3c:67:e5:ad:c3:23:67:a8:
         5c:3d:fb:00:f4:38:a8:11:46:20:0c:5c:4a:e3:20:1b:35:8b:
         24:0f:c7:df:13:fa:50:97:4f:7d:04:45:88:e2:3c:78:62:5c:
         59:be:fc:4f:69:27:f8:a6:26:7b:bf:94:c8:9e:31:1b:3f:1d:
         17:6a:b0:78:a5:9b:d7:f6:65:a1:83:ec:7b:57:69:e7:21:02:
         d8:78:23:95:77:57:b5:82:78:19:8b:45:7c:b6:93:57:f1:64:
         b7:9e:16:fa:37:e6:f7:fc:9a:ec:ad:cb:e0:b2:1f:1d:80:ba:
         13:b4:e9:30:5b:b1:d6:45:7b:4d:5d:23:87:1b:fb:19:b8:33:
         e6:1f:2b:fc:ce:8a:3c:8d:e8:c7:2b:43:f8:4e:dd:77:27:8b:
         d6:da:8d:04:24:51:63:53:ac:68:38:8e:97:38:90:e5:58:eb:
         0f:d6:99:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxqAx+2t6X5ud39t4cjhbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNmJmNjBlYjA4ZjFlMjNhYmE4YmE3OTdjMTE3MjQ0NGNl
MTViNzEwHhcNMjUwMjE2MjIwMDA3WhcNMjUwMjE3MjIwMDA3WjAzMTEwLwYDVQQD
EygyZGU4NmIyMmQxMGVjMjE5M2VhYWNlNDhkMmZlYWUwZWUzYjc5MjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/qTJaRfE2QUiJ9gMaMZdOkURs3k
ZX8BT7tzwb6ijjBFqTW0mn0J9rCnx2cQWNtM6uPF9TsXmVugBl/TF+balagxzBbH
VT8E+Cz4TxeFTqRcJik1vSgsIkg0cRDGiTwVHKyM1DPFsFhMRwVe36mRE1INLczn
8+L3XiqSC4DuF7SC4d5dEDMtNN6F3jS1YjTc5xmuXaXPe3zPlrnjVSD8MNaOkFeL
gSAlw1vme9kqPg36r+zBhujGCJjN04BrtwLHZDmCtpReDnv+YacYiZ2T9TCQwg71
YAduqUgx0K7HZAB2DNvFbzVROPAMW4H9POk/F77JWvvpcTs7PbRuUF/JCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3oayLRDsIZPqrOSNL+rg7jt5ITMB8GA1UdIwQY
MBaAFM1r9g6wjx4jq6i6eXwRckRM4VtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveld2MkRyQ1BIaU9ycUxwNWZCRnlSRXpoVzNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lODc1NjctNmRkOC00YTYwLTkyMWUt
MmEwNzIyYWUxNjQ0LzEveld2MkRyQ1BIaU9ycUxwNWZCRnlSRXpoVzNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9lODc1NjctNmRkOC00YTYwLTkyMWUtMmEwNzIyYWUxNjQ0
LzEveld2MkRyQ1BIaU9ycUxwNWZCRnlSRXpoVzNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCRz/j/y
iLe/Bk3gaI4rU54HVtwDfN6Wy9U40CpKkjN1CI3wKvnUZGgebvgAs6/ZVhCo462n
WeINnjHNl7HkIwh4uLBactKv5Rq0Jg5ZN5Wh/Txn5a3DI2eoXD37APQ4qBFGIAxc
SuMgGzWLJA/H3xP6UJdPfQRFiOI8eGJcWb78T2kn+KYme7+UyJ4xGz8dF2qweKWb
1/ZloYPse1dp5yEC2HgjlXdXtYJ4GYtFfLaTV/Fkt54W+jfm9/ya7K3L4LIfHYC6
E7TpMFux1kV7TV0jhxv7Gbgz5h8r/M6KPI3oxytD+E7ddyeL1tqNBCRRY1OsaDiO
lziQ5VjrD9aZ+Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:57 2025 by rpki-client