Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft
File:                     wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft (raw, json)
Hash identifier:          9WFu/KwcHnXf4gTz5uRc5hQ0ltSSjcHK2nK6t/Bgn/o=
Subject key identifier:   75:47:4B:2B:7E:D3:E5:22:31:60:34:B6:2A:5A:6F:D3:DE:54:3C:8C
Authority key identifier: C1:2C:07:2C:35:90:9D:52:53:22:B0:27:58:6B:AC:FA:D1:19:F1:7D
Certificate issuer:       /CN=c12c072c35909d525322b027586bacfad119f17d
Certificate serial:       0194C3BEB0E06CABFCF36B8CE8CA170D9A17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSwHLDWQnVJTIrAnWGus-tEZ8X0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft
Manifest number:          0250
Signing time:             Sat 01 Feb 2025 23:00:41 +0000
Manifest this update:     Sat 01 Feb 2025 23:00:41 +0000
Manifest next update:     Sun 02 Feb 2025 23:00:41 +0000
Files and hashes:         1: wSwHLDWQnVJTIrAnWGus-tEZ8X0.crl (hash: +x2F3IEn7ZjcO4EgweMOqQfEZqHjAencTerZTyweACk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wSwHLDWQnVJTIrAnWGus-tEZ8X0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 23:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:be:b0:e0:6c:ab:fc:f3:6b:8c:e8:ca:17:0d:9a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c12c072c35909d525322b027586bacfad119f17d
        Validity
            Not Before: Feb  1 23:00:41 2025 GMT
            Not After : Feb  2 23:00:41 2025 GMT
        Subject: CN=75474b2b7ed3e522316034b62a5a6fd3de543c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f3:e1:39:de:cc:f9:3f:08:28:2b:3c:6e:53:
                    80:73:c5:6f:cd:89:bc:ec:d8:91:62:1c:03:89:f2:
                    a5:b2:b9:8d:30:15:33:ae:59:42:d3:f5:41:df:21:
                    91:20:9b:f2:1c:a8:59:6f:38:63:13:ec:a3:d6:78:
                    8e:c5:ea:32:3e:00:34:00:6b:81:80:a9:a5:d9:3f:
                    7f:b9:5a:9c:1e:6c:6a:fe:0f:4e:54:9a:0d:63:b6:
                    63:a3:9e:90:01:73:ff:d0:2e:98:0b:e3:54:68:f8:
                    a6:1d:68:b8:51:8e:07:38:56:4e:41:f3:18:17:9f:
                    f6:38:36:e0:b3:bd:dd:78:f3:9f:ae:e2:29:37:3c:
                    9d:66:43:62:00:e7:d9:13:b3:b3:1a:1b:ab:e2:3a:
                    1d:78:c0:3e:9e:e3:fa:d9:22:6e:56:ba:1c:8f:07:
                    dc:1b:01:d4:97:e9:3b:5e:2b:97:d9:93:d4:83:ac:
                    0b:80:4e:b4:e0:26:bf:34:09:89:d1:15:60:7a:b0:
                    5b:f4:a2:65:ad:b1:2e:1d:3c:ea:eb:9f:65:55:86:
                    30:93:4a:91:0a:b3:b9:af:96:6c:55:68:bd:ff:9b:
                    57:4e:62:8d:3a:69:08:ef:72:df:05:83:8d:1c:cc:
                    f0:88:ab:af:d9:34:fd:a8:8e:6f:8c:af:64:37:75:
                    c6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:47:4B:2B:7E:D3:E5:22:31:60:34:B6:2A:5A:6F:D3:DE:54:3C:8C
            X509v3 Authority Key Identifier:
                keyid:C1:2C:07:2C:35:90:9D:52:53:22:B0:27:58:6B:AC:FA:D1:19:F1:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSwHLDWQnVJTIrAnWGus-tEZ8X0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c9:5b:a1:0b:04:ee:70:5f:a4:0d:eb:72:dc:74:bf:dd:58:
         d4:79:00:82:8f:5d:00:60:64:db:33:d9:ee:a6:e0:8b:17:99:
         ce:eb:c8:5e:97:f0:70:4a:75:3e:dc:96:ba:9d:40:15:ac:df:
         2b:33:3d:07:ce:8c:65:f9:c7:91:a6:b4:5d:3c:b7:a0:79:b9:
         f9:ec:2f:99:c2:f5:32:82:c5:83:c1:73:13:42:3c:f1:4e:f3:
         05:80:ed:b1:79:f3:0a:a5:42:43:22:a7:1f:a6:f1:c6:2b:23:
         c0:4f:5f:50:cf:78:bc:46:74:f2:50:ca:cf:df:77:5c:ce:00:
         92:35:bf:15:33:ae:aa:ad:20:dd:52:0d:8e:cc:d0:ad:09:92:
         ea:b1:c8:e7:f6:bd:b8:c3:78:cc:8c:5d:29:97:18:4e:ea:4f:
         b5:fa:ee:03:3d:b0:c9:7f:39:b8:f8:87:a5:22:07:d4:7b:4b:
         a4:cd:06:d9:25:e7:d4:d3:dd:f4:9a:db:b2:7f:ff:60:0d:3e:
         7e:3c:ee:a3:fe:17:c8:4e:79:cf:63:94:2f:ff:c2:8b:54:97:
         bc:95:ab:a6:06:aa:34:8f:52:fb:5c:7b:e4:0a:82:12:38:12:
         8a:eb:11:c7:07:d0:e8:bf:6e:4a:9e:41:af:d0:cb:8c:ed:00:
         a8:6b:e9:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDvrDgbKv882uM6MoXDZoXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMmMwNzJjMzU5MDlkNTI1MzIyYjAyNzU4NmJhY2ZhZDEx
OWYxN2QwHhcNMjUwMjAxMjMwMDQxWhcNMjUwMjAyMjMwMDQxWjAzMTEwLwYDVQQD
Eyg3NTQ3NGIyYjdlZDNlNTIyMzE2MDM0YjYyYTVhNmZkM2RlNTQzYzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvPhOd7M+T8IKCs8blOAc8VvzYm8
7NiRYhwDifKlsrmNMBUzrllC0/VB3yGRIJvyHKhZbzhjE+yj1niOxeoyPgA0AGuB
gKml2T9/uVqcHmxq/g9OVJoNY7Zjo56QAXP/0C6YC+NUaPimHWi4UY4HOFZOQfMY
F5/2ODbgs73dePOfruIpNzydZkNiAOfZE7OzGhur4jodeMA+nuP62SJuVrocjwfc
GwHUl+k7XiuX2ZPUg6wLgE604Ca/NAmJ0RVgerBb9KJlrbEuHTzq659lVYYwk0qR
CrO5r5ZsVWi9/5tXTmKNOmkI73LfBYONHMzwiKuv2TT9qI5vjK9kN3XGEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVHSyt+0+UiMWA0tipab9PeVDyMMB8GA1UdIwQY
MBaAFMEsByw1kJ1SUyKwJ1hrrPrRGfF9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1N3SExEV1FuVkpUSXJBbldHdXMtdEVaOFgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9lZWM1MjgtZjJmZi00Y2I1LTljZGEt
ZjZiNTQ3ZmVlOGUwLzEvd1N3SExEV1FuVkpUSXJBbldHdXMtdEVaOFgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9lZWM1MjgtZjJmZi00Y2I1LTljZGEtZjZiNTQ3ZmVlOGUw
LzEvd1N3SExEV1FuVkpUSXJBbldHdXMtdEVaOFgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKclboQsE
7nBfpA3rctx0v91Y1HkAgo9dAGBk2zPZ7qbgixeZzuvIXpfwcEp1PtyWup1AFazf
KzM9B86MZfnHkaa0XTy3oHm5+ewvmcL1MoLFg8FzE0I88U7zBYDtsXnzCqVCQyKn
H6bxxisjwE9fUM94vEZ08lDKz993XM4AkjW/FTOuqq0g3VINjszQrQmS6rHI5/a9
uMN4zIxdKZcYTupPtfruAz2wyX85uPiHpSIH1HtLpM0G2SXn1NPd9Jrbsn//YA0+
fjzuo/4XyE55z2OUL//Ci1SXvJWrpgaqNI9S+1x75AqCEjgSiusRxwfQ6L9uSp5B
r9DLjO0AqGvpqA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:44 2025 by rpki-client