Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
File:                     kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft (raw, json)
Hash identifier:          CVuzkEQ8SLXhWA1g4Qz/SX9/axIIKrjtvOCzxzURqgc=
Subject key identifier:   D1:EA:16:10:AE:FE:3C:9D:B4:3F:05:E1:7D:11:49:7E:64:15:27:1A
Authority key identifier: 91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
Certificate issuer:       /CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Certificate serial:       019510C6B2DD8E34DB2CC65437D07A079CF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
Manifest number:          0B3B
Signing time:             Sun 16 Feb 2025 22:00:12 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:12 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:12 +0000
Files and hashes:         1: kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl (hash: NpbNU4YmxIwVWlstroKX5NNBhXGG76nEFBuxqRzi/pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c6:b2:dd:8e:34:db:2c:c6:54:37:d0:7a:07:9c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9143c5f48c77a79c985f5e5362e082ad54e23063
        Validity
            Not Before: Feb 16 22:00:12 2025 GMT
            Not After : Feb 17 22:00:12 2025 GMT
        Subject: CN=d1ea1610aefe3c9db43f05e17d11497e6415271a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:fc:08:1b:9d:4a:b4:f1:13:00:02:ac:9c:3a:
                    00:1e:9a:38:38:38:94:3d:11:57:84:ed:34:16:1c:
                    07:76:fa:10:a9:82:7f:a5:75:2c:72:b5:a2:f8:c1:
                    35:af:90:4c:92:72:b2:a2:81:ce:54:0e:c8:45:bd:
                    4f:84:21:5e:74:a3:56:29:5a:b9:d0:02:9e:07:be:
                    e2:75:04:4d:b7:19:59:69:ef:47:a8:d1:9c:d0:03:
                    61:21:8d:f8:07:00:37:52:89:1d:59:8b:7d:c5:69:
                    e9:af:51:76:4b:c8:25:b2:48:1e:6e:eb:d3:98:a5:
                    ed:b6:09:c7:05:1f:b2:9d:eb:25:e7:16:b7:fb:e2:
                    a5:b4:93:a5:51:d3:09:8a:01:ee:c9:b1:9c:45:4b:
                    c7:11:87:66:4a:ef:11:53:0c:34:56:c6:45:f1:fe:
                    09:33:f8:9e:12:9a:84:49:0a:1f:ad:de:81:4e:52:
                    10:f4:2b:ca:68:2b:95:cf:b5:fd:4c:5b:6d:2e:2a:
                    df:27:77:ec:82:41:b9:58:df:95:7d:86:52:f6:e6:
                    90:30:7b:2b:b9:25:65:57:d9:58:fe:33:73:19:4d:
                    29:39:5c:f8:b8:60:10:67:2f:22:1c:60:3a:b8:2f:
                    5a:73:27:93:d7:a4:0a:11:07:57:11:71:13:21:ed:
                    0f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:EA:16:10:AE:FE:3C:9D:B4:3F:05:E1:7D:11:49:7E:64:15:27:1A
            X509v3 Authority Key Identifier:
                keyid:91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:71:f2:1a:a5:7b:1a:24:6d:20:cf:78:16:24:7a:3d:0a:ea:
         1a:5c:ed:8f:c4:e6:6b:12:74:30:56:22:d3:e2:dd:67:85:76:
         9d:96:b5:66:e1:89:9a:0e:59:7c:46:a3:19:d8:c0:9f:de:3e:
         38:a3:0c:c7:a3:a2:43:9f:e0:29:75:0f:df:4f:91:c1:cb:f2:
         7b:62:dd:00:3a:82:79:8c:18:b8:9e:b4:d1:67:ed:70:5a:11:
         8d:b1:a7:08:1b:e2:cb:a0:da:2c:5c:be:4c:1c:f3:22:7d:0a:
         49:af:ba:d0:92:3b:3e:c2:f1:f6:aa:27:d2:ae:bd:4d:6e:cd:
         de:15:f6:75:18:ee:b8:40:10:c3:bc:f1:21:db:63:e6:40:5f:
         69:f2:ac:e5:fe:43:02:ee:d3:a2:9b:dc:02:c9:83:a3:f1:a5:
         09:10:db:90:82:15:36:e5:8a:a7:da:04:e2:1b:01:f0:16:df:
         f1:5a:2b:95:da:07:35:6a:98:65:1e:03:0d:0e:e5:bd:09:42:
         58:79:46:eb:fc:5a:fa:27:a5:bc:88:75:d0:52:a0:2b:b1:af:
         9b:ac:97:d4:7f:3a:57:86:07:98:91:3f:66:66:e5:cc:27:cf:
         5f:08:6e:a6:6f:a0:e2:55:f4:c1:e3:87:18:3b:99:00:9e:b5:
         84:ee:88:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxrLdjjTbLMZUN9B6B5zzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNDNjNWY0OGM3N2E3OWM5ODVmNWU1MzYyZTA4MmFkNTRl
MjMwNjMwHhcNMjUwMjE2MjIwMDEyWhcNMjUwMjE3MjIwMDEyWjAzMTEwLwYDVQQD
EyhkMWVhMTYxMGFlZmUzYzlkYjQzZjA1ZTE3ZDExNDk3ZTY0MTUyNzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fwIG51KtPETAAKsnDoAHpo4ODiU
PRFXhO00FhwHdvoQqYJ/pXUscrWi+ME1r5BMknKyooHOVA7IRb1PhCFedKNWKVq5
0AKeB77idQRNtxlZae9HqNGc0ANhIY34BwA3UokdWYt9xWnpr1F2S8glskgebuvT
mKXttgnHBR+ynesl5xa3++KltJOlUdMJigHuybGcRUvHEYdmSu8RUww0VsZF8f4J
M/ieEpqESQofrd6BTlIQ9CvKaCuVz7X9TFttLirfJ3fsgkG5WN+VfYZS9uaQMHsr
uSVlV9lY/jNzGU0pOVz4uGAQZy8iHGA6uC9acyeT16QKEQdXEXETIe0P/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHqFhCu/jydtD8F4X0RSX5kFScaMB8GA1UdIwQY
MBaAFJFDxfSMd6ecmF9eU2Lggq1U4jBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VQRjlJeDNwNXlZWDE1VFl1Q0NyVlRpTUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9lYmM4MDQtZTNjNi00MGU2LWJmYmUt
YmRmMzY0YmE3N2NkLzEva1VQRjlJeDNwNXlZWDE1VFl1Q0NyVlRpTUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9lYmM4MDQtZTNjNi00MGU2LWJmYmUtYmRmMzY0YmE3N2Nk
LzEva1VQRjlJeDNwNXlZWDE1VFl1Q0NyVlRpTUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbnHyGqV7
GiRtIM94FiR6PQrqGlztj8TmaxJ0MFYi0+LdZ4V2nZa1ZuGJmg5ZfEajGdjAn94+
OKMMx6OiQ5/gKXUP30+Rwcvye2LdADqCeYwYuJ600WftcFoRjbGnCBviy6DaLFy+
TBzzIn0KSa+60JI7PsLx9qon0q69TW7N3hX2dRjuuEAQw7zxIdtj5kBfafKs5f5D
Au7TopvcAsmDo/GlCRDbkIIVNuWKp9oE4hsB8Bbf8VorldoHNWqYZR4DDQ7lvQlC
WHlG6/xa+ielvIh10FKgK7Gvm6yX1H86V4YHmJE/ZmblzCfPXwhupm+g4lX0weOH
GDuZAJ61hO6INg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:16 2025 by rpki-client