Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/36f478-1826-44cf-8dd7-aa41db6ce4f9/1/Ji78PF7gPcXRlJTTqlCOJTnraQY.mft
File:                     Ji78PF7gPcXRlJTTqlCOJTnraQY.mft (raw, json)
Hash identifier:          n4Dw9cylyB8IAUhaaY9BFGpkgKmUdsCd0YaLeo1Ap9Y=
Subject key identifier:   71:6D:23:FE:5C:5F:3D:27:12:09:89:33:31:42:0D:06:F2:73:7E:13
Authority key identifier: 26:2E:FC:3C:5E:E0:3D:C5:D1:94:94:D3:AA:50:8E:25:39:EB:69:06
Certificate issuer:       /CN=262efc3c5ee03dc5d19494d3aa508e2539eb6906
Certificate serial:       0195116C4129F9E350F018B860770401FADC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ji78PF7gPcXRlJTTqlCOJTnraQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/36f478-1826-44cf-8dd7-aa41db6ce4f9/1/Ji78PF7gPcXRlJTTqlCOJTnraQY.mft
Manifest number:          02CD
Signing time:             Mon 17 Feb 2025 01:01:01 +0000
Manifest this update:     Mon 17 Feb 2025 01:01:01 +0000
Manifest next update:     Tue 18 Feb 2025 01:01:01 +0000
Files and hashes:         1: Ji78PF7gPcXRlJTTqlCOJTnraQY.crl (hash: XxsYmw4BzFIX07NFrWwj86gzJqTyxtVopQEOSPpR0Jo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/36f478-1826-44cf-8dd7-aa41db6ce4f9/1/Ji78PF7gPcXRlJTTqlCOJTnraQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/36f478-1826-44cf-8dd7-aa41db6ce4f9/1/Ji78PF7gPcXRlJTTqlCOJTnraQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ji78PF7gPcXRlJTTqlCOJTnraQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:6c:41:29:f9:e3:50:f0:18:b8:60:77:04:01:fa:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=262efc3c5ee03dc5d19494d3aa508e2539eb6906
        Validity
            Not Before: Feb 17 01:01:01 2025 GMT
            Not After : Feb 18 01:01:01 2025 GMT
        Subject: CN=716d23fe5c5f3d271209893331420d06f2737e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a8:cf:fc:b5:2b:8b:6a:5c:e2:0f:1c:f2:6e:
                    66:9e:12:a6:58:bb:29:01:1c:9f:60:cd:53:e3:8f:
                    af:1c:c1:f3:d0:6c:c8:e3:3e:2a:af:70:6c:d4:8e:
                    ad:7e:b1:b7:5a:89:4b:6f:ac:1b:90:a8:f5:97:13:
                    21:2d:fe:58:2d:bf:2a:ce:47:5b:06:43:60:2f:ee:
                    6f:84:7d:d1:be:cb:80:21:00:46:69:9c:27:26:5d:
                    f6:58:6b:47:6f:98:15:32:71:40:39:be:34:56:08:
                    5c:63:c1:9c:0c:1a:9a:af:ba:ab:eb:14:ce:d4:e3:
                    fd:34:e9:81:a3:5d:92:83:68:82:ba:5d:55:21:39:
                    8a:de:64:ed:9c:14:3e:d9:93:d7:8a:e3:2b:ec:3f:
                    ac:65:e5:fc:8b:8b:f1:68:a0:26:25:e2:c2:6a:54:
                    63:71:a8:0a:7e:72:6f:dc:7f:52:ac:f2:eb:dd:4d:
                    18:fb:3c:f7:98:a4:42:cd:88:cb:79:00:33:22:b3:
                    c6:55:97:73:a7:a4:8d:cb:8c:ba:b8:ef:91:f1:14:
                    9a:15:c7:96:04:37:c8:08:e6:db:70:4f:2b:16:9f:
                    95:ad:41:d2:e2:47:e8:53:9b:b2:3a:5a:ec:32:d6:
                    44:d4:bb:42:65:cc:91:c0:75:6e:3f:8e:2d:f4:bd:
                    25:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:6D:23:FE:5C:5F:3D:27:12:09:89:33:31:42:0D:06:F2:73:7E:13
            X509v3 Authority Key Identifier:
                keyid:26:2E:FC:3C:5E:E0:3D:C5:D1:94:94:D3:AA:50:8E:25:39:EB:69:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ji78PF7gPcXRlJTTqlCOJTnraQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/36f478-1826-44cf-8dd7-aa41db6ce4f9/1/Ji78PF7gPcXRlJTTqlCOJTnraQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/36f478-1826-44cf-8dd7-aa41db6ce4f9/1/Ji78PF7gPcXRlJTTqlCOJTnraQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:29:f8:d0:9c:fd:62:2a:e2:8d:01:78:b5:94:7e:b1:da:f5:
         94:07:3f:c9:db:fa:f0:ef:3b:5e:de:9c:f8:d4:31:50:1f:ee:
         b5:c3:02:c7:ea:ed:95:8d:87:a0:97:60:37:67:b1:96:fe:7a:
         7b:1b:fe:7d:7b:54:91:0e:aa:38:68:49:df:80:f9:7e:d4:27:
         e4:9f:1e:56:3b:99:d0:6f:25:7d:44:7d:69:cd:83:75:97:2e:
         17:d2:52:b0:9f:b9:e6:eb:cc:6a:2e:2b:83:bc:16:6b:a5:35:
         fa:0f:69:f1:fa:45:27:ad:0c:73:65:64:a5:d7:c2:e3:9b:f1:
         b6:61:0d:0e:28:29:37:0b:d3:c3:f5:74:f7:89:af:fb:1c:9c:
         f2:3e:d9:e0:c1:c0:cf:1e:db:c8:bb:d1:cf:20:db:84:f6:4b:
         fe:d7:fb:55:ea:6e:5f:92:15:76:4f:e7:62:fb:c3:90:01:19:
         47:2e:13:da:cf:7c:2f:c8:57:55:9f:42:af:80:f2:40:b6:f8:
         5b:96:89:af:1c:1f:57:ad:ec:39:0e:2e:e5:78:0d:78:9b:01:
         d6:98:8d:13:43:da:51:63:c8:a2:da:82:fd:cf:d8:2c:b9:64:
         a7:3c:b8:82:1a:ad:6c:86:ae:d0:0b:cd:53:7b:32:12:a3:cf:
         cb:cd:54:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:14 2025 by rpki-client