Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
File:                     phvll6k-axrZQXjQPo6MFVcmeMc.mft (raw, json)
Hash identifier:          oGfOThMe2NPybuPUqBCqHu6uhz4Kd2fOFCaCt8aERWs=
Subject key identifier:   43:A3:67:46:89:94:01:95:66:C6:EF:8E:37:B9:36:1A:06:C2:36:15
Authority key identifier: A6:1B:E5:97:A9:3E:6B:1A:D9:41:78:D0:3E:8E:8C:15:57:26:78:C7
Certificate issuer:       /CN=a61be597a93e6b1ad94178d03e8e8c15572678c7
Certificate serial:       01964EC7F96F577A9DCD2F28E1C456083799
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
Manifest number:          02DF
Signing time:             Sat 19 Apr 2025 16:00:50 +0000
Manifest this update:     Sat 19 Apr 2025 16:00:50 +0000
Manifest next update:     Sun 20 Apr 2025 16:00:50 +0000
Files and hashes:         1: phvll6k-axrZQXjQPo6MFVcmeMc.crl (hash: 5fjMDUqmBFjorDypLqrFdr3nx9MNn6zpc3WyIDKvZAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:c7:f9:6f:57:7a:9d:cd:2f:28:e1:c4:56:08:37:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a61be597a93e6b1ad94178d03e8e8c15572678c7
        Validity
            Not Before: Apr 19 16:00:50 2025 GMT
            Not After : Apr 20 16:00:50 2025 GMT
        Subject: CN=43a367468994019566c6ef8e37b9361a06c23615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:18:8b:6d:d0:11:cf:8d:23:75:36:86:f1:d1:
                    27:53:a1:50:ad:1d:23:af:a9:38:31:3a:09:9b:10:
                    a4:0d:6f:5c:a1:01:54:9a:f8:c5:5d:b6:41:68:2d:
                    46:97:d8:07:0e:11:ed:3d:b0:08:f1:78:d5:a6:ae:
                    88:13:47:6d:16:e5:e0:e9:52:c8:be:b5:6e:6c:68:
                    2e:ce:96:7c:6d:79:35:fa:be:fe:99:42:8e:a3:7f:
                    6e:e7:93:b3:f7:f9:76:27:5f:62:61:81:06:55:b4:
                    ed:ed:94:40:73:74:20:ff:50:2e:38:b7:e6:13:08:
                    b0:9c:98:8b:ef:5a:34:50:8b:7a:7f:5b:94:66:95:
                    42:9a:29:79:43:a2:2d:86:9d:11:ff:98:71:c8:f7:
                    d2:75:a7:e6:27:31:24:1b:2c:bc:f8:25:cd:c0:c7:
                    d7:95:ae:2c:94:b1:50:d2:0c:1d:04:e2:03:c7:4e:
                    de:32:8d:18:36:90:7f:3b:c8:90:e3:a3:66:79:2a:
                    75:bb:a9:be:94:bf:26:81:a8:eb:02:c3:da:de:c9:
                    5c:6a:80:e3:09:cd:48:29:f5:a7:76:0d:94:df:9a:
                    0c:37:9c:07:df:34:68:b5:88:4d:9c:b4:bd:d7:d0:
                    dc:26:2a:17:3f:b6:fe:1a:bf:bc:5a:b1:50:14:22:
                    30:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A3:67:46:89:94:01:95:66:C6:EF:8E:37:B9:36:1A:06:C2:36:15
            X509v3 Authority Key Identifier:
                keyid:A6:1B:E5:97:A9:3E:6B:1A:D9:41:78:D0:3E:8E:8C:15:57:26:78:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:83:d0:3d:bf:ac:44:0b:73:27:2d:f7:bc:ab:6f:c6:d7:5f:
         08:b9:2a:de:7b:a8:e5:68:0e:d7:03:ed:d8:be:3b:db:26:6f:
         d9:4b:c6:77:49:99:57:b9:e9:f8:41:93:f1:f8:36:cf:b7:67:
         97:3e:ea:8c:d8:5e:22:5c:f4:31:58:ee:52:2a:aa:4f:c2:99:
         09:3c:ae:4c:02:4a:4f:84:73:d0:70:b5:d3:f7:a2:ec:d2:a9:
         5a:5b:3b:2b:63:63:37:17:3a:9c:a9:f8:34:fa:1e:bc:9b:d2:
         76:b4:9d:94:83:27:73:c5:7c:ea:08:9a:cf:d4:b2:5d:9a:be:
         b5:7c:4e:16:0a:d0:6f:1b:f7:51:00:2c:d4:ee:70:2d:cd:ac:
         ad:fb:cf:e3:0e:b1:63:4b:cc:c2:4d:59:79:5a:b4:4c:10:43:
         d6:0d:52:86:26:4c:91:07:b6:a3:8e:52:b0:f8:94:fd:0d:16:
         c1:b6:b8:ad:cb:32:f6:4e:67:0c:23:37:ad:43:a3:fc:42:b8:
         da:54:87:e7:9d:c2:9b:b7:a2:ad:ed:cb:c9:50:d6:29:94:51:
         c5:4d:40:7d:13:4b:2c:5d:82:fd:49:16:f9:ef:9e:63:da:63:
         75:5a:0a:fc:9d:fa:18:bf:7e:c0:7a:2a:a0:63:2b:8c:9d:26:
         1e:69:e9:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOx/lvV3qdzS8o4cRWCDeZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MWJlNTk3YTkzZTZiMWFkOTQxNzhkMDNlOGU4YzE1NTcy
Njc4YzcwHhcNMjUwNDE5MTYwMDUwWhcNMjUwNDIwMTYwMDUwWjAzMTEwLwYDVQQD
Eyg0M2EzNjc0Njg5OTQwMTk1NjZjNmVmOGUzN2I5MzYxYTA2YzIzNjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhiLbdARz40jdTaG8dEnU6FQrR0j
r6k4MToJmxCkDW9coQFUmvjFXbZBaC1Gl9gHDhHtPbAI8XjVpq6IE0dtFuXg6VLI
vrVubGguzpZ8bXk1+r7+mUKOo39u55Oz9/l2J19iYYEGVbTt7ZRAc3Qg/1AuOLfm
EwiwnJiL71o0UIt6f1uUZpVCmil5Q6Ithp0R/5hxyPfSdafmJzEkGyy8+CXNwMfX
la4slLFQ0gwdBOIDx07eMo0YNpB/O8iQ46NmeSp1u6m+lL8mgajrAsPa3slcaoDj
Cc1IKfWndg2U35oMN5wH3zRotYhNnLS919DcJioXP7b+Gr+8WrFQFCIwYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOjZ0aJlAGVZsbvjje5NhoGwjYVMB8GA1UdIwQY
MBaAFKYb5ZepPmsa2UF40D6OjBVXJnjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGh2bGw2ay1heHJaUVhqUVBvNk1GVmNtZU1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC81NmEwZWYtZjZiOS00MjQwLTljZGMt
YzFlNGNjYjE1NmVlLzEvcGh2bGw2ay1heHJaUVhqUVBvNk1GVmNtZU1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC81NmEwZWYtZjZiOS00MjQwLTljZGMtYzFlNGNjYjE1NmVl
LzEvcGh2bGw2ay1heHJaUVhqUVBvNk1GVmNtZU1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAboPQPb+s
RAtzJy33vKtvxtdfCLkq3nuo5WgO1wPt2L472yZv2UvGd0mZV7np+EGT8fg2z7dn
lz7qjNheIlz0MVjuUiqqT8KZCTyuTAJKT4Rz0HC10/ei7NKpWls7K2NjNxc6nKn4
NPoevJvSdrSdlIMnc8V86giaz9SyXZq+tXxOFgrQbxv3UQAs1O5wLc2srfvP4w6x
Y0vMwk1ZeVq0TBBD1g1ShiZMkQe2o45SsPiU/Q0Wwba4rcsy9k5nDCM3rUOj/EK4
2lSH553Cm7eire3LyVDWKZRRxU1AfRNLLF2C/UkW+e+eY9pjdVoK/J36GL9+wHoq
oGMrjJ0mHmnpnA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:51:31 2025 by rpki-client