Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/e4753c-658b-4d7c-8b3c-b13829a98c57/1/biMhBwGL_QMoH3lexopxGcWA7CU.mft
File:                     biMhBwGL_QMoH3lexopxGcWA7CU.mft (raw, json)
Hash identifier:          qjRwToiPs3Y8GTyU/WABfYUDQ1bbZpJNK94RmzJVlRA=
Subject key identifier:   1D:BA:2E:A5:35:F7:15:E4:51:44:19:EA:4B:B1:EF:A5:B6:36:18:BE
Authority key identifier: 6E:23:21:07:01:8B:FD:03:28:1F:79:5E:C6:8A:71:19:C5:80:EC:25
Certificate issuer:       /CN=6e232107018bfd03281f795ec68a7119c580ec25
Certificate serial:       019650485B745DDF5C37C978B3CF5D2D11E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/biMhBwGL_QMoH3lexopxGcWA7CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/e4753c-658b-4d7c-8b3c-b13829a98c57/1/biMhBwGL_QMoH3lexopxGcWA7CU.mft
Manifest number:          14F8
Signing time:             Sat 19 Apr 2025 23:00:41 +0000
Manifest this update:     Sat 19 Apr 2025 23:00:41 +0000
Manifest next update:     Sun 20 Apr 2025 23:00:41 +0000
Files and hashes:         1: biMhBwGL_QMoH3lexopxGcWA7CU.crl (hash: T3m78KCpcPniV2mDzCT5eXrEXxEeL/ykLo0+7K1fUko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/e4753c-658b-4d7c-8b3c-b13829a98c57/1/biMhBwGL_QMoH3lexopxGcWA7CU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/e4753c-658b-4d7c-8b3c-b13829a98c57/1/biMhBwGL_QMoH3lexopxGcWA7CU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/biMhBwGL_QMoH3lexopxGcWA7CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:48:5b:74:5d:df:5c:37:c9:78:b3:cf:5d:2d:11:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e232107018bfd03281f795ec68a7119c580ec25
        Validity
            Not Before: Apr 19 23:00:41 2025 GMT
            Not After : Apr 20 23:00:41 2025 GMT
        Subject: CN=1dba2ea535f715e4514419ea4bb1efa5b63618be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8f:18:d8:be:94:7c:39:f5:08:0c:66:d0:8f:
                    7b:b3:e8:ed:84:31:2b:5f:33:bb:9d:af:be:46:1d:
                    f3:43:e2:f3:d9:64:9c:2d:29:6b:6e:d4:9d:7f:7d:
                    ae:64:86:eb:dc:36:6b:63:f9:af:fc:ce:ec:b9:b7:
                    38:bd:ac:78:b4:9b:91:ac:6f:56:95:c4:d1:f6:ef:
                    ef:03:45:a3:f7:5f:7e:a2:fc:56:54:41:c3:6c:b3:
                    a3:b3:27:bf:6f:16:06:05:1d:c6:68:7d:ec:c8:cf:
                    52:fd:2d:5a:e8:60:bb:6c:05:1a:7a:e3:fe:ac:28:
                    be:a8:71:a8:67:9a:37:84:38:9a:6f:5d:b9:55:a7:
                    74:ad:de:3c:99:96:b4:90:2c:9c:14:aa:05:49:8e:
                    46:13:77:ea:11:83:8d:9c:ed:e8:28:09:ef:a1:61:
                    5f:e5:58:f3:5e:e0:1e:7e:bf:c4:1d:38:32:1d:ed:
                    35:b1:da:53:8a:a3:45:b7:2d:b0:99:f1:6a:b8:d1:
                    5d:42:53:70:96:44:0c:be:50:99:be:34:fd:c4:5d:
                    14:54:3f:a0:5b:fd:a8:12:65:fb:26:aa:5a:10:e3:
                    df:de:25:e7:70:f7:8c:0c:6b:06:41:a2:23:dd:2b:
                    db:79:d4:5a:08:5f:f6:8b:81:23:75:4b:ee:6f:c2:
                    a9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BA:2E:A5:35:F7:15:E4:51:44:19:EA:4B:B1:EF:A5:B6:36:18:BE
            X509v3 Authority Key Identifier:
                keyid:6E:23:21:07:01:8B:FD:03:28:1F:79:5E:C6:8A:71:19:C5:80:EC:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biMhBwGL_QMoH3lexopxGcWA7CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e4753c-658b-4d7c-8b3c-b13829a98c57/1/biMhBwGL_QMoH3lexopxGcWA7CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e4753c-658b-4d7c-8b3c-b13829a98c57/1/biMhBwGL_QMoH3lexopxGcWA7CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:60:dd:d4:27:33:6e:4e:9f:0d:40:05:40:3d:cf:f6:1b:4e:
         46:a7:e7:86:1e:a0:fb:01:b1:45:65:25:67:d8:71:cd:8d:e8:
         e9:de:88:8e:ed:6b:f4:da:f5:84:84:96:66:ae:1b:7a:46:e9:
         24:98:2f:21:b0:c7:5b:fc:d3:a7:75:96:5b:21:58:d1:b4:f2:
         c4:ed:ff:a0:fc:90:3b:5d:32:0e:09:84:78:3b:84:f6:9b:ce:
         35:20:e2:9d:80:78:a1:e5:85:2f:c2:ff:2e:70:c8:e3:59:ac:
         c0:53:d9:1f:a6:b0:ff:71:ac:ff:f3:48:53:ff:88:e2:5e:8f:
         2b:4d:b6:7e:ea:b9:3e:c2:d2:05:e9:07:b2:09:d4:d5:e0:bb:
         4f:84:3c:31:f3:fa:4f:1a:c0:ed:1a:6b:22:93:41:c6:4f:c3:
         da:97:e6:4d:0a:0f:37:bd:8b:83:0a:38:72:bc:5c:1a:aa:bb:
         2b:2e:49:df:6e:57:5e:5d:45:3e:d2:24:10:6e:a2:13:07:16:
         93:56:8b:88:53:f6:f5:37:16:e4:b7:fd:d4:f6:87:f6:e9:64:
         bb:d3:22:f5:cb:97:58:29:8f:ae:75:0b:53:c5:81:27:e1:40:
         c4:c6:47:bb:01:62:d8:35:d3:c7:04:90:0c:a7:58:57:4a:d9:
         e1:12:40:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQSFt0Xd9cN8l4s89dLRHlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlMjMyMTA3MDE4YmZkMDMyODFmNzk1ZWM2OGE3MTE5YzU4
MGVjMjUwHhcNMjUwNDE5MjMwMDQxWhcNMjUwNDIwMjMwMDQxWjAzMTEwLwYDVQQD
EygxZGJhMmVhNTM1ZjcxNWU0NTE0NDE5ZWE0YmIxZWZhNWI2MzYxOGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY8Y2L6UfDn1CAxm0I97s+jthDEr
XzO7na++Rh3zQ+Lz2WScLSlrbtSdf32uZIbr3DZrY/mv/M7subc4vax4tJuRrG9W
lcTR9u/vA0Wj919+ovxWVEHDbLOjsye/bxYGBR3GaH3syM9S/S1a6GC7bAUaeuP+
rCi+qHGoZ5o3hDiab125Vad0rd48mZa0kCycFKoFSY5GE3fqEYONnO3oKAnvoWFf
5VjzXuAefr/EHTgyHe01sdpTiqNFty2wmfFquNFdQlNwlkQMvlCZvjT9xF0UVD+g
W/2oEmX7JqpaEOPf3iXncPeMDGsGQaIj3SvbedRaCF/2i4EjdUvub8KpswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB26LqU19xXkUUQZ6kux76W2Nhi+MB8GA1UdIwQY
MBaAFG4jIQcBi/0DKB95XsaKcRnFgOwlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmlNaEJ3R0xfUU1vSDNsZXhvcHhHY1dBN0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9lNDc1M2MtNjU4Yi00ZDdjLThiM2Mt
YjEzODI5YTk4YzU3LzEvYmlNaEJ3R0xfUU1vSDNsZXhvcHhHY1dBN0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9lNDc1M2MtNjU4Yi00ZDdjLThiM2MtYjEzODI5YTk4YzU3
LzEvYmlNaEJ3R0xfUU1vSDNsZXhvcHhHY1dBN0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1mDd1Ccz
bk6fDUAFQD3P9htORqfnhh6g+wGxRWUlZ9hxzY3o6d6Iju1r9Nr1hISWZq4bekbp
JJgvIbDHW/zTp3WWWyFY0bTyxO3/oPyQO10yDgmEeDuE9pvONSDinYB4oeWFL8L/
LnDI41mswFPZH6aw/3Gs//NIU/+I4l6PK022fuq5PsLSBekHsgnU1eC7T4Q8MfP6
TxrA7RprIpNBxk/D2pfmTQoPN72Lgwo4crxcGqq7Ky5J325XXl1FPtIkEG6iEwcW
k1aLiFP29TcW5Lf91PaH9ulku9Mi9cuXWCmPrnULU8WBJ+FAxMZHuwFi2DXTxwSQ
DKdYV0rZ4RJASw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:32 2025 by rpki-client