Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
File:                     PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft (raw, json)
Hash identifier:          ZNosJ/Fpw3yxJNtx9hC7Eg+0Tp0BU4uskaApc0SCGa4=
Subject key identifier:   0B:FE:AE:CA:CB:C2:4C:24:0F:0E:AF:80:02:AE:1E:B4:3F:C0:FD:07
Authority key identifier: 3F:21:77:A3:E8:6C:83:9C:FD:19:3D:BB:46:ED:A8:08:7D:82:14:1A
Certificate issuer:       /CN=3f2177a3e86c839cfd193dbb46eda8087d82141a
Certificate serial:       019510C69CFF8766B2AEB06E79DDB4D2BCA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
Manifest number:          1144
Signing time:             Sun 16 Feb 2025 22:00:06 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:06 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:06 +0000
Files and hashes:         1: PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl (hash: FYPJAIdnzbmU1UUnK6RnMae3JvSNxGcuWiJrPQ6TlE8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c6:9c:ff:87:66:b2:ae:b0:6e:79:dd:b4:d2:bc:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f2177a3e86c839cfd193dbb46eda8087d82141a
        Validity
            Not Before: Feb 16 22:00:06 2025 GMT
            Not After : Feb 17 22:00:06 2025 GMT
        Subject: CN=0bfeaecacbc24c240f0eaf8002ae1eb43fc0fd07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e8:b1:46:12:f9:03:8a:c0:b5:7b:73:80:da:
                    72:13:fe:9a:a5:ba:7b:fb:e0:14:06:ab:cc:93:86:
                    82:d1:1f:48:4d:04:ec:65:81:10:bd:6d:58:e9:28:
                    28:be:c6:ab:f7:89:bf:53:06:1b:a7:7d:9a:23:48:
                    e9:08:98:67:15:f2:04:00:15:ea:a5:91:61:6b:00:
                    de:7d:01:a7:c7:c0:9d:7b:bb:c1:3b:2c:78:e8:23:
                    a3:bc:6b:e8:b5:2e:67:f9:87:fc:c8:c8:a3:aa:1f:
                    7c:45:6b:81:58:1f:2a:82:5f:54:c6:1a:7b:ca:c6:
                    60:b0:40:ef:ff:c0:8d:a2:d5:78:9d:4b:60:55:d3:
                    a5:cf:fd:42:c3:52:45:85:6f:86:17:46:70:f9:af:
                    b0:60:36:9f:f9:4d:2e:40:18:c9:e5:bc:48:f7:ef:
                    d8:29:65:2e:45:c8:75:25:dc:07:14:f7:09:71:79:
                    92:37:77:c3:59:48:b0:31:97:2f:3c:2a:ba:c7:3b:
                    52:9f:00:ee:e9:d4:76:e1:9f:3a:e6:30:73:53:ec:
                    b3:38:98:47:1a:82:f1:0a:55:e0:01:04:e9:59:d1:
                    ec:79:28:c3:d6:46:4a:a8:06:4e:e2:a1:3f:5a:98:
                    1f:5d:61:2c:f4:60:45:d3:59:b6:2a:5a:11:d4:7f:
                    44:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FE:AE:CA:CB:C2:4C:24:0F:0E:AF:80:02:AE:1E:B4:3F:C0:FD:07
            X509v3 Authority Key Identifier:
                keyid:3F:21:77:A3:E8:6C:83:9C:FD:19:3D:BB:46:ED:A8:08:7D:82:14:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:b7:58:6a:89:54:5f:da:c6:03:07:55:7a:f7:66:3d:71:23:
         0d:4e:d0:12:60:35:90:9c:05:fe:20:84:2a:7e:59:a8:67:63:
         16:d2:10:6c:a3:7b:3a:3f:36:44:23:d0:67:4e:e5:76:9c:9f:
         b1:4a:c4:11:ac:d6:0f:97:86:ce:18:b3:3f:9e:9a:a6:94:fa:
         34:8a:2e:d7:2a:bc:3d:20:6c:3e:26:bf:29:00:b0:90:4b:69:
         75:b0:9b:a9:20:04:19:5f:fe:ae:8a:d8:30:85:71:51:c8:60:
         1e:cc:86:b8:29:c9:df:0c:5f:7a:c6:5b:c6:39:0e:a7:4f:c9:
         d0:2a:fa:09:4f:f8:48:26:f2:71:68:e8:6f:ed:2e:7b:de:0c:
         80:2b:82:07:6a:1d:d9:8b:34:ee:67:96:04:df:31:74:f9:a9:
         1d:7a:f0:38:bc:27:5e:6f:3f:c0:c0:4e:8d:c9:b2:88:8e:e5:
         d3:98:31:f3:2a:62:6b:92:70:46:21:f8:d1:f9:f6:ad:cd:39:
         ae:b0:91:ad:fc:63:fe:58:e8:98:ee:8e:c5:3d:b0:3b:29:1a:
         9b:7b:d1:54:03:51:97:8d:c8:ab:a6:99:11:fe:1b:e8:88:49:
         6f:aa:2c:d8:9a:70:a0:e0:f6:87:12:11:10:23:c0:c4:c3:96:
         7a:78:b5:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxpz/h2ayrrBued200rymMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMjE3N2EzZTg2YzgzOWNmZDE5M2RiYjQ2ZWRhODA4N2Q4
MjE0MWEwHhcNMjUwMjE2MjIwMDA2WhcNMjUwMjE3MjIwMDA2WjAzMTEwLwYDVQQD
EygwYmZlYWVjYWNiYzI0YzI0MGYwZWFmODAwMmFlMWViNDNmYzBmZDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOixRhL5A4rAtXtzgNpyE/6apbp7
++AUBqvMk4aC0R9ITQTsZYEQvW1Y6Sgovsar94m/UwYbp32aI0jpCJhnFfIEABXq
pZFhawDefQGnx8Cde7vBOyx46COjvGvotS5n+Yf8yMijqh98RWuBWB8qgl9Uxhp7
ysZgsEDv/8CNotV4nUtgVdOlz/1Cw1JFhW+GF0Zw+a+wYDaf+U0uQBjJ5bxI9+/Y
KWUuRch1JdwHFPcJcXmSN3fDWUiwMZcvPCq6xztSnwDu6dR24Z865jBzU+yzOJhH
GoLxClXgAQTpWdHseSjD1kZKqAZO4qE/WpgfXWEs9GBF01m2KloR1H9E1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAv+rsrLwkwkDw6vgAKuHrQ/wP0HMB8GA1UdIwQY
MBaAFD8hd6PobIOc/Rk9u0btqAh9ghQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHlGM28taHNnNXo5R1QyN1J1Mm9DSDJDRkJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yY2Y5MjYtODEwZS00MTFlLWJkNWIt
MTYxZTUxM2ViZGMyLzEvUHlGM28taHNnNXo5R1QyN1J1Mm9DSDJDRkJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yY2Y5MjYtODEwZS00MTFlLWJkNWItMTYxZTUxM2ViZGMy
LzEvUHlGM28taHNnNXo5R1QyN1J1Mm9DSDJDRkJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbdYaolU
X9rGAwdVevdmPXEjDU7QEmA1kJwF/iCEKn5ZqGdjFtIQbKN7Oj82RCPQZ07ldpyf
sUrEEazWD5eGzhizP56appT6NIou1yq8PSBsPia/KQCwkEtpdbCbqSAEGV/+rorY
MIVxUchgHsyGuCnJ3wxfesZbxjkOp0/J0Cr6CU/4SCbycWjob+0ue94MgCuCB2od
2Ys07meWBN8xdPmpHXrwOLwnXm8/wMBOjcmyiI7l05gx8ypia5JwRiH40fn2rc05
rrCRrfxj/ljomO6OxT2wOykam3vRVANRl43Iq6aZEf4b6IhJb6os2JpwoOD2hxIR
ECPAxMOWeni1Fw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:55 2025 by rpki-client