Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft
File:                     uQBjLU-AFX1p71tT_mJNv4rf768.mft (raw, json)
Hash identifier:          3jwFub3QH8gIS9oUcadFINcjyMmcWIC6j74lYARNh/Q=
Subject key identifier:   E9:BE:EC:FB:25:FC:67:05:AB:98:14:E2:E6:01:9F:6F:75:C3:6E:A8
Authority key identifier: B9:00:63:2D:4F:80:15:7D:69:EF:5B:53:FE:62:4D:BF:8A:DF:EF:AF
Certificate issuer:       /CN=b900632d4f80157d69ef5b53fe624dbf8adfefaf
Certificate serial:       019510C693C189C3F16B100F7F3B22049249
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uQBjLU-AFX1p71tT_mJNv4rf768.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft
Manifest number:          0B21
Signing time:             Sun 16 Feb 2025 22:00:03 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:03 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:03 +0000
Files and hashes:         1: uQBjLU-AFX1p71tT_mJNv4rf768.crl (hash: sesZ7BzlJ5iv7VfpHQE4SBJa5NiOqCyLGxGfZEF4iaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uQBjLU-AFX1p71tT_mJNv4rf768.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c6:93:c1:89:c3:f1:6b:10:0f:7f:3b:22:04:92:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b900632d4f80157d69ef5b53fe624dbf8adfefaf
        Validity
            Not Before: Feb 16 22:00:03 2025 GMT
            Not After : Feb 17 22:00:03 2025 GMT
        Subject: CN=e9beecfb25fc6705ab9814e2e6019f6f75c36ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:24:e6:23:67:fa:a7:6b:eb:81:c6:6b:04:57:
                    b8:c6:ee:21:e0:1e:e9:b6:eb:9f:c4:8c:22:0f:cd:
                    88:3d:a4:16:c9:20:9d:6f:ec:61:2b:16:af:20:c6:
                    75:0b:ca:9a:a5:f8:45:14:d8:1d:5d:4e:d5:68:f4:
                    98:43:f8:21:c2:04:73:17:89:66:7e:6f:4f:a4:d6:
                    9c:10:a4:0f:2c:78:4b:a9:a8:5b:79:06:27:8e:85:
                    27:06:5b:0b:3f:95:1b:0e:e6:11:b4:9b:d5:e5:76:
                    1a:58:13:8b:de:8b:85:f9:04:5f:3a:d4:46:b8:73:
                    8f:16:19:ea:51:35:91:e7:71:78:b0:71:d7:bc:f0:
                    4c:38:a3:0c:ef:33:92:31:56:aa:8a:33:05:c5:c1:
                    b0:f0:2b:6c:38:9d:64:a7:55:da:0e:4e:0b:8f:25:
                    44:6d:2b:93:7f:88:fa:e4:e1:c3:26:3c:c8:57:4a:
                    12:ce:1e:a7:eb:72:fc:aa:8d:5e:aa:5c:b2:ca:e2:
                    4a:39:9c:d2:50:9a:34:88:3e:ee:45:c6:b3:f7:ac:
                    88:8a:87:0c:93:c4:2a:7d:f5:c5:64:62:19:57:bc:
                    38:17:60:03:44:1c:f0:1c:38:d5:18:80:91:31:2c:
                    f9:1c:bc:e4:25:ff:ac:f6:6e:cf:4d:98:d5:1f:e1:
                    31:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BE:EC:FB:25:FC:67:05:AB:98:14:E2:E6:01:9F:6F:75:C3:6E:A8
            X509v3 Authority Key Identifier:
                keyid:B9:00:63:2D:4F:80:15:7D:69:EF:5B:53:FE:62:4D:BF:8A:DF:EF:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQBjLU-AFX1p71tT_mJNv4rf768.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:0b:60:98:c1:01:bf:c5:58:db:33:62:16:53:75:97:89:aa:
         d2:6c:be:b5:fb:17:46:6a:5c:87:33:45:3f:2a:8d:3e:08:58:
         6e:79:e1:dc:0b:79:ed:b3:bc:8a:c8:97:8f:a9:49:dc:12:8a:
         ba:27:1a:4e:4b:e6:0d:71:9c:23:c4:86:3f:b2:b5:6d:cd:60:
         f9:1b:3c:90:aa:d2:eb:00:40:27:f0:f9:cb:0a:06:82:ea:39:
         2f:c2:56:53:04:7d:ff:cc:47:b1:22:1d:80:c7:53:62:3e:6b:
         76:f3:b2:e9:f7:8b:79:92:cf:66:f6:05:f6:c0:74:44:e7:03:
         cb:85:d1:ed:34:77:25:a3:0c:19:7a:1d:35:2a:54:ce:27:58:
         94:b4:6b:11:ed:e7:c6:45:47:49:1a:bf:59:d7:09:4e:52:7a:
         51:e9:f7:d9:a3:15:93:16:b5:e0:a3:e3:15:e0:09:e5:fb:dc:
         31:a1:84:7a:25:0e:c8:c4:99:27:68:df:df:b2:4a:bb:19:06:
         64:53:bf:b6:4b:1f:4c:70:1a:69:93:3b:28:de:8e:04:10:a3:
         9f:c2:8b:40:2f:54:5b:58:30:8e:47:0c:ee:6b:09:f8:37:c3:
         68:d6:2e:50:91:81:3c:89:7c:98:97:6f:2c:9d:d9:64:f6:5d:
         8a:53:0d:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxpPBicPxaxAPfzsiBJJJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MDA2MzJkNGY4MDE1N2Q2OWVmNWI1M2ZlNjI0ZGJmOGFk
ZmVmYWYwHhcNMjUwMjE2MjIwMDAzWhcNMjUwMjE3MjIwMDAzWjAzMTEwLwYDVQQD
EyhlOWJlZWNmYjI1ZmM2NzA1YWI5ODE0ZTJlNjAxOWY2Zjc1YzM2ZWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSTmI2f6p2vrgcZrBFe4xu4h4B7p
tuufxIwiD82IPaQWySCdb+xhKxavIMZ1C8qapfhFFNgdXU7VaPSYQ/ghwgRzF4lm
fm9PpNacEKQPLHhLqahbeQYnjoUnBlsLP5UbDuYRtJvV5XYaWBOL3ouF+QRfOtRG
uHOPFhnqUTWR53F4sHHXvPBMOKMM7zOSMVaqijMFxcGw8CtsOJ1kp1XaDk4LjyVE
bSuTf4j65OHDJjzIV0oSzh6n63L8qo1eqlyyyuJKOZzSUJo0iD7uRcaz96yIiocM
k8QqffXFZGIZV7w4F2ADRBzwHDjVGICRMSz5HLzkJf+s9m7PTZjVH+ExkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOm+7Psl/GcFq5gU4uYBn291w26oMB8GA1UdIwQY
MBaAFLkAYy1PgBV9ae9bU/5iTb+K3++vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVFCakxVLUFGWDFwNzF0VF9tSk52NHJmNzY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9iYjU0OGUtNWM5MS00NjU4LThlMDEt
YjgwZmYyZjE1NTJiLzEvdVFCakxVLUFGWDFwNzF0VF9tSk52NHJmNzY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9iYjU0OGUtNWM5MS00NjU4LThlMDEtYjgwZmYyZjE1NTJi
LzEvdVFCakxVLUFGWDFwNzF0VF9tSk52NHJmNzY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQtgmMEB
v8VY2zNiFlN1l4mq0my+tfsXRmpchzNFPyqNPghYbnnh3At57bO8isiXj6lJ3BKK
uicaTkvmDXGcI8SGP7K1bc1g+Rs8kKrS6wBAJ/D5ywoGguo5L8JWUwR9/8xHsSId
gMdTYj5rdvOy6feLeZLPZvYF9sB0ROcDy4XR7TR3JaMMGXodNSpUzidYlLRrEe3n
xkVHSRq/WdcJTlJ6Uen32aMVkxa14KPjFeAJ5fvcMaGEeiUOyMSZJ2jf37JKuxkG
ZFO/tksfTHAaaZM7KN6OBBCjn8KLQC9UW1gwjkcM7msJ+DfDaNYuUJGBPIl8mJdv
LJ3ZZPZdilMNaA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:39 2025 by rpki-client