Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft
File:                     rb65YXJeTVu08lSJhtlvzG00nmQ.mft (raw, json)
Hash identifier:          AwPs/VXZH2vLxFEkbb0IGV4UzMc3Vxj3Rwy9s1LotuI=
Subject key identifier:   1A:13:44:58:CE:7E:88:F2:AE:DF:95:BC:58:16:68:4C:ED:55:B5:84
Authority key identifier: AD:BE:B9:61:72:5E:4D:5B:B4:F2:54:89:86:D9:6F:CC:6D:34:9E:64
Certificate issuer:       /CN=adbeb961725e4d5bb4f2548986d96fcc6d349e64
Certificate serial:       0194C42C0D8342D3F97C9F2CCF6AA06A7BAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rb65YXJeTVu08lSJhtlvzG00nmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft
Manifest number:          66
Signing time:             Sun 02 Feb 2025 01:00:08 +0000
Manifest this update:     Sun 02 Feb 2025 01:00:08 +0000
Manifest next update:     Mon 03 Feb 2025 01:00:08 +0000
Files and hashes:         1: rb65YXJeTVu08lSJhtlvzG00nmQ.crl (hash: Xd8WrASe3Xp7ydQ6s+oQeghNcNcUSJKL0FdgRO0Neb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rb65YXJeTVu08lSJhtlvzG00nmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:2c:0d:83:42:d3:f9:7c:9f:2c:cf:6a:a0:6a:7b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adbeb961725e4d5bb4f2548986d96fcc6d349e64
        Validity
            Not Before: Feb  2 01:00:08 2025 GMT
            Not After : Feb  3 01:00:08 2025 GMT
        Subject: CN=1a134458ce7e88f2aedf95bc5816684ced55b584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:87:55:ce:8f:1e:18:31:b5:0d:b2:72:27:28:
                    32:82:ed:56:d2:77:05:ca:3b:e2:01:cc:f6:c2:40:
                    a9:6d:5d:62:ad:34:e3:4e:32:c5:bc:61:10:18:08:
                    d2:5d:a9:a5:8f:7b:a9:7e:17:c0:14:9c:de:35:fb:
                    14:92:09:35:aa:24:77:a3:27:22:a3:ad:5a:cb:5a:
                    e1:b7:07:43:7b:83:f1:a1:19:55:9a:a4:3b:18:ca:
                    5a:f2:b5:c0:2a:e9:7e:50:36:82:a2:69:14:b7:5b:
                    2c:7f:65:15:f4:19:84:68:a9:ac:10:0d:fd:87:2a:
                    05:0f:ed:2c:43:27:3b:c7:cc:7a:aa:7d:24:3d:a2:
                    46:5d:a4:d2:70:f4:c6:4d:17:c7:68:b7:9e:c4:6c:
                    9d:94:56:51:cd:8a:b2:87:8f:4d:dc:ce:06:20:72:
                    f8:d2:c3:e9:67:0f:64:e9:21:48:dc:a9:22:e5:cc:
                    77:75:f4:af:bb:af:b5:0c:e7:01:ea:f5:d4:3a:cc:
                    bb:05:d6:e1:51:1a:14:c4:bd:32:bc:41:90:b5:00:
                    9d:17:ac:32:84:e2:1d:0c:47:37:a4:bc:9a:b9:94:
                    bb:54:56:2f:24:0c:c4:4f:09:7d:33:b8:42:54:ff:
                    e6:b8:55:9f:29:8d:f8:db:a3:0d:08:99:ff:83:2f:
                    35:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:13:44:58:CE:7E:88:F2:AE:DF:95:BC:58:16:68:4C:ED:55:B5:84
            X509v3 Authority Key Identifier:
                keyid:AD:BE:B9:61:72:5E:4D:5B:B4:F2:54:89:86:D9:6F:CC:6D:34:9E:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb65YXJeTVu08lSJhtlvzG00nmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:80:f3:7a:2d:b1:62:76:22:eb:9a:46:b3:ba:d2:93:9d:56:
         97:fe:06:14:03:40:de:87:79:7f:3e:f8:d7:4e:fd:79:3a:54:
         a7:ff:dc:7d:8b:43:0d:72:6b:12:74:d4:46:34:69:e1:bf:1c:
         21:8b:91:b9:e9:95:bd:cd:39:58:0b:0f:ea:6c:01:18:08:a3:
         12:9a:04:84:8e:b8:e9:a1:61:1f:1c:26:af:dc:c6:98:56:69:
         75:63:95:24:3a:cc:82:37:93:b8:e7:5c:ce:33:19:c1:95:40:
         27:74:4f:46:3e:79:fe:6a:8e:e9:d1:32:67:6b:c5:db:c6:b5:
         94:1e:ed:8b:fd:37:b3:61:45:ec:d2:fb:1d:cf:a8:06:2b:54:
         25:2e:d0:2d:4c:84:8b:71:11:ca:50:4c:53:e7:ab:a6:d4:bf:
         ec:00:52:fd:d6:db:9f:98:bb:09:26:c5:e8:0c:9a:b1:de:f9:
         81:52:d0:ce:76:4a:a0:1f:fb:8f:99:c7:a7:93:16:8e:93:01:
         57:05:ef:3c:74:57:4e:43:63:43:2e:6c:0d:7b:69:78:97:fb:
         9d:fe:a1:7c:b7:89:1f:f2:29:78:e6:77:3f:a5:3b:66:8d:51:
         94:b7:44:af:f9:c2:46:05:80:44:94:48:38:d7:0c:82:17:1f:
         16:84:18:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:55 2025 by rpki-client