Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
File:                     dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft (raw, json)
Hash identifier:          ClCy+AFswkXFAVs0ict/GCiPP1H+XewVwIyaKWYzTQo=
Subject key identifier:   E0:35:65:8C:F5:F3:8A:D5:1E:DB:5B:CC:C0:CC:6A:1D:01:B0:2A:D4
Authority key identifier: 75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B
Certificate issuer:       /CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b
Certificate serial:       019512108E5D28D634EA21392C853E58D7A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
Manifest number:          1452
Signing time:             Mon 17 Feb 2025 04:00:29 +0000
Manifest this update:     Mon 17 Feb 2025 04:00:29 +0000
Manifest next update:     Tue 18 Feb 2025 04:00:29 +0000
Files and hashes:         1: dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl (hash: SDiH9gJf6NnyS6ACI+A6/BselsF/i2hOye60knN0+TI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:10:8e:5d:28:d6:34:ea:21:39:2c:85:3e:58:d7:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b
        Validity
            Not Before: Feb 17 04:00:29 2025 GMT
            Not After : Feb 18 04:00:29 2025 GMT
        Subject: CN=e035658cf5f38ad51edb5bccc0cc6a1d01b02ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:21:df:87:31:c7:2c:8b:dd:91:18:7a:aa:24:
                    35:0c:bf:be:85:e4:f6:4c:7a:26:6d:32:fe:d6:e3:
                    e1:cc:f2:21:c8:6c:8d:3c:f1:e6:ad:cf:30:38:2b:
                    9f:74:7e:bf:f6:82:bf:3f:f7:76:9b:18:25:c8:0e:
                    6a:a5:99:5f:46:4e:81:f3:cc:2a:f6:0f:fc:32:39:
                    9c:89:62:83:7e:63:f5:bc:8d:53:b5:1b:9f:df:cd:
                    d0:1e:68:ae:f2:83:23:a8:65:a7:4e:46:10:db:c5:
                    f2:7b:f5:a8:9e:1e:9a:f8:c1:08:74:6f:e0:a8:a2:
                    ce:b6:bd:a4:e3:dd:25:18:e2:b5:2c:99:ee:a3:74:
                    bc:67:b2:f5:83:1f:9d:ce:a3:e4:d4:d4:f0:fc:6c:
                    66:c1:03:6a:a1:c7:6d:bc:f4:90:95:2f:09:39:65:
                    a7:0e:08:ec:f8:37:64:8e:c3:2a:4f:66:da:86:ef:
                    d0:da:1a:ca:2e:50:12:a8:a4:08:c4:0d:b8:80:bf:
                    ef:f9:bf:ba:90:8d:2b:70:29:f4:88:bf:9e:1a:39:
                    92:1f:03:77:eb:29:6c:f7:33:8e:e4:66:c9:69:bf:
                    b5:c8:f5:3c:0e:fa:1f:20:7b:fb:0e:d9:9d:bf:21:
                    a6:bf:55:cf:1b:07:e0:90:67:0f:bf:b5:65:21:45:
                    bb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:35:65:8C:F5:F3:8A:D5:1E:DB:5B:CC:C0:CC:6A:1D:01:B0:2A:D4
            X509v3 Authority Key Identifier:
                keyid:75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:73:4a:f7:0e:87:c2:72:ae:4e:a4:fb:79:d9:0f:db:71:ad:
         7d:b9:22:7b:9c:ec:bf:64:76:15:e5:d8:a5:cd:88:63:76:fd:
         2d:db:56:87:95:83:24:d4:15:70:d8:a3:b9:58:9a:e3:7d:5b:
         d6:6c:12:b6:b9:19:1c:cf:24:18:7c:2e:68:1e:f7:38:a3:81:
         3c:e9:cb:67:36:90:91:2a:cd:7d:21:c8:7f:18:e8:ef:1c:c5:
         7c:1a:be:0a:b9:a3:9a:21:c3:fe:9b:7d:75:17:ab:2b:76:a6:
         cf:82:05:e7:27:a7:4f:bc:65:58:96:57:e3:e2:e2:fc:ef:30:
         31:33:46:ef:6e:dd:a8:6e:fc:6b:3f:f4:9e:a9:b1:44:67:35:
         a3:a8:09:9c:83:94:f7:f1:63:a6:7c:08:b8:c6:2e:dd:80:e7:
         09:fd:16:b5:5c:81:da:a0:52:c2:da:ab:a4:40:57:2c:db:0a:
         e8:93:27:6b:2d:a3:a6:57:f0:e3:6e:eb:87:f5:2c:3c:0a:d3:
         bf:c9:b0:b7:85:dc:ed:20:78:e4:10:8c:78:d8:3d:07:ba:92:
         85:84:64:4c:bb:75:7b:fe:71:8e:b8:94:62:48:7e:ba:03:18:
         79:96:84:dc:5e:a2:45:6e:4a:13:ce:5a:82:41:8c:5c:46:52:
         38:b5:ff:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSEI5dKNY06iE5LIU+WNenMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NzI1NWRkYzkwYTRkMGY4MmZiMjY3NDQ2OTNlZDdjOTg2
ZDhhOGIwHhcNMjUwMjE3MDQwMDI5WhcNMjUwMjE4MDQwMDI5WjAzMTEwLwYDVQQD
EyhlMDM1NjU4Y2Y1ZjM4YWQ1MWVkYjViY2NjMGNjNmExZDAxYjAyYWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiHfhzHHLIvdkRh6qiQ1DL++heT2
THombTL+1uPhzPIhyGyNPPHmrc8wOCufdH6/9oK/P/d2mxglyA5qpZlfRk6B88wq
9g/8MjmciWKDfmP1vI1TtRuf383QHmiu8oMjqGWnTkYQ28Xye/Wonh6a+MEIdG/g
qKLOtr2k490lGOK1LJnuo3S8Z7L1gx+dzqPk1NTw/GxmwQNqocdtvPSQlS8JOWWn
Dgjs+DdkjsMqT2bahu/Q2hrKLlASqKQIxA24gL/v+b+6kI0rcCn0iL+eGjmSHwN3
6yls9zOO5GbJab+1yPU8DvofIHv7DtmdvyGmv1XPGwfgkGcPv7VlIUW7jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOA1ZYz184rVHttbzMDMah0BsCrUMB8GA1UdIwQY
MBaAFHVyVd3JCk0PgvsmdEaT7XyYbYqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFhKVjNja0tUUS1DLXlaMFJwUHRmSmh0aW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xMDFkYmEtNjRlYi00MjY3LWIwNzUt
YzAyZjc3NWZiZjNmLzEvZFhKVjNja0tUUS1DLXlaMFJwUHRmSmh0aW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8xMDFkYmEtNjRlYi00MjY3LWIwNzUtYzAyZjc3NWZiZjNm
LzEvZFhKVjNja0tUUS1DLXlaMFJwUHRmSmh0aW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApXNK9w6H
wnKuTqT7edkP23Gtfbkie5zsv2R2FeXYpc2IY3b9LdtWh5WDJNQVcNijuVia431b
1mwStrkZHM8kGHwuaB73OKOBPOnLZzaQkSrNfSHIfxjo7xzFfBq+CrmjmiHD/pt9
dRerK3amz4IF5yenT7xlWJZX4+Li/O8wMTNG727dqG78az/0nqmxRGc1o6gJnIOU
9/FjpnwIuMYu3YDnCf0WtVyB2qBSwtqrpEBXLNsK6JMnay2jplfw427rh/UsPArT
v8mwt4Xc7SB45BCMeNg9B7qShYRkTLt1e/5xjriUYkh+ugMYeZaE3F6iRW5KE85a
gkGMXEZSOLX/DQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:28:54 2025 by rpki-client