Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft
File:                     VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft (raw, json)
Hash identifier:          Jjb6tJFl6od+im3CrebLA0XBgRiE+HoLMscH+15cKWQ=
Subject key identifier:   6D:EA:B2:96:7E:0B:BC:B7:FD:CC:57:57:EB:A7:B0:AF:0E:F2:87:E5
Authority key identifier: 55:59:88:47:86:90:AD:8D:81:14:9A:A5:C4:CA:E7:5A:F5:38:5F:1B
Certificate issuer:       /CN=555988478690ad8d81149aa5c4cae75af5385f1b
Certificate serial:       019511349DCF3520E7F6957809CA11396141
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft
Manifest number:          0652
Signing time:             Mon 17 Feb 2025 00:00:15 +0000
Manifest this update:     Mon 17 Feb 2025 00:00:15 +0000
Manifest next update:     Tue 18 Feb 2025 00:00:15 +0000
Files and hashes:         1: VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl (hash: 1lpwYeh5HBpRdUBuyJBnzDJyI9TqqvQVDob8L1lT+Ig=)
                          2: v2ho3NiiZx-6p7vJ-l_IkgZf6Ho.roa (hash: i3FXkxgEq115F85sl1L3vi5QlnfTs48fnP7JBJ8VQb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:34:9d:cf:35:20:e7:f6:95:78:09:ca:11:39:61:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555988478690ad8d81149aa5c4cae75af5385f1b
        Validity
            Not Before: Feb 17 00:00:15 2025 GMT
            Not After : Feb 18 00:00:15 2025 GMT
        Subject: CN=6deab2967e0bbcb7fdcc5757eba7b0af0ef287e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:90:cc:3e:da:fa:fb:e8:1f:27:ff:89:7f:41:
                    4d:79:ef:81:fa:2c:0d:56:c9:8d:cd:1e:34:d5:87:
                    d7:72:1d:80:1b:f4:c0:15:99:7c:49:63:96:39:74:
                    06:46:91:54:42:88:3f:2d:22:0f:99:07:38:00:68:
                    dc:80:6c:0a:8c:3b:15:a8:35:50:02:29:c0:68:d3:
                    57:be:64:5e:a7:4e:50:ca:43:1f:80:f3:fb:a6:51:
                    08:6a:ab:a0:b3:a6:ae:ab:9e:db:e3:1c:26:34:15:
                    e0:0b:3e:ea:61:62:66:58:e7:5c:de:b4:56:86:3b:
                    94:7c:0d:bb:fd:8b:41:fd:6e:16:bd:24:f9:32:7e:
                    48:45:96:9f:11:46:7b:82:46:34:5c:0a:7f:a0:97:
                    1b:12:4d:39:1e:9a:8a:17:e6:f9:53:ca:22:0f:79:
                    7f:fe:1b:f0:b2:ec:9a:cb:84:29:a3:b1:2c:57:87:
                    66:95:9e:dc:70:08:c5:4b:84:6f:9d:84:1d:22:77:
                    b2:86:9a:3c:9a:d3:0f:41:0e:dc:fe:ef:71:8d:10:
                    b7:c3:f6:1e:6c:f8:6c:51:cb:cb:2d:80:c8:d4:eb:
                    f7:2a:34:39:ce:a7:95:ad:0e:26:6a:8f:10:b9:70:
                    3f:49:90:ca:16:d7:0d:b4:5b:fc:51:a0:11:57:a6:
                    47:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EA:B2:96:7E:0B:BC:B7:FD:CC:57:57:EB:A7:B0:AF:0E:F2:87:E5
            X509v3 Authority Key Identifier:
                keyid:55:59:88:47:86:90:AD:8D:81:14:9A:A5:C4:CA:E7:5A:F5:38:5F:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:73:2f:bd:45:87:6d:bd:13:cc:b3:20:02:08:05:a4:09:e0:
         a0:7d:14:b8:f7:1b:17:6c:12:84:8d:5c:66:17:e0:8f:fa:1e:
         04:cf:e3:bb:b6:b6:cd:b4:3d:58:8b:36:84:b9:be:4a:e6:00:
         05:fb:9d:01:80:d5:0b:eb:d1:74:68:ce:ed:dc:65:5b:8f:32:
         4f:79:39:4b:ff:89:b0:de:4e:a0:bb:a0:ae:6f:b4:6f:e4:0f:
         56:1b:95:d8:6c:18:7f:22:82:15:cb:58:bc:32:2b:99:83:f0:
         e6:9e:aa:84:b9:c7:04:73:f6:b7:8b:4f:dc:b2:68:8f:e7:ca:
         b9:43:6c:d9:92:9c:59:1e:e7:ae:93:b3:32:c3:f0:73:86:e8:
         7a:89:d9:9a:e7:fc:4a:09:74:76:6e:f3:8f:bd:23:8a:ee:61:
         8a:5f:ae:23:17:2b:84:c3:a0:27:e6:39:57:4e:16:88:03:79:
         5d:5c:ab:30:bd:24:02:d5:18:c9:97:a3:49:bd:4b:0a:bb:25:
         04:fc:04:81:8c:6e:9f:0c:2e:d5:da:a3:6f:d3:2d:cd:97:a6:
         0c:29:b9:38:45:67:ff:7b:52:ad:7a:d7:a6:46:cd:54:a1:44:
         55:cb:df:48:2e:7a:12:1e:18:01:27:a5:32:60:1e:59:1a:33:
         9e:fe:f6:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNJ3PNSDn9pV4CcoROWFBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NTk4ODQ3ODY5MGFkOGQ4MTE0OWFhNWM0Y2FlNzVhZjUz
ODVmMWIwHhcNMjUwMjE3MDAwMDE1WhcNMjUwMjE4MDAwMDE1WjAzMTEwLwYDVQQD
Eyg2ZGVhYjI5NjdlMGJiY2I3ZmRjYzU3NTdlYmE3YjBhZjBlZjI4N2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZDMPtr6++gfJ/+Jf0FNee+B+iwN
VsmNzR401YfXch2AG/TAFZl8SWOWOXQGRpFUQog/LSIPmQc4AGjcgGwKjDsVqDVQ
AinAaNNXvmRep05QykMfgPP7plEIaqugs6auq57b4xwmNBXgCz7qYWJmWOdc3rRW
hjuUfA27/YtB/W4WvST5Mn5IRZafEUZ7gkY0XAp/oJcbEk05HpqKF+b5U8oiD3l/
/hvwsuyay4Qpo7EsV4dmlZ7ccAjFS4RvnYQdIneyhpo8mtMPQQ7c/u9xjRC3w/Ye
bPhsUcvLLYDI1Ov3KjQ5zqeVrQ4mao8QuXA/SZDKFtcNtFv8UaARV6ZHNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3qspZ+C7y3/cxXV+unsK8O8oflMB8GA1UdIwQY
MBaAFFVZiEeGkK2NgRSapcTK51r1OF8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlZtSVI0YVFyWTJCRkpxbHhNcm5XdlU0WHhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNzhmZjctOTRhNy00ZmMyLWFlZDgt
OGQxZGE5ZjM4YTBiLzEvVlZtSVI0YVFyWTJCRkpxbHhNcm5XdlU0WHhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8yNzhmZjctOTRhNy00ZmMyLWFlZDgtOGQxZGE5ZjM4YTBi
LzEvVlZtSVI0YVFyWTJCRkpxbHhNcm5XdlU0WHhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3MvvUWH
bb0TzLMgAggFpAngoH0UuPcbF2wShI1cZhfgj/oeBM/ju7a2zbQ9WIs2hLm+SuYA
BfudAYDVC+vRdGjO7dxlW48yT3k5S/+JsN5OoLugrm+0b+QPVhuV2GwYfyKCFctY
vDIrmYPw5p6qhLnHBHP2t4tP3LJoj+fKuUNs2ZKcWR7nrpOzMsPwc4boeonZmuf8
Sgl0dm7zj70jiu5hil+uIxcrhMOgJ+Y5V04WiAN5XVyrML0kAtUYyZejSb1LCrsl
BPwEgYxunwwu1dqjb9MtzZemDCm5OEVn/3tSrXrXpkbNVKFEVcvfSC56Eh4YASel
MmAeWRoznv72aQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:50 2025 by rpki-client