Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft
File:                     VvgiFPVDedezThoQPWWKEx5wGBs.mft (raw, json)
Hash identifier:          lEIoDC0MgVZ02Y7gzIERzW8rAtznM2A9iLfZlOB8SY0=
Subject key identifier:   47:9C:DC:E2:FD:63:02:8E:3B:1A:2A:AB:FA:E8:90:57:33:FC:17:4B
Authority key identifier: 56:F8:22:14:F5:43:79:D7:B3:4E:1A:10:3D:65:8A:13:1E:70:18:1B
Certificate issuer:       /CN=56f82214f54379d7b34e1a103d658a131e70181b
Certificate serial:       0194C387F9949A60114E6AF1D2EC95B4CE55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VvgiFPVDedezThoQPWWKEx5wGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft
Manifest number:          142B
Signing time:             Sat 01 Feb 2025 22:00:55 +0000
Manifest this update:     Sat 01 Feb 2025 22:00:55 +0000
Manifest next update:     Sun 02 Feb 2025 22:00:55 +0000
Files and hashes:         1: VvgiFPVDedezThoQPWWKEx5wGBs.crl (hash: k/oA2Oq1RXWcR6DM14DTC+el3F5Q1HtTFGMB2nJ+/rU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VvgiFPVDedezThoQPWWKEx5wGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 22:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:87:f9:94:9a:60:11:4e:6a:f1:d2:ec:95:b4:ce:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56f82214f54379d7b34e1a103d658a131e70181b
        Validity
            Not Before: Feb  1 22:00:55 2025 GMT
            Not After : Feb  2 22:00:55 2025 GMT
        Subject: CN=479cdce2fd63028e3b1a2aabfae8905733fc174b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:59:d7:00:99:15:1a:63:74:e2:30:3c:3f:e2:
                    48:57:88:1a:be:62:9e:de:27:8f:ab:8a:3e:bc:ce:
                    db:1f:2f:f1:e1:99:b6:c6:02:df:72:52:9d:96:91:
                    ca:2a:bc:5d:0b:3a:dc:e3:7c:90:7a:f2:a1:72:8d:
                    90:5b:3d:6b:02:be:25:2e:65:34:11:ac:7f:6a:9c:
                    4c:62:57:44:ac:45:3e:b9:c1:99:00:1b:f6:c3:5c:
                    9f:10:52:bf:e7:2d:8a:b1:ef:57:87:d2:97:76:ed:
                    fd:1f:6a:74:ad:c3:87:65:06:7b:1b:c2:ea:3e:94:
                    bc:23:f3:ff:4f:7c:93:60:2f:7c:cf:bc:21:be:a9:
                    eb:1e:57:67:f8:1f:be:21:f3:d2:6e:2e:11:17:5d:
                    7f:fd:5d:c6:96:54:3c:61:a4:52:e6:d5:e6:56:25:
                    76:d8:e0:e2:d0:59:63:d3:4c:a7:a3:bf:28:97:98:
                    1a:05:bd:88:5f:49:76:3d:bb:d9:38:fe:60:84:d3:
                    35:41:ff:85:26:9e:89:0a:c8:e1:eb:b8:fc:45:79:
                    f0:9e:3d:b6:11:ea:dd:70:6b:7d:5a:40:b4:cd:17:
                    1d:3a:d9:50:10:de:ab:53:1d:f9:d7:31:7c:e4:41:
                    f6:92:2b:b3:a6:22:a5:3e:e5:fe:12:4b:96:ad:98:
                    fa:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9C:DC:E2:FD:63:02:8E:3B:1A:2A:AB:FA:E8:90:57:33:FC:17:4B
            X509v3 Authority Key Identifier:
                keyid:56:F8:22:14:F5:43:79:D7:B3:4E:1A:10:3D:65:8A:13:1E:70:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvgiFPVDedezThoQPWWKEx5wGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:46:fe:c7:75:69:7b:fe:3a:56:dc:2c:9e:73:e3:10:85:a2:
         e7:c7:43:8e:93:1f:af:14:6b:c1:72:a7:ca:68:ea:fb:3c:22:
         d8:c9:e4:b5:08:02:33:37:2a:84:5a:b0:bd:99:0c:0d:be:43:
         d2:6f:1f:6d:08:b1:b9:51:46:d0:5e:f4:c5:e7:5c:e2:94:30:
         a1:b9:74:45:94:00:2c:11:f5:a9:44:05:b7:9b:65:6b:d2:03:
         8a:a1:c2:10:0d:63:4e:5f:ae:6c:e8:b5:29:54:ef:f4:23:68:
         ce:fd:5e:5f:f2:56:44:12:75:e4:a2:d6:0f:97:7a:69:f3:7f:
         8a:d8:bc:91:f9:fa:bb:75:6f:e8:c0:ae:e9:8e:df:70:09:4f:
         04:34:b8:a4:93:37:43:2d:95:e7:f1:8c:27:c8:28:3e:85:8e:
         f1:2f:55:9e:e0:4b:88:b7:4d:47:e6:d1:f8:11:fb:26:6a:78:
         2f:d4:c7:41:1d:18:26:78:bd:c4:62:1e:29:43:2e:b3:fa:84:
         84:18:17:d7:79:0d:8c:f9:f0:52:fd:3d:8d:a5:fb:50:b0:a7:
         24:0f:9d:c2:36:52:09:22:25:77:6d:9d:02:84:94:06:1b:96:
         6b:b7:da:8b:d0:07:f7:7e:c9:f9:03:72:5f:f8:83:ad:49:3c:
         61:00:e8:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDh/mUmmARTmrx0uyVtM5VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZjgyMjE0ZjU0Mzc5ZDdiMzRlMWExMDNkNjU4YTEzMWU3
MDE4MWIwHhcNMjUwMjAxMjIwMDU1WhcNMjUwMjAyMjIwMDU1WjAzMTEwLwYDVQQD
Eyg0NzljZGNlMmZkNjMwMjhlM2IxYTJhYWJmYWU4OTA1NzMzZmMxNzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1nXAJkVGmN04jA8P+JIV4gavmKe
3iePq4o+vM7bHy/x4Zm2xgLfclKdlpHKKrxdCzrc43yQevKhco2QWz1rAr4lLmU0
Eax/apxMYldErEU+ucGZABv2w1yfEFK/5y2Kse9Xh9KXdu39H2p0rcOHZQZ7G8Lq
PpS8I/P/T3yTYC98z7whvqnrHldn+B++IfPSbi4RF11//V3GllQ8YaRS5tXmViV2
2ODi0Flj00yno78ol5gaBb2IX0l2PbvZOP5ghNM1Qf+FJp6JCsjh67j8RXnwnj22
EerdcGt9WkC0zRcdOtlQEN6rUx351zF85EH2kiuzpiKlPuX+EkuWrZj6+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEec3OL9YwKOOxoqq/rokFcz/BdLMB8GA1UdIwQY
MBaAFFb4IhT1Q3nXs04aED1lihMecBgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnZnaUZQVkRlZGV6VGhvUVBXV0tFeDV3R0JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iN2JiNjgtMWE5MS00MDBjLWI1YTkt
ZTU4MDllYmUyZDRiLzEvVnZnaUZQVkRlZGV6VGhvUVBXV0tFeDV3R0JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9iN2JiNjgtMWE5MS00MDBjLWI1YTktZTU4MDllYmUyZDRi
LzEvVnZnaUZQVkRlZGV6VGhvUVBXV0tFeDV3R0JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUb+x3Vp
e/46VtwsnnPjEIWi58dDjpMfrxRrwXKnymjq+zwi2MnktQgCMzcqhFqwvZkMDb5D
0m8fbQixuVFG0F70xedc4pQwobl0RZQALBH1qUQFt5tla9IDiqHCEA1jTl+ubOi1
KVTv9CNozv1eX/JWRBJ15KLWD5d6afN/iti8kfn6u3Vv6MCu6Y7fcAlPBDS4pJM3
Qy2V5/GMJ8goPoWO8S9VnuBLiLdNR+bR+BH7Jmp4L9THQR0YJni9xGIeKUMus/qE
hBgX13kNjPnwUv09jaX7ULCnJA+dwjZSCSIld22dAoSUBhuWa7fai9AH937J+QNy
X/iDrUk8YQDoFA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:49:01 2025 by rpki-client