Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.mft
File:                     dt0D59chnX68HyMPcGMtyRNvNBM.mft (raw, json)
Hash identifier:          gD5YBOaroihzEWXleidGgYNTUS7bWY8lfoVVP9dAxrw=
Subject key identifier:   C6:13:97:38:17:A3:F7:0F:3A:88:78:CA:71:EA:6E:13:88:6F:D3:8F
Authority key identifier: 76:DD:03:E7:D7:21:9D:7E:BC:1F:23:0F:70:63:2D:C9:13:6F:34:13
Certificate issuer:       /CN=76dd03e7d7219d7ebc1f230f70632dc9136f3413
Certificate serial:       0195116BBD6B5E3119E06ABE804BC50FC84C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dt0D59chnX68HyMPcGMtyRNvNBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.mft
Manifest number:          0362
Signing time:             Mon 17 Feb 2025 01:00:28 +0000
Manifest this update:     Mon 17 Feb 2025 01:00:28 +0000
Manifest next update:     Tue 18 Feb 2025 01:00:28 +0000
Files and hashes:         1: dt0D59chnX68HyMPcGMtyRNvNBM.crl (hash: Q8U6wzVGFfT+xAuiT2a4SauBsMw2145Hkpr+QoCTXAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dt0D59chnX68HyMPcGMtyRNvNBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:6b:bd:6b:5e:31:19:e0:6a:be:80:4b:c5:0f:c8:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76dd03e7d7219d7ebc1f230f70632dc9136f3413
        Validity
            Not Before: Feb 17 01:00:28 2025 GMT
            Not After : Feb 18 01:00:28 2025 GMT
        Subject: CN=c613973817a3f70f3a8878ca71ea6e13886fd38f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4b:31:48:34:7e:f6:51:c6:05:21:46:23:79:
                    ec:7d:83:ef:7b:5e:af:e1:72:5f:c6:4c:e8:ba:a1:
                    9e:84:ec:e9:18:80:85:e5:1e:22:67:a7:b7:e4:b9:
                    66:3d:48:c1:d9:83:c8:1d:9d:b2:35:4a:1d:ce:48:
                    b9:57:56:6b:af:6f:82:33:4f:d4:d3:11:00:c7:78:
                    86:8a:64:22:39:0c:09:8a:7d:8a:63:20:55:fb:ff:
                    d2:bb:b0:5b:81:23:0e:43:84:79:5b:15:39:fb:26:
                    7c:4e:25:8c:77:49:16:d5:80:60:ae:71:9c:79:e1:
                    e5:d0:a1:7e:6d:e1:9b:11:58:2f:9b:d9:89:5a:d7:
                    92:0e:fe:cc:95:43:49:e0:ed:82:80:5a:8a:0c:9b:
                    c6:27:74:b1:42:ab:b0:73:1d:c3:0f:e8:6d:ba:87:
                    a2:b2:4f:a8:44:cb:77:f2:dd:32:c3:cf:dc:77:82:
                    04:7b:a9:e4:6e:ba:ff:19:2c:db:33:6e:33:79:19:
                    8b:9d:df:1b:bb:76:ad:39:04:41:e8:c3:71:f7:d8:
                    bc:2c:28:8a:6b:43:8c:45:ad:2d:d5:7c:72:4a:ed:
                    59:50:36:f3:f4:d5:55:7c:26:9d:75:31:2a:ee:7d:
                    4e:d1:d8:84:c5:99:9e:65:8d:10:13:7c:c1:f5:61:
                    94:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:13:97:38:17:A3:F7:0F:3A:88:78:CA:71:EA:6E:13:88:6F:D3:8F
            X509v3 Authority Key Identifier:
                keyid:76:DD:03:E7:D7:21:9D:7E:BC:1F:23:0F:70:63:2D:C9:13:6F:34:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dt0D59chnX68HyMPcGMtyRNvNBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:d3:ee:a8:e3:4a:a4:d7:e1:81:00:35:ff:8d:99:93:a2:2e:
         04:03:1e:7a:d5:63:ff:cc:35:4c:e6:7a:f8:31:55:b7:6b:73:
         f4:72:76:47:dc:1d:81:c5:ba:04:16:1d:f6:e3:ae:6e:88:9f:
         15:d1:04:51:d4:0e:cc:4c:bc:b3:ec:ce:f1:6f:b1:38:fd:3e:
         57:2c:78:ee:af:2d:54:a6:81:de:21:2f:4c:ee:15:77:6a:cd:
         b3:9d:a6:67:ef:b1:8e:7c:e8:ce:9c:ff:c6:05:c8:21:65:ac:
         d3:76:4f:3e:bd:c5:b4:87:ed:b9:47:77:5e:64:09:3f:23:b8:
         e6:04:32:5d:c3:f3:8a:6f:22:2b:6a:4f:58:cd:5e:4b:58:f8:
         7a:27:92:d2:e3:dd:9e:ac:a0:e6:f5:fb:46:9e:6c:e9:ed:2e:
         d6:e4:f3:e7:01:19:eb:d2:d3:af:be:36:57:8e:cd:0e:73:53:
         cd:f9:c9:a9:aa:9c:77:68:79:54:99:bb:29:c5:19:91:54:40:
         ac:5e:62:59:c1:38:09:99:4a:35:82:ed:7d:08:cb:52:8f:c8:
         d6:da:84:5a:2f:29:b7:ff:a3:b7:ab:2e:41:db:81:15:13:fb:
         ea:de:d3:89:f5:ff:5c:59:63:a2:e0:3b:0c:3e:7f:d5:42:3a:
         77:a7:d4:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURa71rXjEZ4Gq+gEvFD8hMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2ZGQwM2U3ZDcyMTlkN2ViYzFmMjMwZjcwNjMyZGM5MTM2
ZjM0MTMwHhcNMjUwMjE3MDEwMDI4WhcNMjUwMjE4MDEwMDI4WjAzMTEwLwYDVQQD
EyhjNjEzOTczODE3YTNmNzBmM2E4ODc4Y2E3MWVhNmUxMzg4NmZkMzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArksxSDR+9lHGBSFGI3nsfYPve16v
4XJfxkzouqGehOzpGICF5R4iZ6e35LlmPUjB2YPIHZ2yNUodzki5V1Zrr2+CM0/U
0xEAx3iGimQiOQwJin2KYyBV+//Su7BbgSMOQ4R5WxU5+yZ8TiWMd0kW1YBgrnGc
eeHl0KF+beGbEVgvm9mJWteSDv7MlUNJ4O2CgFqKDJvGJ3SxQquwcx3DD+htuoei
sk+oRMt38t0yw8/cd4IEe6nkbrr/GSzbM24zeRmLnd8bu3atOQRB6MNx99i8LCiK
a0OMRa0t1XxySu1ZUDbz9NVVfCaddTEq7n1O0diExZmeZY0QE3zB9WGUiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYTlzgXo/cPOoh4ynHqbhOIb9OPMB8GA1UdIwQY
MBaAFHbdA+fXIZ1+vB8jD3BjLckTbzQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHQwRDU5Y2huWDY4SHlNUGNHTXR5Uk52TkJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8xNDI2YTEtYjU1My00ZGE1LWE2ZDkt
YWMwMTAyNzkzYzVhLzEvZHQwRDU5Y2huWDY4SHlNUGNHTXR5Uk52TkJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8xNDI2YTEtYjU1My00ZGE1LWE2ZDktYWMwMTAyNzkzYzVh
LzEvZHQwRDU5Y2huWDY4SHlNUGNHTXR5Uk52TkJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNPuqONK
pNfhgQA1/42Zk6IuBAMeetVj/8w1TOZ6+DFVt2tz9HJ2R9wdgcW6BBYd9uOuboif
FdEEUdQOzEy8s+zO8W+xOP0+Vyx47q8tVKaB3iEvTO4Vd2rNs52mZ++xjnzozpz/
xgXIIWWs03ZPPr3FtIftuUd3XmQJPyO45gQyXcPzim8iK2pPWM1eS1j4eieS0uPd
nqyg5vX7Rp5s6e0u1uTz5wEZ69LTr742V47NDnNTzfnJqaqcd2h5VJm7KcUZkVRA
rF5iWcE4CZlKNYLtfQjLUo/I1tqEWi8pt/+jt6suQduBFRP76t7TifX/XFljouA7
DD5/1UI6d6fUnQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:50 2025 by rpki-client