Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
File:                     ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft (raw, json)
Hash identifier:          l5qRTrqLg7irPG2sEm17jXhUbHC56/tDGEIAhghIK/Q=
Subject key identifier:   55:42:33:CE:74:62:BE:9D:9E:F8:36:9D:D9:08:0A:2B:7F:3E:D8:CF
Authority key identifier: 89:BA:F5:AF:F1:D7:AA:AA:52:EF:E1:48:E0:E2:34:03:11:D7:C2:94
Certificate issuer:       /CN=89baf5aff1d7aaaa52efe148e0e2340311d7c294
Certificate serial:       0194C387C19918E27FB77C26B033D11D4B24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
Manifest number:          0E19
Signing time:             Sat 01 Feb 2025 22:00:41 +0000
Manifest this update:     Sat 01 Feb 2025 22:00:41 +0000
Manifest next update:     Sun 02 Feb 2025 22:00:41 +0000
Files and hashes:         1: ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl (hash: jixJD/KMLpt5QceZdmCNlvcuZSrKA0y38n9T66vpaTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 22:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:87:c1:99:18:e2:7f:b7:7c:26:b0:33:d1:1d:4b:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89baf5aff1d7aaaa52efe148e0e2340311d7c294
        Validity
            Not Before: Feb  1 22:00:41 2025 GMT
            Not After : Feb  2 22:00:41 2025 GMT
        Subject: CN=554233ce7462be9d9ef8369dd9080a2b7f3ed8cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0a:fc:8c:92:a3:af:46:55:69:70:73:c1:71:
                    b9:dc:f3:67:b7:8b:a0:7a:89:2e:de:49:41:10:6d:
                    ea:5c:3f:75:9f:36:56:5d:3a:3b:d9:f7:b0:39:e7:
                    d3:ee:2a:9a:5a:67:97:87:db:20:72:0e:7c:0a:a6:
                    4a:16:e4:d8:06:43:1a:ae:df:59:f3:c1:1a:4a:40:
                    a0:b2:b5:8b:38:a2:ef:3b:b1:b4:cc:26:b6:26:59:
                    84:87:3a:75:c2:ca:b5:fb:03:d7:13:3b:e2:3b:5b:
                    ea:34:88:e5:db:0c:1e:2a:0b:2a:6c:6e:3f:a4:66:
                    33:d0:3e:3f:98:9f:2d:82:29:95:bd:d3:38:e0:2a:
                    c3:8b:45:81:b3:62:3e:01:89:bd:b6:54:26:fa:21:
                    31:3d:f3:a4:ef:35:07:79:f3:66:9f:1c:f5:08:f8:
                    54:0d:00:53:25:78:d4:d5:e9:13:cb:b2:89:84:90:
                    5d:be:63:a7:0a:73:6d:bd:31:7d:e5:1f:38:d6:09:
                    3e:63:e6:69:27:3f:40:67:02:00:5b:96:eb:b5:c8:
                    1b:56:1c:14:14:e0:47:f3:48:5b:36:c3:b1:ae:a5:
                    16:fc:e3:33:ea:dd:63:6e:81:a0:48:e9:66:64:9e:
                    75:6a:c0:14:7f:f5:3b:d0:10:eb:e4:a7:4f:6f:c7:
                    7e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:42:33:CE:74:62:BE:9D:9E:F8:36:9D:D9:08:0A:2B:7F:3E:D8:CF
            X509v3 Authority Key Identifier:
                keyid:89:BA:F5:AF:F1:D7:AA:AA:52:EF:E1:48:E0:E2:34:03:11:D7:C2:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:db:4d:a3:0d:f3:94:25:c0:65:35:2f:8c:33:39:d1:ce:ba:
         86:bb:4a:39:16:77:22:82:1b:e3:b1:bc:f7:f2:ec:df:64:f6:
         4e:13:e1:05:d4:10:74:9e:a8:03:af:3a:df:5c:fe:cb:33:c4:
         9c:38:2d:a3:7f:7c:39:0a:a7:2f:d7:a1:8d:5e:4d:b9:9e:a5:
         ad:7e:f8:03:40:4e:e8:b6:0e:f8:8d:25:13:9f:a3:a4:51:70:
         15:90:d0:03:13:c2:fa:e2:fc:77:0a:7d:18:85:a1:24:42:ed:
         26:de:96:61:cd:ff:13:3a:0e:e4:1e:9c:ac:1c:9d:31:0a:7a:
         68:c3:cd:4a:34:a0:9a:36:2c:f9:6a:56:45:a7:74:e2:a6:9f:
         6c:7a:4a:22:16:ae:d2:49:b9:43:f2:16:fd:34:59:ad:a0:c2:
         39:f1:a2:f3:6b:c7:91:4b:17:16:0a:03:94:60:3b:33:f2:bf:
         50:5b:9f:b0:6d:a8:76:44:69:2d:0c:eb:0f:30:80:b2:10:6d:
         f0:ee:2e:47:0b:2b:f4:3a:d1:b3:72:e3:0b:92:05:21:73:bc:
         bc:f3:95:7b:96:2d:67:fc:d1:ac:f8:b9:93:f9:0b:f7:25:d9:
         96:a5:22:a8:50:f1:60:ef:07:72:88:cb:0b:91:af:53:3e:6d:
         01:8b:94:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:01:58 2025 by rpki-client