Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft
File:                     wR_52bpVx9lQjFpNwe7MDilWHC4.mft (raw, json)
Hash identifier:          V78Mvdh0Aa/q8rN52IbbMWN4OpmnxE+NRAlEiCIk44I=
Subject key identifier:   1A:66:45:A4:84:04:25:07:EE:18:A4:37:D2:2A:73:7E:4E:42:6B:5A
Authority key identifier: C1:1F:F9:D9:BA:55:C7:D9:50:8C:5A:4D:C1:EE:CC:0E:29:56:1C:2E
Certificate issuer:       /CN=c11ff9d9ba55c7d9508c5a4dc1eecc0e29561c2e
Certificate serial:       0194BABBB9517ADCB40D955143E6BFC266EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wR_52bpVx9lQjFpNwe7MDilWHC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft
Manifest number:          1427
Signing time:             Fri 31 Jan 2025 05:00:52 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:52 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:52 +0000
Files and hashes:         1: wR_52bpVx9lQjFpNwe7MDilWHC4.crl (hash: KGS5M67D8fymVWC2Qlbd2D+QwihNkWkZTcw5kXgwBXA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wR_52bpVx9lQjFpNwe7MDilWHC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:b9:51:7a:dc:b4:0d:95:51:43:e6:bf:c2:66:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c11ff9d9ba55c7d9508c5a4dc1eecc0e29561c2e
        Validity
            Not Before: Jan 31 05:00:52 2025 GMT
            Not After : Feb  1 05:00:52 2025 GMT
        Subject: CN=1a6645a484042507ee18a437d22a737e4e426b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:47:6d:99:51:b1:b6:4d:cb:f3:1f:b7:59:ff:
                    f5:2e:57:00:76:2c:b9:45:8c:6d:92:07:33:74:11:
                    01:b7:2c:fc:5c:fd:54:c0:97:21:57:20:a4:60:2f:
                    4c:38:ba:57:ba:50:5d:f9:1c:71:ab:f8:20:00:04:
                    f1:73:1b:da:6e:9a:59:ac:c8:37:f0:e8:d4:18:eb:
                    f3:dc:ab:2e:4a:cb:93:a7:04:78:40:d4:1b:0f:73:
                    4b:a8:23:a6:55:81:a4:84:4e:61:a2:5f:29:c2:49:
                    c0:38:27:fd:90:3c:ca:2b:66:c1:ae:01:dd:b1:9e:
                    46:16:2c:cc:d4:8e:91:8b:24:3f:4e:58:97:44:7d:
                    50:a8:5a:df:af:8a:99:cf:7e:03:43:19:c9:8b:66:
                    e3:cd:7d:b7:32:3b:19:ee:f9:00:22:bd:65:9a:3a:
                    03:e0:f0:38:2a:c4:e2:a7:1f:01:09:cc:61:20:44:
                    3c:04:01:fb:23:4e:5f:0f:52:9d:03:c5:6e:87:2b:
                    5f:28:7b:9e:19:a4:13:f9:1a:87:7b:50:99:b6:9c:
                    00:c1:53:78:8f:52:30:72:9e:a9:05:4e:f9:d4:2e:
                    a5:7d:bf:7b:82:1a:19:4a:c4:d3:f6:22:af:eb:49:
                    ed:47:13:d1:ad:ae:02:08:79:05:f0:4e:0e:ff:66:
                    39:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:66:45:A4:84:04:25:07:EE:18:A4:37:D2:2A:73:7E:4E:42:6B:5A
            X509v3 Authority Key Identifier:
                keyid:C1:1F:F9:D9:BA:55:C7:D9:50:8C:5A:4D:C1:EE:CC:0E:29:56:1C:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR_52bpVx9lQjFpNwe7MDilWHC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:70:3c:e7:61:f3:80:56:91:48:f5:23:68:5d:d3:0b:ad:45:
         6f:8d:b1:56:4e:fc:d3:f2:35:36:2e:e6:4a:2a:2c:72:f2:0a:
         a0:16:d6:e8:8e:6c:0b:23:3d:d8:97:6f:93:ec:c5:ef:c1:a1:
         5f:8a:38:ef:13:de:bd:cc:1a:2c:1e:bc:7f:df:31:d3:b2:dc:
         0e:45:97:f7:a6:f3:48:70:8f:b7:ca:68:e6:69:18:4d:51:0a:
         7a:f8:07:00:ea:4a:f6:57:cb:24:31:c8:fd:ef:9c:6e:93:fa:
         c1:e7:05:1c:40:de:0e:14:98:21:f7:1c:48:df:9b:0e:43:f7:
         ef:55:10:b5:33:97:18:56:57:0e:10:c5:be:8f:52:36:dc:84:
         40:a4:e8:4c:8d:3c:ad:81:7d:5d:9a:a7:9a:cd:f5:2c:45:07:
         32:46:bd:b5:9b:ae:60:0a:ef:ca:6e:ef:94:4e:e2:27:19:e0:
         ec:7e:91:20:aa:a5:b4:ad:c0:37:ed:4c:bb:11:db:76:f0:ea:
         2d:fa:18:8d:e3:d6:ad:d5:7c:16:54:65:4e:2c:d3:c6:d7:39:
         6d:07:59:91:c9:08:b5:f8:db:5d:96:fd:9f:c2:74:ba:27:92:
         ac:ac:5b:91:00:1c:5c:fa:08:a0:4f:a3:2d:3b:fc:0f:b0:0e:
         46:b1:82:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u7lRety0DZVRQ+a/wmbsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMWZmOWQ5YmE1NWM3ZDk1MDhjNWE0ZGMxZWVjYzBlMjk1
NjFjMmUwHhcNMjUwMTMxMDUwMDUyWhcNMjUwMjAxMDUwMDUyWjAzMTEwLwYDVQQD
EygxYTY2NDVhNDg0MDQyNTA3ZWUxOGE0MzdkMjJhNzM3ZTRlNDI2YjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkdtmVGxtk3L8x+3Wf/1LlcAdiy5
RYxtkgczdBEBtyz8XP1UwJchVyCkYC9MOLpXulBd+Rxxq/ggAATxcxvabppZrMg3
8OjUGOvz3KsuSsuTpwR4QNQbD3NLqCOmVYGkhE5hol8pwknAOCf9kDzKK2bBrgHd
sZ5GFizM1I6RiyQ/TliXRH1QqFrfr4qZz34DQxnJi2bjzX23MjsZ7vkAIr1lmjoD
4PA4KsTipx8BCcxhIEQ8BAH7I05fD1KdA8VuhytfKHueGaQT+RqHe1CZtpwAwVN4
j1Iwcp6pBU751C6lfb97ghoZSsTT9iKv60ntRxPRra4CCHkF8E4O/2Y5sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpmRaSEBCUH7hikN9Iqc35OQmtaMB8GA1UdIwQY
MBaAFMEf+dm6VcfZUIxaTcHuzA4pVhwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1JfNTJicFZ4OWxRakZwTndlN01EaWxXSEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84MDc5MGItODkxZi00ZTAzLWJkNTYt
OWZiNmI0ZWEyNTBhLzEvd1JfNTJicFZ4OWxRakZwTndlN01EaWxXSEM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS84MDc5MGItODkxZi00ZTAzLWJkNTYtOWZiNmI0ZWEyNTBh
LzEvd1JfNTJicFZ4OWxRakZwTndlN01EaWxXSEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZnA852Hz
gFaRSPUjaF3TC61Fb42xVk780/I1Ni7mSioscvIKoBbW6I5sCyM92Jdvk+zF78Gh
X4o47xPevcwaLB68f98x07LcDkWX96bzSHCPt8po5mkYTVEKevgHAOpK9lfLJDHI
/e+cbpP6wecFHEDeDhSYIfccSN+bDkP371UQtTOXGFZXDhDFvo9SNtyEQKToTI08
rYF9XZqnms31LEUHMka9tZuuYArvym7vlE7iJxng7H6RIKqltK3AN+1MuxHbdvDq
LfoYjePWrdV8FlRlTizTxtc5bQdZkckItfjbXZb9n8J0uieSrKxbkQAcXPoIoE+j
LTv8D7AORrGCOw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:07 2025 by rpki-client on console-fra.rpki-client.org