Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft
File:                     0dyvv2n_2nKwgna9sRGTVkrtj5c.mft (raw, json)
Hash identifier:          pBM8saio1b03tb747FQmFKv2aLUaJHzZzrPgOx11Drc=
Subject key identifier:   73:5B:88:9F:3F:60:A1:0E:D0:BD:34:9D:2A:BA:F0:12:F2:F4:AE:EB
Authority key identifier: D1:DC:AF:BF:69:FF:DA:72:B0:82:76:BD:B1:11:93:56:4A:ED:8F:97
Certificate issuer:       /CN=d1dcafbf69ffda72b08276bdb11193564aed8f97
Certificate serial:       019510C6AEDF0D3D5FF195C43A6103E34D69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0dyvv2n_2nKwgna9sRGTVkrtj5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft
Manifest number:          1453
Signing time:             Sun 16 Feb 2025 22:00:11 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:11 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:11 +0000
Files and hashes:         1: 0dyvv2n_2nKwgna9sRGTVkrtj5c.crl (hash: MUcQAlUDC7nZGwASLfC8h3GA8dtrZJ/jt2v8TR3srnE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0dyvv2n_2nKwgna9sRGTVkrtj5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c6:ae:df:0d:3d:5f:f1:95:c4:3a:61:03:e3:4d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1dcafbf69ffda72b08276bdb11193564aed8f97
        Validity
            Not Before: Feb 16 22:00:11 2025 GMT
            Not After : Feb 17 22:00:11 2025 GMT
        Subject: CN=735b889f3f60a10ed0bd349d2abaf012f2f4aeeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ea:13:bb:52:19:0d:81:73:1a:c3:69:c0:76:
                    3a:d9:34:c9:b5:d9:6b:9f:c2:b5:fd:fa:1e:b7:e5:
                    c4:7f:aa:96:3e:b3:8d:4f:1a:d5:49:eb:be:34:06:
                    ce:fc:4c:61:f5:a0:fb:93:57:a9:10:5f:31:68:fb:
                    92:14:58:c9:45:ca:bc:b4:f3:5c:27:7a:16:a4:84:
                    64:25:fb:50:38:93:2b:a0:f1:d7:45:06:fa:61:66:
                    9d:b1:23:8b:a7:d2:02:5a:65:d1:15:d2:62:94:18:
                    22:21:90:d1:d5:07:91:77:e7:91:63:d2:09:50:62:
                    86:75:de:e6:d8:12:ca:61:4e:89:1d:58:05:86:52:
                    e6:35:1c:5c:a5:33:92:17:a5:40:f2:0f:4c:39:af:
                    72:46:c7:bc:eb:9e:9d:21:f8:2b:3c:81:b8:e6:52:
                    c4:6c:6c:22:e0:31:dd:9e:87:e8:77:36:f5:d2:a7:
                    a6:73:1d:02:52:15:f7:a3:65:fb:3d:05:e7:13:7a:
                    75:56:e2:a8:fe:e8:b7:a0:fe:82:05:1e:53:f6:14:
                    1f:63:94:aa:58:cb:fa:ba:06:8d:a7:0e:de:f5:97:
                    f9:d6:2e:de:64:ca:d4:0c:da:b8:2b:4c:48:4e:67:
                    a7:92:fb:e6:9f:91:d1:52:3a:33:03:80:ab:c7:83:
                    ef:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5B:88:9F:3F:60:A1:0E:D0:BD:34:9D:2A:BA:F0:12:F2:F4:AE:EB
            X509v3 Authority Key Identifier:
                keyid:D1:DC:AF:BF:69:FF:DA:72:B0:82:76:BD:B1:11:93:56:4A:ED:8F:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dyvv2n_2nKwgna9sRGTVkrtj5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:c9:e5:46:6b:ac:61:99:a2:8a:27:89:7f:3f:72:52:c5:14:
         12:01:ad:8c:16:03:e6:f7:fc:57:b7:a4:43:37:cc:24:8d:72:
         c4:60:72:c0:97:33:f6:bd:14:59:a3:85:f1:28:d2:55:1a:5c:
         0c:9b:b6:ad:15:38:4b:a1:a9:ef:97:66:df:bf:df:df:e4:f5:
         b2:3c:ea:9e:d0:f4:04:70:7f:8d:50:8f:fd:05:ff:7d:ad:a3:
         c9:bd:cd:a6:76:09:20:f7:7b:aa:31:bf:c3:41:14:29:ee:7a:
         97:13:59:77:3a:8f:67:7f:c7:c0:c4:83:db:2c:8c:b4:87:83:
         c7:46:aa:c3:f4:e0:79:2f:ae:92:2b:d7:b3:44:db:ba:94:de:
         0d:08:f7:f2:6c:4e:d5:4f:6f:a2:17:95:e1:97:f3:d9:54:8b:
         0f:b5:9f:97:68:3c:32:5f:79:95:d4:76:af:1c:40:7d:7f:7c:
         e0:7a:48:5a:e2:a1:e5:eb:e4:97:73:5c:bf:ff:4d:96:51:08:
         cc:df:40:c9:12:75:2a:a5:28:b6:00:31:0b:f8:66:8a:39:91:
         a2:6a:96:b1:e9:c6:b7:d0:2c:e3:c5:7c:f4:02:57:d4:e9:b0:
         9b:bb:8b:27:75:fc:74:fb:7e:41:2d:98:1e:ff:7c:34:23:d6:
         16:1b:e7:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxq7fDT1f8ZXEOmED401pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGNhZmJmNjlmZmRhNzJiMDgyNzZiZGIxMTE5MzU2NGFl
ZDhmOTcwHhcNMjUwMjE2MjIwMDExWhcNMjUwMjE3MjIwMDExWjAzMTEwLwYDVQQD
Eyg3MzViODg5ZjNmNjBhMTBlZDBiZDM0OWQyYWJhZjAxMmYyZjRhZWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeoTu1IZDYFzGsNpwHY62TTJtdlr
n8K1/foet+XEf6qWPrONTxrVSeu+NAbO/Exh9aD7k1epEF8xaPuSFFjJRcq8tPNc
J3oWpIRkJftQOJMroPHXRQb6YWadsSOLp9ICWmXRFdJilBgiIZDR1QeRd+eRY9IJ
UGKGdd7m2BLKYU6JHVgFhlLmNRxcpTOSF6VA8g9MOa9yRse8656dIfgrPIG45lLE
bGwi4DHdnofodzb10qemcx0CUhX3o2X7PQXnE3p1VuKo/ui3oP6CBR5T9hQfY5Sq
WMv6ugaNpw7e9Zf51i7eZMrUDNq4K0xITmenkvvmn5HRUjozA4Crx4PvoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNbiJ8/YKEO0L00nSq68BLy9K7rMB8GA1UdIwQY
MBaAFNHcr79p/9pysIJ2vbERk1ZK7Y+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGR5dnYybl8ybkt3Z25hOXNSR1RWa3J0ajVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82ZTY5N2UtMDg1OC00NmY1LTg4YTUt
NWU2YzhkNDczYTU5LzEvMGR5dnYybl8ybkt3Z25hOXNSR1RWa3J0ajVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82ZTY5N2UtMDg1OC00NmY1LTg4YTUtNWU2YzhkNDczYTU5
LzEvMGR5dnYybl8ybkt3Z25hOXNSR1RWa3J0ajVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8nlRmus
YZmiiieJfz9yUsUUEgGtjBYD5vf8V7ekQzfMJI1yxGBywJcz9r0UWaOF8SjSVRpc
DJu2rRU4S6Gp75dm37/f3+T1sjzqntD0BHB/jVCP/QX/fa2jyb3NpnYJIPd7qjG/
w0EUKe56lxNZdzqPZ3/HwMSD2yyMtIeDx0aqw/TgeS+ukivXs0TbupTeDQj38mxO
1U9voheV4Zfz2VSLD7Wfl2g8Ml95ldR2rxxAfX984HpIWuKh5evkl3Ncv/9NllEI
zN9AyRJ1KqUotgAxC/hmijmRomqWsenGt9As48V89AJX1Omwm7uLJ3X8dPt+QS2Y
Hv98NCPWFhvnPg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:41 2025 by rpki-client