Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
File:                     Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft (raw, json)
Hash identifier:          ZsR72Oj7bLhUEtIJNl6SaJoIhaCoRzlwdGc2GqEK02U=
Subject key identifier:   0D:4F:A2:AE:FE:37:FD:78:CD:77:58:D3:F0:67:CD:69:48:3C:44:4F
Authority key identifier: 67:8C:92:3A:E3:AC:E3:A1:08:60:D1:F8:17:A8:D7:50:C1:53:54:C4
Certificate issuer:       /CN=678c923ae3ace3a10860d1f817a8d750c15354c4
Certificate serial:       019511A2BDAA3C80CA36F4247CE4B4CEC26B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
Manifest number:          0B90
Signing time:             Mon 17 Feb 2025 02:00:32 +0000
Manifest this update:     Mon 17 Feb 2025 02:00:32 +0000
Manifest next update:     Tue 18 Feb 2025 02:00:32 +0000
Files and hashes:         1: Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl (hash: tJtcFICB9/XdZOzXKFZ6SpngRROWbcvMN37Ndpp9IHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:a2:bd:aa:3c:80:ca:36:f4:24:7c:e4:b4:ce:c2:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=678c923ae3ace3a10860d1f817a8d750c15354c4
        Validity
            Not Before: Feb 17 02:00:32 2025 GMT
            Not After : Feb 18 02:00:32 2025 GMT
        Subject: CN=0d4fa2aefe37fd78cd7758d3f067cd69483c444f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9f:67:9b:22:12:e6:02:ec:26:6c:7a:2a:86:
                    6c:38:1c:29:0f:f1:97:5b:8f:da:09:3c:0f:88:8d:
                    2e:5b:7c:ba:8f:ab:c1:3c:f6:da:25:91:55:f2:4d:
                    bb:8f:d4:c3:1b:b9:d4:3f:c7:12:aa:6d:06:cf:1c:
                    47:4f:9c:96:aa:ff:d1:11:67:7f:22:1d:48:35:71:
                    f0:9d:e2:c7:b6:14:15:b7:9f:84:b5:92:f7:22:3b:
                    31:c7:c7:ae:4a:1b:67:db:cb:82:ed:7b:b1:56:2d:
                    67:41:d4:bd:0d:2d:c8:aa:7e:b0:64:e3:bc:85:29:
                    c9:7c:56:88:bf:7b:d3:4e:23:5f:c2:13:a8:23:b5:
                    d7:4f:8a:f9:a6:e1:29:97:2a:d8:99:74:c4:ef:41:
                    25:d2:53:ff:6c:aa:0a:c7:78:e1:8d:1f:a7:9b:72:
                    ab:fc:3f:6b:70:d5:05:1b:a8:92:c4:ef:54:f3:14:
                    5f:87:84:c0:31:ca:18:f5:82:43:b1:9b:ff:fa:16:
                    32:f9:d3:55:28:4f:a2:7a:0f:95:93:f9:2d:b1:4a:
                    cb:e1:eb:bf:46:6c:dd:9e:9e:ad:2e:88:69:e5:22:
                    22:4f:51:48:72:67:79:61:85:34:d6:c1:45:84:d7:
                    15:e4:fe:02:ae:72:fc:2f:d7:3c:74:69:e4:2f:48:
                    27:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4F:A2:AE:FE:37:FD:78:CD:77:58:D3:F0:67:CD:69:48:3C:44:4F
            X509v3 Authority Key Identifier:
                keyid:67:8C:92:3A:E3:AC:E3:A1:08:60:D1:F8:17:A8:D7:50:C1:53:54:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ab:ab:9e:4d:8d:2c:5a:ad:88:d0:29:4b:05:9e:1f:0a:eb:
         8b:37:09:c0:47:3c:af:5c:df:dc:3e:39:af:69:be:f5:5e:e9:
         7b:0b:42:3f:52:63:72:ef:86:37:87:4b:aa:e5:d3:71:5a:99:
         87:2d:aa:05:53:50:d0:1f:a3:7b:be:15:2d:e0:99:dd:60:1e:
         53:f3:be:3a:ca:10:e0:c2:fa:2f:66:ba:b5:70:af:7e:ca:57:
         41:d2:75:4e:17:71:a7:79:65:02:5d:71:3d:87:55:60:d7:ce:
         c8:bf:61:7b:4d:75:7d:e1:54:5a:fe:07:aa:0d:83:2d:45:e6:
         01:5f:63:9c:c7:2b:d5:ad:fb:cb:57:ab:bd:0b:78:16:fa:33:
         be:ea:84:78:8d:7f:e6:74:93:aa:1f:81:9b:e8:94:92:32:31:
         02:57:b4:3a:fc:cf:61:e1:d5:d9:4e:f0:6c:4d:74:67:43:4a:
         2c:ea:36:51:83:16:a9:33:9f:59:f6:41:aa:d0:d8:c1:09:32:
         2d:fd:38:5c:63:b1:6a:97:69:13:b3:61:d7:29:09:aa:cc:a8:
         8a:0d:8f:bc:cb:88:23:22:d5:1c:c5:98:1f:27:ba:0e:b7:d1:
         7a:8f:a9:a5:23:e3:1d:0d:bc:a2:67:7e:eb:a1:8c:08:d6:09:
         53:14:83:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURor2qPIDKNvQkfOS0zsJrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OGM5MjNhZTNhY2UzYTEwODYwZDFmODE3YThkNzUwYzE1
MzU0YzQwHhcNMjUwMjE3MDIwMDMyWhcNMjUwMjE4MDIwMDMyWjAzMTEwLwYDVQQD
EygwZDRmYTJhZWZlMzdmZDc4Y2Q3NzU4ZDNmMDY3Y2Q2OTQ4M2M0NDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp59nmyIS5gLsJmx6KoZsOBwpD/GX
W4/aCTwPiI0uW3y6j6vBPPbaJZFV8k27j9TDG7nUP8cSqm0GzxxHT5yWqv/REWd/
Ih1INXHwneLHthQVt5+EtZL3Ijsxx8euShtn28uC7XuxVi1nQdS9DS3Iqn6wZOO8
hSnJfFaIv3vTTiNfwhOoI7XXT4r5puEplyrYmXTE70El0lP/bKoKx3jhjR+nm3Kr
/D9rcNUFG6iSxO9U8xRfh4TAMcoY9YJDsZv/+hYy+dNVKE+ieg+Vk/ktsUrL4eu/
Rmzdnp6tLohp5SIiT1FIcmd5YYU01sFFhNcV5P4CrnL8L9c8dGnkL0gnjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1Poq7+N/14zXdY0/BnzWlIPERPMB8GA1UdIwQY
MBaAFGeMkjrjrOOhCGDR+Beo11DBU1TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjR5U091T3M0NkVJWU5INEY2alhVTUZUVk1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My84MWEwMTktMjEzNy00NjQ2LWJjNjkt
ZGIwZDYxNmE4ODkxLzEvWjR5U091T3M0NkVJWU5INEY2alhVTUZUVk1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My84MWEwMTktMjEzNy00NjQ2LWJjNjktZGIwZDYxNmE4ODkx
LzEvWjR5U091T3M0NkVJWU5INEY2alhVTUZUVk1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6urnk2N
LFqtiNApSwWeHwrrizcJwEc8r1zf3D45r2m+9V7pewtCP1Jjcu+GN4dLquXTcVqZ
hy2qBVNQ0B+je74VLeCZ3WAeU/O+OsoQ4ML6L2a6tXCvfspXQdJ1Thdxp3llAl1x
PYdVYNfOyL9he011feFUWv4Hqg2DLUXmAV9jnMcr1a37y1ervQt4FvozvuqEeI1/
5nSTqh+Bm+iUkjIxAle0OvzPYeHV2U7wbE10Z0NKLOo2UYMWqTOfWfZBqtDYwQky
Lf04XGOxapdpE7Nh1ykJqsyoig2PvMuIIyLVHMWYHye6DrfReo+ppSPjHQ28omd+
66GMCNYJUxSDzA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:53 2025 by rpki-client