Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft
File:                     LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft (raw, json)
Hash identifier:          X8LmrbXLgjg9pnMZzPVwIs1uMnh42VyPxzExTDINShY=
Subject key identifier:   EA:EE:CF:91:29:FB:1E:C6:F2:42:25:EF:39:F9:41:24:67:C8:97:3F
Authority key identifier: 2D:0C:21:CF:FA:80:B5:A1:E5:CB:D6:31:93:0E:7F:C5:5F:DD:FC:48
Certificate issuer:       /CN=2d0c21cffa80b5a1e5cbd631930e7fc55fddfc48
Certificate serial:       01951134BCFDC84A4FBF02239164C01E3DA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft
Manifest number:          12EA
Signing time:             Mon 17 Feb 2025 00:00:23 +0000
Manifest this update:     Mon 17 Feb 2025 00:00:23 +0000
Manifest next update:     Tue 18 Feb 2025 00:00:23 +0000
Files and hashes:         1: LQwhz_qAtaHly9Yxkw5_xV_d_Eg.crl (hash: 9hZfm1wHOiMstCGcoyGOCQQoik4Z1jOEIJqjg1jb9qk=)
                          2: WnteyksBXxvh50Fr3JRktkxQELU.roa (hash: VZ2ULNlKhReA1wdNSeA4G9O7QzDbzJEXTzE8wy4jEPM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:34:bc:fd:c8:4a:4f:bf:02:23:91:64:c0:1e:3d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d0c21cffa80b5a1e5cbd631930e7fc55fddfc48
        Validity
            Not Before: Feb 17 00:00:23 2025 GMT
            Not After : Feb 18 00:00:23 2025 GMT
        Subject: CN=eaeecf9129fb1ec6f24225ef39f9412467c8973f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:72:05:5e:1a:42:f4:b0:1f:f7:f9:88:8a:df:
                    f0:ff:89:31:04:ab:bf:a0:bf:d5:d3:d7:cf:46:74:
                    78:e9:23:99:d7:55:08:17:86:87:7d:9a:f5:1c:fa:
                    fc:30:37:2e:74:4f:8a:54:08:0e:fe:af:c7:84:b2:
                    5e:d6:2d:61:98:46:a7:ed:50:b1:30:51:b2:a2:b2:
                    fb:60:59:9e:f0:7d:c0:4d:57:5e:b4:6c:20:38:fe:
                    3b:b2:e7:96:1d:9f:f2:c1:0f:1c:5a:a1:9f:75:59:
                    e0:16:9a:be:1d:bb:73:37:ac:67:ef:58:6f:80:68:
                    c0:1b:b2:28:08:2d:02:46:29:84:b4:69:fc:b5:70:
                    ef:29:e0:06:a5:9f:49:fa:a9:26:d7:64:46:6c:c2:
                    9e:e2:a2:d7:8d:04:63:8e:07:f0:78:aa:c7:06:cf:
                    b7:bf:c0:90:e6:02:7c:d3:1f:d2:ce:bd:3b:ed:78:
                    99:53:56:e6:fc:48:5d:9f:67:f6:c2:1a:60:b7:ef:
                    6a:a3:0b:f2:39:67:cf:b6:ed:89:5a:1f:f6:47:1a:
                    19:85:cd:ed:7b:87:dc:24:1d:01:eb:54:4f:ff:55:
                    3f:ff:2c:24:9c:1c:58:0b:a5:d5:e5:a4:b7:3c:2b:
                    78:bb:a0:06:27:f4:6f:30:be:eb:cf:43:67:42:9c:
                    bc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:EE:CF:91:29:FB:1E:C6:F2:42:25:EF:39:F9:41:24:67:C8:97:3F
            X509v3 Authority Key Identifier:
                keyid:2D:0C:21:CF:FA:80:B5:A1:E5:CB:D6:31:93:0E:7F:C5:5F:DD:FC:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:f2:30:c2:02:65:2b:d7:81:c2:f0:b6:1e:a5:b1:7a:57:b5:
         ce:7e:65:38:7c:63:e9:6a:fd:fc:8e:82:8c:3a:3b:0b:85:8a:
         22:b4:40:52:e3:33:75:89:40:40:8a:58:ca:69:27:fb:ae:8c:
         cc:88:10:ed:75:f4:bf:33:e4:05:24:47:64:c9:c6:dc:3d:c2:
         74:31:e8:bb:c5:29:83:61:e4:61:11:f2:ba:a3:b6:ea:d8:48:
         a6:00:a5:31:7f:24:2a:44:65:f5:a7:1b:ad:b7:7c:b0:7e:a5:
         cc:9d:14:6e:67:a7:8a:08:8d:d1:84:63:82:49:80:bd:2e:64:
         9d:c7:7e:a1:ce:d5:bd:62:29:a4:07:74:fd:eb:9a:6b:d1:f5:
         27:56:fc:7e:ad:5f:d1:74:36:29:cc:ae:61:4f:a6:ec:fb:4e:
         e4:46:6e:9e:a0:69:83:45:5d:bb:31:e9:79:3f:97:66:91:90:
         cd:24:97:0f:a5:67:fe:5f:bf:3a:ee:de:5c:43:0c:3e:f7:62:
         9c:87:94:90:fa:15:9a:5d:ea:72:6f:42:73:9a:54:25:98:81:
         26:80:6e:89:7f:78:1e:15:41:df:36:64:cc:95:11:12:32:d4:
         d1:f1:a8:aa:b5:dd:28:37:6a:1f:f0:d8:a4:a5:df:94:01:5e:
         fb:24:77:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNLz9yEpPvwIjkWTAHj2hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMGMyMWNmZmE4MGI1YTFlNWNiZDYzMTkzMGU3ZmM1NWZk
ZGZjNDgwHhcNMjUwMjE3MDAwMDIzWhcNMjUwMjE4MDAwMDIzWjAzMTEwLwYDVQQD
EyhlYWVlY2Y5MTI5ZmIxZWM2ZjI0MjI1ZWYzOWY5NDEyNDY3Yzg5NzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXIFXhpC9LAf9/mIit/w/4kxBKu/
oL/V09fPRnR46SOZ11UIF4aHfZr1HPr8MDcudE+KVAgO/q/HhLJe1i1hmEan7VCx
MFGyorL7YFme8H3ATVdetGwgOP47sueWHZ/ywQ8cWqGfdVngFpq+HbtzN6xn71hv
gGjAG7IoCC0CRimEtGn8tXDvKeAGpZ9J+qkm12RGbMKe4qLXjQRjjgfweKrHBs+3
v8CQ5gJ80x/Szr077XiZU1bm/Ehdn2f2whpgt+9qowvyOWfPtu2JWh/2RxoZhc3t
e4fcJB0B61RP/1U//ywknBxYC6XV5aS3PCt4u6AGJ/RvML7rz0NnQpy8FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOruz5Ep+x7G8kIl7zn5QSRnyJc/MB8GA1UdIwQY
MBaAFC0MIc/6gLWh5cvWMZMOf8Vf3fxIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFF3aHpfcUF0YUhseTlZeGt3NV94Vl9kX0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iYmY3NWQtYzFkZC00NGIwLWE1ZTAt
Y2RjYzcwNGIzOGE3LzEvTFF3aHpfcUF0YUhseTlZeGt3NV94Vl9kX0VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9iYmY3NWQtYzFkZC00NGIwLWE1ZTAtY2RjYzcwNGIzOGE3
LzEvTFF3aHpfcUF0YUhseTlZeGt3NV94Vl9kX0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/IwwgJl
K9eBwvC2HqWxele1zn5lOHxj6Wr9/I6CjDo7C4WKIrRAUuMzdYlAQIpYymkn+66M
zIgQ7XX0vzPkBSRHZMnG3D3CdDHou8Upg2HkYRHyuqO26thIpgClMX8kKkRl9acb
rbd8sH6lzJ0UbmenigiN0YRjgkmAvS5kncd+oc7VvWIppAd0/euaa9H1J1b8fq1f
0XQ2KcyuYU+m7PtO5EZunqBpg0VduzHpeT+XZpGQzSSXD6Vn/l+/Ou7eXEMMPvdi
nIeUkPoVml3qcm9Cc5pUJZiBJoBuiX94HhVB3zZkzJUREjLU0fGoqrXdKDdqH/DY
pKXflAFe+yR3XA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:34 2025 by rpki-client