Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
File:                     9bdVrRo8ekUCu8PqNMdba85hyUw.mft (raw, json)
Hash identifier:          VvHMuGBRNWMCfttm6C8ATy3TMBACWGEpAy6Y9J1EuGE=
Subject key identifier:   B9:39:37:B0:FA:70:E7:D7:A6:2F:4C:0B:A7:B4:10:CE:C2:C7:C9:72
Authority key identifier: F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C
Certificate issuer:       /CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
Certificate serial:       019511A28A2CE74D59EC786923A336B487A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
Manifest number:          1453
Signing time:             Mon 17 Feb 2025 02:00:19 +0000
Manifest this update:     Mon 17 Feb 2025 02:00:19 +0000
Manifest next update:     Tue 18 Feb 2025 02:00:19 +0000
Files and hashes:         1: 9bdVrRo8ekUCu8PqNMdba85hyUw.crl (hash: NfpZTae53EZl3B7439EiO02ih9rdiDHI2HyWKaOaUBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:a2:8a:2c:e7:4d:59:ec:78:69:23:a3:36:b4:87:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
        Validity
            Not Before: Feb 17 02:00:19 2025 GMT
            Not After : Feb 18 02:00:19 2025 GMT
        Subject: CN=b93937b0fa70e7d7a62f4c0ba7b410cec2c7c972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:16:c7:c4:83:fb:e7:82:6f:5e:bf:82:26:e4:
                    53:13:f8:e2:34:65:66:f9:fe:d6:d8:f1:14:da:63:
                    7c:e5:9c:63:8b:76:c3:bf:4c:2a:39:1c:56:c8:6c:
                    69:b2:ed:d7:80:c5:dd:33:f4:d3:82:e5:a2:0d:79:
                    d6:f4:14:77:c4:cf:80:be:86:4f:a2:7b:5d:d7:e1:
                    04:f0:44:fc:3e:bf:61:c4:90:68:03:c6:99:11:94:
                    c4:4b:35:57:26:2d:2b:b9:5c:68:85:47:de:2c:66:
                    98:c0:c3:08:66:a8:02:5f:ff:6c:21:99:90:8c:dc:
                    a0:34:d3:a4:38:12:94:5f:b8:e1:43:be:03:aa:ce:
                    b4:1a:2b:2d:16:79:57:52:3b:df:31:a8:4b:bd:0c:
                    19:31:db:1a:69:7b:48:e1:14:36:d7:07:6e:23:e4:
                    a0:3a:07:78:4c:89:66:a2:4f:88:2f:61:73:f8:19:
                    31:04:8c:c7:be:c9:83:2e:c7:04:60:5b:91:57:71:
                    8a:a0:b2:7a:eb:c2:a4:c4:7b:8d:ba:fb:64:af:84:
                    71:0d:4c:32:98:e9:15:e7:d8:cc:3c:dd:c7:a9:cd:
                    f1:f3:30:69:49:83:b6:c4:77:3a:2e:1d:f0:6c:0e:
                    c7:36:85:0c:10:32:6a:c0:d9:c5:a5:85:e5:e9:0a:
                    e8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:39:37:B0:FA:70:E7:D7:A6:2F:4C:0B:A7:B4:10:CE:C2:C7:C9:72
            X509v3 Authority Key Identifier:
                keyid:F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:7b:b1:33:ac:38:45:14:8f:81:8f:35:d2:2a:88:20:fa:ec:
         f7:51:fb:f0:e8:78:e5:05:1b:56:1b:f7:3b:1d:21:2d:39:8b:
         4e:2a:09:77:e7:61:b0:1b:14:5a:56:23:b7:d8:b7:7a:c6:22:
         bd:96:1d:4f:ab:42:78:ea:df:5a:cd:37:95:ce:d2:cb:38:ab:
         5f:0a:76:ac:ba:4a:3f:17:70:86:e0:35:50:92:b1:1e:c1:aa:
         e9:5f:d0:3e:4e:fd:a5:3b:a1:b6:d3:a2:40:29:91:53:76:2c:
         1e:8e:43:59:38:d8:5c:23:52:47:52:e5:62:fa:f9:57:8a:c0:
         a5:ab:0f:1d:ef:58:9d:02:e5:bf:23:5c:95:4c:b4:19:45:84:
         78:59:65:db:3e:4a:52:c1:a3:24:35:f6:5d:fa:f0:b9:be:81:
         b7:e5:ef:79:c7:84:05:d2:f8:fd:d3:c8:01:49:be:6f:fb:8b:
         84:50:48:77:c0:f0:6a:b5:32:84:98:4c:70:bd:f2:d1:ee:96:
         95:77:25:b9:77:09:57:e1:ca:34:54:9b:d2:64:29:8e:be:c5:
         89:9e:61:a3:e5:5b:75:0a:7f:13:ba:90:c3:9e:07:64:20:a7:
         ad:70:d5:a9:52:a1:d3:b9:8c:73:70:a7:66:0b:b2:33:5a:49:
         53:d5:3c:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURooos501Z7HhpI6M2tIepMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1Yjc1NWFkMWEzYzdhNDUwMmJiYzNlYTM0Yzc1YjZiY2U2
MWM5NGMwHhcNMjUwMjE3MDIwMDE5WhcNMjUwMjE4MDIwMDE5WjAzMTEwLwYDVQQD
EyhiOTM5MzdiMGZhNzBlN2Q3YTYyZjRjMGJhN2I0MTBjZWMyYzdjOTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBbHxIP754JvXr+CJuRTE/jiNGVm
+f7W2PEU2mN85Zxji3bDv0wqORxWyGxpsu3XgMXdM/TTguWiDXnW9BR3xM+AvoZP
ontd1+EE8ET8Pr9hxJBoA8aZEZTESzVXJi0ruVxohUfeLGaYwMMIZqgCX/9sIZmQ
jNygNNOkOBKUX7jhQ74Dqs60GistFnlXUjvfMahLvQwZMdsaaXtI4RQ21wduI+Sg
Ogd4TIlmok+IL2Fz+BkxBIzHvsmDLscEYFuRV3GKoLJ668KkxHuNuvtkr4RxDUwy
mOkV59jMPN3Hqc3x8zBpSYO2xHc6Lh3wbA7HNoUMEDJqwNnFpYXl6Qro+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLk5N7D6cOfXpi9MC6e0EM7Cx8lyMB8GA1UdIwQY
MBaAFPW3Va0aPHpFArvD6jTHW2vOYclMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWJkVnJSbzhla1VDdThQcU5NZGJhODVoeVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9iNjQ5NjQtYjY3NS00ZTUzLThlZjgt
MGJiZGU4ODRlODEyLzEvOWJkVnJSbzhla1VDdThQcU5NZGJhODVoeVV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9iNjQ5NjQtYjY3NS00ZTUzLThlZjgtMGJiZGU4ODRlODEy
LzEvOWJkVnJSbzhla1VDdThQcU5NZGJhODVoeVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvHuxM6w4
RRSPgY810iqIIPrs91H78Oh45QUbVhv3Ox0hLTmLTioJd+dhsBsUWlYjt9i3esYi
vZYdT6tCeOrfWs03lc7SyzirXwp2rLpKPxdwhuA1UJKxHsGq6V/QPk79pTuhttOi
QCmRU3YsHo5DWTjYXCNSR1LlYvr5V4rApasPHe9YnQLlvyNclUy0GUWEeFll2z5K
UsGjJDX2Xfrwub6Bt+XveceEBdL4/dPIAUm+b/uLhFBId8DwarUyhJhMcL3y0e6W
lXcluXcJV+HKNFSb0mQpjr7FiZ5ho+VbdQp/E7qQw54HZCCnrXDVqVKh07mMc3Cn
ZguyM1pJU9U8DQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:48 2025 by rpki-client