Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
File:                     P6E212Q_3A0_sdU0Z9irspm3kXE.mft (raw, json)
Hash identifier:          IezCGyeVVVl+rkSqA54KdekWwfE0P1O2n8iPD6kke88=
Subject key identifier:   D4:78:69:44:6E:25:F6:CD:B5:42:56:30:4D:17:3E:37:25:4C:71:C2
Authority key identifier: 3F:A1:36:D7:64:3F:DC:0D:3F:B1:D5:34:67:D8:AB:B2:99:B7:91:71
Certificate issuer:       /CN=3fa136d7643fdc0d3fb1d53467d8abb299b79171
Certificate serial:       0195108FB5CA485D1A48399A7F984E822516
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P6E212Q_3A0_sdU0Z9irspm3kXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
Manifest number:          0440
Signing time:             Sun 16 Feb 2025 21:00:08 +0000
Manifest this update:     Sun 16 Feb 2025 21:00:08 +0000
Manifest next update:     Mon 17 Feb 2025 21:00:08 +0000
Files and hashes:         1: P6E212Q_3A0_sdU0Z9irspm3kXE.crl (hash: oohls3SSGq50GJWzn8cmzpRd5ZEsLYBXD5LG6K7gfy0=)
                          2: aQLWCmdbg9aMVtpUr6kgFp-kl8g.roa (hash: MaYzTmKmtA6VMd+7uLB1yAAfoDrTIUYoMrGwKo2T4Fc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P6E212Q_3A0_sdU0Z9irspm3kXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 21:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:8f:b5:ca:48:5d:1a:48:39:9a:7f:98:4e:82:25:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fa136d7643fdc0d3fb1d53467d8abb299b79171
        Validity
            Not Before: Feb 16 21:00:08 2025 GMT
            Not After : Feb 17 21:00:08 2025 GMT
        Subject: CN=d47869446e25f6cdb54256304d173e37254c71c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:49:52:9e:fe:46:6a:67:81:08:ba:66:26:03:
                    ff:51:c4:0b:2a:0a:ff:dd:73:20:b0:0f:c0:ee:3d:
                    49:69:65:a2:9b:04:da:7a:9b:d5:e5:4b:18:22:0b:
                    20:6d:04:42:ae:31:50:49:0a:ed:a6:6e:37:73:81:
                    34:69:a1:c6:b0:a0:a6:aa:d8:8c:36:17:74:ac:57:
                    d7:a1:b5:c1:5e:ba:4b:5f:54:91:78:4e:0e:c2:70:
                    38:a7:84:f4:95:d2:99:6f:98:9c:56:39:7e:89:0f:
                    be:b4:e2:d0:75:4e:20:4e:63:99:d4:62:ef:b2:b1:
                    c3:a7:78:fc:79:c4:4e:62:1c:51:63:1b:7e:bb:9f:
                    8f:27:7c:ea:d3:de:7a:30:8e:53:d6:77:58:ca:d2:
                    5d:76:af:89:63:01:2f:93:30:90:37:02:ba:fd:55:
                    c3:6b:a8:b1:ef:33:b9:b2:a3:ee:69:f8:b4:d2:df:
                    b4:4a:eb:1e:6e:3a:b0:f8:01:f5:92:5a:18:f3:1f:
                    9b:41:37:df:24:d6:89:09:47:a1:01:f5:d1:d0:0c:
                    a7:66:19:e1:b3:04:fe:c9:5f:34:02:28:18:ba:5f:
                    6c:6d:0b:03:5c:45:57:85:5a:13:63:cc:a5:87:5c:
                    fb:b6:ab:db:b9:0c:d5:7a:73:76:ab:f1:16:4a:f2:
                    fa:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:78:69:44:6E:25:F6:CD:B5:42:56:30:4D:17:3E:37:25:4C:71:C2
            X509v3 Authority Key Identifier:
                keyid:3F:A1:36:D7:64:3F:DC:0D:3F:B1:D5:34:67:D8:AB:B2:99:B7:91:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6E212Q_3A0_sdU0Z9irspm3kXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:1b:12:80:38:21:46:c5:2c:f2:01:83:50:de:db:22:21:06:
         b5:12:84:55:e7:38:f7:1b:ef:82:6f:12:90:a6:20:f7:b0:c4:
         d3:fc:33:7e:e3:49:1e:34:20:1e:3f:4d:93:70:e2:cd:c2:83:
         94:63:b7:d4:d3:20:06:19:93:ee:51:de:b5:90:93:b2:72:5a:
         09:cb:d6:f2:d3:b3:8c:63:a2:32:8d:7d:64:b9:31:73:18:00:
         4e:64:c7:d7:01:9c:0c:a7:9f:36:bb:23:ff:3a:40:f2:e3:34:
         c6:22:30:38:6c:92:32:d0:d2:f2:a4:42:72:99:26:af:89:b1:
         5b:57:12:19:a2:4f:e8:5d:3b:c0:cb:cc:9d:b7:3d:9b:9a:74:
         3b:16:9d:06:04:a1:c2:65:cc:dc:fb:b9:25:8e:e1:e6:f2:c1:
         84:fc:ee:44:9f:9f:b6:9c:0f:3a:2f:5d:99:2c:b6:2d:90:cf:
         f8:9a:f8:f0:ff:f5:8f:6d:bc:b8:a5:6e:fc:a5:33:99:69:d7:
         c2:9f:6e:e9:f2:80:d7:ad:91:77:b2:3c:c5:86:81:c4:12:c5:
         7a:e4:8b:9b:f3:a0:97:f6:2a:34:2a:17:ce:d5:8d:7f:b4:43:
         86:9f:53:19:75:65:a0:4c:a4:6a:0d:59:75:65:5f:0b:8b:ab:
         ce:92:e2:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQj7XKSF0aSDmaf5hOgiUWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmYTEzNmQ3NjQzZmRjMGQzZmIxZDUzNDY3ZDhhYmIyOTli
NzkxNzEwHhcNMjUwMjE2MjEwMDA4WhcNMjUwMjE3MjEwMDA4WjAzMTEwLwYDVQQD
EyhkNDc4Njk0NDZlMjVmNmNkYjU0MjU2MzA0ZDE3M2UzNzI1NGM3MWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UlSnv5GameBCLpmJgP/UcQLKgr/
3XMgsA/A7j1JaWWimwTaepvV5UsYIgsgbQRCrjFQSQrtpm43c4E0aaHGsKCmqtiM
Nhd0rFfXobXBXrpLX1SReE4OwnA4p4T0ldKZb5icVjl+iQ++tOLQdU4gTmOZ1GLv
srHDp3j8ecROYhxRYxt+u5+PJ3zq0956MI5T1ndYytJddq+JYwEvkzCQNwK6/VXD
a6ix7zO5sqPuafi00t+0Susebjqw+AH1kloY8x+bQTffJNaJCUehAfXR0AynZhnh
swT+yV80AigYul9sbQsDXEVXhVoTY8ylh1z7tqvbuQzVenN2q/EWSvL6aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNR4aURuJfbNtUJWME0XPjclTHHCMB8GA1UdIwQY
MBaAFD+hNtdkP9wNP7HVNGfYq7KZt5FxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDZFMjEyUV8zQTBfc2RVMFo5aXJzcG0za1hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC82NTVkNTMtOTRjNS00YTk3LTg4YTEt
ZDI3N2E1ZjNiOWUwLzEvUDZFMjEyUV8zQTBfc2RVMFo5aXJzcG0za1hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC82NTVkNTMtOTRjNS00YTk3LTg4YTEtZDI3N2E1ZjNiOWUw
LzEvUDZFMjEyUV8zQTBfc2RVMFo5aXJzcG0za1hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhsSgDgh
RsUs8gGDUN7bIiEGtRKEVec49xvvgm8SkKYg97DE0/wzfuNJHjQgHj9Nk3DizcKD
lGO31NMgBhmT7lHetZCTsnJaCcvW8tOzjGOiMo19ZLkxcxgATmTH1wGcDKefNrsj
/zpA8uM0xiIwOGySMtDS8qRCcpkmr4mxW1cSGaJP6F07wMvMnbc9m5p0OxadBgSh
wmXM3Pu5JY7h5vLBhPzuRJ+ftpwPOi9dmSy2LZDP+Jr48P/1j228uKVu/KUzmWnX
wp9u6fKA162Rd7I8xYaBxBLFeuSLm/Ogl/YqNCoXztWNf7RDhp9TGXVloEykag1Z
dWVfC4urzpLihg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:28 2025 by rpki-client