Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.mft
File:                     e_7CSauE-BJlaciz2OP0PNgsYRU.mft (raw, json)
Hash identifier:          3YUCnUPEJ588JkPU7F5ZL6uxVvQAR+kNrpVcZYh7REM=
Subject key identifier:   32:CF:E4:10:9A:D9:2F:29:26:8F:33:6B:6F:8C:54:BD:C3:69:DA:0B
Authority key identifier: 7B:FE:C2:49:AB:84:F8:12:65:69:C8:B3:D8:E3:F4:3C:D8:2C:61:15
Certificate issuer:       /CN=7bfec249ab84f8126569c8b3d8e3f43cd82c6115
Certificate serial:       0195116C40A5065001DB23B636FD7AA89B64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e_7CSauE-BJlaciz2OP0PNgsYRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.mft
Manifest number:          1452
Signing time:             Mon 17 Feb 2025 01:01:01 +0000
Manifest this update:     Mon 17 Feb 2025 01:01:01 +0000
Manifest next update:     Tue 18 Feb 2025 01:01:01 +0000
Files and hashes:         1: e_7CSauE-BJlaciz2OP0PNgsYRU.crl (hash: igh7clOhsX5MqAryMGjRZA9gw3QzGVk0YQAFYuRnC3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e_7CSauE-BJlaciz2OP0PNgsYRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:6c:40:a5:06:50:01:db:23:b6:36:fd:7a:a8:9b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bfec249ab84f8126569c8b3d8e3f43cd82c6115
        Validity
            Not Before: Feb 17 01:01:01 2025 GMT
            Not After : Feb 18 01:01:01 2025 GMT
        Subject: CN=32cfe4109ad92f29268f336b6f8c54bdc369da0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:43:e1:9d:c2:ad:0b:86:1b:3a:a3:20:b7:d2:
                    be:be:cb:63:8a:b9:45:b7:49:ac:45:52:75:79:29:
                    27:d9:4c:60:99:7c:25:70:de:24:d3:0d:ee:f9:e0:
                    cd:3c:c2:8a:2b:bb:93:78:3f:74:e2:df:82:37:6f:
                    0a:e0:23:56:0d:1b:e1:b9:5d:84:d0:60:cf:ad:34:
                    40:f1:d7:ff:98:9e:5b:51:b4:b9:49:d2:f3:16:3f:
                    3d:90:f9:d0:5d:ee:08:ba:7f:d1:c7:32:38:5e:e4:
                    87:dc:f5:63:79:bd:5a:8f:81:1a:2b:5b:ca:cc:c2:
                    0f:dc:de:13:76:ef:67:91:d8:28:da:12:df:b4:93:
                    d8:36:0d:a2:7d:78:ea:c0:2a:7a:c4:7f:f4:e5:5f:
                    16:75:a6:3c:30:54:21:1a:ee:3f:39:3d:08:d4:f6:
                    05:34:bb:b2:8b:e0:ff:a8:f2:ea:22:76:bf:25:78:
                    91:d2:8b:7f:e4:bb:dc:68:7c:20:79:05:bd:f8:ed:
                    87:eb:a0:9b:ec:a3:d0:27:1a:af:9e:26:c1:c7:9e:
                    9b:89:a7:92:82:ba:73:dc:a8:73:34:74:a9:64:b4:
                    a9:6b:da:da:af:86:02:e6:35:be:27:f1:e1:60:cb:
                    ec:39:db:56:d7:48:bf:b0:86:ee:0c:40:1c:ea:14:
                    15:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CF:E4:10:9A:D9:2F:29:26:8F:33:6B:6F:8C:54:BD:C3:69:DA:0B
            X509v3 Authority Key Identifier:
                keyid:7B:FE:C2:49:AB:84:F8:12:65:69:C8:B3:D8:E3:F4:3C:D8:2C:61:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_7CSauE-BJlaciz2OP0PNgsYRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:27:e0:8a:51:56:6a:46:e3:52:a1:63:30:f0:86:83:03:01:
         09:30:92:22:1d:ee:42:5e:31:72:9f:53:57:65:b5:2c:70:77:
         bb:05:b3:35:2a:bd:3a:c5:13:e8:1e:0e:d3:a3:a3:36:ff:f4:
         aa:0d:a3:1f:43:ea:3a:6e:df:6d:fe:f5:be:92:36:4b:3b:23:
         9c:fd:76:77:49:05:80:03:bf:6e:65:3b:c3:ec:ea:b0:80:f8:
         a7:b2:a8:a3:c3:0d:7a:58:79:a4:d7:56:3f:94:37:ef:b2:35:
         29:83:dc:35:e9:af:04:65:7a:8a:82:a3:26:66:3b:83:45:cc:
         d0:62:bf:cc:ee:23:e0:4a:b3:0e:9a:78:99:c4:4e:83:aa:b4:
         68:ae:f6:c0:48:e9:21:93:d2:51:d1:ae:f8:72:c5:1a:6d:3e:
         e1:34:b8:25:76:8f:ad:be:ff:c3:e7:24:d1:b1:58:e4:ef:79:
         d2:63:a9:a5:86:5c:0e:2f:77:f3:9f:b5:36:60:82:91:c0:3a:
         f0:6a:a6:b3:c4:9a:fa:ce:81:36:08:15:c9:54:98:dd:b4:c6:
         5f:90:b7:c8:2f:36:db:c7:e1:84:27:bd:90:bf:50:4c:63:3a:
         67:5c:44:1b:6a:0f:b1:ff:b2:2b:4b:88:f1:33:4f:49:0e:c1:
         9b:8d:c2:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURbEClBlAB2yO2Nv16qJtkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZmVjMjQ5YWI4NGY4MTI2NTY5YzhiM2Q4ZTNmNDNjZDgy
YzYxMTUwHhcNMjUwMjE3MDEwMTAxWhcNMjUwMjE4MDEwMTAxWjAzMTEwLwYDVQQD
EygzMmNmZTQxMDlhZDkyZjI5MjY4ZjMzNmI2ZjhjNTRiZGMzNjlkYTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00PhncKtC4YbOqMgt9K+vstjirlF
t0msRVJ1eSkn2UxgmXwlcN4k0w3u+eDNPMKKK7uTeD904t+CN28K4CNWDRvhuV2E
0GDPrTRA8df/mJ5bUbS5SdLzFj89kPnQXe4Iun/RxzI4XuSH3PVjeb1aj4EaK1vK
zMIP3N4Tdu9nkdgo2hLftJPYNg2ifXjqwCp6xH/05V8WdaY8MFQhGu4/OT0I1PYF
NLuyi+D/qPLqIna/JXiR0ot/5LvcaHwgeQW9+O2H66Cb7KPQJxqvnibBx56biaeS
grpz3KhzNHSpZLSpa9rar4YC5jW+J/HhYMvsOdtW10i/sIbuDEAc6hQVYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLP5BCa2S8pJo8za2+MVL3DadoLMB8GA1UdIwQY
MBaAFHv+wkmrhPgSZWnIs9jj9DzYLGEVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZV83Q1NhdUUtQkpsYWNpejJPUDBQTmdzWVJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80ZjMxMWItNDZlMy00YWMxLThlOWYt
ZGViYzI4MmQ0ODNlLzEvZV83Q1NhdUUtQkpsYWNpejJPUDBQTmdzWVJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS80ZjMxMWItNDZlMy00YWMxLThlOWYtZGViYzI4MmQ0ODNl
LzEvZV83Q1NhdUUtQkpsYWNpejJPUDBQTmdzWVJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbSfgilFW
akbjUqFjMPCGgwMBCTCSIh3uQl4xcp9TV2W1LHB3uwWzNSq9OsUT6B4O06OjNv/0
qg2jH0PqOm7fbf71vpI2SzsjnP12d0kFgAO/bmU7w+zqsID4p7Koo8MNelh5pNdW
P5Q377I1KYPcNemvBGV6ioKjJmY7g0XM0GK/zO4j4EqzDpp4mcROg6q0aK72wEjp
IZPSUdGu+HLFGm0+4TS4JXaPrb7/w+ck0bFY5O950mOppYZcDi9385+1NmCCkcA6
8Gqms8Sa+s6BNggVyVSY3bTGX5C3yC8228fhhCe9kL9QTGM6Z1xEG2oPsf+yK0uI
8TNPSQ7Bm43CVw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:23 2025 by rpki-client