Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
File:                     gDOAgpbqPA8_GpQjSEPeU1qDTho.mft (raw, json)
Hash identifier:          J2YBtXbCfbmncg6M4lXllrQAqDywu+yTJOT/hM66m5Y=
Subject key identifier:   C6:D0:78:93:9E:A6:B4:D8:27:DA:CD:FF:DB:92:C2:FD:4B:16:E9:3B
Authority key identifier: 80:33:80:82:96:EA:3C:0F:3F:1A:94:23:48:43:DE:53:5A:83:4E:1A
Certificate issuer:       /CN=8033808296ea3c0f3f1a94234843de535a834e1a
Certificate serial:       019651C92F8A06EDC8C435AD8815FE5D97A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
Manifest number:          148D
Signing time:             Sun 20 Apr 2025 06:01:01 +0000
Manifest this update:     Sun 20 Apr 2025 06:01:01 +0000
Manifest next update:     Mon 21 Apr 2025 06:01:01 +0000
Files and hashes:         1: gDOAgpbqPA8_GpQjSEPeU1qDTho.crl (hash: BQaYjOFlDoQ20Xm+7PlIIUcBZ1VTP567M4rACEeFpGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 06:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:c9:2f:8a:06:ed:c8:c4:35:ad:88:15:fe:5d:97:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8033808296ea3c0f3f1a94234843de535a834e1a
        Validity
            Not Before: Apr 20 06:01:01 2025 GMT
            Not After : Apr 21 06:01:01 2025 GMT
        Subject: CN=c6d078939ea6b4d827dacdffdb92c2fd4b16e93b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:20:fb:d2:45:fd:b8:f3:8c:71:da:da:95:d5:
                    81:43:77:96:62:45:f9:20:b6:60:22:2a:c6:7a:c0:
                    5b:44:32:d4:a8:70:9f:8f:dc:fd:6f:8b:ff:64:6c:
                    b9:fe:a4:f5:d5:68:21:85:c2:1b:61:a9:52:ef:5e:
                    7a:46:20:7a:25:66:ed:71:85:ea:c7:58:a2:fd:19:
                    75:1a:ca:4e:79:fc:53:33:41:45:fe:15:57:77:73:
                    92:c7:c1:f8:9a:0a:70:0a:5c:17:1e:d4:74:57:86:
                    43:5d:ef:7a:a3:c6:99:dc:99:bb:0f:14:f4:ca:08:
                    e6:29:7d:20:39:83:20:73:02:a9:9b:bb:c1:40:ee:
                    a4:59:3e:8f:6f:b1:04:58:aa:63:fb:47:8f:c6:6c:
                    a6:f1:2c:66:db:5a:30:d5:7d:d4:c7:a3:0c:4c:5e:
                    e1:f9:97:a2:b8:80:b3:5d:bd:49:3e:2d:ff:cd:2e:
                    56:15:dd:42:ca:0c:b4:67:6e:ec:66:6b:f8:a0:fd:
                    e2:e4:4d:35:2a:c4:6f:0f:36:13:1b:b8:8c:9a:e1:
                    51:80:30:00:c3:87:f0:ad:86:91:89:45:4a:95:de:
                    31:ba:77:31:36:1f:43:c6:82:54:7a:63:dd:f2:83:
                    a1:6e:33:4d:46:fe:9f:28:99:f8:bb:48:f7:e4:7f:
                    fb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D0:78:93:9E:A6:B4:D8:27:DA:CD:FF:DB:92:C2:FD:4B:16:E9:3B
            X509v3 Authority Key Identifier:
                keyid:80:33:80:82:96:EA:3C:0F:3F:1A:94:23:48:43:DE:53:5A:83:4E:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:6d:74:1a:c8:19:09:6e:47:69:bd:92:f4:53:11:23:d4:70:
         06:92:a1:a8:f4:29:8f:20:c7:e0:3a:63:54:42:71:07:d3:db:
         d1:53:d3:90:5f:bb:b0:ab:41:34:f4:42:12:32:4c:b1:8d:ba:
         30:4a:8e:a2:03:aa:92:44:8f:6d:6e:b5:ff:4c:52:f9:bc:98:
         db:e4:8b:72:79:e4:22:08:a0:44:91:6a:10:5a:96:73:ec:a3:
         06:87:c4:2d:7f:9f:5f:86:5f:07:4b:69:1e:a1:33:4c:25:2b:
         e1:04:47:17:be:5f:d6:94:59:e5:95:72:c7:46:f4:8f:c0:3c:
         c2:79:8c:10:96:fe:47:ca:ce:3e:cc:ad:d8:1e:7a:d4:ee:02:
         09:95:97:96:9b:05:d8:47:9e:6e:63:36:cc:06:33:fe:57:64:
         92:7d:7e:6b:e6:4a:cf:74:9d:ce:aa:a8:66:a0:6f:31:16:ce:
         75:8e:34:e7:4a:c9:9c:61:40:05:71:de:b4:e3:77:89:b5:de:
         98:71:01:0c:fa:ee:0d:82:1b:cf:92:38:c6:75:49:88:b4:54:
         1f:ce:81:d7:18:52:2b:42:cb:5a:8f:da:e0:eb:4d:0a:d4:56:
         0f:24:78:e0:5a:d8:37:3c:8a:de:88:55:c0:1c:c5:29:32:01:
         c8:fd:39:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRyS+KBu3IxDWtiBX+XZelMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMzM4MDgyOTZlYTNjMGYzZjFhOTQyMzQ4NDNkZTUzNWE4
MzRlMWEwHhcNMjUwNDIwMDYwMTAxWhcNMjUwNDIxMDYwMTAxWjAzMTEwLwYDVQQD
EyhjNmQwNzg5MzllYTZiNGQ4MjdkYWNkZmZkYjkyYzJmZDRiMTZlOTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyD70kX9uPOMcdraldWBQ3eWYkX5
ILZgIirGesBbRDLUqHCfj9z9b4v/ZGy5/qT11WghhcIbYalS7156RiB6JWbtcYXq
x1ii/Rl1GspOefxTM0FF/hVXd3OSx8H4mgpwClwXHtR0V4ZDXe96o8aZ3Jm7DxT0
ygjmKX0gOYMgcwKpm7vBQO6kWT6Pb7EEWKpj+0ePxmym8Sxm21ow1X3Ux6MMTF7h
+ZeiuICzXb1JPi3/zS5WFd1Cygy0Z27sZmv4oP3i5E01KsRvDzYTG7iMmuFRgDAA
w4fwrYaRiUVKld4xuncxNh9DxoJUemPd8oOhbjNNRv6fKJn4u0j35H/7FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbQeJOeprTYJ9rN/9uSwv1LFuk7MB8GA1UdIwQY
MBaAFIAzgIKW6jwPPxqUI0hD3lNag04aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0RPQWdwYnFQQThfR3BRalNFUGVVMXFEVGhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9hZjdjOWUtNWM4ZS00OWM3LWFlYWIt
ZDgxOWMzODg1ZGVjLzEvZ0RPQWdwYnFQQThfR3BRalNFUGVVMXFEVGhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9hZjdjOWUtNWM4ZS00OWM3LWFlYWItZDgxOWMzODg1ZGVj
LzEvZ0RPQWdwYnFQQThfR3BRalNFUGVVMXFEVGhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHG10GsgZ
CW5Hab2S9FMRI9RwBpKhqPQpjyDH4DpjVEJxB9Pb0VPTkF+7sKtBNPRCEjJMsY26
MEqOogOqkkSPbW61/0xS+byY2+SLcnnkIgigRJFqEFqWc+yjBofELX+fX4ZfB0tp
HqEzTCUr4QRHF75f1pRZ5ZVyx0b0j8A8wnmMEJb+R8rOPsyt2B561O4CCZWXlpsF
2EeebmM2zAYz/ldkkn1+a+ZKz3SdzqqoZqBvMRbOdY4050rJnGFABXHetON3ibXe
mHEBDPruDYIbz5I4xnVJiLRUH86B1xhSK0LLWo/a4OtNCtRWDyR44FrYNzyK3ohV
wBzFKTIByP05LA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:38:13 2025 by rpki-client