Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
File:                     VRTyx8ZG7DGgSV4FHWpN4avwx04.mft (raw, json)
Hash identifier:          H724pE1tyXwpBrkXdgKNV/5xbhuErtMyLI9b6Mr4XhA=
Subject key identifier:   F9:0B:DF:0F:B8:44:97:44:58:90:C5:77:6A:87:EC:5D:29:D7:87:74
Authority key identifier: 55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E
Certificate issuer:       /CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e
Certificate serial:       0194C387965CEAC4B26EC68A9545959B86F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
Manifest number:          0F56
Signing time:             Sat 01 Feb 2025 22:00:30 +0000
Manifest this update:     Sat 01 Feb 2025 22:00:30 +0000
Manifest next update:     Sun 02 Feb 2025 22:00:30 +0000
Files and hashes:         1: VRTyx8ZG7DGgSV4FHWpN4avwx04.crl (hash: 4+vFZ57Vl41dqghr6b4UjFBeLzc0MvOC7+vcmffrUe8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:87:96:5c:ea:c4:b2:6e:c6:8a:95:45:95:9b:86:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e
        Validity
            Not Before: Feb  1 22:00:30 2025 GMT
            Not After : Feb  2 22:00:30 2025 GMT
        Subject: CN=f90bdf0fb84497445890c5776a87ec5d29d78774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:16:45:66:0a:5b:69:65:28:63:c8:13:df:c2:
                    b2:4c:23:7e:3a:47:81:71:ad:fa:e3:1d:93:0c:c3:
                    b3:b2:a5:57:8c:3b:6d:e4:54:16:b3:1c:18:3f:c1:
                    6e:9c:84:bc:8f:c4:3c:9b:9c:95:31:d6:54:d1:eb:
                    11:82:f6:42:b4:87:2d:2c:27:7d:01:eb:47:7d:f7:
                    43:f1:4e:e1:84:53:93:b7:2b:d9:99:b2:63:62:72:
                    8c:4d:ae:14:ff:2f:95:d6:59:a5:f2:63:0a:41:c3:
                    90:a3:15:f2:4d:9d:fd:de:ca:8f:eb:f7:70:c1:75:
                    db:a7:9f:24:21:fa:fe:67:61:f7:41:7b:c1:3f:1d:
                    84:f1:46:3a:67:19:9e:6d:68:66:cb:8e:a7:a1:4a:
                    00:0f:bd:ab:bf:5e:b3:40:dc:af:61:46:75:21:c2:
                    ae:33:86:7d:bc:e1:a0:46:b0:3d:df:6d:f9:6f:bc:
                    5f:f7:86:69:ce:2d:5f:cc:5f:d1:04:ce:c9:ef:33:
                    da:b7:0c:da:b2:c5:9b:e0:c7:a9:2c:0e:bc:25:28:
                    5f:d1:35:db:d8:0e:e8:06:19:fa:ba:ed:55:dc:96:
                    3d:5b:b9:58:da:d7:d1:13:b0:f1:02:73:e4:68:f1:
                    6a:2e:73:db:4d:36:0c:82:48:aa:a9:b5:ec:03:af:
                    c6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0B:DF:0F:B8:44:97:44:58:90:C5:77:6A:87:EC:5D:29:D7:87:74
            X509v3 Authority Key Identifier:
                keyid:55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:b8:30:62:f5:9e:35:75:68:cd:37:56:10:f1:b2:67:63:61:
         a1:fb:38:92:24:7a:26:44:08:87:67:ad:58:0c:b3:02:82:05:
         66:80:4f:ed:04:82:e8:f8:1f:03:17:52:6f:fc:f4:50:5f:fa:
         f0:ef:c5:22:ed:c1:8e:6c:54:45:99:f8:47:9e:03:4f:e3:e7:
         23:71:1f:c7:b8:bd:ba:a3:a5:57:6d:d3:ed:3f:f5:4d:5b:67:
         69:ae:94:be:a3:93:6a:44:ce:3d:c3:34:55:2d:20:c5:13:49:
         c8:b8:ca:53:b4:7f:1e:3c:92:8d:45:6d:d6:6f:2a:d8:ef:89:
         ca:cd:d2:f0:d2:3f:ad:82:08:57:9f:e8:c9:6b:1c:b6:e5:99:
         f1:aa:ff:7c:5f:83:b7:27:50:04:cd:64:e3:85:c7:2a:af:aa:
         25:b6:e3:d4:35:df:b5:4c:07:3f:8a:d8:38:4b:7d:51:75:24:
         a9:d5:87:cf:a1:88:bf:17:8e:29:94:0d:5d:39:1f:2c:58:b0:
         31:93:18:c4:be:ee:7e:94:cf:b9:c0:2a:c0:7c:eb:54:8f:0c:
         b0:a7:bd:67:a4:cb:32:d3:bf:85:f6:a3:35:8a:db:82:94:b4:
         82:cd:0f:2b:5b:29:c5:09:c5:c1:d7:c9:32:78:c1:6e:c8:cf:
         72:bc:2a:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDh5Zc6sSybsaKlUWVm4b1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MTRmMmM3YzY0NmVjMzFhMDQ5NWUwNTFkNmE0ZGUxYWJm
MGM3NGUwHhcNMjUwMjAxMjIwMDMwWhcNMjUwMjAyMjIwMDMwWjAzMTEwLwYDVQQD
EyhmOTBiZGYwZmI4NDQ5NzQ0NTg5MGM1Nzc2YTg3ZWM1ZDI5ZDc4Nzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthZFZgpbaWUoY8gT38KyTCN+OkeB
ca364x2TDMOzsqVXjDtt5FQWsxwYP8FunIS8j8Q8m5yVMdZU0esRgvZCtIctLCd9
AetHffdD8U7hhFOTtyvZmbJjYnKMTa4U/y+V1lml8mMKQcOQoxXyTZ393sqP6/dw
wXXbp58kIfr+Z2H3QXvBPx2E8UY6ZxmebWhmy46noUoAD72rv16zQNyvYUZ1IcKu
M4Z9vOGgRrA93235b7xf94Zpzi1fzF/RBM7J7zPatwzassWb4MepLA68JShf0TXb
2A7oBhn6uu1V3JY9W7lY2tfRE7DxAnPkaPFqLnPbTTYMgkiqqbXsA6/G/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkL3w+4RJdEWJDFd2qH7F0p14d0MB8GA1UdIwQY
MBaAFFUU8sfGRuwxoEleBR1qTeGr8MdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlJUeXg4Wkc3REdnU1Y0RkhXcE40YXZ3eDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85MGJkMjEtYWNkMC00OGU1LTlhZGYt
Mjc4MGQ2ZjE2MTJjLzEvVlJUeXg4Wkc3REdnU1Y0RkhXcE40YXZ3eDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC85MGJkMjEtYWNkMC00OGU1LTlhZGYtMjc4MGQ2ZjE2MTJj
LzEvVlJUeXg4Wkc3REdnU1Y0RkhXcE40YXZ3eDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy7gwYvWe
NXVozTdWEPGyZ2Nhofs4kiR6JkQIh2etWAyzAoIFZoBP7QSC6PgfAxdSb/z0UF/6
8O/FIu3BjmxURZn4R54DT+PnI3Efx7i9uqOlV23T7T/1TVtnaa6UvqOTakTOPcM0
VS0gxRNJyLjKU7R/HjySjUVt1m8q2O+Jys3S8NI/rYIIV5/oyWsctuWZ8ar/fF+D
tydQBM1k44XHKq+qJbbj1DXftUwHP4rYOEt9UXUkqdWHz6GIvxeOKZQNXTkfLFiw
MZMYxL7ufpTPucAqwHzrVI8MsKe9Z6TLMtO/hfajNYrbgpS0gs0PK1spxQnFwdfJ
MnjBbsjPcrwqiw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:05 2025 by rpki-client