Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
File:                     VrWL59KDOsOZKLi4aCdBtQMUZF0.mft (raw, json)
Hash identifier:          4lS9s0m2awN0kjK/gtzCYiSV8pjlpPiAH/6Lysqvv6g=
Subject key identifier:   7C:0A:50:C0:E4:02:CB:28:AC:58:7F:A4:38:9D:B2:70:28:3C:16:27
Authority key identifier: 56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D
Certificate issuer:       /CN=56b58be7d2833ac39928b8b8682741b50314645d
Certificate serial:       019510C6DE47592182A14C156C5A143F29A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
Manifest number:          0745
Signing time:             Sun 16 Feb 2025 22:00:23 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:23 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:23 +0000
Files and hashes:         1: VrWL59KDOsOZKLi4aCdBtQMUZF0.crl (hash: aloWCNa4fsCGw+ChHd0zOJfRWHAaT1qThKocHtfUhu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c6:de:47:59:21:82:a1:4c:15:6c:5a:14:3f:29:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b58be7d2833ac39928b8b8682741b50314645d
        Validity
            Not Before: Feb 16 22:00:23 2025 GMT
            Not After : Feb 17 22:00:23 2025 GMT
        Subject: CN=7c0a50c0e402cb28ac587fa4389db270283c1627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:74:59:ee:22:a0:b9:02:2d:05:69:a3:e5:07:
                    fe:2b:5b:93:5b:ae:ad:58:ee:b5:37:ee:69:a4:d9:
                    48:fe:02:f3:0a:be:76:a5:1b:8a:6a:69:06:9c:47:
                    f2:45:b9:3e:18:ca:3e:1e:0d:63:0e:b9:15:35:eb:
                    23:06:58:6d:48:ce:d2:f7:94:ce:f8:64:48:97:cf:
                    2b:ba:e2:a2:1a:15:68:86:a5:a9:55:36:64:1d:05:
                    99:67:c8:fe:b1:10:bf:8f:2d:8f:f4:a6:00:9c:bd:
                    1c:6c:3c:1a:58:c0:37:2f:db:bb:ad:ee:17:f9:16:
                    21:61:2c:a2:ac:49:71:2e:96:50:74:e8:9e:4f:cc:
                    68:23:51:17:26:d1:36:57:7f:4a:59:11:a3:72:eb:
                    ef:21:13:99:e6:29:c2:ab:8d:06:5c:78:56:f6:06:
                    81:f3:e6:2d:60:ab:14:1d:ab:a3:ee:5d:15:6d:78:
                    04:f1:08:6e:92:10:66:b1:2b:d7:25:ab:fe:96:1c:
                    17:cc:b4:25:b3:08:5f:a8:3f:de:73:fa:9f:83:14:
                    32:e1:29:6d:20:a9:b9:18:6f:ac:b3:89:fc:d9:27:
                    6e:b9:1d:ee:54:64:7b:24:6b:80:22:7d:48:18:a7:
                    e4:07:51:8a:66:7e:32:ce:ac:4e:65:2f:82:1c:6a:
                    00:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0A:50:C0:E4:02:CB:28:AC:58:7F:A4:38:9D:B2:70:28:3C:16:27
            X509v3 Authority Key Identifier:
                keyid:56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:c0:f6:5a:c6:ae:8b:90:31:0f:70:c4:3f:4f:2d:e1:87:bb:
         52:b8:ac:a3:8b:0a:76:ca:9a:78:7b:ff:1a:ea:8d:a0:80:8b:
         ec:14:5c:6f:97:77:dc:9d:76:11:f1:f6:19:0a:34:9e:df:29:
         94:b5:6a:8f:02:88:5b:2c:93:0d:92:5d:8e:7e:56:d6:e1:15:
         67:2a:7d:20:be:86:39:94:14:69:67:06:44:ff:39:d9:47:d8:
         bb:f5:58:90:ac:cc:4b:e7:80:4c:bf:60:f6:45:32:db:c7:3d:
         b0:00:e8:d8:0a:29:60:eb:42:7c:28:e4:65:5c:6e:47:f1:b3:
         9e:b9:b4:b2:7c:0f:6c:03:f1:97:f6:d1:ec:42:23:72:c1:41:
         14:58:32:f3:f8:49:bf:00:b0:e7:2b:4d:1c:be:58:59:51:01:
         5b:e1:bb:7b:6d:a6:84:14:b3:f2:6b:c7:6b:99:72:dc:bb:67:
         85:01:bb:bd:77:22:5a:29:89:0c:97:cc:f2:c1:9e:38:2f:c7:
         b5:a0:aa:03:5a:83:55:31:ba:44:fa:98:47:47:be:aa:d7:7e:
         f9:45:7e:61:40:04:05:71:2b:4f:a2:c6:3b:89:30:6c:42:f8:
         af:1b:c4:a3:99:8d:f9:57:48:e4:a8:0c:69:70:4b:84:5d:0b:
         1c:c2:9c:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxt5HWSGCoUwVbFoUPymmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YjU4YmU3ZDI4MzNhYzM5OTI4YjhiODY4Mjc0MWI1MDMx
NDY0NWQwHhcNMjUwMjE2MjIwMDIzWhcNMjUwMjE3MjIwMDIzWjAzMTEwLwYDVQQD
Eyg3YzBhNTBjMGU0MDJjYjI4YWM1ODdmYTQzODlkYjI3MDI4M2MxNjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3RZ7iKguQItBWmj5Qf+K1uTW66t
WO61N+5ppNlI/gLzCr52pRuKamkGnEfyRbk+GMo+Hg1jDrkVNesjBlhtSM7S95TO
+GRIl88ruuKiGhVohqWpVTZkHQWZZ8j+sRC/jy2P9KYAnL0cbDwaWMA3L9u7re4X
+RYhYSyirElxLpZQdOieT8xoI1EXJtE2V39KWRGjcuvvIROZ5inCq40GXHhW9gaB
8+YtYKsUHauj7l0VbXgE8QhukhBmsSvXJav+lhwXzLQlswhfqD/ec/qfgxQy4Slt
IKm5GG+ss4n82SduuR3uVGR7JGuAIn1IGKfkB1GKZn4yzqxOZS+CHGoASwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwKUMDkAssorFh/pDidsnAoPBYnMB8GA1UdIwQY
MBaAFFa1i+fSgzrDmSi4uGgnQbUDFGRdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJXTDU5S0RPc09aS0xpNGFDZEJ0UU1VWkYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lYTk1NzktMzUzMi00OWZiLTkxODIt
ZjNhOGJmMzcyMDU2LzEvVnJXTDU5S0RPc09aS0xpNGFDZEJ0UU1VWkYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9lYTk1NzktMzUzMi00OWZiLTkxODItZjNhOGJmMzcyMDU2
LzEvVnJXTDU5S0RPc09aS0xpNGFDZEJ0UU1VWkYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMD2Wsau
i5AxD3DEP08t4Ye7Uriso4sKdsqaeHv/GuqNoICL7BRcb5d33J12EfH2GQo0nt8p
lLVqjwKIWyyTDZJdjn5W1uEVZyp9IL6GOZQUaWcGRP852UfYu/VYkKzMS+eATL9g
9kUy28c9sADo2AopYOtCfCjkZVxuR/Gznrm0snwPbAPxl/bR7EIjcsFBFFgy8/hJ
vwCw5ytNHL5YWVEBW+G7e22mhBSz8mvHa5ly3LtnhQG7vXciWimJDJfM8sGeOC/H
taCqA1qDVTG6RPqYR0e+qtd++UV+YUAEBXErT6LGO4kwbEL4rxvEo5mN+VdI5KgM
aXBLhF0LHMKcOA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:25 2025 by rpki-client