Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
File:                     axJMeKp4A8OiPc1y0Nwa6uXe18w.mft (raw, json)
Hash identifier:          X3kBpV/AV1soh2BmFjMDYVsFa9kTSmnLNVN3pKGb4h0=
Subject key identifier:   28:1B:51:0E:17:18:31:1B:23:9A:9F:9C:E8:9F:67:B4:94:A1:1C:CA
Authority key identifier: 6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC
Certificate issuer:       /CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc
Certificate serial:       019511348E4C87A5C511320E97398A2380BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
Manifest number:          1454
Signing time:             Mon 17 Feb 2025 00:00:11 +0000
Manifest this update:     Mon 17 Feb 2025 00:00:11 +0000
Manifest next update:     Tue 18 Feb 2025 00:00:11 +0000
Files and hashes:         1: axJMeKp4A8OiPc1y0Nwa6uXe18w.crl (hash: vTuXGRE+6PZ5JmbE1of8XZd+3sWOdqv7mbXkW0CXvCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:34:8e:4c:87:a5:c5:11:32:0e:97:39:8a:23:80:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc
        Validity
            Not Before: Feb 17 00:00:11 2025 GMT
            Not After : Feb 18 00:00:11 2025 GMT
        Subject: CN=281b510e1718311b239a9f9ce89f67b494a11cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:75:46:f4:95:f8:eb:69:8b:1f:c2:e8:93:ee:
                    89:74:48:24:93:72:84:fa:dc:04:e3:92:85:c0:b4:
                    df:03:72:0d:cd:29:0d:4b:ba:5c:e6:67:a8:0a:24:
                    92:ce:f8:f0:9a:d9:7a:0c:31:6d:3c:75:7a:7b:f3:
                    06:cd:37:32:87:38:83:c5:ca:f2:80:54:4a:42:97:
                    81:62:28:94:55:6d:41:6e:82:37:64:23:1b:4c:5d:
                    81:c9:4e:a5:0d:99:c0:9d:82:0f:2d:c4:d7:53:9e:
                    f9:f0:25:5c:00:b6:b2:0a:73:7b:d5:b4:46:cd:48:
                    99:81:6f:81:9a:37:ad:70:7b:cc:90:84:48:34:ab:
                    c0:d4:db:fa:43:26:19:a0:c9:e9:35:c6:27:15:14:
                    00:74:13:48:2e:9d:5f:63:7a:1f:0d:14:5c:0b:79:
                    45:87:8d:b6:c0:89:f4:8a:16:71:99:52:d4:56:de:
                    e8:83:4f:ec:7f:41:70:2d:54:d3:d6:67:ad:44:39:
                    25:34:fe:3c:75:b7:f5:27:d2:b8:84:d8:45:c2:56:
                    f3:2f:af:fd:ab:82:11:b9:6b:87:c4:bd:28:8b:38:
                    8e:cd:c5:bf:47:d6:58:19:fd:3d:5a:3d:28:95:1c:
                    05:e6:3a:d2:da:af:31:34:59:61:d0:f5:1a:bd:2f:
                    e9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:1B:51:0E:17:18:31:1B:23:9A:9F:9C:E8:9F:67:B4:94:A1:1C:CA
            X509v3 Authority Key Identifier:
                keyid:6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:51:0f:5a:db:99:1d:47:97:e4:60:d6:fc:d9:4c:61:a5:9a:
         d3:42:99:2d:2d:71:e9:0f:8c:17:7c:f7:59:e5:43:d6:8e:c8:
         64:44:cb:ab:69:d9:89:9f:99:bd:f8:d0:1d:7c:46:9d:35:ff:
         81:3f:cb:53:ba:19:fe:60:2e:c6:fd:37:2f:f5:ca:72:69:fc:
         39:55:8d:9b:b8:16:2f:68:50:0b:62:2b:e7:76:f2:b2:25:6d:
         9c:8c:e5:46:f7:a6:3d:19:ea:90:e1:36:d4:28:32:00:f9:b5:
         ba:7c:07:47:4f:d1:79:6f:01:e6:4c:08:c2:03:56:d6:30:62:
         7a:3a:04:5a:c2:f6:69:ed:5a:cd:78:92:b4:a7:47:e8:09:6c:
         86:ad:a4:17:ed:84:6a:b9:11:90:19:a6:f1:f1:9b:9f:ee:81:
         ac:d7:d7:17:25:ec:2b:14:31:a3:1f:1a:d1:c8:dc:3a:f7:b7:
         b6:39:6d:4c:08:32:95:f6:f9:fc:79:45:c4:39:95:ea:62:82:
         a7:0c:20:d5:96:24:86:1f:54:e4:09:a6:e0:df:07:4d:2c:a0:
         bd:2f:4a:6a:cf:5b:b4:cd:f2:ff:17:a3:07:c7:aa:75:bf:81:
         25:c2:f7:a7:ab:47:1c:c0:70:32:da:71:c8:6f:e0:6a:34:5b:
         ad:3c:43:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:07 2025 by rpki-client