Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
File:                     MLepUygLb5mPwRxHy-kbgmM2TrA.mft (raw, json)
Hash identifier:          KAzierW9oWUhJcTH6RajUj+X3kSkf0fcQ4Uf7VfzZx4=
Subject key identifier:   27:93:31:84:F6:C9:EE:8E:D4:E2:EC:E2:CB:AE:62:4B:FE:DF:9F:5F
Authority key identifier: 30:B7:A9:53:28:0B:6F:99:8F:C1:1C:47:CB:E9:1B:82:63:36:4E:B0
Certificate issuer:       /CN=30b7a953280b6f998fc11c47cbe91b8263364eb0
Certificate serial:       0195116BFAF2D0FA0ACA23621B7AD50C3CEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
Manifest number:          0333
Signing time:             Mon 17 Feb 2025 01:00:44 +0000
Manifest this update:     Mon 17 Feb 2025 01:00:44 +0000
Manifest next update:     Tue 18 Feb 2025 01:00:44 +0000
Files and hashes:         1: MLepUygLb5mPwRxHy-kbgmM2TrA.crl (hash: Plmvb6eMqLlPwGhbocL+bQRpKZjN1KpySuiFUpZv0i4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:6b:fa:f2:d0:fa:0a:ca:23:62:1b:7a:d5:0c:3c:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30b7a953280b6f998fc11c47cbe91b8263364eb0
        Validity
            Not Before: Feb 17 01:00:44 2025 GMT
            Not After : Feb 18 01:00:44 2025 GMT
        Subject: CN=27933184f6c9ee8ed4e2ece2cbae624bfedf9f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8c:1e:3e:84:0c:75:9c:39:36:e7:01:fa:17:
                    bd:0f:61:8b:83:12:2c:d7:50:d9:a3:fd:de:3f:bd:
                    b2:18:f6:f7:2c:7f:00:77:1f:81:25:34:91:f3:d8:
                    9e:13:86:75:c7:47:d7:a3:aa:bd:72:ec:c6:32:3d:
                    10:12:72:17:86:fe:3f:f7:9a:b7:a4:b3:0c:0c:76:
                    90:8f:59:0c:d9:2e:e0:35:9a:c4:fc:31:10:ee:33:
                    d3:05:d5:db:ab:88:92:1a:cd:27:13:57:5b:34:ed:
                    8a:16:64:6d:8d:42:18:af:7c:14:97:e3:53:1c:dc:
                    9b:71:ab:ae:7f:48:f8:17:86:4d:64:b5:4c:4a:7b:
                    b4:3b:da:7c:d3:f6:ed:4a:72:22:19:13:ba:e0:d8:
                    25:92:8e:a1:29:3e:57:35:5d:73:14:6a:bb:0c:3c:
                    b8:eb:a1:16:d3:6d:89:52:b7:c1:a8:e1:55:8a:89:
                    41:3d:7f:db:35:e8:34:ea:79:69:b5:b3:6c:dd:dc:
                    f1:ac:44:40:e1:bd:18:c5:4c:80:2d:bd:5e:94:f8:
                    60:14:4b:8e:d3:be:ac:a5:ed:8d:c2:34:99:c9:f4:
                    e7:06:54:b1:a3:10:da:04:3f:e1:2f:0f:6b:96:0e:
                    08:a3:61:3d:bf:3c:9a:65:dd:06:16:ca:d9:55:e5:
                    78:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:93:31:84:F6:C9:EE:8E:D4:E2:EC:E2:CB:AE:62:4B:FE:DF:9F:5F
            X509v3 Authority Key Identifier:
                keyid:30:B7:A9:53:28:0B:6F:99:8F:C1:1C:47:CB:E9:1B:82:63:36:4E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:cf:c4:60:ad:59:55:4f:15:dc:ca:11:17:bc:10:c3:5e:0e:
         e4:58:1d:74:7c:45:f0:50:7e:f0:3f:e0:08:21:00:bf:b4:f3:
         65:2e:87:86:1d:7b:38:61:d7:11:66:7f:dc:2b:d2:ed:49:6c:
         0c:e7:db:50:25:87:c6:55:88:19:b5:81:8b:b2:42:22:65:3a:
         1e:ff:a4:f9:3d:2e:48:e6:1c:2d:f4:10:93:90:af:06:34:ef:
         e7:5a:cb:80:0d:ca:5d:58:52:9e:d4:b0:e9:14:87:fe:4a:8e:
         83:6d:31:ff:2e:8b:d2:9a:d1:d9:a4:17:78:f2:3a:24:b7:48:
         e2:14:6c:a1:98:2c:cc:af:03:2d:02:ca:04:b5:90:59:93:7e:
         6c:7b:53:28:08:20:5e:b2:e3:7b:05:04:20:ff:c5:51:9b:8b:
         e2:d5:a4:23:00:22:35:53:d8:86:5e:5f:1b:b5:64:63:b0:7f:
         65:b3:e6:d5:91:d5:36:98:96:aa:20:0a:42:1d:4a:00:02:ad:
         12:ca:60:4a:bc:10:0f:2a:70:eb:7e:78:74:39:8e:7b:e2:e7:
         db:f8:11:5c:b7:b9:0c:5c:35:9e:77:fa:0d:81:bb:92:e4:c2:
         4d:eb:c0:8b:5d:7d:a7:40:92:71:86:a7:f6:15:e0:d6:ca:85:
         cd:fd:dc:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURa/ry0PoKyiNiG3rVDDzuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYjdhOTUzMjgwYjZmOTk4ZmMxMWM0N2NiZTkxYjgyNjMz
NjRlYjAwHhcNMjUwMjE3MDEwMDQ0WhcNMjUwMjE4MDEwMDQ0WjAzMTEwLwYDVQQD
EygyNzkzMzE4NGY2YzllZThlZDRlMmVjZTJjYmFlNjI0YmZlZGY5ZjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxowePoQMdZw5NucB+he9D2GLgxIs
11DZo/3eP72yGPb3LH8Adx+BJTSR89ieE4Z1x0fXo6q9cuzGMj0QEnIXhv4/95q3
pLMMDHaQj1kM2S7gNZrE/DEQ7jPTBdXbq4iSGs0nE1dbNO2KFmRtjUIYr3wUl+NT
HNybcauuf0j4F4ZNZLVMSnu0O9p80/btSnIiGRO64Nglko6hKT5XNV1zFGq7DDy4
66EW022JUrfBqOFViolBPX/bNeg06nlptbNs3dzxrERA4b0YxUyALb1elPhgFEuO
076spe2NwjSZyfTnBlSxoxDaBD/hLw9rlg4Io2E9vzyaZd0GFsrZVeV4lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeTMYT2ye6O1OLs4suuYkv+359fMB8GA1UdIwQY
MBaAFDC3qVMoC2+Zj8EcR8vpG4JjNk6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUxlcFV5Z0xiNW1Qd1J4SHkta2JnbU0yVHJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kZmIzZmYtYmUzYy00MTg1LTllMDgt
OWM3MTY5YjdhMmU0LzEvTUxlcFV5Z0xiNW1Qd1J4SHkta2JnbU0yVHJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kZmIzZmYtYmUzYy00MTg1LTllMDgtOWM3MTY5YjdhMmU0
LzEvTUxlcFV5Z0xiNW1Qd1J4SHkta2JnbU0yVHJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzM/EYK1Z
VU8V3MoRF7wQw14O5FgddHxF8FB+8D/gCCEAv7TzZS6Hhh17OGHXEWZ/3CvS7Uls
DOfbUCWHxlWIGbWBi7JCImU6Hv+k+T0uSOYcLfQQk5CvBjTv51rLgA3KXVhSntSw
6RSH/kqOg20x/y6L0prR2aQXePI6JLdI4hRsoZgszK8DLQLKBLWQWZN+bHtTKAgg
XrLjewUEIP/FUZuL4tWkIwAiNVPYhl5fG7VkY7B/ZbPm1ZHVNpiWqiAKQh1KAAKt
EspgSrwQDypw6354dDmOe+Ln2/gRXLe5DFw1nnf6DYG7kuTCTevAi119p0CScYan
9hXg1sqFzf3c+Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:01 2025 by rpki-client