Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.mft
File:                     c5ojygLNDwflNvtppcC5vqDaYKU.mft (raw, json)
Hash identifier:          Vh/twB7GdeLkyEt4FKd48nTarW//d/pqzZjsjE/VQbY=
Subject key identifier:   37:3D:F2:BD:B7:79:0B:AF:1F:D7:1A:5D:0C:85:8C:95:D1:07:D6:4A
Authority key identifier: 73:9A:23:CA:02:CD:0F:07:E5:36:FB:69:A5:C0:B9:BE:A0:DA:60:A5
Certificate issuer:       /CN=739a23ca02cd0f07e536fb69a5c0b9bea0da60a5
Certificate serial:       0194C3F600F55486E3A5837F85E6634153E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c5ojygLNDwflNvtppcC5vqDaYKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.mft
Manifest number:          0721
Signing time:             Sun 02 Feb 2025 00:01:06 +0000
Manifest this update:     Sun 02 Feb 2025 00:01:06 +0000
Manifest next update:     Mon 03 Feb 2025 00:01:06 +0000
Files and hashes:         1: c5ojygLNDwflNvtppcC5vqDaYKU.crl (hash: u4JDzE0UFYHxEJ/TexjRpCB9TYm6IuLpa2Ry4kx/Vn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c5ojygLNDwflNvtppcC5vqDaYKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:f6:00:f5:54:86:e3:a5:83:7f:85:e6:63:41:53:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=739a23ca02cd0f07e536fb69a5c0b9bea0da60a5
        Validity
            Not Before: Feb  2 00:01:06 2025 GMT
            Not After : Feb  3 00:01:06 2025 GMT
        Subject: CN=373df2bdb7790baf1fd71a5d0c858c95d107d64a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:db:45:ab:21:5d:60:3b:ab:fc:92:ef:b3:88:
                    8a:64:bb:f9:29:14:c5:82:7d:f5:50:e8:33:11:c3:
                    f6:bc:4a:0a:2f:34:fe:bc:be:a2:4e:2f:67:cb:17:
                    2f:16:3b:09:2f:46:b5:66:31:f0:3a:9e:ac:8f:a9:
                    50:b7:75:08:58:fc:5e:7e:a2:79:d6:70:e7:ca:32:
                    86:12:76:79:1d:f4:62:d9:82:9b:36:ba:57:7a:8a:
                    f1:f9:d7:f6:b9:73:0e:bc:83:8b:11:89:79:0d:73:
                    f6:83:26:a3:cb:4a:bd:71:41:cf:75:74:8d:50:94:
                    be:13:55:02:2e:87:9a:ac:f2:3e:ec:8f:6f:aa:45:
                    3f:13:ff:ff:7e:7f:95:ba:91:72:d7:39:b9:77:ea:
                    1c:4a:8a:c8:62:ad:33:5b:53:6e:99:cb:15:3e:00:
                    ea:90:0d:ac:59:8d:fe:dc:b6:e2:b8:aa:6b:98:85:
                    c4:8c:f0:f4:0a:84:d5:c3:42:b7:52:63:f4:17:36:
                    44:ba:4f:3e:5e:34:8e:74:ec:11:4b:66:8a:28:11:
                    cb:16:8a:c2:03:9e:c6:0d:6c:89:54:28:fe:07:47:
                    a6:12:af:d6:a4:0a:0b:3d:97:f1:b7:8b:14:ca:ff:
                    1b:71:3b:f7:6e:c1:5a:52:9d:de:d7:e2:4a:b9:39:
                    6c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3D:F2:BD:B7:79:0B:AF:1F:D7:1A:5D:0C:85:8C:95:D1:07:D6:4A
            X509v3 Authority Key Identifier:
                keyid:73:9A:23:CA:02:CD:0F:07:E5:36:FB:69:A5:C0:B9:BE:A0:DA:60:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5ojygLNDwflNvtppcC5vqDaYKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:7a:90:8b:c5:12:00:a4:79:16:75:29:c8:7a:76:53:3d:ad:
         b9:a2:ee:ce:40:01:50:1b:76:ba:8e:6a:8d:c9:24:ed:f1:79:
         8e:2a:63:2c:6c:bd:21:64:f0:fd:d1:5a:cc:c5:fd:c6:28:16:
         91:60:22:93:48:f7:65:10:2f:e8:5d:80:d7:56:4b:a1:66:7c:
         3f:00:ce:89:cc:99:85:50:96:f0:da:68:71:1b:f9:08:16:50:
         95:eb:20:92:97:1c:82:fb:57:b5:7d:bb:e2:78:d3:5f:49:91:
         dd:e6:2d:3f:c4:0b:2c:28:d1:98:19:27:01:09:2e:85:d4:7c:
         d0:31:b8:2c:37:7b:71:ff:b1:4a:b9:50:57:8b:36:55:52:8a:
         9d:5c:42:a8:ae:f5:32:5e:05:34:21:de:76:ed:39:78:cd:38:
         d4:f9:5d:e4:ee:6d:72:8d:6d:a4:67:ae:4e:40:b1:97:da:a7:
         75:3d:30:96:a9:8a:e0:c6:51:b9:e5:b2:05:fd:41:f6:6a:5a:
         27:99:f2:70:88:31:b1:9e:32:be:28:8b:52:02:2e:f1:16:cc:
         ff:ba:5e:c9:07:c7:c2:21:a3:f6:f8:77:c4:79:05:6d:86:5f:
         d4:37:df:c0:94:b1:fb:5e:63:5c:56:22:ab:fa:53:77:e3:ea:
         38:eb:0f:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTD9gD1VIbjpYN/heZjQVPpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczOWEyM2NhMDJjZDBmMDdlNTM2ZmI2OWE1YzBiOWJlYTBk
YTYwYTUwHhcNMjUwMjAyMDAwMTA2WhcNMjUwMjAzMDAwMTA2WjAzMTEwLwYDVQQD
EygzNzNkZjJiZGI3NzkwYmFmMWZkNzFhNWQwYzg1OGM5NWQxMDdkNjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNtFqyFdYDur/JLvs4iKZLv5KRTF
gn31UOgzEcP2vEoKLzT+vL6iTi9nyxcvFjsJL0a1ZjHwOp6sj6lQt3UIWPxefqJ5
1nDnyjKGEnZ5HfRi2YKbNrpXeorx+df2uXMOvIOLEYl5DXP2gyajy0q9cUHPdXSN
UJS+E1UCLoearPI+7I9vqkU/E///fn+VupFy1zm5d+ocSorIYq0zW1NumcsVPgDq
kA2sWY3+3LbiuKprmIXEjPD0CoTVw0K3UmP0FzZEuk8+XjSOdOwRS2aKKBHLForC
A57GDWyJVCj+B0emEq/WpAoLPZfxt4sUyv8bcTv3bsFaUp3e1+JKuTlsGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDc98r23eQuvH9caXQyFjJXRB9ZKMB8GA1UdIwQY
MBaAFHOaI8oCzQ8H5Tb7aaXAub6g2mClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzVvanlnTE5Ed2ZsTnZ0cHBjQzV2cURhWUtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xNjBhZWEtMzFlNS00Yjc1LTliY2It
MmIzYmMwYzE5OGFkLzEvYzVvanlnTE5Ed2ZsTnZ0cHBjQzV2cURhWUtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8xNjBhZWEtMzFlNS00Yjc1LTliY2ItMmIzYmMwYzE5OGFk
LzEvYzVvanlnTE5Ed2ZsTnZ0cHBjQzV2cURhWUtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIXqQi8US
AKR5FnUpyHp2Uz2tuaLuzkABUBt2uo5qjckk7fF5jipjLGy9IWTw/dFazMX9xigW
kWAik0j3ZRAv6F2A11ZLoWZ8PwDOicyZhVCW8NpocRv5CBZQlesgkpccgvtXtX27
4njTX0mR3eYtP8QLLCjRmBknAQkuhdR80DG4LDd7cf+xSrlQV4s2VVKKnVxCqK71
Ml4FNCHedu05eM041Pld5O5tco1tpGeuTkCxl9qndT0wlqmK4MZRueWyBf1B9mpa
J5nycIgxsZ4yviiLUgIu8RbM/7peyQfHwiGj9vh3xHkFbYZf1DffwJSx+15jXFYi
q/pTd+PqOOsPhg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:01:27 2025 by rpki-client