Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.mft
File:                     1R31-9viXy1eU4x53RjD1sQualU.mft (raw, json)
Hash identifier:          p8EGueJLZoHYvyPZFovJxyTbP9BOtulkGHfGYDZYqFM=
Subject key identifier:   EE:D1:A5:8A:AB:2A:D6:E6:99:87:EC:DF:AB:8B:62:FB:16:5E:E4:11
Authority key identifier: D5:1D:F5:FB:DB:E2:5F:2D:5E:53:8C:79:DD:18:C3:D6:C4:2E:6A:55
Certificate issuer:       /CN=d51df5fbdbe25f2d5e538c79dd18c3d6c42e6a55
Certificate serial:       019512109AFCC2666BE9BB820245DF80A80A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1R31-9viXy1eU4x53RjD1sQualU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.mft
Manifest number:          1452
Signing time:             Mon 17 Feb 2025 04:00:32 +0000
Manifest this update:     Mon 17 Feb 2025 04:00:32 +0000
Manifest next update:     Tue 18 Feb 2025 04:00:32 +0000
Files and hashes:         1: 1R31-9viXy1eU4x53RjD1sQualU.crl (hash: 1xswLXUMqmd23AN9U4reVn7k9diwNebx/+4OOVqn2PI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1R31-9viXy1eU4x53RjD1sQualU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:10:9a:fc:c2:66:6b:e9:bb:82:02:45:df:80:a8:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d51df5fbdbe25f2d5e538c79dd18c3d6c42e6a55
        Validity
            Not Before: Feb 17 04:00:32 2025 GMT
            Not After : Feb 18 04:00:32 2025 GMT
        Subject: CN=eed1a58aab2ad6e69987ecdfab8b62fb165ee411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b6:e3:74:09:f1:fd:c7:29:78:32:43:b4:3b:
                    00:19:84:ba:9f:34:35:96:11:f3:35:39:08:81:aa:
                    71:0d:d3:7a:91:97:67:f8:5c:79:11:e0:2a:25:fe:
                    a0:b8:23:3a:8b:a7:72:46:23:30:ab:fb:47:4a:ba:
                    fd:02:b4:e8:e6:d3:33:5b:2a:e7:08:e5:ae:21:9e:
                    a7:ac:18:a7:45:2d:dc:99:88:4b:4d:c1:1e:b0:85:
                    dc:43:21:ee:9e:4a:2e:92:80:bd:d5:8b:25:91:58:
                    87:98:14:ae:99:08:5a:91:af:47:44:37:e2:b8:a7:
                    6e:78:5c:db:cb:72:ba:b0:09:62:2f:b0:35:e7:1e:
                    1e:20:47:c2:e3:02:85:7c:10:9d:12:46:bd:5b:b3:
                    da:83:4f:45:51:d7:a7:e5:1c:fe:34:4a:3c:84:83:
                    59:6c:2e:19:1a:4d:a9:62:af:9b:28:c0:cb:9d:f1:
                    0b:23:99:f2:a3:1c:45:62:7f:58:ff:bc:52:43:63:
                    8f:b3:81:15:19:3f:0a:3f:53:4a:26:22:65:7e:26:
                    35:4e:00:8b:1f:8e:48:d2:68:86:df:37:a1:1f:3a:
                    3c:b8:47:9a:ec:44:04:99:0f:26:ab:69:39:48:dc:
                    00:81:c1:e9:c4:24:e6:3c:e8:31:32:5e:e7:dd:e7:
                    66:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D1:A5:8A:AB:2A:D6:E6:99:87:EC:DF:AB:8B:62:FB:16:5E:E4:11
            X509v3 Authority Key Identifier:
                keyid:D5:1D:F5:FB:DB:E2:5F:2D:5E:53:8C:79:DD:18:C3:D6:C4:2E:6A:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R31-9viXy1eU4x53RjD1sQualU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:48:87:bf:90:5d:da:60:00:9b:34:6b:e3:e2:bd:bd:61:1f:
         61:b2:3d:6f:a2:56:98:c6:a8:3a:e5:7d:6c:03:22:a2:46:08:
         1b:fd:8c:bf:b8:4f:b7:cb:4a:b8:38:c7:75:25:c8:f4:e5:c0:
         ed:41:3f:b1:2c:56:87:dc:20:62:60:7a:1d:82:2c:54:42:be:
         25:85:dc:ac:fa:f9:a2:a5:6b:cf:db:5e:f1:68:f4:59:12:26:
         35:33:57:a3:a4:53:0f:ca:44:ec:8c:39:ff:c9:13:49:5f:39:
         63:d8:88:86:b8:45:03:a3:37:50:7e:29:c0:00:b0:3f:17:be:
         bc:b8:37:67:5a:1e:2d:9e:58:e9:01:ad:b8:9a:0c:92:52:13:
         45:35:9d:b5:58:80:49:79:77:21:ed:ff:dc:15:f9:35:0a:6a:
         0b:8f:6f:01:4f:20:b0:f6:9c:a8:5a:be:58:8f:a3:35:84:a8:
         43:3c:79:38:a3:84:fd:bb:89:fb:f9:5e:11:88:10:be:07:21:
         4e:4a:b5:d9:c3:99:d4:e8:f4:cd:78:f6:f7:db:c2:44:ec:02:
         cc:cc:2b:bf:84:13:4a:9e:91:c3:23:11:72:a6:d0:6b:7f:9d:
         be:70:e5:dd:18:0c:7b:a3:ef:f0:ae:d9:a0:27:cc:65:50:e8:
         b1:83:a1:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSEJr8wmZr6buCAkXfgKgKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MWRmNWZiZGJlMjVmMmQ1ZTUzOGM3OWRkMThjM2Q2YzQy
ZTZhNTUwHhcNMjUwMjE3MDQwMDMyWhcNMjUwMjE4MDQwMDMyWjAzMTEwLwYDVQQD
EyhlZWQxYTU4YWFiMmFkNmU2OTk4N2VjZGZhYjhiNjJmYjE2NWVlNDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7bjdAnx/ccpeDJDtDsAGYS6nzQ1
lhHzNTkIgapxDdN6kZdn+Fx5EeAqJf6guCM6i6dyRiMwq/tHSrr9ArTo5tMzWyrn
COWuIZ6nrBinRS3cmYhLTcEesIXcQyHunkoukoC91YslkViHmBSumQhaka9HRDfi
uKdueFzby3K6sAliL7A15x4eIEfC4wKFfBCdEka9W7Pag09FUden5Rz+NEo8hINZ
bC4ZGk2pYq+bKMDLnfELI5nyoxxFYn9Y/7xSQ2OPs4EVGT8KP1NKJiJlfiY1TgCL
H45I0miG3zehHzo8uEea7EQEmQ8mq2k5SNwAgcHpxCTmPOgxMl7n3edmwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7RpYqrKtbmmYfs36uLYvsWXuQRMB8GA1UdIwQY
MBaAFNUd9fvb4l8tXlOMed0Yw9bELmpVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVIzMS05dmlYeTFlVTR4NTNSakQxc1F1YWxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kNDlhYWEtZWUwOC00YjA0LThlODMt
NmRmMWUwYmYxNTkzLzEvMVIzMS05dmlYeTFlVTR4NTNSakQxc1F1YWxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kNDlhYWEtZWUwOC00YjA0LThlODMtNmRmMWUwYmYxNTkz
LzEvMVIzMS05dmlYeTFlVTR4NTNSakQxc1F1YWxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEUiHv5Bd
2mAAmzRr4+K9vWEfYbI9b6JWmMaoOuV9bAMiokYIG/2Mv7hPt8tKuDjHdSXI9OXA
7UE/sSxWh9wgYmB6HYIsVEK+JYXcrPr5oqVrz9te8Wj0WRImNTNXo6RTD8pE7Iw5
/8kTSV85Y9iIhrhFA6M3UH4pwACwPxe+vLg3Z1oeLZ5Y6QGtuJoMklITRTWdtViA
SXl3Ie3/3BX5NQpqC49vAU8gsPacqFq+WI+jNYSoQzx5OKOE/buJ+/leEYgQvgch
Tkq12cOZ1Oj0zXj299vCROwCzMwrv4QTSp6RwyMRcqbQa3+dvnDl3RgMe6Pv8K7Z
oCfMZVDosYOhyw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:09 2025 by rpki-client