Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft
File:                     a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft (raw, json)
Hash identifier:          vfMQvNQRvHPM1JhsaoJlW7vQH+hSmD0ebvMrtxyOtDM=
Subject key identifier:   DE:AC:E3:97:47:E6:E2:A0:A1:50:9D:E4:50:3B:C5:A0:E3:9B:D2:83
Authority key identifier: 6B:EB:8E:75:0D:31:BC:CE:AA:88:04:B5:F6:53:25:9D:18:50:E8:1C
Certificate issuer:       /CN=6beb8e750d31bcceaa8804b5f653259d1850e81c
Certificate serial:       0194C4D14DF1DCDFC7250FB4B71BEB6B5688
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft
Manifest number:          142B
Signing time:             Sun 02 Feb 2025 04:00:38 +0000
Manifest this update:     Sun 02 Feb 2025 04:00:38 +0000
Manifest next update:     Mon 03 Feb 2025 04:00:38 +0000
Files and hashes:         1: a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.crl (hash: asY7B1SkzXfHm8Nf2V2qlCeY+fp+iiQYtZQSx1reF1M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:d1:4d:f1:dc:df:c7:25:0f:b4:b7:1b:eb:6b:56:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6beb8e750d31bcceaa8804b5f653259d1850e81c
        Validity
            Not Before: Feb  2 04:00:38 2025 GMT
            Not After : Feb  3 04:00:38 2025 GMT
        Subject: CN=deace39747e6e2a0a1509de4503bc5a0e39bd283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a0:13:db:7c:a4:83:80:bb:8a:19:8b:80:54:
                    1c:a8:de:86:89:0c:86:52:39:ad:17:af:17:69:df:
                    7d:ed:a2:29:a8:7c:ca:d6:45:a3:14:4f:f6:5e:20:
                    91:22:17:7a:29:e4:a8:09:bd:fc:b6:a4:97:8b:2e:
                    6a:7b:49:52:67:af:ba:5a:58:13:f7:a4:3a:34:02:
                    27:45:14:1a:b2:95:7e:c1:d4:98:82:8a:ca:2e:1f:
                    88:83:e5:5b:c1:a5:f1:1a:ad:e9:99:f3:d5:5b:8b:
                    03:4e:9e:5a:33:2a:9e:73:58:92:61:4d:98:e1:a1:
                    4e:d3:70:d6:2a:f3:ed:1b:8a:6c:81:41:95:c6:59:
                    b2:79:9c:da:40:3c:e4:ae:20:f0:8d:e6:60:80:53:
                    bc:ac:56:02:ba:48:18:fb:72:ab:3f:68:3d:ea:ea:
                    b7:80:da:49:80:5d:93:b8:3c:98:50:d8:e2:3f:2c:
                    2d:0b:f3:8b:ab:c8:4a:39:df:e8:f5:36:27:a1:99:
                    56:fd:70:2f:b2:f8:78:7a:b3:8f:4d:7c:4f:66:23:
                    a0:62:a2:28:0c:29:72:9e:71:db:b7:63:07:4b:0d:
                    db:97:f8:47:f7:0a:60:a1:af:5a:59:3e:4e:b0:db:
                    a4:bd:f0:ad:c2:c7:ec:34:db:43:ea:f7:e3:80:43:
                    d9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AC:E3:97:47:E6:E2:A0:A1:50:9D:E4:50:3B:C5:A0:E3:9B:D2:83
            X509v3 Authority Key Identifier:
                keyid:6B:EB:8E:75:0D:31:BC:CE:AA:88:04:B5:F6:53:25:9D:18:50:E8:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:e7:4c:b4:ff:02:fb:32:b0:f4:5c:ee:65:17:d6:4d:f3:81:
         a6:99:77:80:db:e7:84:82:88:f4:e3:e5:dc:d5:18:ef:d1:e5:
         00:48:9a:d6:e6:31:d0:3f:5d:61:43:e5:95:c9:a9:6d:6d:eb:
         a7:6e:2d:04:b8:9f:f5:dd:80:54:09:bf:94:e2:1a:0d:84:6a:
         dc:1e:92:2d:2e:0c:f2:d1:bc:da:40:a8:aa:df:84:d5:ee:90:
         84:be:fb:d4:03:7a:bd:8c:0e:5f:cf:45:17:4e:22:f7:98:f0:
         34:05:85:57:99:5f:11:20:49:aa:c3:a0:75:38:d6:64:d3:44:
         89:54:72:1f:b2:66:17:c1:9e:16:46:e0:c1:72:8e:ab:26:23:
         17:a0:b2:1b:d2:c1:70:72:86:dc:a9:0c:42:c3:96:75:df:37:
         79:97:91:ef:2e:d5:b9:bd:ef:2c:61:03:54:9b:e2:33:79:3b:
         15:f1:9d:91:9b:82:aa:96:ab:4f:5e:89:2a:a3:47:c3:19:75:
         e1:e3:ca:86:db:c7:9a:0c:4f:7f:1f:1d:67:6c:40:25:2b:4c:
         3d:0e:ce:16:ca:f2:d5:0d:73:c5:b6:7d:54:91:e7:23:f7:3b:
         fc:6c:62:1c:bd:a0:d6:3b:3d:75:d1:29:2a:76:a6:2c:91:ad:
         6f:07:92:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:03 2025 by rpki-client