Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
File:                     Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft (raw, json)
Hash identifier:          dTF9my2OtuQd+sbewi/nncv65yxsEc6qmCAlcMh7syU=
Subject key identifier:   98:4B:CB:C3:0F:53:2E:AB:16:89:CD:58:82:D8:0C:72:E3:73:63:71
Authority key identifier: 0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
Certificate issuer:       /CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Certificate serial:       019611A0767FEC14A58FAC7F4E0B855CAB30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
Manifest number:          12A6
Signing time:             Mon 07 Apr 2025 19:00:50 +0000
Manifest this update:     Mon 07 Apr 2025 19:00:50 +0000
Manifest next update:     Tue 08 Apr 2025 19:00:50 +0000
Files and hashes:         1: Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl (hash: /NQA7VNQsRR/hdb0RoJxcfyY3f7NO0hd8SkQTBybmU0=)
                          2: JfosHD6swZBELA7-1SokhINwqBU.roa (hash: uhtEt5y7g2W8E2mV9p4HzdrhOCyliMGIoFOc3pDAegw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 19:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:11:a0:76:7f:ec:14:a5:8f:ac:7f:4e:0b:85:5c:ab:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
        Validity
            Not Before: Apr  7 19:00:50 2025 GMT
            Not After : Apr  8 19:00:50 2025 GMT
        Subject: CN=984bcbc30f532eab1689cd5882d80c72e3736371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6e:1c:27:2e:9b:e9:07:27:05:79:11:50:08:
                    a7:59:88:e4:e5:c5:a7:69:39:e2:ce:c7:75:13:fe:
                    f5:93:05:4f:08:a7:30:86:44:e0:91:8d:ce:18:a9:
                    b5:de:85:b7:d3:cb:1e:e2:00:a9:c0:35:ef:86:f7:
                    8c:b0:84:03:59:9c:43:c8:e4:bc:cd:d6:d6:54:04:
                    42:a2:d8:b2:61:24:f8:09:d5:a5:44:7b:49:c9:e9:
                    81:52:e1:3f:13:aa:95:c4:3f:14:15:9e:e2:0c:1e:
                    f1:15:0c:0f:67:31:0a:c9:ed:d5:4e:79:04:74:b0:
                    06:5b:f2:87:6e:bf:9d:cb:94:5f:38:7d:cf:1d:c5:
                    c6:ad:86:0c:b3:4f:cb:df:8d:0a:ef:b5:73:9f:92:
                    7d:61:fc:7c:3b:b5:62:cf:49:7b:5a:30:65:8c:ba:
                    96:3b:4b:84:38:3d:28:97:9d:f5:2d:ae:52:e2:4b:
                    e8:63:fb:00:e8:49:c1:3c:20:7b:0b:3e:1f:4f:1a:
                    ee:4d:2f:f6:a3:15:0d:71:4e:5c:16:9f:6d:b2:a6:
                    21:12:91:af:aa:ea:1d:8d:4b:dd:fc:d6:7b:78:5c:
                    01:45:06:86:c7:ba:ec:99:78:6d:d7:d4:a4:72:7c:
                    1e:b8:c9:e6:21:b6:41:00:37:46:d0:7b:88:24:34:
                    d7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4B:CB:C3:0F:53:2E:AB:16:89:CD:58:82:D8:0C:72:E3:73:63:71
            X509v3 Authority Key Identifier:
                keyid:0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e6:75:f3:3e:d6:98:0a:4f:36:20:40:a1:14:c2:64:46:8a:
         c5:2a:3b:fd:1a:4b:91:79:52:c9:7c:19:54:6c:3f:a9:f1:ed:
         2a:8e:d1:b3:20:4f:b3:f1:fc:d3:1c:80:ab:aa:0f:31:95:a3:
         47:0c:1a:cd:09:d4:4c:9d:41:78:a3:b8:9a:3e:8d:c1:01:99:
         23:f5:a0:c0:f4:f6:82:bb:d2:93:4c:d2:0a:91:d4:ef:97:9f:
         62:2c:ce:3e:51:df:8e:5f:60:cd:e3:89:40:e5:a8:ec:97:a2:
         6a:3c:67:b0:56:25:a0:40:7c:81:83:0f:54:c3:3e:05:43:84:
         29:6d:6e:2f:ee:d0:67:6b:67:bc:7c:d9:7a:c6:c5:a3:bc:61:
         8a:2a:42:0d:0b:e9:8d:16:8d:da:07:fa:d0:9e:72:5a:51:d7:
         9a:27:97:9e:18:c2:62:4e:68:e9:67:1a:10:bd:4d:49:c6:26:
         36:e9:b4:46:fe:85:91:79:d3:7e:91:02:7e:1e:7a:d4:5c:d8:
         17:57:bb:5a:be:85:23:a4:d7:c6:fc:b8:f5:d5:50:3e:92:d2:
         05:5d:c1:c5:14:cd:d7:d2:5a:db:7d:ef:6f:14:bd:5f:eb:6f:
         6c:c4:dd:30:7d:0c:69:21:ca:e4:01:41:03:b5:5d:23:69:95:
         ce:2b:a9:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYRoHZ/7BSlj6x/TguFXKswMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMmNlN2ZkMmY1YjFiNzk3NTdjODk3M2FlM2Y3YjBiZTY4
NjM4NWIwHhcNMjUwNDA3MTkwMDUwWhcNMjUwNDA4MTkwMDUwWjAzMTEwLwYDVQQD
Eyg5ODRiY2JjMzBmNTMyZWFiMTY4OWNkNTg4MmQ4MGM3MmUzNzM2MzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG4cJy6b6QcnBXkRUAinWYjk5cWn
aTnizsd1E/71kwVPCKcwhkTgkY3OGKm13oW308se4gCpwDXvhveMsIQDWZxDyOS8
zdbWVARCotiyYST4CdWlRHtJyemBUuE/E6qVxD8UFZ7iDB7xFQwPZzEKye3VTnkE
dLAGW/KHbr+dy5RfOH3PHcXGrYYMs0/L340K77Vzn5J9Yfx8O7Viz0l7WjBljLqW
O0uEOD0ol531La5S4kvoY/sA6EnBPCB7Cz4fTxruTS/2oxUNcU5cFp9tsqYhEpGv
quodjUvd/NZ7eFwBRQaGx7rsmXht19SkcnweuMnmIbZBADdG0HuIJDTXrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhLy8MPUy6rFonNWILYDHLjc2NxMB8GA1UdIwQY
MBaAFAss5/0vWxt5dXyJc64/ewvmhjhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85YWFmMjQtNTM0Ni00NDgwLWJiZjMt
YTY0MTA5MTllODk4LzEvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85YWFmMjQtNTM0Ni00NDgwLWJiZjMtYTY0MTA5MTllODk4
LzEvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdeZ18z7W
mApPNiBAoRTCZEaKxSo7/RpLkXlSyXwZVGw/qfHtKo7RsyBPs/H80xyAq6oPMZWj
RwwazQnUTJ1BeKO4mj6NwQGZI/WgwPT2grvSk0zSCpHU75efYizOPlHfjl9gzeOJ
QOWo7JeiajxnsFYloEB8gYMPVMM+BUOEKW1uL+7QZ2tnvHzZesbFo7xhiipCDQvp
jRaN2gf60J5yWlHXmieXnhjCYk5o6WcaEL1NScYmNum0Rv6FkXnTfpECfh561FzY
F1e7Wr6FI6TXxvy49dVQPpLSBV3BxRTN19Ja233vbxS9X+tvbMTdMH0MaSHK5AFB
A7VdI2mVziup1Q==
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:36:34 2025 by rpki-client