Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/4a4a18-5184-4d36-907b-56cf387806f9/1/jm4ZvC60qI1Upb33OyM5GQ4x2gs.mft
File:                     jm4ZvC60qI1Upb33OyM5GQ4x2gs.mft (raw, json)
Hash identifier:          f+EQXB1+Xr3gQ0qt8X+tZtW54QxzALufEjC+r3MOu0E=
Subject key identifier:   29:84:E2:76:FA:16:DA:95:38:D0:04:3A:D7:49:AF:E6:E5:67:BF:9C
Authority key identifier: 8E:6E:19:BC:2E:B4:A8:8D:54:A5:BD:F7:3B:23:39:19:0E:31:DA:0B
Certificate issuer:       /CN=8e6e19bc2eb4a88d54a5bdf73b2339190e31da0b
Certificate serial:       0194C3881DCA290834E3D2A3D889B05797E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jm4ZvC60qI1Upb33OyM5GQ4x2gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/4a4a18-5184-4d36-907b-56cf387806f9/1/jm4ZvC60qI1Upb33OyM5GQ4x2gs.mft
Manifest number:          07C1
Signing time:             Sat 01 Feb 2025 22:01:05 +0000
Manifest this update:     Sat 01 Feb 2025 22:01:05 +0000
Manifest next update:     Sun 02 Feb 2025 22:01:05 +0000
Files and hashes:         1: jm4ZvC60qI1Upb33OyM5GQ4x2gs.crl (hash: 81yZwzua9Qu6zbd8JsoMswx/TS9L+cTBQdFb0WXQ6kw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/4a4a18-5184-4d36-907b-56cf387806f9/1/jm4ZvC60qI1Upb33OyM5GQ4x2gs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/4a4a18-5184-4d36-907b-56cf387806f9/1/jm4ZvC60qI1Upb33OyM5GQ4x2gs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jm4ZvC60qI1Upb33OyM5GQ4x2gs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 22:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:88:1d:ca:29:08:34:e3:d2:a3:d8:89:b0:57:97:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e6e19bc2eb4a88d54a5bdf73b2339190e31da0b
        Validity
            Not Before: Feb  1 22:01:05 2025 GMT
            Not After : Feb  2 22:01:05 2025 GMT
        Subject: CN=2984e276fa16da9538d0043ad749afe6e567bf9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:07:ac:27:78:88:5b:a1:75:7f:d6:90:6d:a3:
                    51:be:01:72:cb:f2:ad:3b:e6:68:08:75:6e:ce:a6:
                    9e:61:74:89:1b:2b:fc:f5:53:36:61:d7:28:9f:d2:
                    f3:31:94:06:da:3b:12:d8:bf:38:0f:60:0e:5e:19:
                    05:0d:96:aa:56:af:19:c5:6a:17:34:3a:7f:42:1a:
                    88:73:77:fd:66:33:3e:0a:fc:5d:b3:c8:3c:80:5b:
                    24:e9:73:7e:e2:1c:9f:c2:81:8a:20:24:f9:0d:25:
                    40:b0:e7:f6:c6:9f:a1:f3:9b:b1:08:26:43:da:2c:
                    56:a0:85:61:0a:c6:20:36:d1:94:10:46:d3:3b:b6:
                    61:6a:38:d6:22:a7:b6:25:c8:cd:3b:5d:2c:36:64:
                    90:58:51:2d:7c:32:c5:44:0f:27:07:88:0c:c1:9b:
                    29:24:87:53:37:29:d7:3e:b4:b2:d3:8d:dd:3a:19:
                    11:c0:58:f6:88:97:03:9e:24:c4:8c:75:d1:b2:7f:
                    89:37:50:83:09:94:95:d2:ee:6c:66:3c:bf:29:8a:
                    f5:5a:ea:27:1a:5e:97:8b:18:3e:00:fc:b6:36:fe:
                    0d:0d:be:32:a3:8c:63:13:3b:4a:9e:41:4e:4b:57:
                    8b:bb:51:b4:82:e4:71:05:03:ce:48:16:d0:a9:72:
                    a7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:84:E2:76:FA:16:DA:95:38:D0:04:3A:D7:49:AF:E6:E5:67:BF:9C
            X509v3 Authority Key Identifier:
                keyid:8E:6E:19:BC:2E:B4:A8:8D:54:A5:BD:F7:3B:23:39:19:0E:31:DA:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jm4ZvC60qI1Upb33OyM5GQ4x2gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4a4a18-5184-4d36-907b-56cf387806f9/1/jm4ZvC60qI1Upb33OyM5GQ4x2gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4a4a18-5184-4d36-907b-56cf387806f9/1/jm4ZvC60qI1Upb33OyM5GQ4x2gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:8a:35:55:aa:59:71:68:62:ee:1b:08:ae:37:12:40:16:fd:
         a5:e7:e2:e6:fd:72:f2:31:14:d2:77:62:73:00:f9:07:2d:4a:
         92:7b:ae:2a:a5:0d:49:f6:f9:04:52:55:ca:fe:f2:d8:07:be:
         29:03:16:b9:c8:c7:a5:11:f1:ee:bb:89:90:45:b2:6c:26:3f:
         12:f3:2a:cb:5c:d0:41:c9:6b:b5:9d:54:95:3c:09:83:c1:59:
         a7:0f:3a:83:bb:22:ac:43:e3:c8:e5:c2:c3:6b:a9:40:39:0e:
         a3:73:2c:02:06:24:37:a8:07:70:db:c0:9c:2f:88:c8:6c:d9:
         39:11:95:d1:7b:62:c8:68:9d:00:ab:af:f3:5e:58:a1:0a:8d:
         1b:53:b4:fe:e4:20:ba:22:93:7c:82:82:fc:c9:a3:80:f9:c2:
         89:81:75:44:5b:69:34:9e:71:a6:0e:df:d0:69:bc:80:8d:1a:
         01:57:9f:3d:21:1b:46:c1:cc:1a:2d:4a:43:45:45:02:8f:16:
         94:90:9e:2b:d9:92:d4:9e:c3:fb:78:97:ea:34:9d:49:22:27:
         44:b0:7a:3b:eb:29:03:ba:fd:39:1a:6c:66:3b:83:cc:a8:bc:
         3a:eb:7f:03:63:b6:a2:bd:aa:f3:18:c4:11:f3:66:69:0b:64:
         c8:b8:f3:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDiB3KKQg049Kj2ImwV5foMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNmUxOWJjMmViNGE4OGQ1NGE1YmRmNzNiMjMzOTE5MGUz
MWRhMGIwHhcNMjUwMjAxMjIwMTA1WhcNMjUwMjAyMjIwMTA1WjAzMTEwLwYDVQQD
EygyOTg0ZTI3NmZhMTZkYTk1MzhkMDA0M2FkNzQ5YWZlNmU1NjdiZjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwesJ3iIW6F1f9aQbaNRvgFyy/Kt
O+ZoCHVuzqaeYXSJGyv89VM2Ydcon9LzMZQG2jsS2L84D2AOXhkFDZaqVq8ZxWoX
NDp/QhqIc3f9ZjM+Cvxds8g8gFsk6XN+4hyfwoGKICT5DSVAsOf2xp+h85uxCCZD
2ixWoIVhCsYgNtGUEEbTO7ZhajjWIqe2JcjNO10sNmSQWFEtfDLFRA8nB4gMwZsp
JIdTNynXPrSy043dOhkRwFj2iJcDniTEjHXRsn+JN1CDCZSV0u5sZjy/KYr1Wuon
Gl6Xixg+APy2Nv4NDb4yo4xjEztKnkFOS1eLu1G0guRxBQPOSBbQqXKncQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmE4nb6FtqVONAEOtdJr+blZ7+cMB8GA1UdIwQY
MBaAFI5uGbwutKiNVKW99zsjORkOMdoLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam00WnZDNjBxSTFVcGIzM095TTVHUTR4MmdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy80YTRhMTgtNTE4NC00ZDM2LTkwN2It
NTZjZjM4NzgwNmY5LzEvam00WnZDNjBxSTFVcGIzM095TTVHUTR4MmdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy80YTRhMTgtNTE4NC00ZDM2LTkwN2ItNTZjZjM4NzgwNmY5
LzEvam00WnZDNjBxSTFVcGIzM095TTVHUTR4MmdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALoo1VapZ
cWhi7hsIrjcSQBb9pefi5v1y8jEU0ndicwD5By1KknuuKqUNSfb5BFJVyv7y2Ae+
KQMWucjHpRHx7ruJkEWybCY/EvMqy1zQQclrtZ1UlTwJg8FZpw86g7sirEPjyOXC
w2upQDkOo3MsAgYkN6gHcNvAnC+IyGzZORGV0XtiyGidAKuv815YoQqNG1O0/uQg
uiKTfIKC/MmjgPnCiYF1RFtpNJ5xpg7f0Gm8gI0aAVefPSEbRsHMGi1KQ0VFAo8W
lJCeK9mS1J7D+3iX6jSdSSInRLB6O+spA7r9ORpsZjuDzKi8Out/A2O2or2q8xjE
EfNmaQtkyLjzRw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:36 2025 by rpki-client