Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
File:                     IMotTLPla10plwqX_GResv1odqE.mft (raw, json)
Hash identifier:          JjxhmaIamUfAf1tqyQl6NJYXDP79NxmzegasnaTYce8=
Subject key identifier:   8B:52:74:37:A1:92:F3:68:BE:72:0E:9F:3E:3A:01:DE:53:52:AA:B8
Authority key identifier: 20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
Certificate issuer:       /CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Certificate serial:       01964A7D7BE32FD922F095A6DCB090CF1F3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
Manifest number:          122B
Signing time:             Fri 18 Apr 2025 20:00:59 +0000
Manifest this update:     Fri 18 Apr 2025 20:00:59 +0000
Manifest next update:     Sat 19 Apr 2025 20:00:59 +0000
Files and hashes:         1: IMotTLPla10plwqX_GResv1odqE.crl (hash: NacTvpRJSehYPMH4xgffknA1Vdw+jQNmxb0LvK6iyWA=)
                          2: XkB9FyUrl_hEf3t16Nf8MwiEenY.roa (hash: 5GPl48iaR95a+Okk+L+GbhS4ryo9ZnK1AHkg6Sf4x5s=)
                          3: bSEsv80VTIqhxykqIB8M44nU7N8.roa (hash: Ooz65LuwKjo+iPeOY+Zh+YXr8ijMf6WnGg7hpdHzR2I=)
                          4: mDAtJGSElDm2O92EFy5g2Ab4svc.roa (hash: 06wyeaq77omoVi1U61nSXVnjJJye2vIP4bDLXfzxENg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:7d:7b:e3:2f:d9:22:f0:95:a6:dc:b0:90:cf:1f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
        Validity
            Not Before: Apr 18 20:00:59 2025 GMT
            Not After : Apr 19 20:00:59 2025 GMT
        Subject: CN=8b527437a192f368be720e9f3e3a01de5352aab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:25:5b:1c:d3:04:7a:9f:28:0c:95:9f:c7:f2:
                    44:e7:76:52:9c:3a:03:c0:7a:81:70:e2:84:cb:1c:
                    fc:12:45:4d:42:8f:a1:13:27:9b:bc:b3:28:60:a6:
                    29:97:b2:3d:2f:26:5e:cf:96:35:fc:cc:ae:ed:17:
                    52:89:92:f8:d9:a0:30:00:bd:b6:c5:ba:ca:ac:64:
                    d0:81:6e:dd:d4:b5:20:88:92:61:03:59:a2:13:89:
                    d5:fc:05:e0:13:95:9e:d8:65:c5:72:4c:e4:0e:a0:
                    dd:cc:8d:29:d1:70:4f:19:d8:83:84:9c:35:ac:45:
                    b6:8f:6d:2b:02:f4:ee:29:65:26:07:1e:01:4d:f2:
                    52:43:8e:92:b8:f6:3b:e3:41:5e:64:ce:1c:17:da:
                    0b:0d:1a:68:59:3b:c8:e3:50:b9:40:46:f4:34:37:
                    58:03:2c:ef:10:ff:a5:a0:6f:1e:72:f3:6f:b8:dc:
                    d5:92:ef:97:17:e4:dc:e4:53:f8:dc:46:dd:5e:48:
                    ee:8a:e8:3b:f6:3c:65:e1:a7:d0:e8:3d:49:3f:0a:
                    7a:06:a9:50:27:4d:9a:31:5f:e8:7f:0f:3f:5d:d0:
                    05:d6:55:01:aa:e9:4f:a2:d1:7a:4c:f3:cc:2e:e6:
                    21:0a:a9:a4:70:62:3c:12:08:1a:cd:f1:b6:bb:9d:
                    2e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:52:74:37:A1:92:F3:68:BE:72:0E:9F:3E:3A:01:DE:53:52:AA:B8
            X509v3 Authority Key Identifier:
                keyid:20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:69:2e:a6:61:10:58:ca:c0:85:e3:30:6b:96:0d:32:f1:9d:
         51:56:5a:59:d7:48:61:08:76:05:03:a1:d1:0e:8f:db:4d:7f:
         ee:4b:5c:9a:e1:09:e3:e6:c5:3b:c4:2e:e2:f0:72:bd:8b:fd:
         3d:a5:33:a9:6e:e5:12:60:74:6a:3f:55:0a:46:35:d4:8d:77:
         22:93:04:7a:df:22:93:6f:dc:67:9c:fa:97:2d:41:7d:d1:d1:
         75:38:52:a1:97:c7:fa:e5:9a:ec:54:77:f6:b9:ab:4d:51:12:
         5c:81:04:f8:6e:f1:24:55:27:b9:47:70:29:79:d9:68:25:07:
         a9:f7:4e:9a:21:d7:4e:73:c3:e0:b4:23:14:99:69:08:d3:63:
         8c:c3:4b:60:41:a2:2c:b0:14:64:b3:59:15:5b:d2:69:7a:30:
         d2:0d:98:b9:77:e0:93:22:32:5a:a8:8a:b2:b0:a4:e4:c6:ec:
         1e:13:a1:2e:bd:72:d3:4d:40:53:1f:26:d6:09:a6:a4:6d:98:
         0a:00:4b:17:7d:43:12:2a:e3:45:c1:ae:98:01:05:cf:c4:ae:
         aa:8f:f3:9f:87:dc:01:55:78:7d:ce:32:2c:83:fb:66:1d:ff:
         af:50:9b:fd:41:e8:ac:e5:ef:87:3f:3a:36:31:98:6d:03:60:
         de:96:ef:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKfXvjL9ki8JWm3LCQzx88MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwY2EyZDRjYjNlNTZiNWQyOTk3MGE5N2ZjNjQ1ZWIyZmQ2
ODc2YTEwHhcNMjUwNDE4MjAwMDU5WhcNMjUwNDE5MjAwMDU5WjAzMTEwLwYDVQQD
Eyg4YjUyNzQzN2ExOTJmMzY4YmU3MjBlOWYzZTNhMDFkZTUzNTJhYWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiVbHNMEep8oDJWfx/JE53ZSnDoD
wHqBcOKEyxz8EkVNQo+hEyebvLMoYKYpl7I9LyZez5Y1/Myu7RdSiZL42aAwAL22
xbrKrGTQgW7d1LUgiJJhA1miE4nV/AXgE5We2GXFckzkDqDdzI0p0XBPGdiDhJw1
rEW2j20rAvTuKWUmBx4BTfJSQ46SuPY740FeZM4cF9oLDRpoWTvI41C5QEb0NDdY
AyzvEP+loG8ecvNvuNzVku+XF+Tc5FP43EbdXkjuiug79jxl4afQ6D1JPwp6BqlQ
J02aMV/ofw8/XdAF1lUBqulPotF6TPPMLuYhCqmkcGI8EggazfG2u50uqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItSdDehkvNovnIOnz46Ad5TUqq4MB8GA1UdIwQY
MBaAFCDKLUyz5WtdKZcKl/xkXrL9aHahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yYzI4MTctMzcwMS00NzgzLThmYmQt
ZWVjNDg4NWM0ZjhkLzEvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yYzI4MTctMzcwMS00NzgzLThmYmQtZWVjNDg4NWM0Zjhk
LzEvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApmkupmEQ
WMrAheMwa5YNMvGdUVZaWddIYQh2BQOh0Q6P201/7ktcmuEJ4+bFO8Qu4vByvYv9
PaUzqW7lEmB0aj9VCkY11I13IpMEet8ik2/cZ5z6ly1BfdHRdThSoZfH+uWa7FR3
9rmrTVESXIEE+G7xJFUnuUdwKXnZaCUHqfdOmiHXTnPD4LQjFJlpCNNjjMNLYEGi
LLAUZLNZFVvSaXow0g2YuXfgkyIyWqiKsrCk5MbsHhOhLr1y001AUx8m1gmmpG2Y
CgBLF31DEirjRcGumAEFz8Suqo/zn4fcAVV4fc4yLIP7Zh3/r1Cb/UHorOXvhz86
NjGYbQNg3pbvYA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:36:14 2025 by rpki-client