Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
File:                     R5jSPWIery3VeYDVoA-8zJhYgvI.mft (raw, json)
Hash identifier:          6J4B/wPXc5K/ZXNmJpLihFE+SHAXquF8sQTCRxGuCjk=
Subject key identifier:   9F:6A:FC:14:18:D6:F9:74:56:4D:BA:9A:45:F8:F5:DA:48:4B:D5:64
Authority key identifier: 47:98:D2:3D:62:1E:AF:2D:D5:79:80:D5:A0:0F:BC:CC:98:58:82:F2
Certificate issuer:       /CN=4798d23d621eaf2dd57980d5a00fbccc985882f2
Certificate serial:       0194C38846B21F1A4891DA8224BDC2B844AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
Manifest number:          0E29
Signing time:             Sat 01 Feb 2025 22:01:15 +0000
Manifest this update:     Sat 01 Feb 2025 22:01:15 +0000
Manifest next update:     Sun 02 Feb 2025 22:01:15 +0000
Files and hashes:         1: R5jSPWIery3VeYDVoA-8zJhYgvI.crl (hash: 5S3u+8EsErLx6Uw3nnA/CTLDVGEmAp4BqHnoyHY63+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:88:46:b2:1f:1a:48:91:da:82:24:bd:c2:b8:44:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4798d23d621eaf2dd57980d5a00fbccc985882f2
        Validity
            Not Before: Feb  1 22:01:15 2025 GMT
            Not After : Feb  2 22:01:15 2025 GMT
        Subject: CN=9f6afc1418d6f974564dba9a45f8f5da484bd564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c0:24:40:ab:c8:b2:15:1c:30:41:29:f0:bf:
                    c7:25:f5:03:51:52:5b:d4:63:f9:cc:67:93:71:6c:
                    b5:f0:25:ca:65:f8:99:e1:b5:e6:bc:dc:79:5a:40:
                    bb:e2:5b:ea:b1:03:62:34:2a:8b:01:d8:b5:6b:04:
                    b5:d4:18:5c:15:7e:1a:98:99:25:4e:aa:15:9a:b7:
                    6b:00:f9:98:73:58:7f:f1:62:a1:24:ce:7f:9e:e5:
                    a6:93:6d:de:ba:36:aa:3c:0c:e5:ca:b9:74:70:e9:
                    0a:32:f9:ac:bb:7b:b5:75:ca:97:cc:d8:0a:c0:65:
                    bb:35:7f:69:5f:b5:45:31:a2:2c:09:0f:f5:45:f0:
                    c3:ba:09:6c:6c:94:4a:ed:f4:b7:ea:da:85:ce:b7:
                    1c:cd:93:71:03:b3:f2:d2:c3:67:4d:42:f7:d2:dd:
                    32:d9:73:07:67:3a:1a:11:17:e3:79:dc:6b:b7:4e:
                    a2:4d:f2:ac:3a:79:e2:de:a8:4b:58:48:a3:03:be:
                    c9:c7:8e:91:00:5e:bb:60:8e:71:f8:a6:d2:22:91:
                    6f:4e:85:2d:6d:de:72:99:00:b7:d6:cf:c4:52:e4:
                    21:52:59:17:3c:dc:05:3e:43:bd:97:76:c3:1c:55:
                    50:92:65:d3:2e:1c:8f:cb:e7:fb:c6:24:1e:2c:cc:
                    d9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6A:FC:14:18:D6:F9:74:56:4D:BA:9A:45:F8:F5:DA:48:4B:D5:64
            X509v3 Authority Key Identifier:
                keyid:47:98:D2:3D:62:1E:AF:2D:D5:79:80:D5:A0:0F:BC:CC:98:58:82:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:9f:fa:67:c0:21:f6:77:4f:4a:fc:9b:fa:cf:cf:d1:66:5c:
         8b:e3:ab:37:71:a8:20:61:ba:08:bf:f3:b5:42:b3:fd:46:1f:
         2d:3b:eb:05:4d:6b:ff:3e:4e:c5:52:ec:ed:6f:2a:91:5a:07:
         1a:39:20:56:b0:a9:64:31:52:b1:e7:60:8b:c1:33:79:71:82:
         17:92:fb:1b:24:dd:e4:5d:64:85:66:16:83:81:37:4c:f8:4b:
         5a:77:3f:51:28:2d:96:09:5b:6f:0a:1f:98:e7:f9:d3:98:8f:
         63:a8:90:02:67:d8:03:35:d7:38:2b:ff:89:7d:8a:80:dd:c7:
         7c:2f:16:33:45:61:0b:78:5c:65:31:08:34:44:f4:c7:a8:f2:
         d6:9b:e9:67:d1:ea:11:6b:07:f2:84:1b:28:67:e7:19:ea:84:
         be:5f:2a:fc:36:ba:96:e5:be:36:3b:9f:4b:18:a5:ad:ea:78:
         7f:89:e8:4c:b0:a7:9c:47:f2:bc:b2:28:13:e1:c9:75:ae:c5:
         c8:99:66:f2:18:d4:fd:b5:eb:9f:d0:72:4b:7c:70:66:41:fc:
         8b:80:4e:f2:6d:21:c1:c3:15:f5:47:7d:fd:4c:0b:62:db:9a:
         8d:2c:49:86:ef:92:4a:7e:48:98:60:87:e0:1b:1b:72:b7:86:
         e1:30:ee:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:51 2025 by rpki-client