Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
File:                     IraiXy90GRvp6gypwZFf50XPV8g.mft (raw, json)
Hash identifier:          +A+YC5LlUhJ6I/CNz+VCEC7FNz/v5nviYwfecfTU31c=
Subject key identifier:   4B:B8:61:3F:2C:71:59:47:D6:94:D3:63:85:9B:7A:6B:E1:EF:E1:E6
Authority key identifier: 22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
Certificate issuer:       /CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Certificate serial:       0196206F2646459EBBD6B883C5FCE6BC93F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
Manifest number:          1475
Signing time:             Thu 10 Apr 2025 16:01:17 +0000
Manifest this update:     Thu 10 Apr 2025 16:01:17 +0000
Manifest next update:     Fri 11 Apr 2025 16:01:17 +0000
Files and hashes:         1: IraiXy90GRvp6gypwZFf50XPV8g.crl (hash: jqe7hzxGoooWlHnMQsUM5MhqARhQEcQy7tUztNVSdhQ=)
                          2: MOp992QACjCU4CSR_4wEvEmDi9g.roa (hash: dTmvXI6qyvbgdeeHz07O4lgdS1FEoKVIkXmdx9O7lnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Apr 2025 15:18:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:20:6f:26:46:45:9e:bb:d6:b8:83:c5:fc:e6:bc:93:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
        Validity
            Not Before: Apr 10 16:01:17 2025 GMT
            Not After : Apr 11 16:01:17 2025 GMT
        Subject: CN=4bb8613f2c715947d694d363859b7a6be1efe1e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6f:fa:2a:67:7b:1b:53:31:99:af:c9:fe:48:
                    c2:b6:e7:bb:f5:7d:eb:bb:63:82:e5:a0:14:36:44:
                    a4:53:66:1e:cf:27:56:00:10:ed:37:30:66:69:7a:
                    e2:99:bc:68:ed:af:82:47:02:26:11:40:23:85:61:
                    68:0b:aa:9a:b3:38:f3:93:af:0b:3c:0d:e8:fb:4c:
                    d2:56:32:b3:ef:d8:13:0e:ae:31:90:82:3f:c2:5d:
                    e1:d5:ad:3d:f0:10:a8:02:39:c9:f4:0b:75:c8:09:
                    21:38:89:7b:f2:01:64:63:84:80:75:29:48:18:e8:
                    51:d4:68:00:60:b8:6e:b3:72:7c:4f:14:11:35:d3:
                    f0:c4:c9:af:92:69:bf:94:80:c2:ac:dc:71:d9:80:
                    85:f1:d9:ad:5e:81:35:a3:5d:c5:50:9d:04:4c:41:
                    f8:b7:0e:8c:33:10:90:49:9f:89:7c:0e:44:aa:05:
                    b8:e5:a4:0c:2a:5f:6b:53:ea:56:73:2e:d7:3d:6c:
                    1f:bd:e2:ec:f6:84:e1:6b:2b:17:b0:91:65:01:b4:
                    d2:b8:1e:82:69:62:3d:59:23:75:d4:83:1f:51:1d:
                    83:a7:b9:33:35:6c:16:e4:7c:c2:13:f1:d0:84:33:
                    6e:80:40:0d:b6:2a:47:22:44:bd:c3:be:0c:7f:2b:
                    60:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B8:61:3F:2C:71:59:47:D6:94:D3:63:85:9B:7A:6B:E1:EF:E1:E6
            X509v3 Authority Key Identifier:
                keyid:22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:83:86:b8:0c:d3:07:58:22:57:9c:9b:18:0b:e1:b2:58:d7:
         33:54:1b:08:62:74:0a:23:06:d9:6a:a7:9e:67:3f:4c:74:9b:
         10:6c:c0:64:a2:f5:d1:e8:c4:79:af:1f:5d:63:20:de:1f:e9:
         d8:36:46:71:1b:a6:ee:fa:1c:52:28:fc:36:3d:bd:91:4e:ca:
         94:ee:23:31:d6:04:b4:25:51:ec:fe:bd:de:e6:62:f6:23:6a:
         f3:52:ab:d3:e7:d7:95:1e:d9:a6:61:20:50:ef:ef:8b:0d:82:
         66:1f:59:43:56:4e:8b:ce:13:18:20:c6:44:47:0f:5e:47:fa:
         55:75:cc:0c:bd:94:52:40:97:17:7a:fd:06:d5:81:24:4e:83:
         56:09:78:01:60:53:a8:2d:4c:10:b4:be:72:8a:4b:1f:62:1e:
         63:f8:18:e8:c6:50:eb:2c:c1:c9:bc:79:2f:a4:23:f0:eb:02:
         11:87:6c:8c:2e:71:4e:9a:f9:c8:e5:c2:fb:51:2f:03:b8:bf:
         d7:d5:22:b3:bc:4b:a5:7e:c9:14:a0:75:4b:17:51:d5:f9:f4:
         c9:a8:c2:d7:f5:11:23:ce:34:5d:a1:0b:de:15:a0:44:42:27:
         ac:00:71:b9:e7:a2:29:70:90:c8:b2:a9:0a:14:f7:3f:bb:44:
         2e:8a:69:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYgbyZGRZ671riDxfzmvJP0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYjZhMjVmMmY3NDE5MWJlOWVhMGNhOWMxOTE1ZmU3NDVj
ZjU3YzgwHhcNMjUwNDEwMTYwMTE3WhcNMjUwNDExMTYwMTE3WjAzMTEwLwYDVQQD
Eyg0YmI4NjEzZjJjNzE1OTQ3ZDY5NGQzNjM4NTliN2E2YmUxZWZlMWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW/6Kmd7G1Mxma/J/kjCtue79X3r
u2OC5aAUNkSkU2YezydWABDtNzBmaXrimbxo7a+CRwImEUAjhWFoC6qaszjzk68L
PA3o+0zSVjKz79gTDq4xkII/wl3h1a098BCoAjnJ9At1yAkhOIl78gFkY4SAdSlI
GOhR1GgAYLhus3J8TxQRNdPwxMmvkmm/lIDCrNxx2YCF8dmtXoE1o13FUJ0ETEH4
tw6MMxCQSZ+JfA5EqgW45aQMKl9rU+pWcy7XPWwfveLs9oThaysXsJFlAbTSuB6C
aWI9WSN11IMfUR2Dp7kzNWwW5HzCE/HQhDNugEANtipHIkS9w74MfytgeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEu4YT8scVlH1pTTY4Wbemvh7+HmMB8GA1UdIwQY
MBaAFCK2ol8vdBkb6eoMqcGRX+dFz1fIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXJhaVh5OTBHUnZwNmd5cHdaRmY1MFhQVjhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xY2VjMTQtZGI1OS00OTUwLWJkYjgt
YjkwYTk0MWVhNTFhLzEvSXJhaVh5OTBHUnZwNmd5cHdaRmY1MFhQVjhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8xY2VjMTQtZGI1OS00OTUwLWJkYjgtYjkwYTk0MWVhNTFh
LzEvSXJhaVh5OTBHUnZwNmd5cHdaRmY1MFhQVjhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4OGuAzT
B1giV5ybGAvhsljXM1QbCGJ0CiMG2Wqnnmc/THSbEGzAZKL10ejEea8fXWMg3h/p
2DZGcRum7vocUij8Nj29kU7KlO4jMdYEtCVR7P693uZi9iNq81Kr0+fXlR7ZpmEg
UO/viw2CZh9ZQ1ZOi84TGCDGREcPXkf6VXXMDL2UUkCXF3r9BtWBJE6DVgl4AWBT
qC1MELS+copLH2IeY/gY6MZQ6yzBybx5L6Qj8OsCEYdsjC5xTpr5yOXC+1EvA7i/
19Uis7xLpX7JFKB1SxdR1fn0yajC1/URI840XaEL3hWgREInrABxueeiKXCQyLKp
ChT3P7tELoppRQ==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:02:32 2025 by rpki-client