Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft
File:                     RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft (raw, json)
Hash identifier:          h8U8PNpSbBQ03vTxn1pMi+NnAGvc2F7DCYNE2XAUzk4=
Subject key identifier:   CC:F2:FF:79:50:27:CA:41:C5:D4:CA:70:EF:68:8E:EE:38:DA:E9:F7
Authority key identifier: 44:2C:8F:D6:C7:76:B7:85:66:BB:7C:30:4E:25:FB:7D:2A:29:32:C3
Certificate issuer:       /CN=442c8fd6c776b78566bb7c304e25fb7d2a2932c3
Certificate serial:       0194C3873D970636ED846167F366EFAD8474
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RCyP1sd2t4Vmu3wwTiX7fSopMsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft
Manifest number:          142A
Signing time:             Sat 01 Feb 2025 22:00:07 +0000
Manifest this update:     Sat 01 Feb 2025 22:00:07 +0000
Manifest next update:     Sun 02 Feb 2025 22:00:07 +0000
Files and hashes:         1: RCyP1sd2t4Vmu3wwTiX7fSopMsM.crl (hash: 6cBEDtnvkJGbpNHfywNGHRve3MA9BABPUa75VUiVQiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RCyP1sd2t4Vmu3wwTiX7fSopMsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 22:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:87:3d:97:06:36:ed:84:61:67:f3:66:ef:ad:84:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=442c8fd6c776b78566bb7c304e25fb7d2a2932c3
        Validity
            Not Before: Feb  1 22:00:07 2025 GMT
            Not After : Feb  2 22:00:07 2025 GMT
        Subject: CN=ccf2ff795027ca41c5d4ca70ef688eee38dae9f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:23:f9:16:62:6c:34:79:19:ee:16:af:25:d4:
                    73:89:c0:d4:38:9b:79:95:23:42:94:a4:ef:1d:4e:
                    5f:0f:57:72:cc:7e:96:4b:4f:25:82:98:3c:92:2c:
                    42:53:ef:8a:dc:1a:9a:46:42:d6:6b:0d:86:23:19:
                    0c:42:79:45:e0:25:55:2c:f2:35:ac:df:4c:73:ed:
                    ba:12:f3:61:9b:f8:0f:6d:46:46:d2:35:24:f5:4e:
                    bc:5f:66:bd:62:0c:fb:9c:67:2f:70:94:bb:d5:e9:
                    2d:72:c6:e3:a0:17:3c:6e:e9:de:28:42:5c:b7:99:
                    74:e6:82:07:e4:ed:b6:8e:33:57:d6:c1:47:6b:86:
                    6a:70:68:4a:66:92:db:a9:7c:3a:25:dc:20:fd:32:
                    8d:10:27:b6:c8:e4:9c:c2:62:ff:9d:9b:4e:4c:ac:
                    20:5d:15:31:f3:b3:e5:cf:49:1d:b0:d6:e3:ac:82:
                    78:cc:6d:75:35:fb:da:e1:24:f7:0b:4e:b7:82:80:
                    5a:d8:09:32:28:1b:c9:d7:5a:a2:f7:79:b3:dd:21:
                    c6:44:5b:ef:e8:63:03:1b:c5:fd:32:78:11:3c:36:
                    8f:13:19:f3:a9:5a:f4:b4:16:25:2d:9d:31:f2:4f:
                    ea:75:27:40:e4:0e:7a:6d:ea:48:24:e0:34:87:71:
                    95:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F2:FF:79:50:27:CA:41:C5:D4:CA:70:EF:68:8E:EE:38:DA:E9:F7
            X509v3 Authority Key Identifier:
                keyid:44:2C:8F:D6:C7:76:B7:85:66:BB:7C:30:4E:25:FB:7D:2A:29:32:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCyP1sd2t4Vmu3wwTiX7fSopMsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:19:c6:cd:4b:67:de:9a:e8:05:04:f3:9f:0c:59:5b:62:2c:
         c8:e8:5f:db:d5:60:46:0b:d0:2c:2d:ae:2c:40:dc:0c:83:25:
         63:dc:81:ab:f0:d2:8d:6d:20:84:66:eb:8a:b9:68:17:f5:1e:
         04:74:e6:54:57:59:54:58:32:df:68:66:12:5e:30:fa:9c:43:
         6d:38:84:f8:30:c4:1e:19:f9:00:23:f3:6c:cf:e2:77:a4:d6:
         66:1b:b4:5d:e1:72:c9:e0:ce:16:4d:aa:2c:5c:8b:88:e5:a7:
         65:27:97:b5:29:65:fd:f8:4e:91:bc:4c:fc:2a:73:2b:de:47:
         e5:57:6d:90:ab:6a:bc:fe:e1:c5:a3:a1:11:59:3e:2f:5f:f2:
         d8:96:03:09:98:5b:96:9c:44:dc:eb:14:b4:58:b7:cd:e5:ee:
         b6:3a:07:04:46:aa:a2:80:c2:c6:65:8c:2b:02:af:d9:c0:83:
         4d:10:07:8f:9a:2c:d5:69:5e:a4:9c:e3:12:fe:25:8e:a2:37:
         53:bd:3e:09:18:49:c2:14:11:a2:a7:30:ac:a0:05:47:3a:5a:
         ee:9d:97:3b:96:4a:4b:c2:75:2f:a3:d2:5b:68:3a:63:8e:f7:
         0f:eb:82:66:95:91:73:47:78:41:9e:a7:05:e5:2c:36:79:99:
         91:61:44:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:02:59 2025 by rpki-client