Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
File:                     MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft (raw, json)
Hash identifier:          PrtpgK0ZCNgoqLO2bNfx+LcsKZckoYPhFJve3FGhCQ8=
Subject key identifier:   57:3D:38:EF:72:A7:0F:16:15:D5:93:F7:DC:ED:56:29:3B:E0:3E:40
Authority key identifier: 33:0B:C8:FD:94:9E:65:1D:93:28:5C:CB:C1:DA:13:39:3B:78:33:05
Certificate issuer:       /CN=330bc8fd949e651d93285ccbc1da13393b783305
Certificate serial:       0194C4D159C44000F0D6CD52343567A886A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
Manifest number:          0E26
Signing time:             Sun 02 Feb 2025 04:00:41 +0000
Manifest this update:     Sun 02 Feb 2025 04:00:41 +0000
Manifest next update:     Mon 03 Feb 2025 04:00:41 +0000
Files and hashes:         1: MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl (hash: EaDEYElzwhK0pN2F5ILHO8pFjTR88ENIHWVAeKWtvfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:d1:59:c4:40:00:f0:d6:cd:52:34:35:67:a8:86:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330bc8fd949e651d93285ccbc1da13393b783305
        Validity
            Not Before: Feb  2 04:00:41 2025 GMT
            Not After : Feb  3 04:00:41 2025 GMT
        Subject: CN=573d38ef72a70f1615d593f7dced56293be03e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fc:d7:3e:fd:49:56:47:68:d5:d5:de:ec:89:
                    f7:09:f4:a8:3c:b4:62:57:32:ec:47:66:3b:80:2b:
                    25:82:27:74:58:b2:7c:48:91:a7:e6:8c:b7:4f:9d:
                    41:e0:30:14:95:c5:60:ed:98:69:c3:41:9a:c6:a0:
                    60:d0:29:c7:ba:b3:1e:7b:a8:9d:f9:36:0a:75:c2:
                    16:7a:36:eb:72:68:6a:71:71:53:1e:3b:a9:7e:f9:
                    69:6d:c1:4c:1e:19:7c:9a:59:70:19:88:15:17:5a:
                    4c:9e:e6:b6:44:e9:d3:ed:b5:e3:2f:35:36:c8:cf:
                    6c:12:58:f4:dd:8c:64:8b:d1:a7:2e:5d:5b:8c:dd:
                    5c:21:0f:9c:8a:fe:3d:fe:1f:cd:de:fd:1e:77:d9:
                    d3:f0:af:63:6b:ad:ca:a9:83:52:c7:74:5b:2c:10:
                    2f:a9:12:ab:89:f1:d1:86:c5:00:98:25:2a:de:d7:
                    19:39:8c:c4:36:b3:ca:b6:3c:c4:82:ff:f4:ba:55:
                    3f:28:c9:59:40:25:4f:49:56:39:13:ca:06:f6:ca:
                    8b:4d:1b:75:91:25:d8:a2:2e:b6:4b:7b:cb:19:4f:
                    0b:34:1a:59:40:fd:c5:34:38:66:11:c3:57:38:b2:
                    45:76:29:5e:8a:c1:9e:2e:ed:74:2a:8d:19:cc:60:
                    4d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3D:38:EF:72:A7:0F:16:15:D5:93:F7:DC:ED:56:29:3B:E0:3E:40
            X509v3 Authority Key Identifier:
                keyid:33:0B:C8:FD:94:9E:65:1D:93:28:5C:CB:C1:DA:13:39:3B:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a1:14:ec:bd:07:d0:38:46:47:6b:5d:36:05:5a:8f:b8:d6:
         88:17:e1:d3:62:d6:f4:46:34:d8:6f:c8:5c:dd:31:ac:4b:ba:
         e6:e2:36:e4:47:17:45:4c:6c:c7:17:8e:d0:d7:fe:fa:cd:93:
         1e:05:74:ae:8b:07:80:08:51:57:a1:3c:28:12:95:f4:9b:f6:
         5f:37:38:24:bc:f9:3d:23:2e:b1:a5:6b:e0:27:f7:b5:2b:12:
         0c:39:db:23:cd:f1:6c:9f:d3:88:ca:b6:01:56:be:15:0d:e6:
         dc:1c:65:34:09:a5:7c:a5:91:16:7c:f8:98:4c:99:6f:7f:ba:
         ae:85:39:a3:a6:10:36:28:f0:19:f4:b9:98:31:10:67:de:55:
         3b:d2:ed:81:6f:92:db:b6:8d:32:07:ef:69:cd:47:ed:9e:d0:
         93:05:97:44:8f:cd:4f:b1:e0:a5:52:da:83:1f:56:04:47:46:
         28:6e:3e:18:f5:66:de:62:d2:a8:c5:e0:64:db:b2:8e:7b:0b:
         82:a2:d8:ca:22:26:65:05:61:ee:fa:0e:7e:0b:5e:c5:1e:23:
         b1:1b:e8:34:15:d0:28:8f:e8:e1:48:9e:7d:76:60:bb:00:e4:
         31:61:c3:b2:a8:f3:c5:fe:b5:b0:e0:8f:00:21:55:ee:56:16:
         23:ae:45:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTE0VnEQADw1s1SNDVnqIaiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMGJjOGZkOTQ5ZTY1MWQ5MzI4NWNjYmMxZGExMzM5M2I3
ODMzMDUwHhcNMjUwMjAyMDQwMDQxWhcNMjUwMjAzMDQwMDQxWjAzMTEwLwYDVQQD
Eyg1NzNkMzhlZjcyYTcwZjE2MTVkNTkzZjdkY2VkNTYyOTNiZTAzZTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvzXPv1JVkdo1dXe7In3CfSoPLRi
VzLsR2Y7gCslgid0WLJ8SJGn5oy3T51B4DAUlcVg7Zhpw0GaxqBg0CnHurMee6id
+TYKdcIWejbrcmhqcXFTHjupfvlpbcFMHhl8mllwGYgVF1pMnua2ROnT7bXjLzU2
yM9sElj03Yxki9GnLl1bjN1cIQ+civ49/h/N3v0ed9nT8K9ja63KqYNSx3RbLBAv
qRKrifHRhsUAmCUq3tcZOYzENrPKtjzEgv/0ulU/KMlZQCVPSVY5E8oG9sqLTRt1
kSXYoi62S3vLGU8LNBpZQP3FNDhmEcNXOLJFdileisGeLu10Ko0ZzGBNHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFc9OO9ypw8WFdWT99ztVik74D5AMB8GA1UdIwQY
MBaAFDMLyP2UnmUdkyhcy8HaEzk7eDMFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXd2SV9aU2VaUjJUS0Z6THdkb1RPVHQ0TXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi80NjYxNWMtYTdkZi00MjViLTk1OTAt
ZDIxZTE0M2Y3NWIyLzEvTXd2SV9aU2VaUjJUS0Z6THdkb1RPVHQ0TXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi80NjYxNWMtYTdkZi00MjViLTk1OTAtZDIxZTE0M2Y3NWIy
LzEvTXd2SV9aU2VaUjJUS0Z6THdkb1RPVHQ0TXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKEU7L0H
0DhGR2tdNgVaj7jWiBfh02LW9EY02G/IXN0xrEu65uI25EcXRUxsxxeO0Nf++s2T
HgV0rosHgAhRV6E8KBKV9Jv2Xzc4JLz5PSMusaVr4Cf3tSsSDDnbI83xbJ/TiMq2
AVa+FQ3m3BxlNAmlfKWRFnz4mEyZb3+6roU5o6YQNijwGfS5mDEQZ95VO9LtgW+S
27aNMgfvac1H7Z7QkwWXRI/NT7HgpVLagx9WBEdGKG4+GPVm3mLSqMXgZNuyjnsL
gqLYyiImZQVh7voOfgtexR4jsRvoNBXQKI/o4UiefXZguwDkMWHDsqjzxf61sOCP
ACFV7lYWI65FFg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:44:03 2025 by rpki-client