Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c176b8-7929-4542-bb32-133f903c64f9/1/R6GA6fZdeI0WzuafVNYgZDvNYOc.mft
File:                     R6GA6fZdeI0WzuafVNYgZDvNYOc.mft (raw, json)
Hash identifier:          mn9jqgDA+dJJVfqAuxlw44MYrG1zfymlbWBWY6VSD3A=
Subject key identifier:   35:80:AF:6A:7B:CE:CD:42:A5:18:35:FA:D5:43:5D:C9:56:0C:FD:9F
Authority key identifier: 47:A1:80:E9:F6:5D:78:8D:16:CE:E6:9F:54:D6:20:64:3B:CD:60:E7
Certificate issuer:       /CN=47a180e9f65d788d16cee69f54d620643bcd60e7
Certificate serial:       0194C3F5E29C150C83AAC3A97DB2614A3B63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R6GA6fZdeI0WzuafVNYgZDvNYOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/c176b8-7929-4542-bb32-133f903c64f9/1/R6GA6fZdeI0WzuafVNYgZDvNYOc.mft
Manifest number:          08D3
Signing time:             Sun 02 Feb 2025 00:00:58 +0000
Manifest this update:     Sun 02 Feb 2025 00:00:58 +0000
Manifest next update:     Mon 03 Feb 2025 00:00:58 +0000
Files and hashes:         1: R6GA6fZdeI0WzuafVNYgZDvNYOc.crl (hash: 2MY/D97dZcfOXUf9+FjM0uOs1t5KHg3y3v6vmB/9WOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/c176b8-7929-4542-bb32-133f903c64f9/1/R6GA6fZdeI0WzuafVNYgZDvNYOc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/c176b8-7929-4542-bb32-133f903c64f9/1/R6GA6fZdeI0WzuafVNYgZDvNYOc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R6GA6fZdeI0WzuafVNYgZDvNYOc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:f5:e2:9c:15:0c:83:aa:c3:a9:7d:b2:61:4a:3b:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47a180e9f65d788d16cee69f54d620643bcd60e7
        Validity
            Not Before: Feb  2 00:00:58 2025 GMT
            Not After : Feb  3 00:00:58 2025 GMT
        Subject: CN=3580af6a7bcecd42a51835fad5435dc9560cfd9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:84:a7:d2:2c:3f:44:e9:06:ef:eb:0c:3f:c3:
                    56:af:77:9d:81:a7:bb:6e:d6:ff:91:3f:7f:84:4e:
                    f5:f1:36:b2:f4:88:ca:d3:ff:c0:49:1f:9e:a8:a0:
                    02:f2:1f:47:53:f1:77:f0:d9:8f:b8:77:92:20:5b:
                    e4:95:19:7e:c8:a9:c9:2d:0c:12:3f:4f:0e:75:d3:
                    12:f1:d7:17:82:f3:06:38:fb:ee:e6:d9:34:2f:e4:
                    ca:a8:b0:33:77:6f:e7:d6:21:62:87:d8:14:57:a3:
                    a5:34:af:ed:dd:58:b2:53:88:44:95:81:27:a4:02:
                    2c:78:4e:2c:f9:28:bf:b1:3c:10:db:3f:5e:df:a0:
                    cf:83:27:0f:28:e2:81:ce:4b:80:6e:16:86:e1:29:
                    50:a3:1c:e2:e6:ad:f3:77:88:ff:2b:0c:c8:83:df:
                    36:83:e5:14:a4:19:fc:ed:0c:17:81:82:6c:79:ee:
                    5a:0f:3c:f8:e4:be:a4:04:e4:e4:03:91:2c:c6:5d:
                    b4:76:4f:43:d9:d9:f2:ae:52:e7:1e:0a:a3:84:83:
                    b2:40:05:14:23:09:82:c9:af:2e:68:4e:36:11:25:
                    fe:cb:70:67:1f:51:f1:a8:28:75:aa:06:f1:1a:e0:
                    4e:72:d2:21:b3:ec:a8:9a:82:fc:b6:31:75:10:c7:
                    69:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:80:AF:6A:7B:CE:CD:42:A5:18:35:FA:D5:43:5D:C9:56:0C:FD:9F
            X509v3 Authority Key Identifier:
                keyid:47:A1:80:E9:F6:5D:78:8D:16:CE:E6:9F:54:D6:20:64:3B:CD:60:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6GA6fZdeI0WzuafVNYgZDvNYOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c176b8-7929-4542-bb32-133f903c64f9/1/R6GA6fZdeI0WzuafVNYgZDvNYOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c176b8-7929-4542-bb32-133f903c64f9/1/R6GA6fZdeI0WzuafVNYgZDvNYOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:39:c2:7b:cf:a1:44:dd:f5:43:9a:0b:cc:0f:e7:b7:10:fd:
         81:19:be:2d:86:a5:ae:ab:15:c4:86:ef:9a:31:b5:cb:10:fe:
         b6:36:d8:22:e4:99:03:2f:dc:40:f1:3b:58:8e:47:10:bc:30:
         10:90:fa:76:6a:62:15:f3:85:8b:92:34:65:4a:4c:c6:03:34:
         d9:44:12:88:98:7b:1c:40:18:77:83:a1:d5:45:43:0a:64:ca:
         cd:b0:53:5f:3c:b8:34:73:03:47:be:93:cd:f6:90:ae:d6:e9:
         3a:07:ab:22:4c:1c:d9:f0:7d:60:f4:66:95:b4:9e:0c:af:db:
         d0:90:9f:26:d8:c7:40:6a:35:63:d5:dd:15:c0:78:0f:97:2c:
         eb:e7:6c:81:ec:8e:23:93:85:a9:08:6d:18:33:7a:71:96:86:
         51:05:28:ec:43:7b:7a:20:80:c3:c5:52:7a:d8:9f:8e:20:6c:
         c0:17:f4:4a:a3:35:02:83:f6:a9:2b:5a:a5:44:40:7a:f0:de:
         36:69:99:6b:a3:91:0e:bc:2e:d9:9b:1f:e8:18:9c:71:9b:b5:
         c2:fc:b8:d8:f7:45:9c:5a:70:fb:c5:c1:05:86:e1:35:01:65:
         9b:2e:be:9d:91:d8:97:78:6a:4f:60:1c:12:33:d6:6f:7f:8b:
         51:5f:29:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:59:17 2025 by rpki-client