Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft
File:                     adSSvj_PjMWoWckEjFD9QL_bd4c.mft (raw, json)
Hash identifier:          l6liGI7XWVwCbdcjT19/A4cPfeu/w1XyaUKEGknTcB8=
Subject key identifier:   23:14:67:A0:2D:11:DA:DF:63:F6:1E:13:9D:38:28:0D:0A:B9:1D:BF
Authority key identifier: 69:D4:92:BE:3F:CF:8C:C5:A8:59:C9:04:8C:50:FD:40:BF:DB:77:87
Certificate issuer:       /CN=69d492be3fcf8cc5a859c9048c50fd40bfdb7787
Certificate serial:       0195108FCA48C37BCF6B1FE8F05604BA2DC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft
Manifest number:          0147
Signing time:             Sun 16 Feb 2025 21:00:13 +0000
Manifest this update:     Sun 16 Feb 2025 21:00:13 +0000
Manifest next update:     Mon 17 Feb 2025 21:00:13 +0000
Files and hashes:         1: adSSvj_PjMWoWckEjFD9QL_bd4c.crl (hash: t0rxk8i/wQDPqA8JDtVIv8PTrpF1qVBwnqIhAAN2RH4=)
                          2: rvjv-klu4UPy3RgCuDK0uwY_4pQ.roa (hash: VpYiP9YZqNvc2RLGse05pZkEy6ixiDuEG/Kk/ZGHkkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 21:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:8f:ca:48:c3:7b:cf:6b:1f:e8:f0:56:04:ba:2d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d492be3fcf8cc5a859c9048c50fd40bfdb7787
        Validity
            Not Before: Feb 16 21:00:13 2025 GMT
            Not After : Feb 17 21:00:13 2025 GMT
        Subject: CN=231467a02d11dadf63f61e139d38280d0ab91dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e1:b4:cd:9d:80:10:6a:e0:16:e3:f4:ef:ba:
                    65:1f:7f:2c:47:a2:fe:85:d1:82:f6:55:67:72:ad:
                    3d:3d:1d:a0:c2:5d:a7:9b:0f:d2:95:0a:70:ae:42:
                    b1:5a:f0:18:76:5e:67:47:9a:56:60:dd:a7:df:a6:
                    f0:39:4c:a9:00:5c:a7:12:62:62:15:35:34:a4:25:
                    9d:cf:42:f6:b2:17:b5:9f:30:11:9b:e2:c5:07:61:
                    90:0e:d5:e3:c1:be:80:65:93:27:b9:f4:b5:9b:51:
                    38:2d:cf:7f:ab:28:47:94:da:04:3b:29:da:62:21:
                    6b:cd:e4:13:62:ec:40:87:b2:30:54:81:48:29:e6:
                    9e:67:9a:60:7a:c3:f3:71:84:93:7f:84:a9:6b:d7:
                    c3:23:cf:33:d1:8b:f7:3c:19:ba:30:b7:9f:fe:79:
                    43:ed:49:06:7f:f0:fd:c5:bd:e5:f2:91:d1:83:e5:
                    21:53:88:6d:e5:41:ae:0d:d3:54:f6:96:48:c4:0f:
                    2e:57:6c:1b:ab:a0:d6:b4:d4:5f:09:b4:a4:2f:b7:
                    1b:ab:9f:db:5f:11:5d:c8:09:35:66:64:ba:bf:a1:
                    42:38:29:cd:d4:53:f9:11:95:89:d7:8f:bb:96:d0:
                    e2:64:8b:bf:7a:04:2d:f9:22:54:69:53:46:f9:f4:
                    ee:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:14:67:A0:2D:11:DA:DF:63:F6:1E:13:9D:38:28:0D:0A:B9:1D:BF
            X509v3 Authority Key Identifier:
                keyid:69:D4:92:BE:3F:CF:8C:C5:A8:59:C9:04:8C:50:FD:40:BF:DB:77:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:78:cc:ef:30:98:92:ae:6b:d8:5c:c1:e0:02:3b:f6:28:00:
         a8:3f:35:fd:d7:9b:f1:65:4c:8b:2c:07:f7:d0:f3:dc:47:19:
         d1:c4:a5:ed:a0:e1:2d:68:cd:b1:ea:0e:e1:11:97:48:c9:01:
         12:8a:51:f9:0f:fa:92:56:27:3e:d8:38:6b:ae:0c:4a:b4:12:
         c8:65:ae:ed:65:bb:b2:a0:10:55:2e:52:53:1f:ce:c1:c0:92:
         f2:4e:62:7a:9a:23:3b:df:ec:3c:71:5d:a2:58:14:38:d9:a2:
         b9:24:d5:9a:d5:33:7c:b8:9c:d3:25:27:87:a8:81:9b:9e:49:
         26:05:1c:4f:7a:34:37:07:5b:ed:f6:42:c2:b2:b0:f4:2f:c3:
         1b:48:dc:f2:fb:b8:79:fd:62:8c:10:26:81:49:d8:bd:dd:f1:
         9c:88:cd:67:e1:d5:b6:0c:96:7b:44:c2:80:12:ae:58:86:1f:
         f2:89:4c:e1:3b:d1:56:8c:07:da:49:ee:29:77:f6:e4:72:7e:
         2c:55:62:ed:64:50:e6:1b:6c:89:c0:6a:e7:3c:49:aa:34:df:
         2f:7b:9f:7c:a9:83:7e:5d:e6:72:88:be:34:c3:b9:5e:6d:38:
         f2:d9:07:c3:57:38:b6:a6:a4:5f:67:c3:54:07:d8:85:3f:7c:
         92:87:75:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQj8pIw3vPax/o8FYEui3CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZDQ5MmJlM2ZjZjhjYzVhODU5YzkwNDhjNTBmZDQwYmZk
Yjc3ODcwHhcNMjUwMjE2MjEwMDEzWhcNMjUwMjE3MjEwMDEzWjAzMTEwLwYDVQQD
EygyMzE0NjdhMDJkMTFkYWRmNjNmNjFlMTM5ZDM4MjgwZDBhYjkxZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOG0zZ2AEGrgFuP077plH38sR6L+
hdGC9lVncq09PR2gwl2nmw/SlQpwrkKxWvAYdl5nR5pWYN2n36bwOUypAFynEmJi
FTU0pCWdz0L2she1nzARm+LFB2GQDtXjwb6AZZMnufS1m1E4Lc9/qyhHlNoEOyna
YiFrzeQTYuxAh7IwVIFIKeaeZ5pgesPzcYSTf4Spa9fDI88z0Yv3PBm6MLef/nlD
7UkGf/D9xb3l8pHRg+UhU4ht5UGuDdNU9pZIxA8uV2wbq6DWtNRfCbSkL7cbq5/b
XxFdyAk1ZmS6v6FCOCnN1FP5EZWJ14+7ltDiZIu/egQt+SJUaVNG+fTuEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMUZ6AtEdrfY/YeE504KA0KuR2/MB8GA1UdIwQY
MBaAFGnUkr4/z4zFqFnJBIxQ/UC/23eHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWRTU3ZqX1BqTVdvV2NrRWpGRDlRTF9iZDRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iNThkNTEtMWFjZS00OTBlLThjMmUt
NTkyMDhiYWJlYjEzLzEvYWRTU3ZqX1BqTVdvV2NrRWpGRDlRTF9iZDRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9iNThkNTEtMWFjZS00OTBlLThjMmUtNTkyMDhiYWJlYjEz
LzEvYWRTU3ZqX1BqTVdvV2NrRWpGRDlRTF9iZDRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjHjM7zCY
kq5r2FzB4AI79igAqD81/deb8WVMiywH99Dz3EcZ0cSl7aDhLWjNseoO4RGXSMkB
EopR+Q/6klYnPtg4a64MSrQSyGWu7WW7sqAQVS5SUx/OwcCS8k5iepojO9/sPHFd
olgUONmiuSTVmtUzfLic0yUnh6iBm55JJgUcT3o0Nwdb7fZCwrKw9C/DG0jc8vu4
ef1ijBAmgUnYvd3xnIjNZ+HVtgyWe0TCgBKuWIYf8olM4TvRVowH2knuKXf25HJ+
LFVi7WRQ5htsicBq5zxJqjTfL3uffKmDfl3mcoi+NMO5Xm048tkHw1c4tqakX2fD
VAfYhT98kod1/A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:22 2025 by rpki-client