Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft
File:                     tx6uq1CDkaFflcQpE_oAWhbCPA8.mft (raw, json)
Hash identifier:          IcDTlYRZpxOip9EybI3R/af2oXLLny05WjpgolHx8u0=
Subject key identifier:   B1:69:B5:11:8F:F4:6E:D8:66:0B:BE:20:41:42:6C:2A:5B:1B:F2:A7
Authority key identifier: B7:1E:AE:AB:50:83:91:A1:5F:95:C4:29:13:FA:00:5A:16:C2:3C:0F
Certificate issuer:       /CN=b71eaeab508391a15f95c42913fa005a16c23c0f
Certificate serial:       01965B03CFE5D53567BFD5E6EF301883BFC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tx6uq1CDkaFflcQpE_oAWhbCPA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft
Manifest number:          0D04
Signing time:             Tue 22 Apr 2025 01:01:38 +0000
Manifest this update:     Tue 22 Apr 2025 01:01:38 +0000
Manifest next update:     Wed 23 Apr 2025 01:01:38 +0000
Files and hashes:         1: tx6uq1CDkaFflcQpE_oAWhbCPA8.crl (hash: HTQhlCeu5z9ULxxN20abuOfUkLAnh5mXF989HL3P9Ow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tx6uq1CDkaFflcQpE_oAWhbCPA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5b:03:cf:e5:d5:35:67:bf:d5:e6:ef:30:18:83:bf:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b71eaeab508391a15f95c42913fa005a16c23c0f
        Validity
            Not Before: Apr 22 01:01:38 2025 GMT
            Not After : Apr 23 01:01:38 2025 GMT
        Subject: CN=b169b5118ff46ed8660bbe2041426c2a5b1bf2a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:66:77:49:da:1d:3e:5f:f2:6b:8e:32:b2:14:
                    ea:ca:d8:c6:95:66:e9:12:28:c8:cb:03:59:89:de:
                    1b:d0:60:77:d7:ab:dc:b2:30:3b:1c:76:6b:37:80:
                    de:79:99:e9:db:8b:2a:88:ac:aa:5f:22:70:0f:84:
                    38:14:de:9c:14:fa:53:d8:d0:6c:4c:90:22:6d:04:
                    ff:2a:3c:a2:93:98:66:49:ad:3e:c6:c9:22:72:c3:
                    4f:ae:52:75:a3:01:3d:93:48:a6:fe:e2:d4:97:2a:
                    ae:f8:eb:72:f9:4c:73:1f:dc:97:49:aa:fd:ce:c0:
                    aa:85:51:3d:b9:33:30:d6:11:6f:04:06:ae:6a:2a:
                    a0:5e:f6:65:0f:3b:7c:66:be:73:8a:ec:f0:de:de:
                    81:1b:52:08:8b:88:68:ce:34:eb:f0:15:0a:b6:33:
                    2b:ea:93:0e:2b:3a:3e:58:18:57:c4:4c:71:b9:10:
                    35:8a:46:c3:33:60:ea:b9:0b:b7:ff:43:e6:de:1f:
                    5a:66:2d:79:d9:ba:34:89:52:c6:92:22:dd:7c:f6:
                    34:5b:66:e9:d5:da:f2:95:4b:f4:9c:e0:df:61:a1:
                    4e:30:d4:62:e2:1f:a3:cd:2f:da:10:af:09:92:d2:
                    f1:9a:c2:4b:11:03:3d:8b:61:2e:d8:bb:b0:fb:8f:
                    b6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:69:B5:11:8F:F4:6E:D8:66:0B:BE:20:41:42:6C:2A:5B:1B:F2:A7
            X509v3 Authority Key Identifier:
                keyid:B7:1E:AE:AB:50:83:91:A1:5F:95:C4:29:13:FA:00:5A:16:C2:3C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx6uq1CDkaFflcQpE_oAWhbCPA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:9a:b7:0b:b2:f1:c6:3c:a4:9d:2c:25:47:01:f3:e3:9e:1b:
         dc:1e:3b:e5:33:93:c1:b2:26:2e:f4:75:33:84:4c:31:e7:25:
         00:7b:cb:82:5e:e5:83:5e:e7:a4:ff:aa:4f:5b:41:d5:ea:be:
         ab:b6:e8:9c:aa:51:88:54:20:06:bd:f3:0c:2b:43:4e:df:90:
         4e:fc:5e:8e:4c:e0:84:5b:f2:a2:38:86:04:fb:e7:d4:01:db:
         5a:99:7d:1a:7f:7c:59:28:d8:4d:ad:d2:db:4b:20:bd:ab:32:
         31:d9:64:e6:e0:eb:df:c9:2e:68:ed:c3:05:6b:85:93:05:0b:
         27:03:46:90:a5:cc:93:0d:aa:01:63:72:93:3c:a7:b9:6e:68:
         c4:da:de:f5:70:b1:92:c5:b3:36:d8:1e:8b:6d:f0:b0:9d:b2:
         d7:ea:5a:74:9d:ab:3c:c1:cd:34:ae:2e:92:1a:cb:b1:89:36:
         2e:20:fa:2c:21:55:0c:f0:ae:d6:a6:5d:fc:fd:d3:ac:cf:dc:
         c0:5a:d7:ed:42:62:91:f6:1b:75:28:d7:3b:b4:fc:9b:4e:e1:
         67:30:9a:e3:68:54:08:83:1e:d2:5b:41:e4:a0:86:63:7d:20:
         ff:83:52:7a:60:cb:ce:4b:8b:be:55:58:a4:74:a3:73:fb:26:
         eb:22:7a:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbA8/l1TVnv9Xm7zAYg7/GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MWVhZWFiNTA4MzkxYTE1Zjk1YzQyOTEzZmEwMDVhMTZj
MjNjMGYwHhcNMjUwNDIyMDEwMTM4WhcNMjUwNDIzMDEwMTM4WjAzMTEwLwYDVQQD
EyhiMTY5YjUxMThmZjQ2ZWQ4NjYwYmJlMjA0MTQyNmMyYTViMWJmMmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWZ3SdodPl/ya44yshTqytjGlWbp
EijIywNZid4b0GB316vcsjA7HHZrN4DeeZnp24sqiKyqXyJwD4Q4FN6cFPpT2NBs
TJAibQT/Kjyik5hmSa0+xskicsNPrlJ1owE9k0im/uLUlyqu+Oty+UxzH9yXSar9
zsCqhVE9uTMw1hFvBAauaiqgXvZlDzt8Zr5ziuzw3t6BG1IIi4hozjTr8BUKtjMr
6pMOKzo+WBhXxExxuRA1ikbDM2DquQu3/0Pm3h9aZi152bo0iVLGkiLdfPY0W2bp
1drylUv0nODfYaFOMNRi4h+jzS/aEK8JktLxmsJLEQM9i2Eu2Luw+4+2aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFptRGP9G7YZgu+IEFCbCpbG/KnMB8GA1UdIwQY
MBaAFLcerqtQg5GhX5XEKRP6AFoWwjwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHg2dXExQ0RrYUZmbGNRcEVfb0FXaGJDUEE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi80Yzg3NmUtNzY1YS00NGZmLWFjOTgt
YmVlNGQ2YzBiMDFlLzEvdHg2dXExQ0RrYUZmbGNRcEVfb0FXaGJDUEE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi80Yzg3NmUtNzY1YS00NGZmLWFjOTgtYmVlNGQ2YzBiMDFl
LzEvdHg2dXExQ0RrYUZmbGNRcEVfb0FXaGJDUEE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpq3C7Lx
xjyknSwlRwHz454b3B475TOTwbImLvR1M4RMMeclAHvLgl7lg17npP+qT1tB1eq+
q7bonKpRiFQgBr3zDCtDTt+QTvxejkzghFvyojiGBPvn1AHbWpl9Gn98WSjYTa3S
20sgvasyMdlk5uDr38kuaO3DBWuFkwULJwNGkKXMkw2qAWNykzynuW5oxNre9XCx
ksWzNtgei23wsJ2y1+padJ2rPMHNNK4ukhrLsYk2LiD6LCFVDPCu1qZd/P3TrM/c
wFrX7UJikfYbdSjXO7T8m07hZzCa42hUCIMe0ltB5KCGY30g/4NSemDLzkuLvlVY
pHSjc/sm6yJ6Ig==
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:28:35 2025 by rpki-client