Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
File:                     rVYQTCidcf2Duoh774CRkU82biE.mft (raw, json)
Hash identifier:          z3HJMqx3sJVSZmjfz1/f67YOGeQSvbucu/aE+IXBQBA=
Subject key identifier:   B1:F1:51:FF:F8:D6:D6:65:E4:22:EE:33:9D:2E:6B:A9:9D:91:B3:7E
Authority key identifier: AD:56:10:4C:28:9D:71:FD:83:BA:88:7B:EF:80:91:91:4F:36:6E:21
Certificate issuer:       /CN=ad56104c289d71fd83ba887bef8091914f366e21
Certificate serial:       019510C7A03C518179519368F0D55826655A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
Manifest number:          0C5F
Signing time:             Sun 16 Feb 2025 22:01:12 +0000
Manifest this update:     Sun 16 Feb 2025 22:01:12 +0000
Manifest next update:     Mon 17 Feb 2025 22:01:12 +0000
Files and hashes:         1: rVYQTCidcf2Duoh774CRkU82biE.crl (hash: QJ4mSLTTjRZmIdsW2BX/abcD69noVjnKFxm88eq8CRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:a0:3c:51:81:79:51:93:68:f0:d5:58:26:65:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad56104c289d71fd83ba887bef8091914f366e21
        Validity
            Not Before: Feb 16 22:01:12 2025 GMT
            Not After : Feb 17 22:01:12 2025 GMT
        Subject: CN=b1f151fff8d6d665e422ee339d2e6ba99d91b37e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:48:d3:b1:22:ba:8e:3f:b4:9d:a1:ca:de:da:
                    be:52:cc:d2:82:b1:09:8e:71:28:f2:6f:52:b5:e2:
                    96:d0:40:8c:83:a8:35:4b:4e:c5:0a:7d:bf:c6:48:
                    95:d2:7e:c8:35:b3:83:15:68:a1:9f:09:dd:62:0c:
                    4c:72:06:fc:b0:8c:7c:09:4e:b5:c4:e3:2c:77:f3:
                    58:a4:b3:3e:47:c2:30:b4:e2:ac:3e:ee:64:03:23:
                    b8:32:ee:1c:2e:08:fc:fa:8b:86:e3:92:5d:3d:fe:
                    b3:46:45:4e:ef:df:62:0b:7e:42:25:81:db:e9:7e:
                    e0:19:fe:2b:37:2a:d7:d2:05:91:91:75:04:59:cc:
                    88:db:2b:cc:0e:9b:84:84:92:ae:0b:9d:1f:4c:79:
                    1f:90:36:19:67:80:ef:56:f9:9e:d0:06:fa:42:29:
                    40:6e:c6:29:81:ca:00:bb:6d:a1:45:fb:57:78:6a:
                    96:e1:e8:14:76:5e:c6:71:3c:70:ff:41:64:c4:2f:
                    0c:d2:e0:1f:22:be:ee:94:39:95:6e:16:9a:46:6b:
                    52:d5:b3:5e:db:7e:aa:39:e0:08:af:7e:2a:cc:53:
                    77:c2:07:ad:f2:b3:35:cb:76:a1:db:56:c7:17:fa:
                    49:92:cf:33:a1:1a:b6:d2:89:46:25:e8:c8:38:a4:
                    da:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F1:51:FF:F8:D6:D6:65:E4:22:EE:33:9D:2E:6B:A9:9D:91:B3:7E
            X509v3 Authority Key Identifier:
                keyid:AD:56:10:4C:28:9D:71:FD:83:BA:88:7B:EF:80:91:91:4F:36:6E:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:56:07:18:36:98:88:38:2f:b7:28:d2:45:51:47:cc:73:54:
         4f:4c:16:ca:e6:3f:b2:83:47:1c:76:c4:49:4e:f4:6d:b2:0c:
         d8:01:63:34:12:7b:09:e0:7d:aa:4a:07:71:2f:fa:10:e5:d8:
         a7:a1:f1:79:17:06:b6:d6:2b:6d:ca:b3:34:5a:ea:39:a8:d7:
         27:38:64:2b:3a:8c:2a:b3:ec:c0:2f:3c:5f:c9:7c:64:c1:b7:
         10:51:1b:b6:35:08:97:bd:cf:fb:74:98:cb:ca:86:82:22:9a:
         18:05:b7:ba:ad:9d:8b:8c:b7:ab:e9:7c:be:78:34:ed:0e:e6:
         24:d5:ab:86:17:77:19:1d:9f:22:91:c0:7f:82:73:f2:50:1f:
         5a:0e:20:0a:eb:1e:da:6d:3e:92:1d:1a:d6:cc:49:10:1f:56:
         84:d4:9a:ba:20:01:24:34:a0:70:29:3a:5b:9a:ad:67:b4:f1:
         4b:b7:28:83:20:1f:8f:32:91:ab:14:1d:4f:01:4c:75:b9:61:
         82:44:05:dc:22:20:a6:52:ad:fc:fd:af:4f:34:a8:02:de:78:
         bc:bf:bc:b3:0c:40:63:7e:0c:6b:23:84:03:30:c7:65:3d:2e:
         e1:90:c8:ea:85:f2:da:27:43:a0:cc:7d:cc:f5:07:14:08:5f:
         f7:fd:b8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:44 2025 by rpki-client