Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
File:                     bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft (raw, json)
Hash identifier:          tyI5AjMH6SczMIJcHM/rDgZjakBfiIE3nCTfQ8CiXYI=
Subject key identifier:   43:1B:C8:C1:DE:BA:BB:74:05:B6:50:93:9D:68:49:E5:FE:76:6F:BD
Authority key identifier: 6D:15:78:A2:E6:23:73:6A:06:A5:E1:9D:91:BD:09:62:0D:06:AD:94
Certificate issuer:       /CN=6d1578a2e623736a06a5e19d91bd09620d06ad94
Certificate serial:       0194C387A1F3E9FD1D1C110A521452C9A31C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
Manifest number:          06CA
Signing time:             Sat 01 Feb 2025 22:00:33 +0000
Manifest this update:     Sat 01 Feb 2025 22:00:33 +0000
Manifest next update:     Sun 02 Feb 2025 22:00:33 +0000
Files and hashes:         1: bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl (hash: 4n8lbqKJwVQSNfPFrh2g/6Tbl2JAyZEnie0OW7MWoQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 22:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:87:a1:f3:e9:fd:1d:1c:11:0a:52:14:52:c9:a3:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d1578a2e623736a06a5e19d91bd09620d06ad94
        Validity
            Not Before: Feb  1 22:00:33 2025 GMT
            Not After : Feb  2 22:00:33 2025 GMT
        Subject: CN=431bc8c1debabb7405b650939d6849e5fe766fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a9:eb:cd:e1:46:30:0c:9b:54:f5:9a:ef:36:
                    24:e0:ff:0f:34:2c:35:f5:36:3e:8b:90:65:b9:6c:
                    58:e7:b1:8b:ca:17:e6:7d:c2:40:db:ff:89:47:cb:
                    f2:7e:49:4f:f1:8b:49:30:79:10:00:7d:5a:63:12:
                    18:ca:cb:6e:9f:25:13:9a:b8:e8:be:46:8e:2d:bf:
                    3c:6f:42:e1:54:8a:4f:0c:2f:ef:5a:9d:59:de:b4:
                    69:42:8c:07:b3:29:79:4a:65:f0:bc:bc:73:d3:9d:
                    8e:0f:b4:1e:26:05:fb:e2:7c:f5:81:48:36:bf:81:
                    a7:2b:55:09:cd:93:57:cf:6c:a6:66:e8:ea:fe:49:
                    f4:a4:49:ac:9b:6a:c9:27:f7:e7:a5:b2:31:67:9e:
                    94:c7:bb:5f:d7:57:41:2a:f3:3d:45:e7:4e:07:2d:
                    75:56:71:fe:fa:fd:f3:59:dd:34:f5:4f:19:c6:3a:
                    e1:91:f1:46:50:3d:db:34:fc:94:f7:30:e5:fd:0b:
                    56:a3:82:e5:eb:6d:19:30:0d:4a:c4:c1:1a:d3:f9:
                    76:cd:03:30:cd:89:c3:22:69:b8:b0:66:a8:9f:35:
                    71:3f:fb:a3:f7:a8:cc:65:4e:36:bd:d8:73:bc:cf:
                    0c:58:a6:d8:cc:66:19:87:3f:d0:90:74:2f:55:d6:
                    68:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1B:C8:C1:DE:BA:BB:74:05:B6:50:93:9D:68:49:E5:FE:76:6F:BD
            X509v3 Authority Key Identifier:
                keyid:6D:15:78:A2:E6:23:73:6A:06:A5:E1:9D:91:BD:09:62:0D:06:AD:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:c1:0c:44:95:b0:90:58:4c:87:22:51:7e:32:7f:25:b1:c0:
         3d:6c:48:c7:da:fe:29:9e:44:2c:b5:d6:ba:e3:69:e9:1c:da:
         2c:d1:13:85:05:14:9a:af:76:6b:1e:71:c1:f6:13:96:fd:8e:
         76:e3:05:f3:3c:f6:32:14:8a:65:d0:a0:8e:b4:42:2c:91:36:
         f4:8c:96:d3:3d:c7:79:22:6c:2c:b4:aa:97:ff:47:2f:50:35:
         f7:13:94:e9:ba:da:c6:d9:3b:46:03:7f:0e:d9:0c:aa:13:61:
         8b:32:e6:23:0c:03:cc:4b:a5:20:87:c6:da:60:e6:7e:23:cc:
         e1:14:f5:92:b4:af:7a:f3:1c:bd:3c:16:70:e4:f8:b8:92:c6:
         5f:d6:84:1b:58:e7:98:82:27:64:10:15:c0:2e:5f:cc:7f:f3:
         b0:99:7c:af:19:5c:d3:ae:5c:72:94:d1:0d:ce:ea:d3:e9:68:
         94:47:f6:33:fa:b6:30:47:39:be:cc:d5:b0:9c:a9:92:82:be:
         8c:5f:e3:10:28:9f:29:0e:ea:44:d7:16:32:fa:64:8a:6c:e0:
         dc:75:4e:1f:4e:3e:21:44:95:c5:07:35:12:65:95:02:f4:a7:
         22:73:89:25:33:02:0e:9f:ca:ef:93:8a:b0:d2:f3:d7:1e:49:
         a4:e0:1c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:48:19 2025 by rpki-client