Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
File:                     vCYx1KOVOSlNH55XbmmWIK2Yo40.mft (raw, json)
Hash identifier:          YDyQOVQgIsqMoeQbJYlU3g+c+pTZxsStLINHuOQtzRw=
Subject key identifier:   BC:E0:31:CC:3D:28:04:32:FB:89:B0:08:FC:55:79:28:53:71:11:CB
Authority key identifier: BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D
Certificate issuer:       /CN=bc2631d4a39539294d1f9e576e699620ad98a38d
Certificate serial:       0194C38824B45CAF94BB8FBC3E6E9050B56B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
Manifest number:          03AD
Signing time:             Sat 01 Feb 2025 22:01:06 +0000
Manifest this update:     Sat 01 Feb 2025 22:01:06 +0000
Manifest next update:     Sun 02 Feb 2025 22:01:06 +0000
Files and hashes:         1: vCYx1KOVOSlNH55XbmmWIK2Yo40.crl (hash: p8q9NVGUaJrh2lSSBdsPIvbZoIZ1Up5juHJMbxPIYMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 22:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:88:24:b4:5c:af:94:bb:8f:bc:3e:6e:90:50:b5:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc2631d4a39539294d1f9e576e699620ad98a38d
        Validity
            Not Before: Feb  1 22:01:06 2025 GMT
            Not After : Feb  2 22:01:06 2025 GMT
        Subject: CN=bce031cc3d280432fb89b008fc557928537111cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ee:63:7b:83:f2:ce:58:f8:4a:61:8b:05:14:
                    62:0e:cc:5a:1b:84:19:57:34:e6:4f:0c:6e:16:4a:
                    6a:1f:14:07:7b:23:95:c2:92:cc:5a:34:43:d3:b5:
                    7d:9c:a6:04:20:b3:83:43:6e:fd:cd:12:1d:a1:d8:
                    87:02:a9:76:91:d1:07:2d:f6:1a:0a:c3:33:30:37:
                    a1:32:1f:a1:bd:bb:8e:17:53:ce:d7:88:17:06:29:
                    31:3a:b8:a9:cf:2e:4c:3a:3a:0d:cd:02:5f:24:be:
                    ff:60:0c:38:96:11:a8:68:db:46:24:76:ae:52:72:
                    f7:38:05:4f:3d:16:ee:54:0a:e3:0c:01:f0:8b:51:
                    ff:83:bb:84:10:89:75:04:28:17:d4:b3:97:ba:8f:
                    84:a2:70:b7:82:72:94:75:46:29:ea:45:53:10:99:
                    fd:0b:8f:6f:f9:7b:e5:a0:ed:4f:5f:fc:53:f4:53:
                    a4:74:0e:e7:b3:a2:ae:cd:23:e0:8b:c1:43:8c:dc:
                    62:af:fa:74:db:a0:ce:9a:df:7d:b0:16:3b:4b:8a:
                    ec:98:8d:d8:f8:18:f1:e3:90:7b:84:78:4f:87:2d:
                    6b:56:69:76:6e:d0:73:e7:a7:0a:6b:7b:fc:e2:b7:
                    9d:fb:8f:33:0c:ad:f6:d1:af:af:18:e0:8c:06:aa:
                    2c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E0:31:CC:3D:28:04:32:FB:89:B0:08:FC:55:79:28:53:71:11:CB
            X509v3 Authority Key Identifier:
                keyid:BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:25:30:09:39:14:cd:da:73:18:52:6c:de:4b:5a:22:f6:d5:
         9b:9e:bf:a8:19:2f:0a:eb:2e:98:80:b5:10:53:09:de:24:d6:
         db:b4:6a:1a:60:be:ab:ec:b7:71:47:69:32:15:95:ae:a9:99:
         64:6b:02:71:a4:2e:b4:17:c2:38:01:b1:8b:61:0d:5e:e8:13:
         b2:a1:59:a9:24:e6:1b:ce:04:63:da:f1:e1:d2:96:dc:32:78:
         42:65:22:83:55:3e:30:2a:22:8c:4a:3b:83:a1:aa:a8:95:f3:
         0e:b8:58:64:90:73:f5:44:96:79:5e:36:d2:70:70:50:c2:9b:
         f8:a8:9e:e6:5a:b6:e7:aa:68:5d:0b:7c:26:9f:4c:0c:71:cf:
         92:d1:75:7b:e8:5c:4b:c1:e8:c0:18:f2:c2:df:ae:9a:e3:3c:
         b1:40:88:04:15:3d:61:d9:4d:de:f5:2d:08:e7:64:2d:13:e1:
         0e:33:bc:92:f8:68:91:47:27:61:39:14:4d:0a:f1:5f:85:88:
         29:4a:65:24:7d:fc:d0:de:f8:07:c9:20:7b:52:3a:76:07:97:
         b6:e2:a6:27:d2:9e:8c:40:c1:89:3a:15:da:bb:4b:df:eb:ce:
         5e:83:df:db:58:d9:25:d0:ef:73:cf:c2:38:b7:c3:01:d2:84:
         54:24:ea:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDiCS0XK+Uu4+8Pm6QULVrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMjYzMWQ0YTM5NTM5Mjk0ZDFmOWU1NzZlNjk5NjIwYWQ5
OGEzOGQwHhcNMjUwMjAxMjIwMTA2WhcNMjUwMjAyMjIwMTA2WjAzMTEwLwYDVQQD
EyhiY2UwMzFjYzNkMjgwNDMyZmI4OWIwMDhmYzU1NzkyODUzNzExMWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5e5je4Pyzlj4SmGLBRRiDsxaG4QZ
VzTmTwxuFkpqHxQHeyOVwpLMWjRD07V9nKYEILODQ279zRIdodiHAql2kdEHLfYa
CsMzMDehMh+hvbuOF1PO14gXBikxOripzy5MOjoNzQJfJL7/YAw4lhGoaNtGJHau
UnL3OAVPPRbuVArjDAHwi1H/g7uEEIl1BCgX1LOXuo+EonC3gnKUdUYp6kVTEJn9
C49v+XvloO1PX/xT9FOkdA7ns6KuzSPgi8FDjNxir/p026DOmt99sBY7S4rsmI3Y
+Bjx45B7hHhPhy1rVml2btBz56cKa3v84red+48zDK320a+vGOCMBqosmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzgMcw9KAQy+4mwCPxVeShTcRHLMB8GA1UdIwQY
MBaAFLwmMdSjlTkpTR+eV25pliCtmKONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jYTRjNWMtZTRkNS00Yzc4LWE4NDAt
MmY2ZDQ2ZDcyOTk2LzEvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9jYTRjNWMtZTRkNS00Yzc4LWE4NDAtMmY2ZDQ2ZDcyOTk2
LzEvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAyUwCTkU
zdpzGFJs3ktaIvbVm56/qBkvCusumIC1EFMJ3iTW27RqGmC+q+y3cUdpMhWVrqmZ
ZGsCcaQutBfCOAGxi2ENXugTsqFZqSTmG84EY9rx4dKW3DJ4QmUig1U+MCoijEo7
g6GqqJXzDrhYZJBz9USWeV420nBwUMKb+Kie5lq256poXQt8Jp9MDHHPktF1e+hc
S8HowBjywt+umuM8sUCIBBU9YdlN3vUtCOdkLRPhDjO8kvhokUcnYTkUTQrxX4WI
KUplJH380N74B8kge1I6dgeXtuKmJ9KejEDBiToV2rtL3+vOXoPf21jZJdDvc8/C
OLfDAdKEVCTqMg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:50:37 2025 by rpki-client