Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
File:                     ZIPWjECz28KafUdyeRpTjD7uIDI.mft (raw, json)
Hash identifier:          5JCO89rA3V+lpr8PjapitHWXSqiW3RJfYs07INXPseU=
Subject key identifier:   87:98:C2:99:6B:5A:63:6E:0A:7E:30:73:40:15:3B:74:98:3D:4A:50
Authority key identifier: 64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32
Certificate issuer:       /CN=6483d68c40b3dbc29a7d4772791a538c3eee2032
Certificate serial:       0195127E2DC61565CC15F9FAA7FBE4BEE0ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
Manifest number:          0FA6
Signing time:             Mon 17 Feb 2025 06:00:13 +0000
Manifest this update:     Mon 17 Feb 2025 06:00:13 +0000
Manifest next update:     Tue 18 Feb 2025 06:00:13 +0000
Files and hashes:         1: ZIPWjECz28KafUdyeRpTjD7uIDI.crl (hash: z1IqEQyQwBQ+kSs5hq+Z5tecg54QzVqWpo2ONXsNADM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:7e:2d:c6:15:65:cc:15:f9:fa:a7:fb:e4:be:e0:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6483d68c40b3dbc29a7d4772791a538c3eee2032
        Validity
            Not Before: Feb 17 06:00:13 2025 GMT
            Not After : Feb 18 06:00:13 2025 GMT
        Subject: CN=8798c2996b5a636e0a7e307340153b74983d4a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:78:00:81:4f:38:64:fb:b4:5a:0c:36:7a:c2:
                    aa:30:15:ed:18:21:5c:2a:22:39:0b:5b:9a:34:26:
                    e9:0a:ce:f7:39:45:18:08:a7:95:78:f8:2b:66:a2:
                    d7:04:18:08:cd:30:89:ab:2e:7d:55:00:9a:eb:c6:
                    c7:71:2f:0a:fb:e8:20:67:9f:09:00:72:00:75:fb:
                    6e:b6:09:6c:dd:c3:be:70:93:60:e1:7d:6b:28:09:
                    67:34:6f:57:23:3e:6f:e1:0e:ec:b7:91:2a:36:9a:
                    4f:a8:d8:db:9f:3e:5c:f1:5e:d2:e0:7c:0c:6e:a2:
                    47:89:2b:6b:9c:ea:ed:fc:2b:5a:0e:42:24:16:5c:
                    dd:5d:46:62:8c:2d:6d:8e:b0:e0:e0:d0:a1:49:ef:
                    43:ed:bf:30:fb:64:32:92:e7:fb:c1:72:e4:c3:82:
                    e8:dd:47:db:27:7b:e1:aa:c2:2c:f5:92:04:7f:b8:
                    96:4d:8b:02:54:f2:91:87:4c:99:7a:50:3f:a4:b4:
                    01:98:1b:e0:dc:d0:c2:1a:e0:f2:eb:a1:87:09:82:
                    bf:bd:62:2f:45:6d:68:87:6e:34:cf:ca:67:e6:c3:
                    e7:02:87:e4:b3:87:0f:e3:3e:96:4d:0e:78:ea:37:
                    77:f6:46:5b:f3:1c:45:37:0a:a9:26:3c:90:78:ee:
                    b2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:98:C2:99:6B:5A:63:6E:0A:7E:30:73:40:15:3B:74:98:3D:4A:50
            X509v3 Authority Key Identifier:
                keyid:64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f1:25:73:6b:80:73:ae:f6:f0:44:fc:d2:4e:8d:74:e0:0f:
         2b:28:d0:ae:50:e8:61:6e:e0:72:3d:57:63:31:55:ff:43:ef:
         66:1d:ef:d9:4b:0c:7d:f6:0c:ff:70:1c:30:75:d8:eb:b3:6c:
         bc:33:68:78:35:81:36:f9:bb:bc:6a:f4:d0:f0:d9:1e:1d:4b:
         d1:4f:b1:26:08:88:48:ce:6f:78:86:9f:a7:6f:85:38:a5:a7:
         90:46:ab:70:e2:26:36:41:36:31:90:e3:5f:f8:9b:44:33:c8:
         96:e2:53:8c:c5:f7:9e:a0:e3:6d:0e:67:fe:90:98:69:2b:6d:
         f3:b6:58:89:37:0c:30:92:1f:95:c7:57:47:43:5b:2d:27:68:
         c8:c6:ea:82:58:3c:d5:9e:00:39:4c:00:a7:0d:99:ad:4d:9a:
         5e:7a:e1:05:97:e1:2d:3a:b2:8f:f4:72:a0:9e:28:38:05:51:
         c8:d9:1c:f9:33:6e:fc:c1:89:ef:61:c4:fe:f9:44:1c:c5:b6:
         80:bc:da:75:70:64:a2:ed:6c:b1:d8:7d:e6:9c:3a:0c:31:dc:
         cc:59:c8:da:65:d3:98:80:fe:fc:ab:b9:65:90:7a:69:33:7b:
         45:0a:7d:bd:ad:74:4e:d2:a2:58:32:28:90:14:12:7e:9a:7c:
         50:2f:6f:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSfi3GFWXMFfn6p/vkvuDtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ODNkNjhjNDBiM2RiYzI5YTdkNDc3Mjc5MWE1MzhjM2Vl
ZTIwMzIwHhcNMjUwMjE3MDYwMDEzWhcNMjUwMjE4MDYwMDEzWjAzMTEwLwYDVQQD
Eyg4Nzk4YzI5OTZiNWE2MzZlMGE3ZTMwNzM0MDE1M2I3NDk4M2Q0YTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXgAgU84ZPu0Wgw2esKqMBXtGCFc
KiI5C1uaNCbpCs73OUUYCKeVePgrZqLXBBgIzTCJqy59VQCa68bHcS8K++ggZ58J
AHIAdftutgls3cO+cJNg4X1rKAlnNG9XIz5v4Q7st5EqNppPqNjbnz5c8V7S4HwM
bqJHiStrnOrt/CtaDkIkFlzdXUZijC1tjrDg4NChSe9D7b8w+2Qykuf7wXLkw4Lo
3UfbJ3vhqsIs9ZIEf7iWTYsCVPKRh0yZelA/pLQBmBvg3NDCGuDy66GHCYK/vWIv
RW1oh240z8pn5sPnAofks4cP4z6WTQ546jd39kZb8xxFNwqpJjyQeO6yoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeYwplrWmNuCn4wc0AVO3SYPUpQMB8GA1UdIwQY
MBaAFGSD1oxAs9vCmn1HcnkaU4w+7iAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWklQV2pFQ3oyOEthZlVkeWVScFRqRDd1SURJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wNDUzNWEtNGMwOC00ZGM5LTk3YjEt
ZGQ0YWZmMzYwYTExLzEvWklQV2pFQ3oyOEthZlVkeWVScFRqRDd1SURJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8wNDUzNWEtNGMwOC00ZGM5LTk3YjEtZGQ0YWZmMzYwYTEx
LzEvWklQV2pFQ3oyOEthZlVkeWVScFRqRDd1SURJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIvElc2uA
c6728ET80k6NdOAPKyjQrlDoYW7gcj1XYzFV/0PvZh3v2UsMffYM/3AcMHXY67Ns
vDNoeDWBNvm7vGr00PDZHh1L0U+xJgiISM5veIafp2+FOKWnkEarcOImNkE2MZDj
X/ibRDPIluJTjMX3nqDjbQ5n/pCYaStt87ZYiTcMMJIflcdXR0NbLSdoyMbqglg8
1Z4AOUwApw2ZrU2aXnrhBZfhLTqyj/RyoJ4oOAVRyNkc+TNu/MGJ72HE/vlEHMW2
gLzadXBkou1ssdh95pw6DDHczFnI2mXTmID+/Ku5ZZB6aTN7RQp9va10TtKiWDIo
kBQSfpp8UC9vHA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:33 2025 by rpki-client