Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
File:                     YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft (raw, json)
Hash identifier:          OWDn74haypPFuv3WzSj6IFkxA6gkvr0b2DMgEmVT/OM=
Subject key identifier:   90:B0:FA:E3:C8:EE:05:1E:5D:BB:99:CA:36:C9:71:6C:08:F3:25:15
Authority key identifier: 63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE
Certificate issuer:       /CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe
Certificate serial:       019512105EB9FB4F16EC0734D4F6EC03C5D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
Manifest number:          1457
Signing time:             Mon 17 Feb 2025 04:00:17 +0000
Manifest this update:     Mon 17 Feb 2025 04:00:17 +0000
Manifest next update:     Tue 18 Feb 2025 04:00:17 +0000
Files and hashes:         1: YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl (hash: p1Uos14tKF8+IYCggjv3rsrArhEQx+vqVsmjgvofiRw=)
                          2: i1y7TAu4eZuINLnbMHWhraWkV7Q.roa (hash: 5W2nC+zCGbvk80Gay8OtFwwtbb47Ru26+BBu/lW2iZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:10:5e:b9:fb:4f:16:ec:07:34:d4:f6:ec:03:c5:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe
        Validity
            Not Before: Feb 17 04:00:17 2025 GMT
            Not After : Feb 18 04:00:17 2025 GMT
        Subject: CN=90b0fae3c8ee051e5dbb99ca36c9716c08f32515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:77:8e:13:c4:fe:00:fb:b4:38:2b:0b:03:b8:
                    ad:d0:24:08:b2:7e:d5:38:b5:01:07:18:26:6c:46:
                    95:aa:59:f5:e1:81:d2:50:d8:30:e9:ad:7f:5c:cb:
                    55:34:6d:70:73:ce:71:0e:79:64:db:b8:da:c1:f8:
                    67:3c:8e:aa:27:47:96:4f:ad:a4:a5:42:92:41:72:
                    04:4f:10:4a:cb:dc:b5:1c:b3:36:42:c0:4b:2a:90:
                    b6:32:60:32:4b:72:1f:03:e5:e7:ab:f7:b5:f2:87:
                    9b:0e:f1:00:f3:0b:c1:79:51:27:55:b7:f5:5a:23:
                    15:dd:05:67:ed:c1:d4:90:da:be:08:6a:10:23:07:
                    ea:bf:77:25:c1:d4:a3:c4:92:ed:5a:d6:01:a6:11:
                    39:1e:97:0a:e6:94:45:6e:ad:a1:25:85:7c:1e:fa:
                    68:0e:e5:89:17:ad:76:f6:87:1d:db:7a:23:cc:d7:
                    30:24:bb:69:17:b8:13:c8:b1:cd:41:83:f3:eb:89:
                    30:46:2b:72:7a:af:81:e4:ac:48:fb:41:41:3a:5d:
                    71:e2:3c:5c:01:56:08:c6:0b:7a:c7:a2:43:a7:67:
                    9c:de:22:f0:5e:e0:b9:ce:55:ec:70:75:d3:bb:8e:
                    d9:00:fa:fa:8e:5c:c2:3a:a6:d2:86:04:04:92:d2:
                    45:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B0:FA:E3:C8:EE:05:1E:5D:BB:99:CA:36:C9:71:6C:08:F3:25:15
            X509v3 Authority Key Identifier:
                keyid:63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:6c:eb:ac:cd:95:9f:37:42:01:90:d1:28:5c:c2:8b:0b:7f:
         ed:98:c2:6c:ca:85:d6:bf:03:20:b8:b6:6a:f7:e8:67:b8:ef:
         27:c9:f1:d7:6e:74:57:46:24:a3:77:1d:f6:38:d3:b7:f5:c9:
         63:98:6f:6a:a4:9f:09:41:3d:18:2a:17:59:6f:45:58:a5:e6:
         11:89:83:04:ac:d0:d4:51:bb:ae:1c:cb:0b:2e:19:24:d8:2c:
         7a:a7:36:f3:e3:7f:b7:a9:a1:d9:ff:7c:ab:93:d3:42:b0:24:
         0e:d4:bc:3c:71:de:e9:74:64:b0:3a:f2:d0:a8:77:50:19:ad:
         a3:1e:80:29:27:d1:1c:c2:dc:bf:ba:4b:31:07:d4:bb:9f:a7:
         c5:ed:31:4b:f6:44:82:c2:f5:32:d4:18:f1:4d:74:1d:65:92:
         b9:0f:f1:86:b4:9b:2b:6f:7d:37:9d:a1:22:41:6b:c4:82:93:
         f9:1d:08:d1:e5:7b:9c:33:24:36:76:35:f2:be:1a:cb:43:ea:
         d6:8d:33:71:38:86:7d:89:fc:a8:1d:bf:76:33:0e:3a:7c:1c:
         b7:15:98:7b:6f:39:31:52:f9:e9:c5:bb:f2:ff:11:6d:59:a6:
         8c:38:fd:6d:db:96:0d:16:69:6e:4c:ef:92:97:7e:85:75:ff:
         a3:89:cc:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSEF65+08W7Ac01PbsA8XXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMTVkZDBiYTExZmRhZjc0ZDUzYjk1NmZjMWM4NDZhN2Uy
ZjYxZmUwHhcNMjUwMjE3MDQwMDE3WhcNMjUwMjE4MDQwMDE3WjAzMTEwLwYDVQQD
Eyg5MGIwZmFlM2M4ZWUwNTFlNWRiYjk5Y2EzNmM5NzE2YzA4ZjMyNTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0neOE8T+APu0OCsLA7it0CQIsn7V
OLUBBxgmbEaVqln14YHSUNgw6a1/XMtVNG1wc85xDnlk27jawfhnPI6qJ0eWT62k
pUKSQXIETxBKy9y1HLM2QsBLKpC2MmAyS3IfA+Xnq/e18oebDvEA8wvBeVEnVbf1
WiMV3QVn7cHUkNq+CGoQIwfqv3clwdSjxJLtWtYBphE5HpcK5pRFbq2hJYV8Hvpo
DuWJF6129ocd23ojzNcwJLtpF7gTyLHNQYPz64kwRityeq+B5KxI+0FBOl1x4jxc
AVYIxgt6x6JDp2ec3iLwXuC5zlXscHXTu47ZAPr6jlzCOqbShgQEktJFeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCw+uPI7gUeXbuZyjbJcWwI8yUVMB8GA1UdIwQY
MBaAFGMV3QuhH9r3TVO5VvwchGp+L2H+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXhYZEM2RWYydmROVTdsV19CeUVhbjR2WWY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kYWNiOTItZmY3MC00OWZlLWI0Yjgt
ODk4OWI0Y2FhMjA2LzEvWXhYZEM2RWYydmROVTdsV19CeUVhbjR2WWY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9kYWNiOTItZmY3MC00OWZlLWI0YjgtODk4OWI0Y2FhMjA2
LzEvWXhYZEM2RWYydmROVTdsV19CeUVhbjR2WWY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmzrrM2V
nzdCAZDRKFzCiwt/7ZjCbMqF1r8DILi2avfoZ7jvJ8nx1250V0Yko3cd9jjTt/XJ
Y5hvaqSfCUE9GCoXWW9FWKXmEYmDBKzQ1FG7rhzLCy4ZJNgseqc28+N/t6mh2f98
q5PTQrAkDtS8PHHe6XRksDry0Kh3UBmtox6AKSfRHMLcv7pLMQfUu5+nxe0xS/ZE
gsL1MtQY8U10HWWSuQ/xhrSbK299N52hIkFrxIKT+R0I0eV7nDMkNnY18r4ay0Pq
1o0zcTiGfYn8qB2/djMOOnwctxWYe285MVL56cW78v8RbVmmjDj9bduWDRZpbkzv
kpd+hXX/o4nMog==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:34 2025 by rpki-client