Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft
File:                     VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft (raw, json)
Hash identifier:          q7tmhWUqgjTJIgiQ63nlCz6xV/8ReqDI1Lv0fu9RPAY=
Subject key identifier:   F6:77:F9:FD:4C:63:20:4C:ED:D5:33:69:F3:8F:A6:A8:0A:FD:2A:08
Authority key identifier: 55:E8:E8:5A:95:B6:F8:72:30:3C:F6:EF:F9:6B:04:69:9F:2B:5F:65
Certificate issuer:       /CN=55e8e85a95b6f872303cf6eff96b04699f2b5f65
Certificate serial:       01968DDDFDA0E6B17749F0E36EC0E8B34694
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VejoWpW2-HIwPPbv-WsEaZ8rX2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft
Manifest number:          04B5
Signing time:             Thu 01 May 2025 22:00:57 +0000
Manifest this update:     Thu 01 May 2025 22:00:57 +0000
Manifest next update:     Fri 02 May 2025 22:00:57 +0000
Files and hashes:         1: VejoWpW2-HIwPPbv-WsEaZ8rX2U.crl (hash: mmuilJlkg2JcwW0k+RPvM6Ki1XG1iYF8iBZxhHtUiKc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VejoWpW2-HIwPPbv-WsEaZ8rX2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 22:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8d:dd:fd:a0:e6:b1:77:49:f0:e3:6e:c0:e8:b3:46:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e8e85a95b6f872303cf6eff96b04699f2b5f65
        Validity
            Not Before: May  1 22:00:57 2025 GMT
            Not After : May  2 22:00:57 2025 GMT
        Subject: CN=f677f9fd4c63204cedd53369f38fa6a80afd2a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e1:0e:89:82:ec:60:38:a0:2b:87:ea:44:f7:
                    c7:95:01:03:8a:47:9f:42:ee:4d:79:75:e9:76:67:
                    27:d4:c8:7b:e8:3d:31:d5:23:59:38:ad:90:ea:2d:
                    fd:08:1d:78:35:0f:7b:1b:a0:5f:c9:f5:22:cc:91:
                    c1:b3:30:3d:52:90:08:c9:f5:09:79:8d:1b:d7:35:
                    a1:e1:a7:7c:1a:01:62:e0:a4:77:d1:67:e9:00:10:
                    f5:cf:5f:5d:7e:b6:b8:0d:27:75:67:34:95:47:46:
                    99:65:22:f6:df:b8:d8:88:6a:d4:ad:cd:43:74:8a:
                    2f:f6:8b:77:80:8c:72:5e:3f:28:da:64:02:bd:3c:
                    a6:47:22:8a:d2:71:2d:d4:69:81:76:0a:bc:a7:81:
                    26:26:26:f9:53:33:b2:24:70:d2:ec:9f:0d:34:6f:
                    17:3c:d5:12:01:81:e0:a1:5c:0f:95:28:b7:eb:3d:
                    b7:27:c3:18:11:46:ec:c4:57:9b:31:a8:90:f9:39:
                    41:36:5a:a5:65:ef:2a:25:09:c4:56:96:a6:9f:05:
                    5d:16:7d:da:c6:c3:b3:54:48:92:1d:8f:93:de:61:
                    de:36:12:4b:03:98:ed:6a:1d:b0:7e:0a:6e:96:1b:
                    66:d4:6b:40:d5:88:45:b6:3e:33:5e:46:b2:4a:f2:
                    d7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:77:F9:FD:4C:63:20:4C:ED:D5:33:69:F3:8F:A6:A8:0A:FD:2A:08
            X509v3 Authority Key Identifier:
                keyid:55:E8:E8:5A:95:B6:F8:72:30:3C:F6:EF:F9:6B:04:69:9F:2B:5F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VejoWpW2-HIwPPbv-WsEaZ8rX2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:a1:81:17:9f:01:d7:45:3d:31:a6:3e:15:b0:d2:69:ab:c4:
         a8:98:30:8c:bb:c2:aa:7a:bf:67:36:15:a4:b7:7b:a8:d2:89:
         b4:ae:c1:9c:83:92:e2:84:62:a5:b4:da:9d:d2:48:1e:ef:1e:
         35:c0:ec:fc:e4:ff:f1:90:e4:d4:7f:5a:fd:6c:29:30:7b:f1:
         1f:eb:f0:2b:82:13:1f:02:99:8a:84:82:01:13:f4:9b:8b:7f:
         83:20:e0:df:b1:e2:a2:60:92:9d:6e:d4:3d:04:a5:ce:f8:17:
         1d:0a:d5:10:0a:20:18:a2:5e:56:95:84:ef:1c:e0:1f:bd:42:
         ea:0d:a2:19:b5:f9:18:9f:7d:76:73:aa:2d:6a:60:c2:9b:8a:
         79:40:11:9e:bb:cd:38:f7:dc:f9:86:4e:5a:f2:cb:a3:17:d5:
         70:bd:9c:64:4f:39:dd:dc:2a:d7:61:07:a3:01:8e:d3:9c:f4:
         6e:02:fe:0b:a0:60:f9:98:a0:fc:91:74:c9:f6:2a:fb:48:df:
         43:44:18:94:31:55:11:d7:3d:10:f1:c4:09:96:49:76:25:8c:
         e8:33:2c:a2:fb:21:83:6c:13:55:9c:76:7b:a9:74:ec:2c:f7:
         bc:ac:9d:ec:9a:00:5f:ec:02:03:88:71:30:11:3b:ee:cd:75:
         fe:d3:02:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaN3f2g5rF3SfDjbsDos0aUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZThlODVhOTViNmY4NzIzMDNjZjZlZmY5NmIwNDY5OWYy
YjVmNjUwHhcNMjUwNTAxMjIwMDU3WhcNMjUwNTAyMjIwMDU3WjAzMTEwLwYDVQQD
EyhmNjc3ZjlmZDRjNjMyMDRjZWRkNTMzNjlmMzhmYTZhODBhZmQyYTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuEOiYLsYDigK4fqRPfHlQEDikef
Qu5NeXXpdmcn1Mh76D0x1SNZOK2Q6i39CB14NQ97G6BfyfUizJHBszA9UpAIyfUJ
eY0b1zWh4ad8GgFi4KR30WfpABD1z19dfra4DSd1ZzSVR0aZZSL237jYiGrUrc1D
dIov9ot3gIxyXj8o2mQCvTymRyKK0nEt1GmBdgq8p4EmJib5UzOyJHDS7J8NNG8X
PNUSAYHgoVwPlSi36z23J8MYEUbsxFebMaiQ+TlBNlqlZe8qJQnEVpamnwVdFn3a
xsOzVEiSHY+T3mHeNhJLA5jtah2wfgpulhtm1GtA1YhFtj4zXkaySvLXeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZ3+f1MYyBM7dUzafOPpqgK/SoIMB8GA1UdIwQY
MBaAFFXo6FqVtvhyMDz27/lrBGmfK19lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmVqb1dwVzItSEl3UFBidi1Xc0VhWjhyWDJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mYzFhMWYtM2Y4ZS00MTI0LWJiYWYt
YWUyNjVkZDExM2FkLzEvVmVqb1dwVzItSEl3UFBidi1Xc0VhWjhyWDJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9mYzFhMWYtM2Y4ZS00MTI0LWJiYWYtYWUyNjVkZDExM2Fk
LzEvVmVqb1dwVzItSEl3UFBidi1Xc0VhWjhyWDJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcqGBF58B
10U9MaY+FbDSaavEqJgwjLvCqnq/ZzYVpLd7qNKJtK7BnIOS4oRipbTandJIHu8e
NcDs/OT/8ZDk1H9a/WwpMHvxH+vwK4ITHwKZioSCARP0m4t/gyDg37HiomCSnW7U
PQSlzvgXHQrVEAogGKJeVpWE7xzgH71C6g2iGbX5GJ99dnOqLWpgwpuKeUARnrvN
OPfc+YZOWvLLoxfVcL2cZE853dwq12EHowGO05z0bgL+C6Bg+Zig/JF0yfYq+0jf
Q0QYlDFVEdc9EPHECZZJdiWM6DMsovshg2wTVZx2e6l07Cz3vKyd7JoAX+wCA4hx
MBE77s11/tMCBw==
-----END CERTIFICATE-----
Generated at Fri May 2 08:03:51 2025 by rpki-client