Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
File:                     0o9VSu1_jnFG6ctj9eMaXbHhupM.mft (raw, json)
Hash identifier:          Zk34ApTiT/UglAVdMOp4TvH5sp2wvN7nGreGNVszxm8=
Subject key identifier:   06:14:DC:4C:9A:7D:58:FD:AD:13:51:F4:10:7C:BE:01:6B:D9:01:92
Authority key identifier: D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93
Certificate issuer:       /CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
Certificate serial:       01968624225FC596A10B6BE1B8F73DFEED7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
Manifest number:          1511
Signing time:             Wed 30 Apr 2025 10:00:37 +0000
Manifest this update:     Wed 30 Apr 2025 10:00:37 +0000
Manifest next update:     Thu 01 May 2025 10:00:37 +0000
Files and hashes:         1: 0o9VSu1_jnFG6ctj9eMaXbHhupM.crl (hash: uAhA/1ws5mMKFL41NxNS6qTlzwatIvdEuPMkSFexECs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:86:24:22:5f:c5:96:a1:0b:6b:e1:b8:f7:3d:fe:ed:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
        Validity
            Not Before: Apr 30 10:00:37 2025 GMT
            Not After : May  1 10:00:37 2025 GMT
        Subject: CN=0614dc4c9a7d58fdad1351f4107cbe016bd90192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:18:d8:d7:9b:cd:43:45:cb:5c:94:0c:74:75:
                    2a:23:f9:c1:05:e2:dc:bc:1e:3e:5e:2d:a2:d2:14:
                    07:4c:b7:f4:83:e8:5f:7c:ea:09:b7:ee:70:0d:28:
                    5a:90:e6:7e:d0:99:76:7e:c1:7e:a2:c6:df:c5:2b:
                    81:75:bb:3c:6b:50:83:02:88:69:f4:ae:75:ec:87:
                    09:56:82:39:e9:36:77:eb:32:9f:30:0d:ee:51:7f:
                    fb:5d:4d:75:e6:08:17:2e:e3:4e:cd:c0:80:c5:3f:
                    a9:3c:39:97:41:6f:8d:aa:99:6e:d6:31:3e:68:34:
                    77:6f:bc:5c:f2:b0:4b:bc:1e:04:8d:b8:e2:a4:d2:
                    9d:01:d4:81:57:b7:81:96:67:0f:09:6e:23:ae:f8:
                    a7:4f:a4:67:c1:dd:2e:0d:78:69:2b:67:11:ab:bf:
                    5b:b1:80:5b:7e:ae:77:79:59:ad:65:08:42:59:5c:
                    ea:c0:96:fc:d4:c2:c2:47:08:f3:b0:35:6b:31:b9:
                    d9:99:26:ac:aa:50:2b:0a:5e:99:41:04:56:da:6a:
                    f5:07:69:27:63:37:f5:77:01:db:f2:65:2f:13:3e:
                    87:6a:52:1d:6a:0e:1b:b5:84:a6:e1:af:d5:3e:fa:
                    ff:d7:40:c4:0c:0c:04:42:e8:3e:37:e3:6f:4d:1a:
                    b3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:14:DC:4C:9A:7D:58:FD:AD:13:51:F4:10:7C:BE:01:6B:D9:01:92
            X509v3 Authority Key Identifier:
                keyid:D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:0d:30:8f:ad:24:f7:b1:44:d0:ec:f1:e0:63:04:8e:90:8f:
         9d:89:04:29:d0:39:87:66:b4:e2:8e:0b:22:5f:50:44:e1:22:
         dd:36:ec:5a:58:96:ae:59:86:cd:ef:01:13:00:dc:0e:9d:e6:
         b1:1c:a0:74:28:d4:1f:92:0c:80:78:b9:80:87:1e:c6:8f:4e:
         63:05:00:fc:02:92:44:bd:95:2d:c3:c9:08:27:0c:47:3e:71:
         6e:3f:1d:27:01:44:42:3f:e7:7d:b1:01:cf:88:e5:15:07:d1:
         17:93:44:5e:32:9d:16:b0:93:00:67:5c:3f:21:77:c2:0f:b3:
         da:6c:3a:b4:46:7b:01:de:15:f0:36:5c:45:34:8c:49:e5:ef:
         05:e3:57:c2:1b:7d:2d:3b:c3:52:0b:a0:8f:74:15:62:0f:f2:
         ee:e0:b8:0e:86:97:60:fc:12:2d:a8:d8:9f:ea:1e:65:85:6a:
         0e:78:30:5e:3b:7c:38:e8:4c:10:9e:80:05:86:fe:68:e4:48:
         48:79:6e:46:c0:c3:d5:8f:e9:19:88:d8:22:a0:eb:a5:27:f8:
         c1:9e:6d:a4:1d:ad:0e:d2:a9:07:37:85:ce:bc:a9:77:13:4b:
         8a:28:c3:58:d3:10:0a:f6:09:2f:6e:9f:5f:ef:55:b9:b5:45:
         d8:3a:cc:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaGJCJfxZahC2vhuPc9/u19MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyOGY1NTRhZWQ3ZjhlNzE0NmU5Y2I2M2Y1ZTMxYTVkYjFl
MWJhOTMwHhcNMjUwNDMwMTAwMDM3WhcNMjUwNTAxMTAwMDM3WjAzMTEwLwYDVQQD
EygwNjE0ZGM0YzlhN2Q1OGZkYWQxMzUxZjQxMDdjYmUwMTZiZDkwMTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBjY15vNQ0XLXJQMdHUqI/nBBeLc
vB4+Xi2i0hQHTLf0g+hffOoJt+5wDShakOZ+0Jl2fsF+osbfxSuBdbs8a1CDAohp
9K517IcJVoI56TZ36zKfMA3uUX/7XU115ggXLuNOzcCAxT+pPDmXQW+Nqplu1jE+
aDR3b7xc8rBLvB4EjbjipNKdAdSBV7eBlmcPCW4jrvinT6Rnwd0uDXhpK2cRq79b
sYBbfq53eVmtZQhCWVzqwJb81MLCRwjzsDVrMbnZmSasqlArCl6ZQQRW2mr1B2kn
Yzf1dwHb8mUvEz6HalIdag4btYSm4a/VPvr/10DEDAwEQug+N+NvTRqzJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYU3EyafVj9rRNR9BB8vgFr2QGSMB8GA1UdIwQY
MBaAFNKPVUrtf45xRunLY/XjGl2x4bqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG85VlN1MV9qbkZHNmN0ajllTWFYYkhodXBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZjZiNGYtNzU5MC00ZDA1LTg1M2Mt
MTA2ZWQxNTkwMTI5LzEvMG85VlN1MV9qbkZHNmN0ajllTWFYYkhodXBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8zZjZiNGYtNzU5MC00ZDA1LTg1M2MtMTA2ZWQxNTkwMTI5
LzEvMG85VlN1MV9qbkZHNmN0ajllTWFYYkhodXBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAew0wj60k
97FE0Ozx4GMEjpCPnYkEKdA5h2a04o4LIl9QROEi3TbsWliWrlmGze8BEwDcDp3m
sRygdCjUH5IMgHi5gIcexo9OYwUA/AKSRL2VLcPJCCcMRz5xbj8dJwFEQj/nfbEB
z4jlFQfRF5NEXjKdFrCTAGdcPyF3wg+z2mw6tEZ7Ad4V8DZcRTSMSeXvBeNXwht9
LTvDUgugj3QVYg/y7uC4DoaXYPwSLajYn+oeZYVqDngwXjt8OOhMEJ6ABYb+aORI
SHluRsDD1Y/pGYjYIqDrpSf4wZ5tpB2tDtKpBzeFzrypdxNLiijDWNMQCvYJL26f
X+9VubVF2DrMYg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 12:25:03 2025 by rpki-client