Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
File:                     gzeZ58jZKoXOlQjBvho_OAlQlZE.mft (raw, json)
Hash identifier:          r646IAgGwAwXAOzQJaol9Tnxi22s5u3fs3kbaqC+n4k=
Subject key identifier:   4E:2B:AE:1B:89:AA:07:C0:BC:75:81:62:20:9D:E1:34:F2:97:D8:4B
Authority key identifier: 83:37:99:E7:C8:D9:2A:85:CE:95:08:C1:BE:1A:3F:38:09:50:95:91
Certificate issuer:       /CN=833799e7c8d92a85ce9508c1be1a3f3809509591
Certificate serial:       01968F2726061C587C3FBED4A5F5106FC5A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
Manifest number:          0DE1
Signing time:             Fri 02 May 2025 04:00:29 +0000
Manifest this update:     Fri 02 May 2025 04:00:29 +0000
Manifest next update:     Sat 03 May 2025 04:00:29 +0000
Files and hashes:         1: gzeZ58jZKoXOlQjBvho_OAlQlZE.crl (hash: Ze1mo+4PsfAqi7pVF/2ABDj1pGIWkEkg+I7Ie57fZOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8f:27:26:06:1c:58:7c:3f:be:d4:a5:f5:10:6f:c5:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833799e7c8d92a85ce9508c1be1a3f3809509591
        Validity
            Not Before: May  2 04:00:29 2025 GMT
            Not After : May  3 04:00:29 2025 GMT
        Subject: CN=4e2bae1b89aa07c0bc758162209de134f297d84b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:42:51:cb:56:26:08:f6:20:81:61:99:30:92:
                    48:42:89:83:34:3a:49:75:18:11:83:d0:92:35:fa:
                    c8:4b:9e:b3:46:1d:a8:6c:d8:44:46:fb:fe:42:aa:
                    3a:71:73:4a:61:88:6b:bc:21:61:c6:21:8c:b4:6b:
                    b1:10:58:47:d0:ad:9d:d2:7c:15:33:3c:1a:1f:3b:
                    9b:ec:84:48:9c:a4:76:03:a4:e3:b8:e1:17:a7:c0:
                    54:0c:c5:ad:dd:b4:0d:62:1f:f1:3f:60:ef:7d:45:
                    dd:a5:02:71:31:04:1f:60:e1:57:a1:db:b7:62:43:
                    bc:c8:ca:70:76:38:4e:69:bb:9a:03:11:cf:d9:e1:
                    67:42:c8:c1:ba:c5:e1:b6:a9:d3:b0:87:f6:09:28:
                    8e:47:55:e6:3b:d9:d0:32:44:3c:b1:fd:e8:54:0e:
                    01:3e:04:db:0f:5f:7f:68:73:49:45:4f:37:1e:84:
                    e0:19:e8:3a:b4:4c:54:91:2c:67:24:b0:8b:72:ab:
                    e2:ae:94:34:d0:0f:e0:da:02:4f:d7:32:8c:b0:e0:
                    cc:d4:05:55:1b:27:60:ae:df:f1:d2:29:16:c1:a4:
                    8e:1c:f6:fe:d2:b2:86:79:ef:a6:75:b0:f3:1e:cd:
                    f1:26:0d:3a:be:1e:0c:12:fa:6b:bd:fd:3a:11:cb:
                    bd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2B:AE:1B:89:AA:07:C0:BC:75:81:62:20:9D:E1:34:F2:97:D8:4B
            X509v3 Authority Key Identifier:
                keyid:83:37:99:E7:C8:D9:2A:85:CE:95:08:C1:BE:1A:3F:38:09:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:53:4d:70:39:b8:93:ae:f6:35:89:b4:18:ef:7b:f0:e9:37:
         81:b3:39:d2:b3:62:3a:4a:64:ad:ea:af:2a:a1:bb:53:32:11:
         24:02:55:37:07:3c:bf:1a:bb:64:d5:29:5f:1f:27:8d:9d:6e:
         18:a1:5e:32:52:90:5e:e5:f6:bb:ce:59:1a:14:2a:86:72:88:
         29:77:bb:ee:4b:e7:9a:1f:80:a1:72:aa:61:a6:d8:b5:e8:66:
         9c:5a:2c:f5:c7:2e:a6:cf:6e:95:6d:2a:8b:8c:9a:27:1d:c3:
         2c:a2:ad:31:37:07:c4:32:03:c6:ea:03:af:60:0d:38:98:8c:
         8e:d8:3f:5d:61:64:7b:df:30:ed:26:ae:05:01:34:84:f6:4c:
         66:0c:f6:2c:23:7f:cb:cc:49:24:30:31:b5:3a:3d:3c:14:a8:
         cd:4d:c2:4c:22:de:31:5a:6d:1d:6f:a6:ab:74:df:13:ed:46:
         ef:01:41:b2:80:e5:ec:cb:04:14:ce:ff:2e:25:b7:ca:58:11:
         44:1e:d6:a3:75:a7:96:be:4c:6e:3b:a3:32:c5:f2:22:46:a1:
         63:b2:dc:02:59:f8:63:e2:d7:73:fe:d7:89:eb:5e:99:46:64:
         37:39:2a:b8:02:8d:23:71:20:de:d7:61:61:93:81:e7:25:66:
         2b:58:7d:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaPJyYGHFh8P77UpfUQb8WkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMzc5OWU3YzhkOTJhODVjZTk1MDhjMWJlMWEzZjM4MDk1
MDk1OTEwHhcNMjUwNTAyMDQwMDI5WhcNMjUwNTAzMDQwMDI5WjAzMTEwLwYDVQQD
Eyg0ZTJiYWUxYjg5YWEwN2MwYmM3NTgxNjIyMDlkZTEzNGYyOTdkODRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkJRy1YmCPYggWGZMJJIQomDNDpJ
dRgRg9CSNfrIS56zRh2obNhERvv+Qqo6cXNKYYhrvCFhxiGMtGuxEFhH0K2d0nwV
MzwaHzub7IRInKR2A6TjuOEXp8BUDMWt3bQNYh/xP2DvfUXdpQJxMQQfYOFXodu3
YkO8yMpwdjhOabuaAxHP2eFnQsjBusXhtqnTsIf2CSiOR1XmO9nQMkQ8sf3oVA4B
PgTbD19/aHNJRU83HoTgGeg6tExUkSxnJLCLcqvirpQ00A/g2gJP1zKMsODM1AVV
Gydgrt/x0ikWwaSOHPb+0rKGee+mdbDzHs3xJg06vh4MEvprvf06Ecu9YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4rrhuJqgfAvHWBYiCd4TTyl9hLMB8GA1UdIwQY
MBaAFIM3mefI2SqFzpUIwb4aPzgJUJWRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3plWjU4alpLb1hPbFFqQnZob19PQWxRbFpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC83MTIxZjEtNmM2Mi00NzgwLWIxZTIt
M2ZhNDY3NmEwZGNlLzEvZ3plWjU4alpLb1hPbFFqQnZob19PQWxRbFpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC83MTIxZjEtNmM2Mi00NzgwLWIxZTItM2ZhNDY3NmEwZGNl
LzEvZ3plWjU4alpLb1hPbFFqQnZob19PQWxRbFpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT1NNcDm4
k672NYm0GO978Ok3gbM50rNiOkpkreqvKqG7UzIRJAJVNwc8vxq7ZNUpXx8njZ1u
GKFeMlKQXuX2u85ZGhQqhnKIKXe77kvnmh+AoXKqYabYtehmnFos9ccups9ulW0q
i4yaJx3DLKKtMTcHxDIDxuoDr2ANOJiMjtg/XWFke98w7SauBQE0hPZMZgz2LCN/
y8xJJDAxtTo9PBSozU3CTCLeMVptHW+mq3TfE+1G7wFBsoDl7MsEFM7/LiW3ylgR
RB7Wo3Wnlr5MbjujMsXyIkahY7LcAln4Y+LXc/7XietemUZkNzkquAKNI3Eg3tdh
YZOB5yVmK1h9Ow==
-----END CERTIFICATE-----
Generated at Fri May 2 10:17:15 2025 by rpki-client