Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
File:                     tPtrTEeRZokREVxp4mlk89XsovQ.mft (raw, json)
Hash identifier:          +WQ2l35WmejmfGzTUKL1cpaH+QOW+7DwsQqG04nXFlo=
Subject key identifier:   E8:EE:0F:97:B3:EC:98:24:55:A7:44:C1:B9:4D:14:2A:21:8B:97:9A
Authority key identifier: B4:FB:6B:4C:47:91:66:89:11:11:5C:69:E2:69:64:F3:D5:EC:A2:F4
Certificate issuer:       /CN=b4fb6b4c4791668911115c69e26964f3d5eca2f4
Certificate serial:       0194BB5FEA1DA569FAF2F0B48687F742044B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
Manifest number:          0184
Signing time:             Fri 31 Jan 2025 08:00:12 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:12 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:12 +0000
Files and hashes:         1: tPtrTEeRZokREVxp4mlk89XsovQ.crl (hash: 50Zny4SLS3sdsgVC73XTNrHrU2YzcAj93sdumAwXE8c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:5f:ea:1d:a5:69:fa:f2:f0:b4:86:87:f7:42:04:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4fb6b4c4791668911115c69e26964f3d5eca2f4
        Validity
            Not Before: Jan 31 08:00:12 2025 GMT
            Not After : Feb  1 08:00:12 2025 GMT
        Subject: CN=e8ee0f97b3ec982455a744c1b94d142a218b979a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:65:d4:b3:b4:b9:bc:2b:ff:3f:15:1d:c2:2b:
                    c8:73:cd:d7:54:42:4b:10:13:03:58:1a:3f:d4:ec:
                    07:51:98:95:83:1e:af:58:ae:a0:00:4e:e6:86:35:
                    7b:60:08:7a:00:8e:23:fd:c5:ee:c8:17:a5:80:5a:
                    b9:f5:77:40:59:25:c0:8a:6b:4f:86:6e:61:58:8b:
                    08:16:ee:77:42:40:0f:e0:2c:52:79:57:f6:93:5e:
                    0e:51:4d:6c:75:34:32:f8:b4:5e:66:a0:39:5e:e2:
                    d5:84:fd:a0:26:ca:87:7f:f5:2e:14:8b:74:2f:ff:
                    a8:1a:4d:6c:3f:64:8a:cf:3e:36:ec:64:1b:c3:81:
                    74:5d:b3:5c:d8:13:8c:f3:ba:0b:a8:d5:40:d6:00:
                    a7:b2:6d:51:f5:39:dd:3f:17:ba:c8:4b:86:80:ba:
                    a8:f4:1f:97:44:77:a5:bb:77:9e:b3:cd:5c:69:b9:
                    3c:74:28:bb:f0:fe:e1:2e:68:68:e6:f3:64:e8:de:
                    8c:98:e7:d5:a4:2f:dd:9d:29:b4:ae:e6:cf:b0:85:
                    56:f2:47:a6:64:c3:58:29:b6:bd:4d:79:08:de:24:
                    5f:3d:72:cc:ce:e5:de:34:88:e9:2a:13:90:f2:27:
                    f9:57:7c:e3:12:66:7c:bf:3d:a9:7d:b9:11:8d:69:
                    83:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EE:0F:97:B3:EC:98:24:55:A7:44:C1:B9:4D:14:2A:21:8B:97:9A
            X509v3 Authority Key Identifier:
                keyid:B4:FB:6B:4C:47:91:66:89:11:11:5C:69:E2:69:64:F3:D5:EC:A2:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:98:28:80:f1:7a:49:72:67:ae:f0:bd:55:3b:ff:67:98:65:
         10:62:73:c4:3d:ac:03:9f:b2:9a:6d:d6:a3:2b:ed:21:02:3b:
         11:a6:eb:b5:e3:26:5b:02:76:2d:9d:65:04:29:e5:16:c7:c5:
         45:36:15:47:cd:46:62:05:90:e2:b8:f4:38:4b:a0:61:d3:d9:
         4c:50:31:1f:04:12:34:c8:45:07:16:9f:c3:9a:be:d1:d8:26:
         59:2b:19:10:82:31:40:fc:38:b0:08:e7:94:90:d7:21:7b:61:
         85:e8:47:1f:76:7d:27:95:7a:15:4f:94:b2:a4:8d:5a:e0:d3:
         73:27:06:08:2d:b6:fd:a4:66:33:28:4e:d0:70:04:41:43:a5:
         18:64:ad:0d:3e:6f:1d:9a:43:0c:1a:2a:6a:6e:f7:93:72:3c:
         d8:a8:33:be:de:33:19:1e:e9:f8:a8:1c:d5:78:50:52:58:98:
         5b:7f:dd:69:80:8f:8b:75:46:59:38:0d:02:03:7a:21:68:00:
         6e:a7:4c:2f:13:ab:e3:9b:28:9e:39:fb:a0:6b:ac:6f:47:de:
         75:75:18:10:89:5a:02:23:0d:cb:76:75:ff:34:88:1c:21:da:
         a7:1e:ee:db:c3:46:64:c0:50:6b:6b:11:03:b5:2f:02:71:aa:
         29:5e:42:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:04 2025 by rpki-client on console-fra.rpki-client.org