Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft
File:                     R0APQz0S1oqeufakK688jFKVyFI.mft (raw, json)
Hash identifier:          xO/5ahakto/Dk3zfn7hy55/R7scHceYxeRKJaNzZQDA=
Subject key identifier:   DA:AD:E9:44:94:43:9D:8A:AB:B2:33:76:3C:27:4C:20:10:66:A0:D8
Authority key identifier: 47:40:0F:43:3D:12:D6:8A:9E:B9:F6:A4:2B:AF:3C:8C:52:95:C8:52
Certificate issuer:       /CN=47400f433d12d68a9eb9f6a42baf3c8c5295c852
Certificate serial:       0194BA84A4A6FBA012C466C34726BD6605D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R0APQz0S1oqeufakK688jFKVyFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft
Manifest number:          1120
Signing time:             Fri 31 Jan 2025 04:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:42 +0000
Files and hashes:         1: R0APQz0S1oqeufakK688jFKVyFI.crl (hash: XoBiJmHHSZIJH0MIrKyxBxXzXrBXgZJlNV3qCk52c/g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R0APQz0S1oqeufakK688jFKVyFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:a4:a6:fb:a0:12:c4:66:c3:47:26:bd:66:05:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47400f433d12d68a9eb9f6a42baf3c8c5295c852
        Validity
            Not Before: Jan 31 04:00:42 2025 GMT
            Not After : Feb  1 04:00:42 2025 GMT
        Subject: CN=daade94494439d8aabb233763c274c201066a0d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:26:e8:41:62:3b:0e:1c:e4:4f:d3:d8:15:17:
                    7a:0a:04:51:2c:67:ac:c8:47:1b:d8:62:15:aa:8d:
                    14:d1:3d:bc:c7:1c:69:0a:67:4b:4f:40:13:58:0e:
                    11:a2:3c:ff:25:84:f3:ca:f5:db:72:6c:e5:db:6d:
                    32:a7:d0:eb:fc:3b:eb:a6:4c:aa:c6:69:db:fe:2e:
                    68:2d:5a:65:e1:ad:8e:1a:39:80:17:6f:70:69:b4:
                    1e:84:27:a6:d2:23:ad:42:d7:41:25:cf:6c:9d:9f:
                    c5:b2:ce:85:d4:cb:9a:92:0d:5c:6f:36:8f:09:50:
                    68:8a:0e:44:ce:19:03:82:ce:b8:46:d5:af:c1:94:
                    b2:7d:2c:fa:9f:14:a0:83:5f:e6:08:d4:c7:3a:f2:
                    8e:87:c0:a9:08:90:94:52:e2:d2:27:e6:8d:7e:0c:
                    9c:21:b9:8f:16:b7:55:8f:ca:67:8b:4b:f2:17:ab:
                    bf:d7:5a:a8:6a:ca:f7:3f:e6:b6:2a:45:1a:97:ea:
                    54:90:b9:32:75:5b:ba:9a:e7:64:24:14:6a:34:32:
                    7a:a7:96:08:0f:96:87:71:1d:e9:41:90:0f:c9:b5:
                    b7:ae:da:de:91:49:59:48:40:f2:7e:d5:e6:4c:3d:
                    c1:cc:a1:10:ed:55:81:10:b3:33:3f:13:08:ef:69:
                    34:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AD:E9:44:94:43:9D:8A:AB:B2:33:76:3C:27:4C:20:10:66:A0:D8
            X509v3 Authority Key Identifier:
                keyid:47:40:0F:43:3D:12:D6:8A:9E:B9:F6:A4:2B:AF:3C:8C:52:95:C8:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0APQz0S1oqeufakK688jFKVyFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:56:63:2e:57:83:5c:5a:8e:70:93:8e:87:62:b5:2e:17:18:
         fd:dc:af:ab:df:4b:bb:bd:1d:ac:a2:ab:15:b7:2f:dd:f5:ba:
         c5:a5:eb:a8:1d:63:34:46:83:b5:9a:c1:ee:c9:a4:e8:62:58:
         56:20:1c:dc:b4:1b:aa:38:30:77:d5:dd:c1:c9:3f:97:ae:71:
         13:57:ea:3d:bc:35:21:33:39:4f:68:4c:2e:81:82:d2:9b:7f:
         21:76:be:20:4c:4b:be:da:a1:98:66:99:82:34:ea:49:6f:43:
         15:3b:89:23:cf:8b:59:3b:31:84:0b:48:df:8c:97:9b:e1:b8:
         0b:db:84:b6:06:d9:ad:a4:d7:25:72:a8:a7:81:9a:60:2c:25:
         56:39:93:ff:85:82:d6:2d:11:36:a8:42:55:ed:83:7d:05:b8:
         51:39:f0:72:34:ae:92:bb:f3:f1:5d:ac:a3:24:08:79:e9:d4:
         d9:be:62:50:db:07:ae:c0:31:88:ac:04:66:48:43:1d:0d:80:
         c5:25:28:ca:ae:7a:25:bd:ca:f0:6c:ec:56:c6:b3:46:87:09:
         c8:d8:ef:3e:9f:45:bb:e3:bf:1e:13:b4:e4:6b:b9:a3:af:ad:
         6f:31:59:f6:7a:3e:67:35:de:2d:88:2a:00:4f:fc:d8:45:d1:
         5a:0d:59:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hKSm+6ASxGbDRya9ZgXZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NDAwZjQzM2QxMmQ2OGE5ZWI5ZjZhNDJiYWYzYzhjNTI5
NWM4NTIwHhcNMjUwMTMxMDQwMDQyWhcNMjUwMjAxMDQwMDQyWjAzMTEwLwYDVQQD
EyhkYWFkZTk0NDk0NDM5ZDhhYWJiMjMzNzYzYzI3NGMyMDEwNjZhMGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSboQWI7DhzkT9PYFRd6CgRRLGes
yEcb2GIVqo0U0T28xxxpCmdLT0ATWA4Rojz/JYTzyvXbcmzl220yp9Dr/Dvrpkyq
xmnb/i5oLVpl4a2OGjmAF29wabQehCem0iOtQtdBJc9snZ/Fss6F1Muakg1cbzaP
CVBoig5EzhkDgs64RtWvwZSyfSz6nxSgg1/mCNTHOvKOh8CpCJCUUuLSJ+aNfgyc
IbmPFrdVj8pni0vyF6u/11qoasr3P+a2KkUal+pUkLkydVu6mudkJBRqNDJ6p5YI
D5aHcR3pQZAPybW3rtrekUlZSEDyftXmTD3BzKEQ7VWBELMzPxMI72k0bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqt6USUQ52Kq7IzdjwnTCAQZqDYMB8GA1UdIwQY
MBaAFEdAD0M9EtaKnrn2pCuvPIxSlchSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjBBUFF6MFMxb3FldWZha0s2ODhqRktWeUZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni85OTJiYWMtMjdjOC00NGZjLWE0M2Yt
N2UzODRhYTEwNjIxLzEvUjBBUFF6MFMxb3FldWZha0s2ODhqRktWeUZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni85OTJiYWMtMjdjOC00NGZjLWE0M2YtN2UzODRhYTEwNjIx
LzEvUjBBUFF6MFMxb3FldWZha0s2ODhqRktWeUZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABlZjLleD
XFqOcJOOh2K1LhcY/dyvq99Lu70drKKrFbcv3fW6xaXrqB1jNEaDtZrB7smk6GJY
ViAc3LQbqjgwd9Xdwck/l65xE1fqPbw1ITM5T2hMLoGC0pt/IXa+IExLvtqhmGaZ
gjTqSW9DFTuJI8+LWTsxhAtI34yXm+G4C9uEtgbZraTXJXKop4GaYCwlVjmT/4WC
1i0RNqhCVe2DfQW4UTnwcjSukrvz8V2soyQIeenU2b5iUNsHrsAxiKwEZkhDHQ2A
xSUoyq56Jb3K8GzsVsazRocJyNjvPp9Fu+O/HhO05Gu5o6+tbzFZ9no+ZzXeLYgq
AE/82EXRWg1ZMA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:42 2025 by rpki-client on console-fra.rpki-client.org