Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.mft
File:                     guRyorh_8WgtNi8N3kGOkxGsBGQ.mft (raw, json)
Hash identifier:          K3wRBu/WKgtgIKC7Zcu5tWbvSXCokGa4Px9Umqfr7N0=
Subject key identifier:   16:C1:53:6E:A7:5C:CB:14:0B:8F:57:0B:8E:C1:C0:FA:2A:9F:3A:E5
Authority key identifier: 82:E4:72:A2:B8:7F:F1:68:2D:36:2F:0D:DE:41:8E:93:11:AC:04:64
Certificate issuer:       /CN=82e472a2b87ff1682d362f0dde418e9311ac0464
Certificate serial:       0196832300C7FAECC15F2CE5F2F0757AA1EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/guRyorh_8WgtNi8N3kGOkxGsBGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.mft
Manifest number:          1404
Signing time:             Tue 29 Apr 2025 20:00:31 +0000
Manifest this update:     Tue 29 Apr 2025 20:00:31 +0000
Manifest next update:     Wed 30 Apr 2025 20:00:31 +0000
Files and hashes:         1: guRyorh_8WgtNi8N3kGOkxGsBGQ.crl (hash: 2ym8rlqULAED/fAltcW3iDm4LEO8sMohB+rs7Jm5bLw=)
                          2: wM-Q4PYw-g7L6gGW4qe1neIC43c.roa (hash: hm2k81ASEePQ7E1Ry4WD3zVSD28SUrbakN2SZMVNLMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/guRyorh_8WgtNi8N3kGOkxGsBGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 20:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:23:00:c7:fa:ec:c1:5f:2c:e5:f2:f0:75:7a:a1:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82e472a2b87ff1682d362f0dde418e9311ac0464
        Validity
            Not Before: Apr 29 20:00:31 2025 GMT
            Not After : Apr 30 20:00:31 2025 GMT
        Subject: CN=16c1536ea75ccb140b8f570b8ec1c0fa2a9f3ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9e:64:39:34:bd:99:8c:cd:e5:4b:e7:e4:41:
                    78:d7:58:95:45:eb:47:49:ec:fb:4f:bd:1a:fb:20:
                    76:54:46:c2:62:a0:4c:ca:b2:cf:4d:e1:27:f0:f0:
                    62:48:f3:52:71:a4:57:4f:c9:97:21:22:0e:ae:89:
                    09:bb:e1:5a:7d:6c:72:bd:35:8c:2f:d5:46:ed:52:
                    9c:cf:21:47:97:d3:e7:34:8a:bf:00:0c:d1:c4:a0:
                    fd:01:d6:15:aa:2d:63:b0:4a:52:39:d0:82:9b:70:
                    35:28:cc:71:0b:ca:14:e4:65:ff:f4:ae:ef:81:8e:
                    af:12:05:45:56:0c:b1:ec:f9:4d:07:bb:43:ab:ad:
                    9f:19:db:3f:73:da:17:03:a9:ab:01:21:7a:c7:92:
                    cf:ee:c7:2a:52:fd:b6:d4:dd:1f:b8:63:fb:a1:ac:
                    b8:0d:85:4a:e5:32:c9:93:56:80:ea:5d:e1:f2:40:
                    3a:ad:d8:5a:3a:1b:2d:b2:e0:38:71:5f:04:d1:91:
                    d7:ad:9d:e8:e4:46:b4:09:88:e0:2f:12:63:48:16:
                    fd:55:54:15:a9:e4:0b:a3:ea:5e:0a:e1:85:bc:b2:
                    fe:d7:cc:ab:ca:66:57:0d:9e:ec:de:2c:12:00:f0:
                    a2:c1:cd:0a:a4:82:66:de:75:3c:e4:10:c6:b9:22:
                    7c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C1:53:6E:A7:5C:CB:14:0B:8F:57:0B:8E:C1:C0:FA:2A:9F:3A:E5
            X509v3 Authority Key Identifier:
                keyid:82:E4:72:A2:B8:7F:F1:68:2D:36:2F:0D:DE:41:8E:93:11:AC:04:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guRyorh_8WgtNi8N3kGOkxGsBGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:cb:05:b5:81:20:e7:79:4d:e5:3e:42:00:27:a5:eb:eb:3e:
         5f:65:89:d0:d6:5d:b4:03:9e:ff:b7:2e:30:f5:71:cb:cf:2e:
         81:a9:83:67:a5:2c:08:ab:a3:f7:98:da:5c:6d:96:07:3e:c3:
         09:69:04:7b:07:a3:c8:1a:50:4a:2f:25:3b:0c:38:d1:8b:d2:
         03:75:9e:19:bb:e7:d4:57:cc:eb:f1:f0:49:99:d2:35:01:15:
         9d:5d:0a:68:7e:1b:e7:fd:4c:54:d0:a0:68:6d:91:b0:fa:57:
         29:ab:ae:c5:e5:a2:1e:33:4f:3b:3c:a3:54:02:aa:67:94:6e:
         88:dc:f8:e4:7b:3b:b2:d4:78:f0:23:2e:f7:13:04:78:6a:b5:
         d3:de:e7:39:e4:3c:17:1f:7a:90:d7:5c:33:f6:24:71:49:c5:
         cd:56:ff:1d:61:7c:5f:c8:00:94:11:39:a7:ba:bf:0b:73:b3:
         f6:52:fb:bd:bf:be:ba:24:df:cd:94:4b:9a:ee:a6:0e:d6:62:
         1f:65:ef:17:7a:5d:e5:74:45:97:e5:62:1c:2c:5b:1e:66:fb:
         8a:75:4e:2e:a3:4d:95:45:bf:bb:4f:9d:15:6b:f2:75:c9:00:
         11:17:7a:82:c2:0e:b2:70:7c:61:f0:5e:5e:5a:85:80:52:34:
         87:56:92:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDIwDH+uzBXyzl8vB1eqHvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTQ3MmEyYjg3ZmYxNjgyZDM2MmYwZGRlNDE4ZTkzMTFh
YzA0NjQwHhcNMjUwNDI5MjAwMDMxWhcNMjUwNDMwMjAwMDMxWjAzMTEwLwYDVQQD
EygxNmMxNTM2ZWE3NWNjYjE0MGI4ZjU3MGI4ZWMxYzBmYTJhOWYzYWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4J5kOTS9mYzN5Uvn5EF411iVRetH
Sez7T70a+yB2VEbCYqBMyrLPTeEn8PBiSPNScaRXT8mXISIOrokJu+FafWxyvTWM
L9VG7VKczyFHl9PnNIq/AAzRxKD9AdYVqi1jsEpSOdCCm3A1KMxxC8oU5GX/9K7v
gY6vEgVFVgyx7PlNB7tDq62fGds/c9oXA6mrASF6x5LP7scqUv221N0fuGP7oay4
DYVK5TLJk1aA6l3h8kA6rdhaOhstsuA4cV8E0ZHXrZ3o5Ea0CYjgLxJjSBb9VVQV
qeQLo+peCuGFvLL+18yrymZXDZ7s3iwSAPCiwc0KpIJm3nU85BDGuSJ8FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbBU26nXMsUC49XC47BwPoqnzrlMB8GA1UdIwQY
MBaAFILkcqK4f/FoLTYvDd5BjpMRrARkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VSeW9yaF84V2d0Tmk4TjNrR09reEdzQkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi85MmI0ZDYtYjkyNC00YjMxLTk0ZDct
MjM2MTZjNzlhZTAyLzEvZ3VSeW9yaF84V2d0Tmk4TjNrR09reEdzQkdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi85MmI0ZDYtYjkyNC00YjMxLTk0ZDctMjM2MTZjNzlhZTAy
LzEvZ3VSeW9yaF84V2d0Tmk4TjNrR09reEdzQkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALssFtYEg
53lN5T5CACel6+s+X2WJ0NZdtAOe/7cuMPVxy88ugamDZ6UsCKuj95jaXG2WBz7D
CWkEewejyBpQSi8lOww40YvSA3WeGbvn1FfM6/HwSZnSNQEVnV0KaH4b5/1MVNCg
aG2RsPpXKauuxeWiHjNPOzyjVAKqZ5RuiNz45Hs7stR48CMu9xMEeGq1097nOeQ8
Fx96kNdcM/YkcUnFzVb/HWF8X8gAlBE5p7q/C3Oz9lL7vb++uiTfzZRLmu6mDtZi
H2XvF3pd5XRFl+ViHCxbHmb7inVOLqNNlUW/u0+dFWvydckAERd6gsIOsnB8YfBe
XlqFgFI0h1aSCg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 03:18:44 2025 by rpki-client