Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
File:                     2nVBcltyi1qJ87-vIPh2VWPC8_s.mft (raw, json)
Hash identifier:          gSSuJ/pVWl7SRtj2n1MshAHRUE4zHVs/VxAss+Vg1P8=
Subject key identifier:   22:21:BB:42:FA:82:10:57:B5:27:9D:FE:72:E7:1C:7D:AD:AD:2B:77
Authority key identifier: DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
Certificate issuer:       /CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Certificate serial:       0196C34C68B7642E1991FAB6B1F94FAAE9F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
Manifest number:          1533
Signing time:             Mon 12 May 2025 07:01:26 +0000
Manifest this update:     Mon 12 May 2025 07:01:26 +0000
Manifest next update:     Tue 13 May 2025 07:01:26 +0000
Files and hashes:         1: 2nVBcltyi1qJ87-vIPh2VWPC8_s.crl (hash: ihdeujrbtiuXpWDjBlWoj7oDLotZr9ksszQcbTDSTvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 07:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:4c:68:b7:64:2e:19:91:fa:b6:b1:f9:4f:aa:e9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
        Validity
            Not Before: May 12 07:01:26 2025 GMT
            Not After : May 13 07:01:26 2025 GMT
        Subject: CN=2221bb42fa821057b5279dfe72e71c7dadad2b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:52:74:95:38:2c:c2:8f:a1:46:cb:72:9e:28:
                    79:03:d3:44:5f:8c:03:29:5d:1f:fd:ad:e3:3d:c5:
                    03:e1:f8:d5:aa:9a:22:e4:05:69:d4:53:53:84:8c:
                    75:16:28:41:66:9e:10:27:d1:1b:67:0d:a9:60:41:
                    84:9d:f2:33:fa:9f:5d:26:b3:95:c7:29:df:02:e1:
                    00:15:55:a8:ef:8e:f9:f5:96:b6:25:4e:d6:c5:45:
                    83:5b:0e:cb:25:4e:11:30:d0:e7:99:75:7e:d4:59:
                    08:8f:9a:f1:0d:d7:17:97:bb:6d:31:61:7c:72:88:
                    9b:a3:ed:28:6f:bc:af:11:c3:9b:62:a1:0f:fd:3b:
                    6e:ad:03:8f:2f:3b:18:42:e1:76:65:70:2d:00:6c:
                    86:f9:81:ba:46:4e:93:77:fb:60:ee:88:9f:f1:df:
                    04:49:a4:22:ee:93:df:96:f6:7a:e5:ca:fd:a6:c3:
                    7e:06:80:7e:6c:06:10:be:0b:a6:e4:70:17:03:a9:
                    e6:1e:63:d4:32:bd:55:78:8f:b6:13:c4:c9:8a:d0:
                    22:88:59:4d:7e:a2:21:4e:3e:1c:a9:ce:16:8b:48:
                    da:17:b2:73:17:f8:22:5c:92:78:35:6a:08:f3:fc:
                    76:85:d8:3d:18:fd:69:71:7a:85:23:fe:04:42:ab:
                    d7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:21:BB:42:FA:82:10:57:B5:27:9D:FE:72:E7:1C:7D:AD:AD:2B:77
            X509v3 Authority Key Identifier:
                keyid:DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e9:49:eb:15:b3:28:be:e8:69:56:25:f8:d3:53:0a:48:5f:
         68:2e:8d:d7:b6:20:c7:71:f8:40:79:57:c1:b3:df:e7:96:b9:
         8e:55:4d:10:9e:1c:1e:8c:c2:c1:b2:bf:ea:fd:b9:ed:33:d9:
         db:b9:5f:87:f2:52:f8:0a:32:dd:81:2b:e5:c3:88:29:bc:2d:
         29:16:a9:86:51:4e:a0:b3:fb:de:ca:c9:f8:cb:74:d9:10:51:
         29:fa:e2:45:fe:5a:c4:9b:f1:2c:91:db:a6:d0:02:05:bd:e3:
         ae:47:2a:19:b9:54:da:0d:9f:2c:3e:ab:2a:d5:c3:94:60:84:
         6e:85:8c:7c:8c:8f:bf:54:68:c5:5b:05:54:45:39:8b:b2:59:
         53:20:c3:54:d1:d9:51:74:5e:e1:c4:e9:9f:ef:7f:4f:cc:4d:
         5f:55:f1:93:5b:d8:3c:66:d0:3c:1c:00:e1:32:30:e2:95:a0:
         4a:81:b5:60:99:af:9d:56:24:75:7d:03:c7:b3:db:42:91:71:
         d4:7d:88:82:94:82:4f:73:61:f7:c2:5a:a2:3e:f2:94:51:f3:
         86:8b:b4:0a:be:49:4f:60:f6:0c:a9:5f:7d:b7:70:30:1e:49:
         91:e1:82:0d:da:87:c2:7f:c8:a5:c4:8e:61:fe:d7:c3:8c:a4:
         92:8c:40:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDTGi3ZC4Zkfq2sflPqunyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzU0MTcyNWI3MjhiNWE4OWYzYmZhZjIwZjg3NjU1NjNj
MmYzZmIwHhcNMjUwNTEyMDcwMTI2WhcNMjUwNTEzMDcwMTI2WjAzMTEwLwYDVQQD
EygyMjIxYmI0MmZhODIxMDU3YjUyNzlkZmU3MmU3MWM3ZGFkYWQyYjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVJ0lTgswo+hRstynih5A9NEX4wD
KV0f/a3jPcUD4fjVqpoi5AVp1FNThIx1FihBZp4QJ9EbZw2pYEGEnfIz+p9dJrOV
xynfAuEAFVWo74759Za2JU7WxUWDWw7LJU4RMNDnmXV+1FkIj5rxDdcXl7ttMWF8
coibo+0ob7yvEcObYqEP/TturQOPLzsYQuF2ZXAtAGyG+YG6Rk6Td/tg7oif8d8E
SaQi7pPflvZ65cr9psN+BoB+bAYQvgum5HAXA6nmHmPUMr1VeI+2E8TJitAiiFlN
fqIhTj4cqc4Wi0jaF7JzF/giXJJ4NWoI8/x2hdg9GP1pcXqFI/4EQqvX6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIhu0L6ghBXtSed/nLnHH2trSt3MB8GA1UdIwQY
MBaAFNp1QXJbcotaifO/ryD4dlVjwvP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5WQmNsdHlpMXFKODctdklQaDJWV1BDOF9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80ZDM5YjEtZmM5YS00NDc2LWE3OWMt
ZGI4ZmQ1MDdkMWI2LzEvMm5WQmNsdHlpMXFKODctdklQaDJWV1BDOF9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny80ZDM5YjEtZmM5YS00NDc2LWE3OWMtZGI4ZmQ1MDdkMWI2
LzEvMm5WQmNsdHlpMXFKODctdklQaDJWV1BDOF9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMelJ6xWz
KL7oaVYl+NNTCkhfaC6N17Ygx3H4QHlXwbPf55a5jlVNEJ4cHozCwbK/6v257TPZ
27lfh/JS+Aoy3YEr5cOIKbwtKRaphlFOoLP73srJ+Mt02RBRKfriRf5axJvxLJHb
ptACBb3jrkcqGblU2g2fLD6rKtXDlGCEboWMfIyPv1RoxVsFVEU5i7JZUyDDVNHZ
UXRe4cTpn+9/T8xNX1Xxk1vYPGbQPBwA4TIw4pWgSoG1YJmvnVYkdX0Dx7PbQpFx
1H2IgpSCT3Nh98Jaoj7ylFHzhou0Cr5JT2D2DKlffbdwMB5JkeGCDdqHwn/IpcSO
Yf7Xw4ykkoxA5w==
-----END CERTIFICATE-----
Generated at Mon May 12 13:37:50 2025 by rpki-client