Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
File:                     savnP_2tb4YrC92JTUQyfCyUp9U.mft (raw, json)
Hash identifier:          1su8tmCTl5Uvrh8nUev6u2qZEbZzXSfknZWluQTMuGE=
Subject key identifier:   CE:CE:4B:65:A4:E9:89:0D:42:1C:7F:7A:16:20:1D:E8:02:F4:76:EB
Authority key identifier: B1:AB:E7:3F:FD:AD:6F:86:2B:0B:DD:89:4D:44:32:7C:2C:94:A7:D5
Certificate issuer:       /CN=b1abe73ffdad6f862b0bdd894d44327c2c94a7d5
Certificate serial:       0196AD68E2BFEE5FD6FA390ABC8EB9542F97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
Manifest number:          0302
Signing time:             Thu 08 May 2025 01:00:54 +0000
Manifest this update:     Thu 08 May 2025 01:00:54 +0000
Manifest next update:     Fri 09 May 2025 01:00:54 +0000
Files and hashes:         1: savnP_2tb4YrC92JTUQyfCyUp9U.crl (hash: Va6JAKyTdi7YyTOtHDJ42f4EEBVvoAVqENdQcWu2jaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 01:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ad:68:e2:bf:ee:5f:d6:fa:39:0a:bc:8e:b9:54:2f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1abe73ffdad6f862b0bdd894d44327c2c94a7d5
        Validity
            Not Before: May  8 01:00:54 2025 GMT
            Not After : May  9 01:00:54 2025 GMT
        Subject: CN=cece4b65a4e9890d421c7f7a16201de802f476eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6c:49:db:9b:05:36:5e:b7:4f:36:7b:85:90:
                    ca:26:ca:71:15:23:ac:b6:8d:04:a1:ec:18:f3:51:
                    a2:38:7d:7b:6e:81:a3:a7:50:e0:35:24:2c:dd:f6:
                    63:26:cf:b3:45:ad:b5:24:39:69:e1:08:0d:d2:51:
                    d9:ff:36:13:12:91:be:57:0c:78:49:d2:ce:b4:ce:
                    77:ac:11:38:a0:ef:6f:33:87:09:7d:d6:18:c5:e8:
                    23:a2:8d:7f:54:de:66:c6:fe:e3:ea:63:5f:b9:0c:
                    90:4a:05:87:0e:cb:a2:a7:ae:2d:de:3b:39:8f:b9:
                    07:2b:34:c6:ce:7b:bc:e7:ae:57:d5:3a:ae:6a:04:
                    52:1e:d5:6b:a4:67:53:32:fe:da:cc:51:ac:a3:24:
                    19:05:19:dc:6c:72:85:6f:a2:b0:4b:a6:b2:03:8c:
                    02:9b:77:db:4f:fa:1e:3c:2b:fc:2c:c5:82:3e:b5:
                    76:87:a0:8f:0a:45:5d:40:cd:af:aa:16:68:87:7a:
                    38:b9:a5:70:92:f8:e5:29:1f:aa:67:6b:9d:41:b6:
                    92:31:88:f9:fc:12:b7:3e:91:5f:cb:f4:3e:e5:41:
                    17:bb:00:75:c6:98:11:ac:bc:c9:2d:62:b5:05:91:
                    8a:cd:e9:bb:a2:b1:ea:1b:75:2f:72:a4:c8:b8:bb:
                    9d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CE:4B:65:A4:E9:89:0D:42:1C:7F:7A:16:20:1D:E8:02:F4:76:EB
            X509v3 Authority Key Identifier:
                keyid:B1:AB:E7:3F:FD:AD:6F:86:2B:0B:DD:89:4D:44:32:7C:2C:94:A7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:ea:a0:7b:b6:ad:11:e3:86:4e:72:d3:4e:ac:ed:8d:77:45:
         aa:91:b6:ce:4b:fd:91:07:c9:13:c5:0e:c9:46:b8:e3:9f:89:
         a6:82:e1:20:d5:ed:c7:4d:ca:a0:9f:20:94:a3:9d:04:54:5b:
         d0:ec:42:58:b2:53:42:0b:88:a1:5a:29:b3:6a:07:7b:e3:84:
         a7:2f:0b:8b:34:65:df:5b:fe:ad:f9:9b:2a:8f:1c:9d:ec:ec:
         29:19:e8:dc:f5:28:36:a4:9c:2b:13:29:6f:35:8f:b5:cc:98:
         fd:c5:65:cf:29:8e:d7:85:71:f9:ce:1d:7b:82:84:47:2d:0d:
         b6:de:e3:6a:7e:05:8f:c8:12:1d:d3:93:d3:f3:5a:ff:3b:d3:
         b6:2d:8c:7f:ad:16:ae:ac:42:5f:8a:52:06:07:97:16:ca:c5:
         f9:95:ef:8f:8e:b3:fe:83:36:25:bc:c9:ff:ba:ec:98:91:ab:
         ce:9b:8a:f1:47:49:db:23:7f:06:c7:04:6c:8e:de:84:45:e6:
         99:72:ce:e2:92:1b:74:2a:3f:26:da:e5:0d:28:a8:e0:19:5a:
         bf:49:f7:cd:ea:b2:9b:51:df:46:55:8f:03:2d:7b:aa:89:b0:
         ac:11:ba:1e:d0:8a:de:67:9b:32:42:e7:0a:d9:a2:27:7b:38:
         63:25:ad:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZataOK/7l/W+jkKvI65VC+XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYWJlNzNmZmRhZDZmODYyYjBiZGQ4OTRkNDQzMjdjMmM5
NGE3ZDUwHhcNMjUwNTA4MDEwMDU0WhcNMjUwNTA5MDEwMDU0WjAzMTEwLwYDVQQD
EyhjZWNlNGI2NWE0ZTk4OTBkNDIxYzdmN2ExNjIwMWRlODAyZjQ3NmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2xJ25sFNl63TzZ7hZDKJspxFSOs
to0EoewY81GiOH17boGjp1DgNSQs3fZjJs+zRa21JDlp4QgN0lHZ/zYTEpG+Vwx4
SdLOtM53rBE4oO9vM4cJfdYYxegjoo1/VN5mxv7j6mNfuQyQSgWHDsuip64t3js5
j7kHKzTGznu8565X1TquagRSHtVrpGdTMv7azFGsoyQZBRncbHKFb6KwS6ayA4wC
m3fbT/oePCv8LMWCPrV2h6CPCkVdQM2vqhZoh3o4uaVwkvjlKR+qZ2udQbaSMYj5
/BK3PpFfy/Q+5UEXuwB1xpgRrLzJLWK1BZGKzem7orHqG3UvcqTIuLudkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7OS2Wk6YkNQhx/ehYgHegC9HbrMB8GA1UdIwQY
MBaAFLGr5z/9rW+GKwvdiU1EMnwslKfVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2F2blBfMnRiNFlyQzkySlRVUXlmQ3lVcDlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85MTliMDEtN2EyMC00YzAwLTg2YWYt
ZTkxOWMzN2U0ZWJjLzEvc2F2blBfMnRiNFlyQzkySlRVUXlmQ3lVcDlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85MTliMDEtN2EyMC00YzAwLTg2YWYtZTkxOWMzN2U0ZWJj
LzEvc2F2blBfMnRiNFlyQzkySlRVUXlmQ3lVcDlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+qge7at
EeOGTnLTTqztjXdFqpG2zkv9kQfJE8UOyUa445+JpoLhINXtx03KoJ8glKOdBFRb
0OxCWLJTQguIoVops2oHe+OEpy8LizRl31v+rfmbKo8cnezsKRno3PUoNqScKxMp
bzWPtcyY/cVlzymO14Vx+c4de4KERy0Ntt7jan4Fj8gSHdOT0/Na/zvTti2Mf60W
rqxCX4pSBgeXFsrF+ZXvj46z/oM2JbzJ/7rsmJGrzpuK8UdJ2yN/BscEbI7ehEXm
mXLO4pIbdCo/JtrlDSio4Blav0n3zeqym1HfRlWPAy17qomwrBG6HtCK3mebMkLn
CtmiJ3s4YyWtfA==
-----END CERTIFICATE-----
Generated at Thu May 8 11:47:37 2025 by rpki-client