Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
File:                     8JLOTWiFNFSE6Zp312Fm_HICIDM.mft (raw, json)
Hash identifier:          QtfHeS07YZeZsdzY4F9kWVAMPlNlWPfdQSDDZCehijU=
Subject key identifier:   0A:79:0A:77:44:61:7F:2F:88:7B:1A:34:25:37:7B:DD:7B:89:56:5A
Authority key identifier: F0:92:CE:4D:68:85:34:54:84:E9:9A:77:D7:61:66:FC:72:02:20:33
Certificate issuer:       /CN=f092ce4d6885345484e99a77d76166fc72022033
Certificate serial:       0196BE5C60C6D9DCCBC70A1E70E9287C5814
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
Manifest number:          1533
Signing time:             Sun 11 May 2025 08:00:47 +0000
Manifest this update:     Sun 11 May 2025 08:00:47 +0000
Manifest next update:     Mon 12 May 2025 08:00:47 +0000
Files and hashes:         1: 8JLOTWiFNFSE6Zp312Fm_HICIDM.crl (hash: daXYWfqgYZniaPo+xZWKiCHAnpSnx2IOeSorxuZCepE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:5c:60:c6:d9:dc:cb:c7:0a:1e:70:e9:28:7c:58:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f092ce4d6885345484e99a77d76166fc72022033
        Validity
            Not Before: May 11 08:00:47 2025 GMT
            Not After : May 12 08:00:47 2025 GMT
        Subject: CN=0a790a7744617f2f887b1a3425377bdd7b89565a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6c:d7:48:a6:52:76:be:3f:c2:4a:be:98:42:
                    58:18:82:64:90:c1:33:b3:36:1b:8c:54:56:56:55:
                    42:13:1d:20:33:5c:be:e0:d6:59:ed:f0:80:60:a4:
                    fd:14:39:25:19:4f:98:a5:56:5e:1c:33:f5:31:be:
                    fe:76:2f:68:3a:0e:aa:62:90:7d:68:e5:c3:f9:9e:
                    f0:3d:70:2c:cf:c5:60:85:c0:95:0d:61:09:81:12:
                    75:15:90:b5:ea:bd:58:07:d9:8b:11:1e:08:37:ad:
                    b6:c2:bc:e6:d4:0b:ca:c8:8c:2f:5c:a9:24:cb:89:
                    62:be:92:3e:83:70:65:0d:1c:04:cf:ad:95:0f:40:
                    f5:b5:b3:cd:6a:a6:21:82:ad:f7:87:14:ff:d2:fb:
                    fc:64:df:e6:bd:90:9a:a0:22:84:26:29:f8:c9:04:
                    f3:24:51:b0:56:d4:d7:aa:c1:35:dc:e9:8c:b7:37:
                    e5:eb:3d:45:56:07:6d:7c:34:fa:1a:d3:e2:8f:a9:
                    f9:48:73:c6:0b:6b:07:a4:c8:04:43:be:b5:6d:1d:
                    1b:7c:63:aa:e7:6f:2a:a0:84:3d:7e:50:82:18:49:
                    6e:07:2e:0e:20:1d:30:4f:c2:34:19:d1:11:c8:73:
                    f8:1d:dd:97:8c:5c:dd:e5:75:6a:ee:d7:ae:65:c4:
                    37:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:79:0A:77:44:61:7F:2F:88:7B:1A:34:25:37:7B:DD:7B:89:56:5A
            X509v3 Authority Key Identifier:
                keyid:F0:92:CE:4D:68:85:34:54:84:E9:9A:77:D7:61:66:FC:72:02:20:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:6b:ec:1c:64:2e:4a:17:a1:44:00:8d:72:e5:77:d3:23:da:
         e0:42:58:35:3d:33:ce:d7:19:0d:3e:ba:90:3e:c7:1b:01:99:
         21:dd:88:03:5e:a5:1b:c8:24:f5:07:0b:fd:92:0a:88:6e:9b:
         14:d6:07:22:64:8e:3d:f0:49:b6:fc:fa:c4:ab:78:dd:eb:ea:
         c5:ab:56:71:be:09:4b:76:ec:40:45:70:ab:c9:bb:5e:a1:c7:
         05:f3:8f:d6:7b:8d:0e:de:de:15:e9:cf:9b:8a:1b:b5:0c:83:
         38:25:e5:e3:fd:42:83:21:57:3e:b5:0c:1a:35:03:67:82:8c:
         8f:45:84:e9:db:a1:bf:25:34:d9:8f:57:67:85:3d:70:36:bb:
         aa:82:4c:37:e3:d8:ab:5a:75:7d:8d:41:97:c0:1d:55:40:7c:
         11:aa:be:56:33:69:92:dd:7b:d9:f7:23:bc:b7:66:02:c8:73:
         21:87:ad:e6:0f:ab:5a:92:20:f3:2e:d6:d9:17:5d:d7:85:c3:
         8a:0d:3a:c2:76:0e:98:5d:be:98:52:73:47:19:f4:9e:fb:88:
         97:aa:e3:50:f2:dc:95:59:e1:5f:c4:88:2f:dc:69:e9:bf:14:
         0a:78:9f:43:c4:3e:29:32:22:8a:db:26:a0:ee:7a:70:d5:f9:
         e1:c8:cd:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+XGDG2dzLxwoecOkofFgUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwOTJjZTRkNjg4NTM0NTQ4NGU5OWE3N2Q3NjE2NmZjNzIw
MjIwMzMwHhcNMjUwNTExMDgwMDQ3WhcNMjUwNTEyMDgwMDQ3WjAzMTEwLwYDVQQD
EygwYTc5MGE3NzQ0NjE3ZjJmODg3YjFhMzQyNTM3N2JkZDdiODk1NjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2zXSKZSdr4/wkq+mEJYGIJkkMEz
szYbjFRWVlVCEx0gM1y+4NZZ7fCAYKT9FDklGU+YpVZeHDP1Mb7+di9oOg6qYpB9
aOXD+Z7wPXAsz8VghcCVDWEJgRJ1FZC16r1YB9mLER4IN622wrzm1AvKyIwvXKkk
y4livpI+g3BlDRwEz62VD0D1tbPNaqYhgq33hxT/0vv8ZN/mvZCaoCKEJin4yQTz
JFGwVtTXqsE13OmMtzfl6z1FVgdtfDT6GtPij6n5SHPGC2sHpMgEQ761bR0bfGOq
528qoIQ9flCCGEluBy4OIB0wT8I0GdERyHP4Hd2XjFzd5XVq7teuZcQ3pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAp5CndEYX8viHsaNCU3e917iVZaMB8GA1UdIwQY
MBaAFPCSzk1ohTRUhOmad9dhZvxyAiAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEpMT1RXaUZORlNFNlpwMzEyRm1fSElDSURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kMDIyMTgtNWRmOS00M2ZkLWJlZWMt
MDMxNTk2MTEyNDgwLzEvOEpMT1RXaUZORlNFNlpwMzEyRm1fSElDSURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9kMDIyMTgtNWRmOS00M2ZkLWJlZWMtMDMxNTk2MTEyNDgw
LzEvOEpMT1RXaUZORlNFNlpwMzEyRm1fSElDSURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVGvsHGQu
ShehRACNcuV30yPa4EJYNT0zztcZDT66kD7HGwGZId2IA16lG8gk9QcL/ZIKiG6b
FNYHImSOPfBJtvz6xKt43evqxatWcb4JS3bsQEVwq8m7XqHHBfOP1nuNDt7eFenP
m4obtQyDOCXl4/1CgyFXPrUMGjUDZ4KMj0WE6duhvyU02Y9XZ4U9cDa7qoJMN+PY
q1p1fY1Bl8AdVUB8Eaq+VjNpkt172fcjvLdmAshzIYet5g+rWpIg8y7W2Rdd14XD
ig06wnYOmF2+mFJzRxn0nvuIl6rjUPLclVnhX8SIL9xp6b8UCnifQ8Q+KTIiitsm
oO56cNX54cjNnQ==
-----END CERTIFICATE-----
Generated at Sun May 11 15:27:41 2025 by rpki-client