Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
File:                     1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft (raw, json)
Hash identifier:          eR5zV3bl6iHcjdjdRPfAB+IEXDdNZtjG727Zi0/EaC0=
Subject key identifier:   00:FE:22:04:42:9F:EF:5A:15:F7:17:3F:23:15:15:E2:49:A8:E4:D3
Authority key identifier: FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
Certificate issuer:       /CN=fb959fb90a158f17de5d8296df954482a8d6211c
Certificate serial:       01907A65F3FBC5B9AE6EF74D91D1D854795C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
Manifest number:          4F
Signing time:             Wed 03 Jul 2024 21:00:20 +0000
Manifest this update:     Wed 03 Jul 2024 21:00:20 +0000
Manifest next update:     Thu 04 Jul 2024 21:00:20 +0000
Files and hashes:         1: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl (hash: 7F4Kr8NPw/TgLgUIku0XgUgPNGqv9EUtNOVp0nJc5OI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jul 2024 21:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:7a:65:f3:fb:c5:b9:ae:6e:f7:4d:91:d1:d8:54:79:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb959fb90a158f17de5d8296df954482a8d6211c
        Validity
            Not Before: Jul  3 21:00:20 2024 GMT
            Not After : Jul  4 21:00:20 2024 GMT
        Subject: CN=00fe2204429fef5a15f7173f231515e249a8e4d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:88:aa:bc:a1:0d:86:05:ba:95:b1:2e:3c:8f:
                    ef:16:87:28:00:56:d0:e9:04:01:29:6d:b7:1f:7f:
                    53:c6:ea:04:26:8e:fa:95:8f:10:76:7e:3e:e2:ae:
                    5e:71:3a:6e:42:53:1f:73:3f:43:11:65:80:03:4e:
                    d0:2b:8b:7d:89:b6:71:d2:37:12:9d:ca:dc:ee:6d:
                    78:66:4c:37:04:48:38:2e:14:e0:c0:7b:18:d3:3f:
                    12:26:01:15:f1:43:1a:6d:84:45:94:ca:3d:db:03:
                    a2:89:79:10:56:38:10:de:9e:95:ff:3d:c5:70:aa:
                    78:6a:c7:34:16:ec:85:5e:98:ea:04:c5:c7:68:ec:
                    4d:37:55:d4:14:59:a9:05:e3:9e:1d:f7:85:d0:49:
                    3e:e8:44:a2:86:76:b4:77:13:ba:e4:53:6f:ee:2e:
                    77:37:e6:3c:b6:c6:1c:05:ed:76:a1:bd:99:e9:02:
                    ac:c6:cf:0f:2d:df:e6:c1:53:1e:be:7e:69:ac:5b:
                    3c:96:8c:a0:8d:1d:40:bb:0b:44:33:a7:e3:5d:ce:
                    5f:6e:f9:f4:a4:c0:ab:d3:8f:0c:42:62:21:ab:3e:
                    1b:b7:e2:96:fe:c1:19:e3:f0:25:f8:fe:64:4b:14:
                    2e:c5:6d:76:47:49:20:0a:cc:e9:93:97:5f:a7:85:
                    e5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FE:22:04:42:9F:EF:5A:15:F7:17:3F:23:15:15:E2:49:A8:E4:D3
            X509v3 Authority Key Identifier:
                keyid:FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:2d:4b:84:50:78:56:5f:3d:e6:ee:2e:44:b2:12:a4:a6:47:
         e8:cb:2b:94:9c:76:f1:c9:0e:1a:4d:8e:60:62:22:12:9f:54:
         93:89:7f:f2:cc:0c:0d:98:de:64:00:ec:24:60:48:0f:e7:c4:
         6f:87:39:d1:e4:fc:da:94:bf:50:39:1c:f0:27:d5:ce:d3:f9:
         da:f9:b7:1b:78:85:af:93:c9:dc:9d:2b:3b:b7:51:66:7a:01:
         98:43:c8:a7:d3:cb:86:3b:b6:8b:fa:08:26:ed:d0:69:5b:1e:
         08:e4:b9:85:9f:5b:93:b5:bd:c0:66:e0:8c:da:c1:c7:68:9e:
         22:86:db:c4:6d:59:dc:e6:a0:91:a2:60:9d:32:f5:16:2c:8f:
         99:f0:11:ca:b1:d3:f9:4c:67:3c:d7:75:1f:d1:2d:c9:52:d0:
         cb:f5:08:97:3a:39:ea:59:b3:a7:78:dd:fc:bf:c0:d8:86:c5:
         b6:b1:06:44:06:3d:78:7b:f7:08:11:dc:c0:99:99:cb:47:bd:
         68:22:51:6f:02:3a:a7:03:57:0a:e7:7c:bd:30:ac:db:d3:1d:
         2b:44:39:06:40:87:18:73:3d:e6:55:65:ee:ae:dc:e3:c3:ca:
         90:a3:69:cb:69:19:c8:46:82:25:3f:0e:3c:8d:a6:b9:eb:2f:
         bd:dd:fb:76
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZB6ZfP7xbmubvdNkdHYVHlcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOTU5ZmI5MGExNThmMTdkZTVkODI5NmRmOTU0NDgyYThk
NjIxMWMwHhcNMjQwNzAzMjEwMDIwWhcNMjQwNzA0MjEwMDIwWjAzMTEwLwYDVQQD
EygwMGZlMjIwNDQyOWZlZjVhMTVmNzE3M2YyMzE1MTVlMjQ5YThlNGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIiqvKENhgW6lbEuPI/vFocoAFbQ
6QQBKW23H39TxuoEJo76lY8Qdn4+4q5ecTpuQlMfcz9DEWWAA07QK4t9ibZx0jcS
ncrc7m14Zkw3BEg4LhTgwHsY0z8SJgEV8UMabYRFlMo92wOiiXkQVjgQ3p6V/z3F
cKp4asc0FuyFXpjqBMXHaOxNN1XUFFmpBeOeHfeF0Ek+6ESihna0dxO65FNv7i53
N+Y8tsYcBe12ob2Z6QKsxs8PLd/mwVMevn5prFs8loygjR1AuwtEM6fjXc5fbvn0
pMCr048MQmIhqz4bt+KW/sEZ4/Al+P5kSxQuxW12R0kgCszpk5dfp4XlIQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAD+IgRCn+9aFfcXPyMVFeJJqOTTMB8GA1UdIwQY
MBaAFPuVn7kKFY8X3l2Clt+VRIKo1iEcMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS01V2Z1UW9WanhmZVhZS1czNVZFZ3FqV0lSdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvZTMzNmFmLTQ1OTEtNGQzNS05NTM2
LTVhYmY5YTA0MjkzZS8xLzEtNVdmdVFvVmp4ZmVYWUtXMzVWRWdxaldJUncubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA5L2UzMzZhZi00NTkxLTRkMzUtOTUzNi01YWJmOWEwNDI5
M2UvMS8xLTVXZnVRb1ZqeGZlWFlLVzM1VkVncWpXSVJ3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjS1L
hFB4Vl895u4uRLISpKZH6MsrlJx28ckOGk2OYGIiEp9Uk4l/8swMDZjeZADsJGBI
D+fEb4c50eT82pS/UDkc8CfVztP52vm3G3iFr5PJ3J0rO7dRZnoBmEPIp9PLhju2
i/oIJu3QaVseCOS5hZ9bk7W9wGbgjNrBx2ieIobbxG1Z3OagkaJgnTL1FiyPmfAR
yrHT+UxnPNd1H9EtyVLQy/UIlzo56lmzp3jd/L/A2IbFtrEGRAY9eHv3CBHcwJmZ
y0e9aCJRbwI6pwNXCud8vTCs29MdK0Q5BkCHGHM95lVl7q7c48PKkKNpy2kZyEaC
JT8OPI2muesvvd37dg==
-----END CERTIFICATE-----
Generated at Thu Jul 4 04:40:59 2024 by rpki-client on console-ams.rpki-client.org