Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dbbc5b-1da5-409c-b20e-4d8337a91d43/1/1SfpNS8U6Eg5l6O8wyLFE9KgfbY.mft
File:                     1SfpNS8U6Eg5l6O8wyLFE9KgfbY.mft (raw, json)
Hash identifier:          Q8iig7yZOVHAm58w4bYqBNKBGrum2x7MTYLJvDdI4rk=
Subject key identifier:   38:B7:8E:A1:17:ED:CC:DA:A6:23:86:8C:12:A0:88:8F:AC:BC:36:EE
Authority key identifier: D5:27:E9:35:2F:14:E8:48:39:97:A3:BC:C3:22:C5:13:D2:A0:7D:B6
Certificate issuer:       /CN=d527e9352f14e8483997a3bcc322c513d2a07db6
Certificate serial:       01901FD9DD304DB2EB2745B02751F19C2094
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1SfpNS8U6Eg5l6O8wyLFE9KgfbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/dbbc5b-1da5-409c-b20e-4d8337a91d43/1/1SfpNS8U6Eg5l6O8wyLFE9KgfbY.mft
Manifest number:          0448
Signing time:             Sun 16 Jun 2024 07:01:29 +0000
Manifest this update:     Sun 16 Jun 2024 07:01:29 +0000
Manifest next update:     Mon 17 Jun 2024 07:01:29 +0000
Files and hashes:         1: 1SfpNS8U6Eg5l6O8wyLFE9KgfbY.crl (hash: abzt+/A2JDwebe2AY5gU9NkDGRVYjU1x26r1SC9zDlY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/dbbc5b-1da5-409c-b20e-4d8337a91d43/1/1SfpNS8U6Eg5l6O8wyLFE9KgfbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/dbbc5b-1da5-409c-b20e-4d8337a91d43/1/1SfpNS8U6Eg5l6O8wyLFE9KgfbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1SfpNS8U6Eg5l6O8wyLFE9KgfbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:d9:dd:30:4d:b2:eb:27:45:b0:27:51:f1:9c:20:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d527e9352f14e8483997a3bcc322c513d2a07db6
        Validity
            Not Before: Jun 16 07:01:29 2024 GMT
            Not After : Jun 17 07:01:29 2024 GMT
        Subject: CN=38b78ea117edccdaa623868c12a0888facbc36ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ee:07:02:5f:1a:92:38:ba:24:81:89:2d:34:
                    14:88:f0:33:8f:32:16:5f:64:d6:f7:0c:90:65:6b:
                    dd:f9:a2:00:95:a8:62:25:7e:5c:42:a8:d3:20:86:
                    12:73:94:ea:23:bb:79:e5:4a:57:0a:b7:31:ba:4c:
                    88:4f:88:2e:f5:64:f5:ba:23:d6:c8:8a:58:fb:bc:
                    8a:05:49:c6:03:91:7e:c0:49:51:73:e8:8d:0f:7c:
                    30:a7:97:f4:15:09:3e:4f:de:4d:e8:0c:10:af:12:
                    75:4d:5a:00:16:8f:a4:9e:e8:e4:0c:ed:21:48:40:
                    9f:86:86:90:53:cb:5e:37:ba:ab:dd:f5:b6:3a:3d:
                    72:37:68:50:18:40:11:17:21:67:12:b0:a2:df:21:
                    39:78:0a:4d:ce:ca:bd:b5:71:c5:5a:04:a5:20:2d:
                    03:05:78:1c:a1:c5:39:40:3b:b5:5f:86:1a:54:3a:
                    2d:c9:6b:0d:ed:32:21:b8:81:b3:1e:db:28:40:c2:
                    ba:9e:2c:5a:a5:c7:01:06:64:28:4d:e8:0a:61:3f:
                    14:93:86:59:bc:7b:bc:34:ca:94:a3:c5:7d:eb:8f:
                    2a:d6:5a:37:4f:56:b4:94:73:1f:48:cf:97:04:f2:
                    ad:6e:4b:45:cc:1f:37:e5:07:ce:6c:7e:26:3a:ea:
                    5e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B7:8E:A1:17:ED:CC:DA:A6:23:86:8C:12:A0:88:8F:AC:BC:36:EE
            X509v3 Authority Key Identifier:
                keyid:D5:27:E9:35:2F:14:E8:48:39:97:A3:BC:C3:22:C5:13:D2:A0:7D:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SfpNS8U6Eg5l6O8wyLFE9KgfbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dbbc5b-1da5-409c-b20e-4d8337a91d43/1/1SfpNS8U6Eg5l6O8wyLFE9KgfbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dbbc5b-1da5-409c-b20e-4d8337a91d43/1/1SfpNS8U6Eg5l6O8wyLFE9KgfbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:a1:59:4f:97:19:2e:1f:27:fd:b0:03:ff:5f:a5:09:4f:75:
         f8:00:f2:a3:ea:8c:d8:3d:2e:e8:42:88:3c:f0:17:37:0f:f4:
         65:d8:71:c5:48:9e:ba:63:4d:92:da:8c:a5:da:9e:33:21:27:
         a2:07:6a:dc:20:c2:c9:77:3d:ac:60:d2:3b:48:90:70:5a:91:
         9b:57:fe:a8:0d:a0:36:0d:ba:5c:91:ce:f3:51:5b:d6:f9:14:
         f4:de:de:87:c5:57:fb:8c:22:39:f9:ac:a5:5f:d0:4e:cc:0f:
         da:74:73:94:c3:3a:c2:23:ac:cf:67:17:bb:c0:ba:ef:83:f6:
         78:50:3c:93:ee:d3:0c:c2:95:44:92:ce:f5:e5:0a:45:45:3f:
         67:16:d7:4e:6c:79:59:14:34:6a:75:b4:65:7c:ff:e4:ef:81:
         05:29:2e:21:24:bb:a2:49:5c:9b:f6:e7:97:6c:eb:7c:b3:b0:
         2a:dd:94:87:3d:75:88:5d:d8:17:23:87:73:9c:5a:23:e4:62:
         09:f2:86:83:0b:0e:59:21:88:3a:66:f7:dd:d1:16:ff:e3:d2:
         df:4e:81:0c:04:a1:ea:7c:b2:48:2b:13:90:d8:c0:d7:e4:51:
         3a:6c:ac:0a:27:65:2b:95:5e:44:36:a0:4b:4c:d9:52:2d:05:
         bf:6e:60:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAf2d0wTbLrJ0WwJ1HxnCCUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MjdlOTM1MmYxNGU4NDgzOTk3YTNiY2MzMjJjNTEzZDJh
MDdkYjYwHhcNMjQwNjE2MDcwMTI5WhcNMjQwNjE3MDcwMTI5WjAzMTEwLwYDVQQD
EygzOGI3OGVhMTE3ZWRjY2RhYTYyMzg2OGMxMmEwODg4ZmFjYmMzNmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O4HAl8akji6JIGJLTQUiPAzjzIW
X2TW9wyQZWvd+aIAlahiJX5cQqjTIIYSc5TqI7t55UpXCrcxukyIT4gu9WT1uiPW
yIpY+7yKBUnGA5F+wElRc+iND3wwp5f0FQk+T95N6AwQrxJ1TVoAFo+knujkDO0h
SECfhoaQU8teN7qr3fW2Oj1yN2hQGEARFyFnErCi3yE5eApNzsq9tXHFWgSlIC0D
BXgcocU5QDu1X4YaVDotyWsN7TIhuIGzHtsoQMK6nixapccBBmQoTegKYT8Uk4ZZ
vHu8NMqUo8V9648q1lo3T1a0lHMfSM+XBPKtbktFzB835QfObH4mOupe7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDi3jqEX7czapiOGjBKgiI+svDbuMB8GA1UdIwQY
MBaAFNUn6TUvFOhIOZejvMMixRPSoH22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVNmcE5TOFU2RWc1bDZPOHd5TEZFOUtnZmJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kYmJjNWItMWRhNS00MDljLWIyMGUt
NGQ4MzM3YTkxZDQzLzEvMVNmcE5TOFU2RWc1bDZPOHd5TEZFOUtnZmJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9kYmJjNWItMWRhNS00MDljLWIyMGUtNGQ4MzM3YTkxZDQz
LzEvMVNmcE5TOFU2RWc1bDZPOHd5TEZFOUtnZmJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw6FZT5cZ
Lh8n/bAD/1+lCU91+ADyo+qM2D0u6EKIPPAXNw/0ZdhxxUieumNNktqMpdqeMyEn
ogdq3CDCyXc9rGDSO0iQcFqRm1f+qA2gNg26XJHO81Fb1vkU9N7eh8VX+4wiOfms
pV/QTswP2nRzlMM6wiOsz2cXu8C674P2eFA8k+7TDMKVRJLO9eUKRUU/ZxbXTmx5
WRQ0anW0ZXz/5O+BBSkuISS7oklcm/bnl2zrfLOwKt2Uhz11iF3YFyOHc5xaI+Ri
CfKGgwsOWSGIOmb33dEW/+PS306BDASh6nyySCsTkNjA1+RROmysCidlK5VeRDag
S0zZUi0Fv25g9w==
-----END CERTIFICATE-----
Generated at Sun Jun 16 08:02:45 2024 by rpki-client on console-fra.rpki-client.org