Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
File:                     w0S4v8CjT0cEZFKpIb8BuYFjaik.mft (raw, json)
Hash identifier:          d0Jo1woecB/QNQmnIuahdPkAi6NnlkDsW3XcjdsaDAo=
Subject key identifier:   E3:4A:EF:5B:54:50:B6:2E:D6:39:9E:62:83:11:A3:2A:24:3F:AE:6B
Authority key identifier: C3:44:B8:BF:C0:A3:4F:47:04:64:52:A9:21:BF:01:B9:81:63:6A:29
Certificate issuer:       /CN=c344b8bfc0a34f47046452a921bf01b981636a29
Certificate serial:       01904189F5AB3DD3298008A62362FF021054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
Manifest number:          0D7D
Signing time:             Sat 22 Jun 2024 20:01:18 +0000
Manifest this update:     Sat 22 Jun 2024 20:01:18 +0000
Manifest next update:     Sun 23 Jun 2024 20:01:18 +0000
Files and hashes:         1: w0S4v8CjT0cEZFKpIb8BuYFjaik.crl (hash: XNvdvR8e8cOHrdszXdT4uIYN5H7AsHdMsTpKHR3llaw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 20:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:89:f5:ab:3d:d3:29:80:08:a6:23:62:ff:02:10:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c344b8bfc0a34f47046452a921bf01b981636a29
        Validity
            Not Before: Jun 22 20:01:18 2024 GMT
            Not After : Jun 23 20:01:18 2024 GMT
        Subject: CN=e34aef5b5450b62ed6399e628311a32a243fae6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e7:fb:58:6b:84:64:c4:0b:95:e5:46:0f:3b:
                    b2:03:68:b4:be:19:e5:42:a6:16:b9:07:63:8e:30:
                    3d:2d:29:f8:67:61:4e:a6:46:9d:03:b9:1a:9d:f6:
                    4d:3e:24:9f:58:69:fe:ce:78:c0:a9:d1:30:39:4e:
                    5e:1b:5b:2d:c5:4e:3f:db:42:db:1f:48:7a:28:b6:
                    b9:63:ee:4a:eb:b8:d4:eb:53:93:a0:90:85:22:f6:
                    b5:42:9d:35:cd:96:fa:ef:31:9c:60:d4:ab:9e:2f:
                    47:60:d1:56:eb:23:47:08:90:a7:56:4d:6f:8f:54:
                    3a:89:af:fb:5d:32:ab:28:6e:9d:bf:7f:59:d6:5e:
                    3f:be:38:94:4b:14:7d:13:79:e3:b0:4a:fb:e0:3d:
                    4d:d4:df:94:54:b4:33:8c:0b:ee:21:1f:bb:60:a5:
                    a7:95:18:b5:d6:23:3f:77:b1:73:b7:07:ca:67:61:
                    80:89:21:23:32:0a:68:c9:5a:cb:08:4e:e0:05:71:
                    2f:ff:2b:45:e8:2c:44:4d:02:1d:82:f0:37:c2:d1:
                    ad:44:01:1c:23:d8:d3:19:a1:ed:65:44:78:ae:c8:
                    63:eb:3e:41:da:02:25:7e:be:30:22:70:ea:b7:6e:
                    8c:86:cb:56:d2:d0:82:61:20:88:7a:29:3e:f3:fe:
                    20:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4A:EF:5B:54:50:B6:2E:D6:39:9E:62:83:11:A3:2A:24:3F:AE:6B
            X509v3 Authority Key Identifier:
                keyid:C3:44:B8:BF:C0:A3:4F:47:04:64:52:A9:21:BF:01:B9:81:63:6A:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:53:47:4d:7b:13:a8:7d:18:0a:7d:5a:58:e3:4d:b6:b8:95:
         c2:1c:c7:10:5b:fc:38:84:55:e6:41:c3:60:6e:40:66:68:ce:
         51:6d:03:eb:35:29:1b:9c:28:e6:05:f4:5f:74:4c:56:e7:77:
         cd:d1:35:ac:bc:7c:e7:a8:9e:75:ef:0d:39:33:e6:46:7d:35:
         13:b7:ff:b1:25:3c:cd:12:e6:1f:21:f7:d6:e3:64:db:64:a3:
         8a:4e:00:a5:42:f2:06:3b:41:96:d9:3f:6f:61:43:68:6b:c5:
         fa:85:dd:53:85:f9:9a:5c:90:50:59:0b:6c:60:11:27:87:81:
         9a:4b:3d:3b:d0:1f:b4:92:19:d9:2c:71:c2:63:0b:0f:da:6d:
         24:f3:7f:4e:e9:bf:a3:21:49:da:2b:bc:03:e6:bf:a0:4c:71:
         e3:fe:54:8a:91:2b:4a:61:f1:0d:4b:1f:e0:73:4b:4a:05:58:
         d7:46:be:d3:37:e6:70:60:b7:be:48:80:da:f0:29:a6:57:eb:
         ec:dc:a8:f4:10:e8:cb:0c:5b:66:74:f9:b2:ab:7d:fe:33:dd:
         dd:00:9d:3e:bc:b2:97:cb:d1:e1:7b:2d:3e:86:cc:f9:db:d6:
         c7:c9:ff:66:f6:12:fb:ab:b9:59:82:3c:cf:38:3a:ef:f3:5e:
         e2:4c:0c:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBBifWrPdMpgAimI2L/AhBUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNDRiOGJmYzBhMzRmNDcwNDY0NTJhOTIxYmYwMWI5ODE2
MzZhMjkwHhcNMjQwNjIyMjAwMTE4WhcNMjQwNjIzMjAwMTE4WjAzMTEwLwYDVQQD
EyhlMzRhZWY1YjU0NTBiNjJlZDYzOTllNjI4MzExYTMyYTI0M2ZhZTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+f7WGuEZMQLleVGDzuyA2i0vhnl
QqYWuQdjjjA9LSn4Z2FOpkadA7kanfZNPiSfWGn+znjAqdEwOU5eG1stxU4/20Lb
H0h6KLa5Y+5K67jU61OToJCFIva1Qp01zZb67zGcYNSrni9HYNFW6yNHCJCnVk1v
j1Q6ia/7XTKrKG6dv39Z1l4/vjiUSxR9E3njsEr74D1N1N+UVLQzjAvuIR+7YKWn
lRi11iM/d7FztwfKZ2GAiSEjMgpoyVrLCE7gBXEv/ytF6CxETQIdgvA3wtGtRAEc
I9jTGaHtZUR4rshj6z5B2gIlfr4wInDqt26MhstW0tCCYSCIeik+8/4gmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONK71tUULYu1jmeYoMRoyokP65rMB8GA1UdIwQY
MBaAFMNEuL/Ao09HBGRSqSG/AbmBY2opMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzBTNHY4Q2pUMGNFWkZLcEliOEJ1WUZqYWlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iMzNhNGQtZGI5NC00OTYzLThjZTQt
YTA0MzcwODc0ZDE2LzEvdzBTNHY4Q2pUMGNFWkZLcEliOEJ1WUZqYWlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9iMzNhNGQtZGI5NC00OTYzLThjZTQtYTA0MzcwODc0ZDE2
LzEvdzBTNHY4Q2pUMGNFWkZLcEliOEJ1WUZqYWlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVNHTXsT
qH0YCn1aWONNtriVwhzHEFv8OIRV5kHDYG5AZmjOUW0D6zUpG5wo5gX0X3RMVud3
zdE1rLx856iede8NOTPmRn01E7f/sSU8zRLmHyH31uNk22Sjik4ApULyBjtBltk/
b2FDaGvF+oXdU4X5mlyQUFkLbGARJ4eBmks9O9AftJIZ2SxxwmMLD9ptJPN/Tum/
oyFJ2iu8A+a/oExx4/5UipErSmHxDUsf4HNLSgVY10a+0zfmcGC3vkiA2vApplfr
7Nyo9BDoywxbZnT5sqt9/jPd3QCdPryyl8vR4XstPobM+dvWx8n/ZvYS+6u5WYI8
zzg67/Ne4kwMoA==
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:15:52 2024 by rpki-client on console-ams.rpki-client.org