Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
File:                     DcHMqlhPs5FOeS_VOQ47otMDM4w.mft (raw, json)
Hash identifier:          Axtabe0sMh+GLgOrRb8FmtGsZ2oaOWIWC97HX+aFKjs=
Subject key identifier:   F1:5B:5B:D3:57:58:39:48:93:B8:D7:7A:D8:FD:B6:4F:EF:43:A7:57
Authority key identifier: 0D:C1:CC:AA:58:4F:B3:91:4E:79:2F:D5:39:0E:3B:A2:D3:03:33:8C
Certificate issuer:       /CN=0dc1ccaa584fb3914e792fd5390e3ba2d303338c
Certificate serial:       01901D460C68AC359DA5F8758184925E27E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
Manifest number:          0B8B
Signing time:             Sat 15 Jun 2024 19:00:48 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:48 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:48 +0000
Files and hashes:         1: DcHMqlhPs5FOeS_VOQ47otMDM4w.crl (hash: izBT6O3xfzqh4qBCSrDFKt8t8W+WbCq58sqpWME5ceU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:0c:68:ac:35:9d:a5:f8:75:81:84:92:5e:27:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dc1ccaa584fb3914e792fd5390e3ba2d303338c
        Validity
            Not Before: Jun 15 19:00:48 2024 GMT
            Not After : Jun 16 19:00:48 2024 GMT
        Subject: CN=f15b5bd35758394893b8d77ad8fdb64fef43a757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a7:74:c3:9b:8c:a7:f7:fd:d9:5a:1b:5b:65:
                    c9:93:b5:bb:81:99:8c:49:82:c3:7f:9e:3f:d8:c0:
                    8d:ec:ce:14:34:e7:7a:2f:38:d7:63:4f:4a:a4:72:
                    80:c0:c6:fa:93:f8:6c:7c:d6:22:44:4f:d6:de:09:
                    09:48:3d:af:0d:ae:f1:34:31:7c:08:5e:c5:35:09:
                    7a:8d:98:af:27:68:2e:f0:3f:56:7b:29:8d:33:a8:
                    73:b9:3e:48:05:9d:37:92:cd:15:c9:f5:87:37:9c:
                    6b:d8:2a:ca:9a:26:5b:46:88:65:c9:93:86:dd:4b:
                    8c:f7:85:bd:5a:63:ce:c4:8f:bb:e1:cd:58:0e:2d:
                    37:15:46:26:fc:82:2c:43:b7:c5:cd:bb:5f:63:6b:
                    1a:ca:3b:7c:7f:a8:53:1b:92:e5:2d:0c:af:d8:6a:
                    08:e5:a3:2f:94:47:3e:70:8b:e4:27:16:c4:e1:12:
                    6f:36:d6:9b:40:cf:cc:34:76:ab:7f:e7:7c:db:ac:
                    d9:12:f0:a1:b7:d5:41:8c:96:72:d7:21:73:5f:5b:
                    cd:77:82:8e:9f:59:04:e7:f9:d5:47:81:d2:3d:7f:
                    bd:b3:2e:00:e2:90:34:2f:16:ec:a6:45:d6:e8:54:
                    89:e9:a8:a2:72:2e:0b:c9:04:3d:f8:6b:e9:d9:e7:
                    2e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5B:5B:D3:57:58:39:48:93:B8:D7:7A:D8:FD:B6:4F:EF:43:A7:57
            X509v3 Authority Key Identifier:
                keyid:0D:C1:CC:AA:58:4F:B3:91:4E:79:2F:D5:39:0E:3B:A2:D3:03:33:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:71:32:24:74:f9:ff:30:c9:35:a5:c2:e0:e8:36:ad:50:f1:
         6a:69:e8:b8:c3:a7:2f:91:d5:42:59:a9:f6:03:9b:e5:c1:35:
         8d:14:fb:52:f1:85:72:5f:e6:8a:07:5e:e3:61:3d:2e:26:59:
         42:34:ca:f1:96:a5:61:83:a5:d3:7d:7e:59:22:bf:d8:c4:07:
         6c:2a:89:6d:5e:e4:db:29:21:3b:61:01:37:cd:49:39:7c:af:
         c1:0c:59:b5:20:05:ed:0e:b5:73:f1:74:a2:a1:93:1f:fd:8b:
         04:a5:09:e8:48:83:d3:94:31:52:d9:2b:c4:13:42:32:70:73:
         17:7e:17:9f:2c:13:d9:a3:02:ff:0c:4f:e1:c0:89:0d:75:1a:
         82:e5:b6:86:8a:6a:4c:92:e5:3b:35:4b:bd:05:26:32:1b:be:
         94:c2:26:14:0d:d1:5b:74:3b:bc:29:bb:52:0e:a0:9d:76:6d:
         19:60:2c:51:35:38:38:49:fb:2a:6d:6b:a7:23:09:5f:11:17:
         d4:d8:97:91:cb:50:d9:74:5f:1b:27:9e:a7:ad:42:9e:32:bf:
         34:c5:0b:50:4a:b0:ee:fb:71:ba:ee:7c:7a:f1:4a:11:46:1f:
         bb:61:7a:58:2d:cf:dd:d2:33:5b:88:32:0d:3c:ec:ab:50:0c:
         ad:76:6f:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdRgxorDWdpfh1gYSSXifkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYzFjY2FhNTg0ZmIzOTE0ZTc5MmZkNTM5MGUzYmEyZDMw
MzMzOGMwHhcNMjQwNjE1MTkwMDQ4WhcNMjQwNjE2MTkwMDQ4WjAzMTEwLwYDVQQD
EyhmMTViNWJkMzU3NTgzOTQ4OTNiOGQ3N2FkOGZkYjY0ZmVmNDNhNzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqd0w5uMp/f92VobW2XJk7W7gZmM
SYLDf54/2MCN7M4UNOd6LzjXY09KpHKAwMb6k/hsfNYiRE/W3gkJSD2vDa7xNDF8
CF7FNQl6jZivJ2gu8D9WeymNM6hzuT5IBZ03ks0VyfWHN5xr2CrKmiZbRohlyZOG
3UuM94W9WmPOxI+74c1YDi03FUYm/IIsQ7fFzbtfY2sayjt8f6hTG5LlLQyv2GoI
5aMvlEc+cIvkJxbE4RJvNtabQM/MNHarf+d826zZEvCht9VBjJZy1yFzX1vNd4KO
n1kE5/nVR4HSPX+9sy4A4pA0LxbspkXW6FSJ6aiici4LyQQ9+Gvp2ecuowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFbW9NXWDlIk7jXetj9tk/vQ6dXMB8GA1UdIwQY
MBaAFA3BzKpYT7ORTnkv1TkOO6LTAzOMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGNITXFsaFBzNUZPZVNfVk9RNDdvdE1ETTR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yM2RhMWMtNDM1Yy00YzgzLWEyOTUt
YmY4NWNkMjU0MjdlLzEvRGNITXFsaFBzNUZPZVNfVk9RNDdvdE1ETTR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8yM2RhMWMtNDM1Yy00YzgzLWEyOTUtYmY4NWNkMjU0Mjdl
LzEvRGNITXFsaFBzNUZPZVNfVk9RNDdvdE1ETTR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsnEyJHT5
/zDJNaXC4Og2rVDxamnouMOnL5HVQlmp9gOb5cE1jRT7UvGFcl/migde42E9LiZZ
QjTK8ZalYYOl031+WSK/2MQHbCqJbV7k2ykhO2EBN81JOXyvwQxZtSAF7Q61c/F0
oqGTH/2LBKUJ6EiD05QxUtkrxBNCMnBzF34XnywT2aMC/wxP4cCJDXUaguW2hopq
TJLlOzVLvQUmMhu+lMImFA3RW3Q7vCm7Ug6gnXZtGWAsUTU4OEn7Km1rpyMJXxEX
1NiXkctQ2XRfGyeep61CnjK/NMULUEqw7vtxuu58evFKEUYfu2F6WC3P3dIzW4gy
DTzsq1AMrXZvNA==
-----END CERTIFICATE-----