Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
File:                     5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft (raw, json)
Hash identifier:          IxmmycfvVAk80wo4ThXkqbu/CtWpHOa7biSBeziz2Rk=
Subject key identifier:   BA:B6:20:C8:A5:DF:36:F5:57:57:9C:54:AE:E1:4F:69:DA:0A:EE:66
Authority key identifier: E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
Certificate issuer:       /CN=e578bc065072b40baf08416e216a1307b24bc44b
Certificate serial:       01901DEAABE6694058799E382240AF5A2753
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 22:00:36 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:36 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:36 +0000
Files and hashes:         1: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl (hash: 0gbYpc4z76dRIwAnpCNoyNyGtRpzyWombzgZBlTBFdM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:ab:e6:69:40:58:79:9e:38:22:40:af:5a:27:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e578bc065072b40baf08416e216a1307b24bc44b
        Validity
            Not Before: Jun 15 22:00:36 2024 GMT
            Not After : Jun 16 22:00:36 2024 GMT
        Subject: CN=bab620c8a5df36f557579c54aee14f69da0aee66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:91:28:99:2c:f8:70:b5:a8:bb:ac:1d:93:eb:
                    6d:28:41:da:c7:5f:6d:fe:38:c2:46:d0:a8:56:c9:
                    95:1b:aa:2e:4b:be:6a:6e:b8:76:47:47:be:0a:1a:
                    e3:77:4d:3e:f8:49:33:ef:c6:f6:97:63:5d:46:91:
                    c7:b8:b1:e7:22:71:e5:9f:95:c2:d0:d9:59:41:47:
                    76:18:62:d0:6f:12:31:ba:f4:b6:d7:d2:52:bb:33:
                    7c:57:28:06:28:ae:53:5e:9b:56:24:98:44:8a:7d:
                    b0:55:c9:71:3f:89:3b:3f:b4:ab:6d:3b:cb:72:08:
                    f2:50:98:22:7b:b3:37:e9:80:cb:63:70:c3:7a:25:
                    b3:7e:1c:88:12:58:e7:3b:57:71:3b:cf:ed:3b:4e:
                    e7:bd:e5:54:87:15:b2:56:57:28:36:b8:3f:7b:e4:
                    c7:87:7f:93:06:dc:82:1c:b5:87:05:aa:15:1f:97:
                    85:6e:1a:e4:64:dd:61:66:cb:83:a8:94:cf:ab:0d:
                    d4:ea:b7:bd:3b:f9:32:83:a5:5e:80:a5:75:9d:70:
                    b9:33:bf:43:f5:fd:b5:b4:e1:b9:58:56:6d:40:78:
                    4c:05:7e:a6:58:ce:f6:2e:53:96:e2:77:ee:ab:66:
                    fa:7f:cc:71:af:19:3a:a4:81:14:75:41:46:85:33:
                    0e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B6:20:C8:A5:DF:36:F5:57:57:9C:54:AE:E1:4F:69:DA:0A:EE:66
            X509v3 Authority Key Identifier:
                keyid:E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:f6:60:87:38:6f:09:7e:13:56:b3:f6:f0:63:ae:d3:25:4c:
         e8:5c:91:5e:24:97:d0:d1:61:e4:4e:d8:0a:af:6e:9b:53:79:
         81:f1:3b:ba:68:05:3b:57:b4:8b:fc:b5:6c:e3:07:21:53:bb:
         cf:19:93:2e:05:45:f9:28:50:45:72:10:96:be:5e:ab:44:01:
         76:80:34:68:8f:29:16:59:1c:65:6e:93:58:2e:bf:0b:f3:10:
         3e:c3:39:d2:73:eb:b5:2e:aa:74:9e:65:f3:2b:ae:eb:d5:e3:
         e6:93:4d:59:93:d6:0e:18:a6:0e:b3:b1:0a:55:c9:3d:08:4c:
         42:e9:a2:12:e2:8f:f2:89:0c:72:10:f2:b5:00:84:14:2a:97:
         4b:cf:73:52:65:9a:0d:92:86:a1:63:ef:3b:78:d5:11:73:b7:
         42:ad:cd:ef:2d:ea:f8:0a:bc:2f:ec:b2:6c:3d:43:6d:ef:21:
         ae:16:af:ae:1d:2f:8c:3c:7c:6d:4e:c6:f6:32:ce:39:db:84:
         3e:cd:ed:40:21:dd:e2:40:d9:d7:20:6d:9a:b8:53:d6:9a:8c:
         17:b3:03:da:c7:55:f8:f5:a5:13:ad:65:d9:3c:95:e1:0c:3a:
         db:36:f9:3f:04:f6:9b:90:94:ea:8c:4f:92:b0:af:eb:9f:1b:
         f8:77:77:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd6qvmaUBYeZ44IkCvWidTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NzhiYzA2NTA3MmI0MGJhZjA4NDE2ZTIxNmExMzA3YjI0
YmM0NGIwHhcNMjQwNjE1MjIwMDM2WhcNMjQwNjE2MjIwMDM2WjAzMTEwLwYDVQQD
EyhiYWI2MjBjOGE1ZGYzNmY1NTc1NzljNTRhZWUxNGY2OWRhMGFlZTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5EomSz4cLWou6wdk+ttKEHax19t
/jjCRtCoVsmVG6ouS75qbrh2R0e+Chrjd00++Ekz78b2l2NdRpHHuLHnInHln5XC
0NlZQUd2GGLQbxIxuvS219JSuzN8VygGKK5TXptWJJhEin2wVclxP4k7P7SrbTvL
cgjyUJgie7M36YDLY3DDeiWzfhyIEljnO1dxO8/tO07nveVUhxWyVlcoNrg/e+TH
h3+TBtyCHLWHBaoVH5eFbhrkZN1hZsuDqJTPqw3U6re9O/kyg6VegKV1nXC5M79D
9f21tOG5WFZtQHhMBX6mWM72LlOW4nfuq2b6f8xxrxk6pIEUdUFGhTMOuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLq2IMil3zb1V1ecVK7hT2naCu5mMB8GA1UdIwQY
MBaAFOV4vAZQcrQLrwhBbiFqEweyS8RLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83OWU1ODktYTJjMi00YjBhLWJmMWEt
ZmJmZjYwY2ZiOTZhLzEvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS83OWU1ODktYTJjMi00YjBhLWJmMWEtZmJmZjYwY2ZiOTZh
LzEvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt/Zghzhv
CX4TVrP28GOu0yVM6FyRXiSX0NFh5E7YCq9um1N5gfE7umgFO1e0i/y1bOMHIVO7
zxmTLgVF+ShQRXIQlr5eq0QBdoA0aI8pFlkcZW6TWC6/C/MQPsM50nPrtS6qdJ5l
8yuu69Xj5pNNWZPWDhimDrOxClXJPQhMQumiEuKP8okMchDytQCEFCqXS89zUmWa
DZKGoWPvO3jVEXO3Qq3N7y3q+Aq8L+yybD1Dbe8hrhavrh0vjDx8bU7G9jLOOduE
Ps3tQCHd4kDZ1yBtmrhT1pqMF7MD2sdV+PWlE61l2TyV4Qw62zb5PwT2m5CU6oxP
krCv658b+Hd3Bw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:50:11 2024 by rpki-client on console-ams.rpki-client.org