Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft
File:                     uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft (raw, json)
Hash identifier:          li9HoFTVrF+Pb6HRkrJsNos3StCqO3e7ODGBdXaYJ0E=
Subject key identifier:   C1:AF:B8:94:6D:4C:87:1E:0D:93:1D:EB:A9:33:83:D9:FC:67:1B:40
Authority key identifier: B8:81:77:A9:A3:46:9D:B3:AC:F1:0A:98:F6:C0:39:31:E3:55:15:FA
Certificate issuer:       /CN=b88177a9a3469db3acf10a98f6c03931e35515fa
Certificate serial:       01901E58DB03D51F3E9F19AD3E5F62E6A998
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uIF3qaNGnbOs8QqY9sA5MeNVFfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft
Manifest number:          015F
Signing time:             Sun 16 Jun 2024 00:00:57 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:57 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:57 +0000
Files and hashes:         1: uIF3qaNGnbOs8QqY9sA5MeNVFfo.crl (hash: ks4O8u0I0eIZyGAV/zJwkkZRjZAZQUKm9sf7KzPmVwA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uIF3qaNGnbOs8QqY9sA5MeNVFfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:db:03:d5:1f:3e:9f:19:ad:3e:5f:62:e6:a9:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b88177a9a3469db3acf10a98f6c03931e35515fa
        Validity
            Not Before: Jun 16 00:00:57 2024 GMT
            Not After : Jun 17 00:00:57 2024 GMT
        Subject: CN=c1afb8946d4c871e0d931deba93383d9fc671b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:71:32:de:a5:65:99:fc:6f:47:1f:a9:37:e2:
                    3e:01:a3:ca:88:d0:74:cb:a3:59:3f:7d:d4:1d:62:
                    3f:91:75:e1:48:a6:dd:cd:f3:2c:7c:e5:6d:1e:6e:
                    c0:95:f4:85:e2:0e:d0:13:3a:2f:08:2b:b5:8f:20:
                    56:e5:90:f9:97:21:4c:c9:a3:67:3e:6a:ca:4c:0d:
                    0b:0e:17:37:2c:a5:77:38:7f:ad:a4:7c:94:b0:a1:
                    2e:3c:54:23:f1:23:8d:f3:e4:ab:7f:80:a4:ba:0a:
                    b6:06:07:3e:c8:03:8c:c5:e7:2b:06:35:b2:39:a1:
                    d7:61:7c:94:83:30:a3:33:6f:69:18:d2:96:62:b5:
                    bd:5e:19:b8:8a:9b:e9:93:a3:89:12:a3:00:5f:79:
                    53:c8:2a:86:10:e7:96:5a:ef:6e:64:8a:63:77:2b:
                    de:e5:3a:d8:b3:6d:14:a4:2f:1a:15:ca:26:0a:36:
                    43:a2:57:8e:7a:27:29:87:87:8f:0b:a2:30:55:a9:
                    6f:f7:3e:7c:e3:43:dd:e9:e2:6b:ca:bc:06:36:de:
                    0a:51:7d:4b:02:a1:54:cd:eb:04:19:ed:47:d4:aa:
                    58:14:d3:ae:f6:34:61:da:e1:72:4d:ef:6e:06:a3:
                    61:7f:3f:4c:d3:bb:53:98:4e:25:b3:ef:85:ec:e4:
                    3f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AF:B8:94:6D:4C:87:1E:0D:93:1D:EB:A9:33:83:D9:FC:67:1B:40
            X509v3 Authority Key Identifier:
                keyid:B8:81:77:A9:A3:46:9D:B3:AC:F1:0A:98:F6:C0:39:31:E3:55:15:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uIF3qaNGnbOs8QqY9sA5MeNVFfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:93:77:2a:96:ba:69:d1:03:2e:8a:d1:e0:c8:87:2c:39:bb:
         82:37:4a:7a:37:96:38:fc:6b:25:00:e2:a5:5a:5c:14:29:f7:
         0c:03:e7:ec:22:e1:18:0b:da:f4:16:be:fa:dd:94:4a:8c:a7:
         58:81:a5:93:61:15:4c:7a:05:cb:eb:ab:f7:f9:e3:fb:cc:7c:
         61:a6:96:6b:fb:1a:80:bb:60:62:71:2f:7e:6f:7d:c0:24:cc:
         aa:4f:cc:65:6d:a1:be:2e:71:6d:54:1b:86:6f:fe:b1:48:50:
         a6:f9:2c:28:7d:22:dd:4e:e5:64:cc:99:08:24:e7:98:ef:08:
         e4:0a:42:3c:9e:0e:21:f4:e4:03:9b:44:48:0a:5b:16:26:0d:
         e9:fc:42:4a:93:65:8c:84:0e:4a:00:2a:03:85:b2:64:76:0a:
         39:e4:c4:69:9e:ed:33:83:cc:f2:de:6c:73:05:8d:e5:09:57:
         bc:4d:e5:3c:d3:6b:af:51:ad:4b:74:52:37:36:68:86:a7:2d:
         82:95:21:68:37:09:2f:d9:da:6e:9f:2f:7d:b9:47:62:1e:09:
         fd:7f:1e:15:13:aa:e5:13:9b:2a:30:19:f3:c6:d9:fd:30:38:
         e9:67:5a:de:f1:08:a7:e6:3c:e2:5b:bb:b4:76:3c:70:45:2b:
         08:79:08:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWNsD1R8+nxmtPl9i5qmYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ODE3N2E5YTM0NjlkYjNhY2YxMGE5OGY2YzAzOTMxZTM1
NTE1ZmEwHhcNMjQwNjE2MDAwMDU3WhcNMjQwNjE3MDAwMDU3WjAzMTEwLwYDVQQD
EyhjMWFmYjg5NDZkNGM4NzFlMGQ5MzFkZWJhOTMzODNkOWZjNjcxYjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnEy3qVlmfxvRx+pN+I+AaPKiNB0
y6NZP33UHWI/kXXhSKbdzfMsfOVtHm7AlfSF4g7QEzovCCu1jyBW5ZD5lyFMyaNn
PmrKTA0LDhc3LKV3OH+tpHyUsKEuPFQj8SON8+Srf4Ckugq2Bgc+yAOMxecrBjWy
OaHXYXyUgzCjM29pGNKWYrW9Xhm4ipvpk6OJEqMAX3lTyCqGEOeWWu9uZIpjdyve
5TrYs20UpC8aFcomCjZDoleOeicph4ePC6IwValv9z5840Pd6eJryrwGNt4KUX1L
AqFUzesEGe1H1KpYFNOu9jRh2uFyTe9uBqNhfz9M07tTmE4ls++F7OQ/PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGvuJRtTIceDZMd66kzg9n8ZxtAMB8GA1UdIwQY
MBaAFLiBd6mjRp2zrPEKmPbAOTHjVRX6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUlGM3FhTkduYk9zOFFxWTlzQTVNZU5WRmZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8yM2MwYTktNjhiMS00MGZkLWExZTct
ZWIwODg1YjkwMDNlLzEvdUlGM3FhTkduYk9zOFFxWTlzQTVNZU5WRmZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8yM2MwYTktNjhiMS00MGZkLWExZTctZWIwODg1YjkwMDNl
LzEvdUlGM3FhTkduYk9zOFFxWTlzQTVNZU5WRmZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm5N3Kpa6
adEDLorR4MiHLDm7gjdKejeWOPxrJQDipVpcFCn3DAPn7CLhGAva9Ba++t2USoyn
WIGlk2EVTHoFy+ur9/nj+8x8YaaWa/sagLtgYnEvfm99wCTMqk/MZW2hvi5xbVQb
hm/+sUhQpvksKH0i3U7lZMyZCCTnmO8I5ApCPJ4OIfTkA5tESApbFiYN6fxCSpNl
jIQOSgAqA4WyZHYKOeTEaZ7tM4PM8t5scwWN5QlXvE3lPNNrr1GtS3RSNzZohqct
gpUhaDcJL9nabp8vfblHYh4J/X8eFROq5RObKjAZ88bZ/TA46Wda3vEIp+Y84lu7
tHY8cEUrCHkIAA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 01:01:01 2024 by rpki-client on console-ams.rpki-client.org