Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
File:                     eRmmrv08qPUPyPNKs9FHklbbnXg.mft (raw, json)
Hash identifier:          0FmeStZa8GXpE0K1AuIiZWorOWniGyOjd6UF9KdDp6o=
Subject key identifier:   29:EB:AB:6C:AD:2E:1C:EC:2D:65:8A:CC:9E:E4:11:E4:DD:98:16:6F
Authority key identifier: 79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
Certificate issuer:       /CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Certificate serial:       01901DEABAA454A949D46A5EC8483293EF95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
Manifest number:          1154
Signing time:             Sat 15 Jun 2024 22:00:40 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:40 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:40 +0000
Files and hashes:         1: eRmmrv08qPUPyPNKs9FHklbbnXg.crl (hash: /+z4+TitWanXcX6TWjfyakyXLuikXR8I5qaY7x3XHjQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:ba:a4:54:a9:49:d4:6a:5e:c8:48:32:93:ef:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
        Validity
            Not Before: Jun 15 22:00:40 2024 GMT
            Not After : Jun 16 22:00:40 2024 GMT
        Subject: CN=29ebab6cad2e1cec2d658acc9ee411e4dd98166f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ef:13:f4:1b:86:69:c5:37:92:a7:12:da:cc:
                    5f:a0:0c:7b:65:ba:39:b4:98:66:be:05:b9:fb:70:
                    c7:75:74:52:4c:ac:07:6c:38:8c:9b:83:de:05:e3:
                    80:28:96:d5:1d:26:5c:30:76:c8:73:4e:d0:24:16:
                    73:1d:53:5d:fb:bc:06:9b:dc:ae:51:f6:8f:fc:1f:
                    22:cc:f8:5e:b8:57:95:99:1a:45:bd:b7:59:11:e8:
                    0d:ef:fa:92:0a:97:de:1c:45:22:c9:f5:ab:20:1b:
                    a0:ba:11:24:a3:dd:bd:af:47:4f:44:c9:c2:38:b4:
                    c1:b3:f7:b6:f7:fc:86:f9:8f:8d:27:43:41:0b:20:
                    38:dc:3d:68:bf:09:18:48:33:2f:c7:cf:ff:71:26:
                    f4:32:cc:f5:07:28:34:27:d4:f0:d1:14:11:23:71:
                    be:cf:5d:41:7b:9c:fa:d6:32:6d:c6:a0:db:02:ab:
                    bc:ac:15:de:2b:6e:b2:61:d0:95:f0:ae:b1:4d:6a:
                    92:c9:5d:8f:d1:7f:87:29:c7:94:1e:28:f2:61:66:
                    e7:f8:bc:bd:1c:2e:24:20:54:a8:ca:99:cf:68:58:
                    13:4e:b7:43:1e:0c:f5:01:f2:48:f0:63:c1:44:60:
                    74:dc:71:03:ea:5c:71:bf:35:2e:33:f6:aa:65:e6:
                    4c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EB:AB:6C:AD:2E:1C:EC:2D:65:8A:CC:9E:E4:11:E4:DD:98:16:6F
            X509v3 Authority Key Identifier:
                keyid:79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:64:7a:5f:4b:69:da:21:3e:05:6f:d1:a1:29:37:9c:47:da:
         dd:14:c1:e7:0d:1f:e7:54:b4:1c:94:d5:24:3a:aa:4e:99:a2:
         47:cf:ba:de:06:7f:4c:68:86:2a:62:17:a9:5a:1d:7c:32:6c:
         5d:32:eb:57:10:4f:dd:56:bb:bf:83:45:7c:8c:aa:2e:5a:52:
         14:43:ee:ff:3b:53:a3:be:e6:45:24:0f:19:9a:a9:a6:af:b3:
         26:c8:42:a1:0f:1e:a1:20:3b:70:a9:7b:e4:a3:fd:27:0d:b1:
         02:fa:60:fc:4c:e5:61:9f:c5:4c:61:34:73:59:2b:c0:2f:ad:
         bd:e0:ba:7e:5b:29:2c:64:11:f1:fe:51:d3:32:d9:81:7e:fa:
         74:95:43:73:a8:c3:9f:29:cf:03:3d:d3:df:fe:3e:41:fc:a5:
         6a:89:54:a9:b9:bc:21:95:10:d2:90:30:31:43:04:5d:95:80:
         46:8f:22:24:5c:5b:82:bb:49:29:3e:fd:11:4c:d0:16:a7:28:
         b5:43:ae:43:5d:47:ce:87:e9:7b:19:52:68:97:57:b0:6f:96:
         dd:53:4d:47:4b:ec:45:e9:62:00:09:e4:0b:21:40:09:09:ef:
         19:13:fa:2b:09:8b:8e:14:48:83:a3:04:1b:40:0f:65:8e:62:
         a0:89:8f:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd6rqkVKlJ1GpeyEgyk++VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MTlhNmFlZmQzY2E4ZjUwZmM4ZjM0YWIzZDE0NzkyNTZk
YjlkNzgwHhcNMjQwNjE1MjIwMDQwWhcNMjQwNjE2MjIwMDQwWjAzMTEwLwYDVQQD
EygyOWViYWI2Y2FkMmUxY2VjMmQ2NThhY2M5ZWU0MTFlNGRkOTgxNjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzO8T9BuGacU3kqcS2sxfoAx7Zbo5
tJhmvgW5+3DHdXRSTKwHbDiMm4PeBeOAKJbVHSZcMHbIc07QJBZzHVNd+7wGm9yu
UfaP/B8izPheuFeVmRpFvbdZEegN7/qSCpfeHEUiyfWrIBuguhEko929r0dPRMnC
OLTBs/e29/yG+Y+NJ0NBCyA43D1ovwkYSDMvx8//cSb0Msz1Byg0J9Tw0RQRI3G+
z11Be5z61jJtxqDbAqu8rBXeK26yYdCV8K6xTWqSyV2P0X+HKceUHijyYWbn+Ly9
HC4kIFSoypnPaFgTTrdDHgz1AfJI8GPBRGB03HED6lxxvzUuM/aqZeZMGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnrq2ytLhzsLWWKzJ7kEeTdmBZvMB8GA1UdIwQY
MBaAFHkZpq79PKj1D8jzSrPRR5JW2514MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVJtbXJ2MDhxUFVQeVBOS3M5RkhrbGJiblhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8xNTBhMzYtZTU5ZS00OGRhLWFjNjAt
OTExZTgzOTA0Y2ExLzEvZVJtbXJ2MDhxUFVQeVBOS3M5RkhrbGJiblhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8xNTBhMzYtZTU5ZS00OGRhLWFjNjAtOTExZTgzOTA0Y2Ex
LzEvZVJtbXJ2MDhxUFVQeVBOS3M5RkhrbGJiblhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVmR6X0tp
2iE+BW/RoSk3nEfa3RTB5w0f51S0HJTVJDqqTpmiR8+63gZ/TGiGKmIXqVodfDJs
XTLrVxBP3Va7v4NFfIyqLlpSFEPu/ztTo77mRSQPGZqppq+zJshCoQ8eoSA7cKl7
5KP9Jw2xAvpg/EzlYZ/FTGE0c1krwC+tveC6flspLGQR8f5R0zLZgX76dJVDc6jD
nynPAz3T3/4+QfylaolUqbm8IZUQ0pAwMUMEXZWARo8iJFxbgrtJKT79EUzQFqco
tUOuQ11HzofpexlSaJdXsG+W3VNNR0vsReliAAnkCyFACQnvGRP6KwmLjhRIg6ME
G0APZY5ioImPqA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:05:48 2024 by rpki-client on console-fra.rpki-client.org