Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.mft
File:                     1K5pV43Ol3ozqindV8oZD6aHd_o.mft (raw, json)
Hash identifier:          wHs7yGZM5KW1jA4C6ljFLvY1gszn95Xi8o3ZhLkN2SA=
Subject key identifier:   B0:D2:0B:A0:BA:EE:EE:89:C6:55:BE:2A:34:59:66:93:8B:7F:2B:A9
Authority key identifier: D4:AE:69:57:8D:CE:97:7A:33:AA:29:DD:57:CA:19:0F:A6:87:77:FA
Certificate issuer:       /CN=d4ae69578dce977a33aa29dd57ca190fa68777fa
Certificate serial:       01901DEC4FA53E3889C7E5A9C91139C3C98C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1K5pV43Ol3ozqindV8oZD6aHd_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.mft
Manifest number:          083C
Signing time:             Sat 15 Jun 2024 22:02:24 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:24 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:24 +0000
Files and hashes:         1: 1K5pV43Ol3ozqindV8oZD6aHd_o.crl (hash: 3Sy/JlYrtMgzp6kx657+6xOABohopvfn6jnHhZFFoy4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1K5pV43Ol3ozqindV8oZD6aHd_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:4f:a5:3e:38:89:c7:e5:a9:c9:11:39:c3:c9:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4ae69578dce977a33aa29dd57ca190fa68777fa
        Validity
            Not Before: Jun 15 22:02:24 2024 GMT
            Not After : Jun 16 22:02:24 2024 GMT
        Subject: CN=b0d20ba0baeeee89c655be2a345966938b7f2ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cf:61:b4:f2:2f:40:64:47:85:06:1b:d4:d7:
                    3c:f6:a5:cb:77:84:26:6e:6a:4d:5f:13:1e:5c:5e:
                    fb:86:f5:f3:ca:fa:7b:db:21:6a:c1:71:4d:75:71:
                    e9:58:8b:bf:1c:cc:0d:d4:69:6d:99:06:b1:4f:74:
                    26:58:5d:05:9a:6a:0d:b9:dd:eb:1b:bb:f8:72:bc:
                    ab:e5:6d:c0:80:aa:80:c1:3e:b6:b2:d3:89:9b:8d:
                    e9:3d:c5:63:47:63:79:c7:75:89:b7:6f:e0:9e:ad:
                    6c:ee:0d:57:b9:ba:76:00:36:a8:4e:f7:ab:d1:47:
                    5e:c4:92:7c:af:64:7a:0c:07:7e:18:d8:cb:99:4b:
                    d2:80:13:32:c4:da:67:64:17:d1:14:3e:ae:71:cb:
                    25:8a:f6:2b:13:75:f5:5f:dc:8a:7d:94:2a:7f:c8:
                    b2:7e:26:2b:92:e8:e7:83:b9:e6:e4:a3:56:1c:f0:
                    b2:b1:af:cb:a5:a3:42:4f:6a:0b:0b:31:d9:76:05:
                    57:6a:0a:b6:f0:12:b8:e8:77:d2:6c:e5:e2:05:fc:
                    34:8b:9a:f2:ab:32:93:8e:cd:b2:9c:1a:c5:e6:ff:
                    1c:b5:e5:ac:f9:07:a1:ad:aa:7c:76:f2:29:9d:cf:
                    f0:1c:5c:84:e1:77:b1:20:52:8a:1d:0e:62:d6:7d:
                    c8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D2:0B:A0:BA:EE:EE:89:C6:55:BE:2A:34:59:66:93:8B:7F:2B:A9
            X509v3 Authority Key Identifier:
                keyid:D4:AE:69:57:8D:CE:97:7A:33:AA:29:DD:57:CA:19:0F:A6:87:77:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K5pV43Ol3ozqindV8oZD6aHd_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:67:29:fd:24:3d:1b:d3:8f:27:e2:9c:b0:82:f9:a8:91:b3:
         a0:c6:d1:1f:72:12:a2:ca:98:80:0e:ba:6e:bd:54:4d:e1:ef:
         16:50:23:53:b0:e9:92:49:ba:af:69:61:49:46:72:dc:8a:e7:
         4c:d6:3b:30:d4:38:d6:20:b8:48:d8:f5:d3:fa:74:16:5b:b5:
         b2:b7:cc:ed:df:41:51:39:0a:77:91:56:ee:f8:ca:cb:51:53:
         b4:f2:f4:fe:1d:ea:2d:93:da:df:31:e5:25:8e:38:58:87:f3:
         09:2e:bd:13:60:76:b4:2e:4c:8f:9c:2d:62:53:90:d0:d9:70:
         63:ba:69:21:be:19:98:00:43:d0:4d:71:0e:16:3e:2a:c9:ee:
         6a:d3:8a:12:c9:c6:77:ac:87:49:2a:73:72:dc:34:58:ea:68:
         6d:62:92:01:51:5e:06:c6:b2:7d:9a:77:4c:95:52:43:8c:47:
         ac:e3:7a:57:4e:f8:16:a6:23:43:3a:00:07:8a:f3:07:3a:09:
         ae:17:09:bc:a0:79:51:1e:1e:c9:ce:b7:25:48:86:c2:9f:22:
         96:00:aa:90:11:f4:d0:44:28:4c:b5:cc:0e:6b:b5:be:ae:01:
         04:56:5e:7b:f0:e8:44:6e:a8:2c:1d:7b:88:74:28:f3:c3:94:
         2a:97:51:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7E+lPjiJx+WpyRE5w8mMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YWU2OTU3OGRjZTk3N2EzM2FhMjlkZDU3Y2ExOTBmYTY4
Nzc3ZmEwHhcNMjQwNjE1MjIwMjI0WhcNMjQwNjE2MjIwMjI0WjAzMTEwLwYDVQQD
EyhiMGQyMGJhMGJhZWVlZTg5YzY1NWJlMmEzNDU5NjY5MzhiN2YyYmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc9htPIvQGRHhQYb1Nc89qXLd4Qm
bmpNXxMeXF77hvXzyvp72yFqwXFNdXHpWIu/HMwN1GltmQaxT3QmWF0FmmoNud3r
G7v4cryr5W3AgKqAwT62stOJm43pPcVjR2N5x3WJt2/gnq1s7g1Xubp2ADaoTver
0UdexJJ8r2R6DAd+GNjLmUvSgBMyxNpnZBfRFD6uccslivYrE3X1X9yKfZQqf8iy
fiYrkujng7nm5KNWHPCysa/LpaNCT2oLCzHZdgVXagq28BK46HfSbOXiBfw0i5ry
qzKTjs2ynBrF5v8cteWs+Qehrap8dvIpnc/wHFyE4XexIFKKHQ5i1n3IUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDSC6C67u6JxlW+KjRZZpOLfyupMB8GA1UdIwQY
MBaAFNSuaVeNzpd6M6op3VfKGQ+mh3f6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUs1cFY0M09sM296cWluZFY4b1pENmFIZF9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iZDg5MDAtZWM5NS00NzViLTg5Yjct
YjRmMjk3N2QxOTZiLzEvMUs1cFY0M09sM296cWluZFY4b1pENmFIZF9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9iZDg5MDAtZWM5NS00NzViLTg5YjctYjRmMjk3N2QxOTZi
LzEvMUs1cFY0M09sM296cWluZFY4b1pENmFIZF9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2cp/SQ9
G9OPJ+KcsIL5qJGzoMbRH3ISosqYgA66br1UTeHvFlAjU7Dpkkm6r2lhSUZy3Irn
TNY7MNQ41iC4SNj10/p0Flu1srfM7d9BUTkKd5FW7vjKy1FTtPL0/h3qLZPa3zHl
JY44WIfzCS69E2B2tC5Mj5wtYlOQ0NlwY7ppIb4ZmABD0E1xDhY+KsnuatOKEsnG
d6yHSSpzctw0WOpobWKSAVFeBsayfZp3TJVSQ4xHrON6V074FqYjQzoAB4rzBzoJ
rhcJvKB5UR4eyc63JUiGwp8ilgCqkBH00EQoTLXMDmu1vq4BBFZee/DoRG6oLB17
iHQo88OUKpdRhQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:09:17 2024 by rpki-client on console-fra.rpki-client.org