Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
File:                     ERRf3gGvgQdg7mG881TPlirEYNk.mft (raw, json)
Hash identifier:          nLrEC5dJMOh7NdxHm57zcZFzXcltssEhsu7d/wKqsKY=
Subject key identifier:   77:21:20:3A:F3:64:90:0D:F1:8D:79:49:CD:B5:DD:92:87:B6:B3:A0
Authority key identifier: 11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9
Certificate issuer:       /CN=11145fde01af810760ee61bcf354cf962ac460d9
Certificate serial:       01901DEC0047D9DA930CF00406C292B3A017
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
Manifest number:          0A2C
Signing time:             Sat 15 Jun 2024 22:02:04 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:04 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:04 +0000
Files and hashes:         1: ERRf3gGvgQdg7mG881TPlirEYNk.crl (hash: cfayA1DmJmfX1A/klZBxKtxiU7WKEE3Xo/wcjCYXLl8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:00:47:d9:da:93:0c:f0:04:06:c2:92:b3:a0:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11145fde01af810760ee61bcf354cf962ac460d9
        Validity
            Not Before: Jun 15 22:02:04 2024 GMT
            Not After : Jun 16 22:02:04 2024 GMT
        Subject: CN=7721203af364900df18d7949cdb5dd9287b6b3a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:84:5d:7b:ea:42:56:dd:3e:e6:23:41:da:c4:
                    20:7f:4c:db:50:26:db:86:b3:d0:b7:8b:57:d7:75:
                    b9:67:f1:b7:d4:21:1f:9b:dc:a1:35:fe:58:02:db:
                    01:81:d5:77:15:2a:24:8a:1f:c6:35:38:47:f8:a4:
                    3a:5c:5e:a3:47:28:0c:cc:dd:68:df:d2:6a:93:ae:
                    7d:e1:6e:db:c9:e1:42:cc:ba:c9:c4:50:52:65:00:
                    2f:fc:f8:6b:e3:46:2e:97:f5:72:74:31:74:fc:fa:
                    9f:a0:67:0f:79:31:d8:da:a1:e4:de:a3:6f:cf:33:
                    1a:46:1b:87:1b:e6:ad:34:2d:c0:63:14:c8:93:55:
                    7a:03:47:c1:bc:67:ff:c2:78:a4:22:74:ff:be:4e:
                    86:af:38:88:40:8e:0a:12:8a:d2:3a:67:c1:e7:2b:
                    2d:f7:28:2a:25:f9:15:08:02:2f:ea:1e:ca:d0:d4:
                    fe:24:11:da:8b:ad:0b:87:ae:70:2d:55:93:f9:de:
                    68:bf:69:6b:81:88:7a:8a:77:49:68:2f:08:0b:dc:
                    4a:7e:d7:b2:75:28:bf:1f:76:31:1f:af:1c:7a:e3:
                    80:6c:c4:f0:38:3f:bf:53:4a:ec:ac:57:ff:2d:64:
                    35:2b:51:23:8d:80:43:ec:ba:6c:9e:9e:0d:37:65:
                    e1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:21:20:3A:F3:64:90:0D:F1:8D:79:49:CD:B5:DD:92:87:B6:B3:A0
            X509v3 Authority Key Identifier:
                keyid:11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:21:49:05:c8:26:06:8c:31:ec:65:11:e3:8e:c4:ec:a3:25:
         ef:7a:51:ea:e0:71:c3:09:c5:17:2a:b4:33:22:96:7d:81:e6:
         bf:7b:fb:26:9f:4c:e0:1c:82:81:25:63:57:33:98:5f:02:49:
         34:b6:dd:6c:dc:53:aa:36:24:d2:6d:1e:51:cf:d0:f7:59:00:
         9a:65:d9:44:93:41:39:cb:c1:7b:e6:c9:e2:2e:23:37:7c:ac:
         1b:b7:35:43:fe:f0:40:03:1f:e6:56:ca:e6:8b:26:89:0a:28:
         38:0e:f8:ba:36:6e:86:46:fb:56:8a:c7:74:ef:58:42:1b:24:
         bb:82:51:ba:eb:81:c6:55:bb:00:f4:ee:65:e4:53:78:c9:5e:
         8d:4c:ea:45:57:d5:7a:ba:80:bf:4b:27:7e:99:dd:b2:1e:5a:
         a6:8b:9f:25:4e:56:3f:c8:cf:bf:74:71:6b:a0:8d:92:e4:58:
         5a:0a:66:e3:67:4a:57:5f:67:c0:d3:66:56:14:5b:0a:01:45:
         ee:2f:e9:5b:cd:05:5b:01:b9:56:81:8a:23:fe:3a:87:5a:15:
         6d:2c:6a:d6:16:29:6b:4f:18:e9:d7:d0:1e:b5:12:d2:c2:f6:
         9e:f2:8e:63:71:1b:44:9e:d2:02:db:4d:85:04:c2:f5:f3:c9:
         e4:db:b0:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7ABH2dqTDPAEBsKSs6AXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMTQ1ZmRlMDFhZjgxMDc2MGVlNjFiY2YzNTRjZjk2MmFj
NDYwZDkwHhcNMjQwNjE1MjIwMjA0WhcNMjQwNjE2MjIwMjA0WjAzMTEwLwYDVQQD
Eyg3NzIxMjAzYWYzNjQ5MDBkZjE4ZDc5NDljZGI1ZGQ5Mjg3YjZiM2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04Rde+pCVt0+5iNB2sQgf0zbUCbb
hrPQt4tX13W5Z/G31CEfm9yhNf5YAtsBgdV3FSokih/GNThH+KQ6XF6jRygMzN1o
39Jqk6594W7byeFCzLrJxFBSZQAv/Phr40Yul/VydDF0/PqfoGcPeTHY2qHk3qNv
zzMaRhuHG+atNC3AYxTIk1V6A0fBvGf/wnikInT/vk6GrziIQI4KEorSOmfB5yst
9ygqJfkVCAIv6h7K0NT+JBHai60Lh65wLVWT+d5ov2lrgYh6indJaC8IC9xKftey
dSi/H3YxH68ceuOAbMTwOD+/U0rsrFf/LWQ1K1EjjYBD7Lpsnp4NN2XhaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHchIDrzZJAN8Y15Sc213ZKHtrOgMB8GA1UdIwQY
MBaAFBEUX94Br4EHYO5hvPNUz5YqxGDZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJSZjNnR3ZnUWRnN21HODgxVFBsaXJFWU5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9hNDNmNzktZjcyOC00NjQ1LWE3MWUt
YzMwNWM4ZDlhMzE5LzEvRVJSZjNnR3ZnUWRnN21HODgxVFBsaXJFWU5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9hNDNmNzktZjcyOC00NjQ1LWE3MWUtYzMwNWM4ZDlhMzE5
LzEvRVJSZjNnR3ZnUWRnN21HODgxVFBsaXJFWU5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSFJBcgm
Bowx7GUR447E7KMl73pR6uBxwwnFFyq0MyKWfYHmv3v7Jp9M4ByCgSVjVzOYXwJJ
NLbdbNxTqjYk0m0eUc/Q91kAmmXZRJNBOcvBe+bJ4i4jN3ysG7c1Q/7wQAMf5lbK
5osmiQooOA74ujZuhkb7VorHdO9YQhsku4JRuuuBxlW7APTuZeRTeMlejUzqRVfV
erqAv0snfpndsh5apoufJU5WP8jPv3Rxa6CNkuRYWgpm42dKV19nwNNmVhRbCgFF
7i/pW80FWwG5VoGKI/46h1oVbSxq1hYpa08Y6dfQHrUS0sL2nvKOY3EbRJ7SAttN
hQTC9fPJ5NuwlQ==
-----END CERTIFICATE-----
Generated at Sat Jun 15 23:40:13 2024 by rpki-client on console-ams.rpki-client.org