Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f922e7-d53e-4daf-8770-7ffdfee57f52/1/DwQeIIaCRVpnlCzipkhYygcEfos.mft
File:                     DwQeIIaCRVpnlCzipkhYygcEfos.mft (raw, json)
Hash identifier:          W/7X44o/lW0fmnQBmCL57w7YYaimzZXIClnEOGrIWok=
Subject key identifier:   66:1A:44:98:CB:4B:F9:C4:92:70:B6:13:F0:1B:C2:CC:0F:7D:23:11
Authority key identifier: 0F:04:1E:20:86:82:45:5A:67:94:2C:E2:A6:48:58:CA:07:04:7E:8B
Certificate issuer:       /CN=0f041e208682455a67942ce2a64858ca07047e8b
Certificate serial:       01901D461DE5584A3EE91D22B9F49AFB0D38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DwQeIIaCRVpnlCzipkhYygcEfos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f922e7-d53e-4daf-8770-7ffdfee57f52/1/DwQeIIaCRVpnlCzipkhYygcEfos.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 19:00:52 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:52 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:52 +0000
Files and hashes:         1: DwQeIIaCRVpnlCzipkhYygcEfos.crl (hash: HO4+dmmxQaCAwuSZWOKLCQuBGziJ1Vx1+sR8Ljk3qAM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/f922e7-d53e-4daf-8770-7ffdfee57f52/1/DwQeIIaCRVpnlCzipkhYygcEfos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/f922e7-d53e-4daf-8770-7ffdfee57f52/1/DwQeIIaCRVpnlCzipkhYygcEfos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DwQeIIaCRVpnlCzipkhYygcEfos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:1d:e5:58:4a:3e:e9:1d:22:b9:f4:9a:fb:0d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f041e208682455a67942ce2a64858ca07047e8b
        Validity
            Not Before: Jun 15 19:00:52 2024 GMT
            Not After : Jun 16 19:00:52 2024 GMT
        Subject: CN=661a4498cb4bf9c49270b613f01bc2cc0f7d2311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:08:14:c8:e9:f7:d4:63:32:69:85:e1:05:af:
                    c8:c2:8c:33:37:68:48:eb:9c:fe:bf:24:2c:33:67:
                    7d:da:1a:e1:1e:c8:9a:0c:d7:0a:50:08:19:09:29:
                    8b:7a:6f:d9:8f:73:61:f0:b2:6e:8a:4d:c6:35:0f:
                    ea:4e:20:8a:e2:2d:76:47:a6:89:6c:49:0f:53:23:
                    33:cb:58:16:08:b1:9c:3f:5a:d2:ed:c1:12:ec:8c:
                    aa:9f:d1:9c:3a:1d:3a:a5:fc:83:e1:be:59:94:56:
                    0c:a6:50:ae:e4:2b:b5:b7:f4:e0:85:a6:1e:d0:c7:
                    85:c2:99:08:b2:19:47:47:b1:9e:8d:0a:57:36:d1:
                    ad:51:3c:d4:92:e1:c0:f1:25:2f:27:be:f4:e9:13:
                    54:75:0d:35:9d:2b:d8:0d:1d:6b:e5:48:71:43:8e:
                    34:49:59:11:c3:28:d0:aa:33:fa:c5:4c:ae:1b:17:
                    94:2d:67:1c:f8:c8:4a:df:2f:74:df:8e:47:a8:6f:
                    33:7d:2a:a6:30:39:3d:8d:b4:1e:02:33:de:c1:6a:
                    33:b4:10:d8:14:74:b7:e8:a9:0a:d9:69:84:6a:d8:
                    c9:04:87:34:41:71:2a:29:7c:17:bc:ae:ff:54:cc:
                    e0:f5:0c:a9:a8:2d:08:5b:72:26:92:87:41:e7:d0:
                    9d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1A:44:98:CB:4B:F9:C4:92:70:B6:13:F0:1B:C2:CC:0F:7D:23:11
            X509v3 Authority Key Identifier:
                keyid:0F:04:1E:20:86:82:45:5A:67:94:2C:E2:A6:48:58:CA:07:04:7E:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwQeIIaCRVpnlCzipkhYygcEfos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f922e7-d53e-4daf-8770-7ffdfee57f52/1/DwQeIIaCRVpnlCzipkhYygcEfos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f922e7-d53e-4daf-8770-7ffdfee57f52/1/DwQeIIaCRVpnlCzipkhYygcEfos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:77:41:38:57:37:a5:9a:96:06:5b:92:cb:78:dc:ac:90:d2:
         42:18:55:06:f2:a7:41:07:fc:5a:fa:6c:ea:f8:0d:24:fa:81:
         61:cf:f7:66:f3:f2:fe:8a:1f:e4:29:d5:b0:72:09:81:8b:10:
         c5:8e:57:55:6c:e5:be:16:50:ea:b5:b7:2a:44:b1:18:d3:6f:
         6b:10:29:33:f7:0c:4e:9c:f0:bb:71:9d:15:2c:f6:de:b2:a2:
         0d:33:60:4d:88:e9:1e:5f:4f:66:12:18:80:69:6d:fb:a1:67:
         5c:31:46:5d:1a:6c:65:fd:5b:ee:68:7d:21:15:5b:1a:22:5d:
         f1:1c:b0:0b:bc:5d:9c:72:6d:2f:7f:78:d3:74:2f:4a:e0:99:
         90:1f:6c:0b:eb:d9:95:50:9f:4c:9e:08:f7:3f:94:c8:d5:a7:
         76:b7:5c:f5:54:09:06:0b:09:d8:54:d6:3d:2e:51:4b:a0:80:
         f7:60:99:81:b0:d5:f1:3c:1a:e8:f4:b0:b9:19:48:44:75:3b:
         bc:35:08:64:2c:d9:e8:6f:df:6e:86:a4:9d:b1:e2:31:2c:49:
         d3:eb:90:7c:7d:a4:43:5c:b1:03:a4:77:d8:d1:01:d9:06:3a:
         80:2b:08:86:9e:8b:a4:be:1d:f8:67:4f:ab:62:55:88:34:94:
         92:d2:e1:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdRh3lWEo+6R0iufSa+w04MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMDQxZTIwODY4MjQ1NWE2Nzk0MmNlMmE2NDg1OGNhMDcw
NDdlOGIwHhcNMjQwNjE1MTkwMDUyWhcNMjQwNjE2MTkwMDUyWjAzMTEwLwYDVQQD
Eyg2NjFhNDQ5OGNiNGJmOWM0OTI3MGI2MTNmMDFiYzJjYzBmN2QyMzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAgUyOn31GMyaYXhBa/IwowzN2hI
65z+vyQsM2d92hrhHsiaDNcKUAgZCSmLem/Zj3Nh8LJuik3GNQ/qTiCK4i12R6aJ
bEkPUyMzy1gWCLGcP1rS7cES7Iyqn9GcOh06pfyD4b5ZlFYMplCu5Cu1t/TghaYe
0MeFwpkIshlHR7GejQpXNtGtUTzUkuHA8SUvJ7706RNUdQ01nSvYDR1r5UhxQ440
SVkRwyjQqjP6xUyuGxeULWcc+MhK3y90345HqG8zfSqmMDk9jbQeAjPewWoztBDY
FHS36KkK2WmEatjJBIc0QXEqKXwXvK7/VMzg9QypqC0IW3ImkodB59CdAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYaRJjLS/nEknC2E/AbwswPfSMRMB8GA1UdIwQY
MBaAFA8EHiCGgkVaZ5Qs4qZIWMoHBH6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHdRZUlJYUNSVnBubEN6aXBraFl5Z2NFZm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mOTIyZTctZDUzZS00ZGFmLTg3NzAt
N2ZmZGZlZTU3ZjUyLzEvRHdRZUlJYUNSVnBubEN6aXBraFl5Z2NFZm9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mOTIyZTctZDUzZS00ZGFmLTg3NzAtN2ZmZGZlZTU3ZjUy
LzEvRHdRZUlJYUNSVnBubEN6aXBraFl5Z2NFZm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHdBOFc3
pZqWBluSy3jcrJDSQhhVBvKnQQf8Wvps6vgNJPqBYc/3ZvPy/oof5CnVsHIJgYsQ
xY5XVWzlvhZQ6rW3KkSxGNNvaxApM/cMTpzwu3GdFSz23rKiDTNgTYjpHl9PZhIY
gGlt+6FnXDFGXRpsZf1b7mh9IRVbGiJd8RywC7xdnHJtL39403QvSuCZkB9sC+vZ
lVCfTJ4I9z+UyNWndrdc9VQJBgsJ2FTWPS5RS6CA92CZgbDV8Twa6PSwuRlIRHU7
vDUIZCzZ6G/fboaknbHiMSxJ0+uQfH2kQ1yxA6R32NEB2QY6gCsIhp6LpL4d+GdP
q2JViDSUktLhSQ==
-----END CERTIFICATE-----
Generated at Sat Jun 15 20:04:46 2024 by rpki-client on console-fra.rpki-client.org