Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
File:                     G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft (raw, json)
Hash identifier:          /K8C1dTCIc1MZOuYqz/U3xdloamjogQ1vkhoh5TAQXE=
Subject key identifier:   36:51:31:8E:6D:DF:37:75:E2:D8:71:06:A1:5E:6C:9B:69:03:5C:C8
Authority key identifier: 1B:93:45:77:CB:49:D8:D2:31:B7:4C:55:07:26:F3:38:7E:02:6C:F6
Certificate issuer:       /CN=1b934577cb49d8d231b74c550726f3387e026cf6
Certificate serial:       01901DED5CCF41E61CF6AE5FD469C207C45D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G5NFd8tJ2NIxt0xVBybzOH4CbPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 22:03:33 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:33 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:33 +0000
Files and hashes:         1: G5NFd8tJ2NIxt0xVBybzOH4CbPY.crl (hash: TdKlcnSVxSJEng2ok80x2eX1GsfEQu0+BtDVv2mZg/c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G5NFd8tJ2NIxt0xVBybzOH4CbPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:5c:cf:41:e6:1c:f6:ae:5f:d4:69:c2:07:c4:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b934577cb49d8d231b74c550726f3387e026cf6
        Validity
            Not Before: Jun 15 22:03:33 2024 GMT
            Not After : Jun 16 22:03:33 2024 GMT
        Subject: CN=3651318e6ddf3775e2d87106a15e6c9b69035cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:70:bd:5e:42:a4:bc:d0:0a:19:1c:83:0a:d4:
                    9d:1b:9a:54:70:bb:aa:f3:be:e7:ea:5c:70:2a:8b:
                    9b:b8:c8:ee:c6:4a:ef:ed:3c:1c:d4:71:90:ee:f9:
                    32:83:34:c5:73:7d:83:ec:80:0f:4d:26:25:29:6d:
                    fd:74:ae:3f:0b:2c:41:de:4d:d4:2e:7f:e7:75:10:
                    f3:17:4f:88:1d:9a:56:9c:6a:3d:21:bb:5d:f1:36:
                    0d:c3:57:5f:b9:6d:5f:82:d6:3d:ea:5c:58:61:8c:
                    5c:43:b1:a7:00:b2:82:9d:48:4f:33:a6:e9:a6:cf:
                    a1:3b:7e:6e:5c:50:5b:0a:c2:46:00:fa:5a:b2:ad:
                    17:bd:cd:22:ff:63:9b:9d:52:62:9f:78:ea:7b:6d:
                    4e:42:ce:be:3b:e8:49:98:d7:d2:3e:98:f8:52:d2:
                    8c:56:df:05:8f:ba:92:c5:64:ce:43:47:23:da:ee:
                    e4:f9:38:36:d3:e1:21:85:38:61:c5:0f:f6:60:ab:
                    6b:5e:bc:6b:20:04:75:fc:1e:ed:05:04:92:7c:05:
                    d1:d7:28:99:dd:cb:f8:1d:84:2f:73:64:73:5c:60:
                    91:e5:1e:07:11:39:eb:aa:22:89:35:5e:56:45:10:
                    da:64:92:49:03:55:76:77:ca:4d:93:96:14:0f:18:
                    41:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:51:31:8E:6D:DF:37:75:E2:D8:71:06:A1:5E:6C:9B:69:03:5C:C8
            X509v3 Authority Key Identifier:
                keyid:1B:93:45:77:CB:49:D8:D2:31:B7:4C:55:07:26:F3:38:7E:02:6C:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5NFd8tJ2NIxt0xVBybzOH4CbPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:7b:6f:68:64:3f:f4:ac:72:92:12:d1:04:58:59:7a:19:b8:
         c1:66:2c:2e:bf:80:99:c9:dc:73:1d:cc:cd:db:14:7e:53:03:
         37:a2:b5:d1:f8:dd:c7:4f:61:76:11:52:62:fe:5d:7a:65:9a:
         8b:e7:62:f5:05:bd:04:b1:a4:7e:cd:ee:63:1b:a1:21:7e:bb:
         eb:3e:18:01:a5:89:65:96:f7:6e:2e:96:69:e4:eb:4a:a9:a3:
         54:85:ed:f9:33:fc:48:d2:1c:c1:35:6f:a5:90:d2:59:27:2c:
         78:39:30:f9:3a:7d:2d:6e:82:f5:2d:92:9f:2a:0e:c6:e1:92:
         f0:61:45:29:f8:7e:22:2b:56:62:4c:4d:85:2d:32:73:8e:5e:
         27:83:1d:cc:8d:09:d6:e9:62:11:4e:bf:bc:f0:39:3a:f9:10:
         4c:79:2b:21:0e:ef:af:cb:24:fe:e2:76:24:c1:62:d2:3f:fa:
         16:24:d5:c5:0f:37:66:fb:ee:88:e5:ee:08:2a:7b:9b:c8:50:
         2d:46:c0:64:a6:3f:00:6c:be:34:91:30:c5:32:f3:f9:c5:7a:
         84:e6:9a:db:cc:35:2d:46:fb:6e:db:e7:7b:fa:e4:29:67:3e:
         03:81:ff:e9:d2:f1:18:ba:42:0c:7c:bd:24:1f:42:c6:1d:eb:
         4a:c0:b6:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7VzPQeYc9q5f1GnCB8RdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOTM0NTc3Y2I0OWQ4ZDIzMWI3NGM1NTA3MjZmMzM4N2Uw
MjZjZjYwHhcNMjQwNjE1MjIwMzMzWhcNMjQwNjE2MjIwMzMzWjAzMTEwLwYDVQQD
EygzNjUxMzE4ZTZkZGYzNzc1ZTJkODcxMDZhMTVlNmM5YjY5MDM1Y2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3C9XkKkvNAKGRyDCtSdG5pUcLuq
877n6lxwKoubuMjuxkrv7Twc1HGQ7vkygzTFc32D7IAPTSYlKW39dK4/CyxB3k3U
Ln/ndRDzF0+IHZpWnGo9Ibtd8TYNw1dfuW1fgtY96lxYYYxcQ7GnALKCnUhPM6bp
ps+hO35uXFBbCsJGAPpasq0Xvc0i/2ObnVJin3jqe21OQs6+O+hJmNfSPpj4UtKM
Vt8Fj7qSxWTOQ0cj2u7k+Tg20+EhhThhxQ/2YKtrXrxrIAR1/B7tBQSSfAXR1yiZ
3cv4HYQvc2RzXGCR5R4HETnrqiKJNV5WRRDaZJJJA1V2d8pNk5YUDxhBmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZRMY5t3zd14thxBqFebJtpA1zIMB8GA1UdIwQY
MBaAFBuTRXfLSdjSMbdMVQcm8zh+Amz2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzVORmQ4dEoyTkl4dDB4VkJ5YnpPSDRDYlBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9kZDUzM2QtMjg1NS00NzkzLTk2NWEt
MGUyOTg1OGM2MzdhLzEvRzVORmQ4dEoyTkl4dDB4VkJ5YnpPSDRDYlBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9kZDUzM2QtMjg1NS00NzkzLTk2NWEtMGUyOTg1OGM2Mzdh
LzEvRzVORmQ4dEoyTkl4dDB4VkJ5YnpPSDRDYlBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3tvaGQ/
9KxykhLRBFhZehm4wWYsLr+Amcnccx3MzdsUflMDN6K10fjdx09hdhFSYv5demWa
i+di9QW9BLGkfs3uYxuhIX676z4YAaWJZZb3bi6WaeTrSqmjVIXt+TP8SNIcwTVv
pZDSWScseDkw+Tp9LW6C9S2SnyoOxuGS8GFFKfh+IitWYkxNhS0yc45eJ4MdzI0J
1uliEU6/vPA5OvkQTHkrIQ7vr8sk/uJ2JMFi0j/6FiTVxQ83ZvvuiOXuCCp7m8hQ
LUbAZKY/AGy+NJEwxTLz+cV6hOaa28w1LUb7btvne/rkKWc+A4H/6dLxGLpCDHy9
JB9Cxh3rSsC23A==
-----END CERTIFICATE-----
Generated at Sat Jun 15 22:57:29 2024 by rpki-client on console-fra.rpki-client.org