Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0f5ff9-bae8-4345-805c-cbc3597dc57c/1/_drec0yM3oXb9k0PdWr955y8gCM.mft
File:                     _drec0yM3oXb9k0PdWr955y8gCM.mft (raw, json)
Hash identifier:          iEYuFWdWoN0XGJKIDzdUQGmt4DcWyIW8TSWjJbV8B20=
Subject key identifier:   69:8C:9E:5E:52:6D:AB:28:E8:AD:52:41:C7:F1:84:5A:16:97:F4:FD
Authority key identifier: FD:DA:DE:73:4C:8C:DE:85:DB:F6:4D:0F:75:6A:FD:E7:9C:BC:80:23
Certificate issuer:       /CN=fddade734c8cde85dbf64d0f756afde79cbc8023
Certificate serial:       01901DECA717B845E286071B04C224298D58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_drec0yM3oXb9k0PdWr955y8gCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/0f5ff9-bae8-4345-805c-cbc3597dc57c/1/_drec0yM3oXb9k0PdWr955y8gCM.mft
Manifest number:          0895
Signing time:             Sat 15 Jun 2024 22:02:46 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:46 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:46 +0000
Files and hashes:         1: _drec0yM3oXb9k0PdWr955y8gCM.crl (hash: yrfaTKq9LUcfBPm6EPN09qlShgTXRjiHrPNBoTXA9HE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/0f5ff9-bae8-4345-805c-cbc3597dc57c/1/_drec0yM3oXb9k0PdWr955y8gCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/0f5ff9-bae8-4345-805c-cbc3597dc57c/1/_drec0yM3oXb9k0PdWr955y8gCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_drec0yM3oXb9k0PdWr955y8gCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:a7:17:b8:45:e2:86:07:1b:04:c2:24:29:8d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fddade734c8cde85dbf64d0f756afde79cbc8023
        Validity
            Not Before: Jun 15 22:02:46 2024 GMT
            Not After : Jun 16 22:02:46 2024 GMT
        Subject: CN=698c9e5e526dab28e8ad5241c7f1845a1697f4fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9c:2f:5a:22:38:48:fa:f7:67:3f:ac:dc:17:
                    1d:20:d5:81:ac:90:ba:6e:ef:24:7d:c7:a8:04:29:
                    b2:17:80:7d:c1:e8:b6:e4:2b:82:fe:8c:4e:d4:1d:
                    62:4f:0b:01:63:97:55:84:57:84:3f:e4:ff:a6:26:
                    cf:9e:aa:db:4f:c7:0c:00:50:7b:ba:1e:43:3f:c4:
                    52:2d:15:09:bf:59:b1:88:1a:aa:30:4c:6f:bf:94:
                    36:b4:45:77:e2:e6:07:7e:91:69:0d:b6:88:48:a4:
                    49:a8:1d:33:31:50:0d:a1:c1:58:dd:00:8b:8a:d4:
                    5e:7f:20:52:65:fb:8f:0d:e7:c0:ee:8e:02:f2:93:
                    a9:dc:2d:9e:57:b1:de:98:aa:af:64:10:9e:2b:f2:
                    50:65:6e:59:8a:35:b8:fe:77:ea:11:bc:ae:cb:28:
                    a3:09:0c:c9:2d:d2:82:03:d3:bc:c0:72:68:45:83:
                    af:c2:df:96:34:89:22:62:a6:76:46:88:bb:4b:6d:
                    a7:48:2a:2c:6c:8c:a4:27:9b:d1:a6:ef:58:fe:b0:
                    68:f2:bf:0d:c2:2a:cd:51:b7:b4:c8:b6:de:a7:60:
                    86:27:00:4a:35:a4:fe:b0:d2:81:c7:19:9a:fc:61:
                    ea:ad:ea:93:e2:60:4d:ef:9e:d1:16:0b:8f:9e:16:
                    30:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8C:9E:5E:52:6D:AB:28:E8:AD:52:41:C7:F1:84:5A:16:97:F4:FD
            X509v3 Authority Key Identifier:
                keyid:FD:DA:DE:73:4C:8C:DE:85:DB:F6:4D:0F:75:6A:FD:E7:9C:BC:80:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_drec0yM3oXb9k0PdWr955y8gCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0f5ff9-bae8-4345-805c-cbc3597dc57c/1/_drec0yM3oXb9k0PdWr955y8gCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0f5ff9-bae8-4345-805c-cbc3597dc57c/1/_drec0yM3oXb9k0PdWr955y8gCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:3c:8e:cc:43:f8:d6:f5:89:46:f3:3a:8b:d9:e7:b4:f0:e6:
         e6:80:48:62:63:a0:c5:4c:42:5f:23:3f:7e:c2:ae:da:4e:ed:
         8d:09:c5:87:b0:89:e8:1f:d1:21:a7:1d:c9:92:18:b8:b0:6a:
         d5:c8:45:3c:a0:1b:97:41:51:ce:0e:ef:bc:c2:7d:c6:f6:45:
         c1:83:30:ba:78:5f:aa:b1:6b:cc:70:9d:fd:f1:72:58:e4:dd:
         f1:26:3e:c6:7e:ba:14:6d:46:18:4c:b7:a1:4c:70:00:5e:40:
         92:8a:06:f7:d7:c7:58:d6:a4:d9:26:04:27:af:e1:43:6b:27:
         8e:11:c0:12:6b:18:0b:eb:d3:c0:4a:f0:f6:48:a3:d6:f9:90:
         67:1b:8d:d1:03:6f:5c:e2:4f:e6:c2:40:45:f5:95:10:99:b5:
         43:b7:2f:27:95:a4:e8:07:ac:b6:76:ff:c7:2b:2b:14:c5:9f:
         53:12:ee:a3:55:14:f3:12:8d:6b:a4:28:4b:da:55:0f:c5:16:
         4d:9e:79:4f:04:de:9c:81:b4:70:3d:95:96:43:1d:d4:a1:e2:
         fc:5a:cd:71:dc:1d:a1:cf:f3:68:fd:e1:c1:09:30:85:52:e2:
         eb:6e:d7:20:58:07:0f:2b:bd:ac:e1:18:f3:ce:a8:76:c6:7f:
         ff:b5:c5:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7KcXuEXihgcbBMIkKY1YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZGFkZTczNGM4Y2RlODVkYmY2NGQwZjc1NmFmZGU3OWNi
YzgwMjMwHhcNMjQwNjE1MjIwMjQ2WhcNMjQwNjE2MjIwMjQ2WjAzMTEwLwYDVQQD
Eyg2OThjOWU1ZTUyNmRhYjI4ZThhZDUyNDFjN2YxODQ1YTE2OTdmNGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZwvWiI4SPr3Zz+s3BcdINWBrJC6
bu8kfceoBCmyF4B9wei25CuC/oxO1B1iTwsBY5dVhFeEP+T/pibPnqrbT8cMAFB7
uh5DP8RSLRUJv1mxiBqqMExvv5Q2tEV34uYHfpFpDbaISKRJqB0zMVANocFY3QCL
itRefyBSZfuPDefA7o4C8pOp3C2eV7HemKqvZBCeK/JQZW5ZijW4/nfqEbyuyyij
CQzJLdKCA9O8wHJoRYOvwt+WNIkiYqZ2Roi7S22nSCosbIykJ5vRpu9Y/rBo8r8N
wirNUbe0yLbep2CGJwBKNaT+sNKBxxma/GHqreqT4mBN757RFguPnhYwqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmMnl5Sbaso6K1SQcfxhFoWl/T9MB8GA1UdIwQY
MBaAFP3a3nNMjN6F2/ZND3Vq/eecvIAjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RyZWMweU0zb1hiOWswUGRXcjk1NXk4Z0NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wZjVmZjktYmFlOC00MzQ1LTgwNWMt
Y2JjMzU5N2RjNTdjLzEvX2RyZWMweU0zb1hiOWswUGRXcjk1NXk4Z0NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wZjVmZjktYmFlOC00MzQ1LTgwNWMtY2JjMzU5N2RjNTdj
LzEvX2RyZWMweU0zb1hiOWswUGRXcjk1NXk4Z0NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZTyOzEP4
1vWJRvM6i9nntPDm5oBIYmOgxUxCXyM/fsKu2k7tjQnFh7CJ6B/RIacdyZIYuLBq
1chFPKAbl0FRzg7vvMJ9xvZFwYMwunhfqrFrzHCd/fFyWOTd8SY+xn66FG1GGEy3
oUxwAF5AkooG99fHWNak2SYEJ6/hQ2snjhHAEmsYC+vTwErw9kij1vmQZxuN0QNv
XOJP5sJARfWVEJm1Q7cvJ5Wk6Aestnb/xysrFMWfUxLuo1UU8xKNa6QoS9pVD8UW
TZ55TwTenIG0cD2VlkMd1KHi/FrNcdwdoc/zaP3hwQkwhVLi627XIFgHDyu9rOEY
886odsZ//7XF0g==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:45:41 2024 by rpki-client on console-ams.rpki-client.org