Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
File:                     TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft (raw, json)
Hash identifier:          d/malpsxt0TSkuBygD8zYFJ8nk6uav40ZZy+/VEy6/o=
Subject key identifier:   E7:31:F8:85:CA:7F:1A:2F:85:BE:0F:AF:B7:87:5A:53:5F:C1:EA:03
Authority key identifier: 4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
Certificate issuer:       /CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Certificate serial:       01901C6A8B033B276E0E9F8C193B1F64601B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
Manifest number:          11C1
Signing time:             Sat 15 Jun 2024 15:01:02 +0000
Manifest this update:     Sat 15 Jun 2024 15:01:02 +0000
Manifest next update:     Sun 16 Jun 2024 15:01:02 +0000
Files and hashes:         1: TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl (hash: k10nVAn/TSJP+js0knavL6zC3qrX4W/HKfLv12zB4vc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:8b:03:3b:27:6e:0e:9f:8c:19:3b:1f:64:60:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
        Validity
            Not Before: Jun 15 15:01:02 2024 GMT
            Not After : Jun 16 15:01:02 2024 GMT
        Subject: CN=e731f885ca7f1a2f85be0fafb7875a535fc1ea03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ff:83:75:9c:b4:a0:67:93:8c:16:6d:2c:d6:
                    b7:69:ef:95:0c:e6:e5:93:48:da:81:f3:f9:e3:dc:
                    ae:a9:09:f0:59:fa:e5:65:3a:da:61:f0:b0:95:4e:
                    da:bd:23:51:50:02:99:d0:ff:d7:84:b7:67:e3:46:
                    ad:2d:d5:ea:88:70:1e:2a:db:06:af:93:b7:0b:b2:
                    74:8c:99:79:09:48:b3:0b:00:1f:19:88:9c:b4:9d:
                    c3:b9:a8:f9:f5:86:02:a1:47:83:b4:91:49:56:49:
                    89:f2:94:cd:46:d5:3c:bb:91:fd:2b:4e:f1:18:93:
                    b5:0e:90:bb:77:5a:3f:0f:b6:b0:6c:00:2f:84:19:
                    90:d7:3a:f4:77:b6:b8:32:c2:29:d8:ee:44:5c:2f:
                    99:95:e2:41:81:5d:74:11:92:99:f2:5d:4b:c9:cc:
                    7f:0e:76:f7:ec:b7:22:9f:89:f4:6f:8e:87:26:6c:
                    40:c6:fc:b7:48:6a:a5:80:15:b1:d1:99:ef:c0:a5:
                    22:0c:6e:99:40:e0:e9:fe:ed:ad:a8:67:1e:52:21:
                    fc:7c:32:c3:22:91:46:03:38:8c:d2:71:7e:3e:b8:
                    b8:42:ef:a2:ed:6c:c5:27:22:f3:1b:ac:c2:ac:a2:
                    90:9f:1f:58:c0:d5:f0:67:04:b8:d7:97:ac:77:30:
                    85:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:31:F8:85:CA:7F:1A:2F:85:BE:0F:AF:B7:87:5A:53:5F:C1:EA:03
            X509v3 Authority Key Identifier:
                keyid:4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:3a:4f:8f:e6:3d:68:0a:aa:91:7e:be:70:44:8e:13:5e:0b:
         da:0f:a5:fa:f2:ce:5d:6f:7b:65:2d:7c:04:d7:9c:4e:fd:a2:
         04:b7:1d:50:8a:b5:df:43:6b:92:c8:71:af:c3:62:9d:af:c4:
         3b:14:87:e4:83:7d:a0:8e:f7:98:43:91:6a:a6:9c:56:ee:9c:
         23:af:7e:e6:9c:dd:43:2b:ea:c7:8e:9a:32:ef:a2:e5:fe:1c:
         e6:5e:23:86:b8:2c:28:1b:14:40:59:3b:9f:b5:71:b8:d2:95:
         2a:c1:27:66:d5:49:43:6e:b5:4b:81:a5:19:b7:cd:a0:c1:b0:
         9f:3a:14:d2:35:e0:68:53:fb:0c:b4:a1:83:18:9c:fb:32:3d:
         d1:12:06:b8:3f:fb:0e:8f:3f:20:38:a5:c3:7b:c2:0f:30:09:
         52:c5:3b:8a:a1:7d:5e:75:73:82:f7:a1:65:4d:b0:a2:d6:fe:
         c9:bf:35:b6:39:b7:de:74:98:85:c1:0d:60:39:d4:27:af:9e:
         0b:ed:55:e5:78:07:3c:77:1f:b6:f5:63:b3:91:f2:45:11:45:
         23:5f:ea:d4:56:25:7e:7a:cd:d7:46:d4:74:58:be:d5:0d:22:
         31:18:cb:1b:d8:ac:fb:63:ee:7e:89:5c:32:63:3f:9b:0e:84:
         97:85:77:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcaosDOyduDp+MGTsfZGAbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNDg5ZjY2MTU5Zjc3YmI1OGQyYmJjN2U0ZmMxZGZkOWRk
Y2IwMzQwHhcNMjQwNjE1MTUwMTAyWhcNMjQwNjE2MTUwMTAyWjAzMTEwLwYDVQQD
EyhlNzMxZjg4NWNhN2YxYTJmODViZTBmYWZiNzg3NWE1MzVmYzFlYTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf+DdZy0oGeTjBZtLNa3ae+VDObl
k0jagfP549yuqQnwWfrlZTraYfCwlU7avSNRUAKZ0P/XhLdn40atLdXqiHAeKtsG
r5O3C7J0jJl5CUizCwAfGYictJ3Duaj59YYCoUeDtJFJVkmJ8pTNRtU8u5H9K07x
GJO1DpC7d1o/D7awbAAvhBmQ1zr0d7a4MsIp2O5EXC+ZleJBgV10EZKZ8l1Lycx/
Dnb37Lcin4n0b46HJmxAxvy3SGqlgBWx0ZnvwKUiDG6ZQODp/u2tqGceUiH8fDLD
IpFGAziM0nF+Pri4Qu+i7WzFJyLzG6zCrKKQnx9YwNXwZwS415esdzCFrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcx+IXKfxovhb4Pr7eHWlNfweoDMB8GA1UdIwQY
MBaAFE5In2YVn3e7WNK7x+T8Hf2d3LA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGtpZlpoV2ZkN3RZMHJ2SDVQd2RfWjNjc0RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hNTgxOTctZWIwOS00NDE1LWE2MWQt
YWJkNjFhYTgyNDI2LzEvVGtpZlpoV2ZkN3RZMHJ2SDVQd2RfWjNjc0RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9hNTgxOTctZWIwOS00NDE1LWE2MWQtYWJkNjFhYTgyNDI2
LzEvVGtpZlpoV2ZkN3RZMHJ2SDVQd2RfWjNjc0RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDpPj+Y9
aAqqkX6+cESOE14L2g+l+vLOXW97ZS18BNecTv2iBLcdUIq130Nrkshxr8Nina/E
OxSH5IN9oI73mEORaqacVu6cI69+5pzdQyvqx46aMu+i5f4c5l4jhrgsKBsUQFk7
n7VxuNKVKsEnZtVJQ261S4GlGbfNoMGwnzoU0jXgaFP7DLShgxic+zI90RIGuD/7
Do8/IDilw3vCDzAJUsU7iqF9XnVzgvehZU2wotb+yb81tjm33nSYhcENYDnUJ6+e
C+1V5XgHPHcftvVjs5HyRRFFI1/q1FYlfnrN10bUdFi+1Q0iMRjLG9is+2Pufolc
MmM/mw6El4V37g==
-----END CERTIFICATE-----