Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.mft
File:                     epHmw2HvM-JQ3YijH32Sfq03Xtk.mft (raw, json)
Hash identifier:          AYOzWgZthDeQNkrflY699zCk7rstMF54LDPkJfgxDrQ=
Subject key identifier:   47:F8:3C:E1:83:15:06:12:39:97:46:36:74:0F:9B:91:82:D1:88:8A
Authority key identifier: 7A:91:E6:C3:61:EF:33:E2:50:DD:88:A3:1F:7D:92:7E:AD:37:5E:D9
Certificate issuer:       /CN=7a91e6c361ef33e250dd88a31f7d927ead375ed9
Certificate serial:       01901DED619BABDBC3CDA47A4948110AF8AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/epHmw2HvM-JQ3YijH32Sfq03Xtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.mft
Manifest number:          0142
Signing time:             Sat 15 Jun 2024 22:03:34 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:34 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:34 +0000
Files and hashes:         1: epHmw2HvM-JQ3YijH32Sfq03Xtk.crl (hash: KrSvfj9WtymB7uFx8GY3rlediJS2micjKxYjdfS8Hro=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/epHmw2HvM-JQ3YijH32Sfq03Xtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:61:9b:ab:db:c3:cd:a4:7a:49:48:11:0a:f8:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a91e6c361ef33e250dd88a31f7d927ead375ed9
        Validity
            Not Before: Jun 15 22:03:34 2024 GMT
            Not After : Jun 16 22:03:34 2024 GMT
        Subject: CN=47f83ce18315061239974636740f9b9182d1888a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bb:d4:dc:40:7b:73:82:a0:1a:9a:25:03:33:
                    41:29:1e:fb:1e:28:d8:9c:e1:e0:5c:96:38:e2:13:
                    df:c9:42:e7:09:76:f8:ea:56:b2:7d:b8:f7:bf:c1:
                    85:3b:93:e1:c4:84:ba:c4:86:48:42:b5:42:74:3f:
                    cf:a5:7b:3a:ae:76:8a:76:32:34:d2:54:25:25:4c:
                    e4:df:2f:e0:55:70:e9:92:54:5a:b5:6d:dc:1c:27:
                    84:ea:ad:a5:47:97:4a:4e:a8:67:32:1a:a4:ad:15:
                    b6:8f:79:d4:3c:5f:b5:73:f8:67:1c:d1:99:46:cd:
                    5c:16:06:0e:4f:eb:97:8d:43:ff:ae:f4:cf:f1:93:
                    db:25:cc:99:a6:a4:a3:29:8c:13:a5:d5:f9:eb:40:
                    45:7a:2b:64:1c:37:ae:93:99:1c:6c:c4:aa:db:11:
                    2a:36:9e:af:6a:7e:af:31:fd:8e:25:7d:35:2f:ed:
                    e4:9d:09:6e:99:8c:ec:00:74:1b:31:29:1c:a3:92:
                    8c:87:21:f4:4e:19:f5:e7:6f:fc:5d:bf:46:21:cf:
                    41:ca:cb:a3:c1:ef:a5:cc:70:82:d2:c7:74:a9:29:
                    50:24:ba:e9:c9:66:3c:9a:b6:87:57:e0:d6:70:b7:
                    3b:41:b8:89:84:73:6e:96:ad:84:97:93:49:11:77:
                    cc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F8:3C:E1:83:15:06:12:39:97:46:36:74:0F:9B:91:82:D1:88:8A
            X509v3 Authority Key Identifier:
                keyid:7A:91:E6:C3:61:EF:33:E2:50:DD:88:A3:1F:7D:92:7E:AD:37:5E:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epHmw2HvM-JQ3YijH32Sfq03Xtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:b3:ce:b5:b6:60:35:f3:7e:19:e0:54:0f:5c:f8:a1:a8:71:
         6e:37:13:5d:aa:44:03:e6:f4:59:1d:a3:4e:2f:6d:f5:05:b6:
         3b:c0:da:f5:bb:11:e2:49:54:1a:94:4e:d9:9e:97:d6:30:0f:
         d6:77:d1:af:fd:b4:5e:1c:19:e1:29:0c:7a:e6:35:08:45:44:
         25:69:0d:67:9e:3d:02:bd:bd:9d:59:ee:bd:f0:c0:1b:be:21:
         a0:f2:34:e1:76:96:51:92:52:d6:02:eb:4b:4a:a2:c0:fe:6c:
         36:d4:9b:e0:b5:6b:e2:64:90:ee:bf:dc:59:6c:c0:64:e1:84:
         30:48:db:1b:0f:d8:bc:e6:7a:57:ec:49:b0:04:a3:9e:79:61:
         9b:5c:d3:cd:d4:4a:8a:7f:38:9b:7f:1a:5b:a2:cc:50:9e:b3:
         c3:5d:ad:59:ba:a4:ee:cf:5c:93:ed:fc:d8:a0:9a:87:88:bf:
         59:57:ac:3d:15:da:65:5b:da:26:9d:d3:14:e7:f8:55:91:64:
         db:5c:2b:f2:12:bf:ea:2e:f9:cf:58:85:d8:bd:ae:53:b5:0c:
         f8:dc:45:0b:a3:7b:01:89:99:ed:e9:83:c4:f3:4e:0b:f7:42:
         92:1d:6b:0e:94:0f:54:e0:ec:2e:eb:f9:75:51:53:e4:1d:90:
         eb:95:0e:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7WGbq9vDzaR6SUgRCvirMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhOTFlNmMzNjFlZjMzZTI1MGRkODhhMzFmN2Q5MjdlYWQz
NzVlZDkwHhcNMjQwNjE1MjIwMzM0WhcNMjQwNjE2MjIwMzM0WjAzMTEwLwYDVQQD
Eyg0N2Y4M2NlMTgzMTUwNjEyMzk5NzQ2MzY3NDBmOWI5MTgyZDE4ODhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibvU3EB7c4KgGpolAzNBKR77HijY
nOHgXJY44hPfyULnCXb46layfbj3v8GFO5PhxIS6xIZIQrVCdD/PpXs6rnaKdjI0
0lQlJUzk3y/gVXDpklRatW3cHCeE6q2lR5dKTqhnMhqkrRW2j3nUPF+1c/hnHNGZ
Rs1cFgYOT+uXjUP/rvTP8ZPbJcyZpqSjKYwTpdX560BFeitkHDeuk5kcbMSq2xEq
Np6van6vMf2OJX01L+3knQlumYzsAHQbMSkco5KMhyH0Thn152/8Xb9GIc9Bysuj
we+lzHCC0sd0qSlQJLrpyWY8mraHV+DWcLc7QbiJhHNulq2El5NJEXfMlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEf4POGDFQYSOZdGNnQPm5GC0YiKMB8GA1UdIwQY
MBaAFHqR5sNh7zPiUN2Iox99kn6tN17ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXBIbXcySHZNLUpRM1lpakgzMlNmcTAzWHRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80ZTNmYzMtMDQ4ZC00YjY2LWE5NTEt
M2UyNTM0NTgzNjExLzEvZXBIbXcySHZNLUpRM1lpakgzMlNmcTAzWHRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS80ZTNmYzMtMDQ4ZC00YjY2LWE5NTEtM2UyNTM0NTgzNjEx
LzEvZXBIbXcySHZNLUpRM1lpakgzMlNmcTAzWHRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsrPOtbZg
NfN+GeBUD1z4oahxbjcTXapEA+b0WR2jTi9t9QW2O8Da9bsR4klUGpRO2Z6X1jAP
1nfRr/20XhwZ4SkMeuY1CEVEJWkNZ549Ar29nVnuvfDAG74hoPI04XaWUZJS1gLr
S0qiwP5sNtSb4LVr4mSQ7r/cWWzAZOGEMEjbGw/YvOZ6V+xJsASjnnlhm1zTzdRK
in84m38aW6LMUJ6zw12tWbqk7s9ck+382KCah4i/WVesPRXaZVvaJp3TFOf4VZFk
21wr8hK/6i75z1iF2L2uU7UM+NxFC6N7AYmZ7emDxPNOC/dCkh1rDpQPVODsLuv5
dVFT5B2Q65UO7A==
-----END CERTIFICATE-----
Generated at Sat Jun 15 22:58:13 2024 by rpki-client on console-fra.rpki-client.org