Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/dc4d04-9674-4dd2-adaa-5757524e986b/1/fI5W40brqFchH-8PULFNAqt53BE.mft
File:                     fI5W40brqFchH-8PULFNAqt53BE.mft (raw, json)
Hash identifier:          fTnkr8HQwXk2ZVa8l8UKd7YMjQFauujkwIFk8reDmzk=
Subject key identifier:   4D:7F:04:32:FE:4F:51:3E:AC:DF:EE:7E:61:FC:C5:9C:D1:18:13:04
Authority key identifier: 7C:8E:56:E3:46:EB:A8:57:21:1F:EF:0F:50:B1:4D:02:AB:79:DC:11
Certificate issuer:       /CN=7c8e56e346eba857211fef0f50b14d02ab79dc11
Certificate serial:       01901EC70737EEFCEF3F275BACC1EA2993B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fI5W40brqFchH-8PULFNAqt53BE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/dc4d04-9674-4dd2-adaa-5757524e986b/1/fI5W40brqFchH-8PULFNAqt53BE.mft
Manifest number:          06DF
Signing time:             Sun 16 Jun 2024 02:01:18 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:18 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:18 +0000
Files and hashes:         1: fI5W40brqFchH-8PULFNAqt53BE.crl (hash: 92BiHpvxjZWDvhkRu8w3VP+sTb1c0owFYW9q7kpF7x0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/dc4d04-9674-4dd2-adaa-5757524e986b/1/fI5W40brqFchH-8PULFNAqt53BE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/dc4d04-9674-4dd2-adaa-5757524e986b/1/fI5W40brqFchH-8PULFNAqt53BE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fI5W40brqFchH-8PULFNAqt53BE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c7:07:37:ee:fc:ef:3f:27:5b:ac:c1:ea:29:93:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c8e56e346eba857211fef0f50b14d02ab79dc11
        Validity
            Not Before: Jun 16 02:01:18 2024 GMT
            Not After : Jun 17 02:01:18 2024 GMT
        Subject: CN=4d7f0432fe4f513eacdfee7e61fcc59cd1181304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:59:07:2e:8b:9e:67:55:69:a4:91:d1:18:1a:
                    a0:20:00:d0:b9:58:12:ad:0d:ca:49:77:1c:00:42:
                    09:1e:51:50:ac:eb:0a:ba:bc:22:e3:c8:d0:11:8a:
                    93:0b:1b:40:be:89:5a:31:3f:c8:6f:d5:b8:24:86:
                    7a:43:84:f2:38:ec:af:f2:86:4b:f4:34:fa:13:84:
                    a2:8f:e6:46:6b:4d:54:ac:55:66:ab:fc:62:1e:a0:
                    8a:ab:30:42:50:21:45:36:a1:2b:2c:c7:7b:3f:9c:
                    59:f1:35:d9:f3:a3:73:aa:35:0f:af:96:d0:3a:c8:
                    8b:51:34:d1:b9:fa:a8:be:89:7a:5c:63:44:63:64:
                    1a:82:7c:74:ad:ed:68:03:75:d6:29:a7:ef:53:76:
                    aa:b9:42:e5:ea:54:99:f6:a5:cd:60:55:02:97:a0:
                    72:51:b3:97:50:87:e1:5c:f7:f3:07:e8:35:a3:b1:
                    40:dd:17:93:67:c1:1b:48:a6:5b:a3:96:c1:d2:38:
                    1b:ff:18:e7:9f:76:2a:d0:a9:79:4f:00:eb:20:4d:
                    63:51:7d:c5:c1:b3:ea:bf:7a:b8:67:6c:00:fd:90:
                    b4:55:9d:0f:bc:f1:e3:6e:53:94:d6:2f:82:5d:fb:
                    c0:6a:76:6c:ec:9e:06:1c:ea:4d:3a:dd:75:86:9c:
                    86:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:7F:04:32:FE:4F:51:3E:AC:DF:EE:7E:61:FC:C5:9C:D1:18:13:04
            X509v3 Authority Key Identifier:
                keyid:7C:8E:56:E3:46:EB:A8:57:21:1F:EF:0F:50:B1:4D:02:AB:79:DC:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI5W40brqFchH-8PULFNAqt53BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/dc4d04-9674-4dd2-adaa-5757524e986b/1/fI5W40brqFchH-8PULFNAqt53BE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/dc4d04-9674-4dd2-adaa-5757524e986b/1/fI5W40brqFchH-8PULFNAqt53BE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:17:eb:0e:4a:59:eb:ed:ae:f0:a3:1c:c4:07:6c:94:c4:11:
         be:24:31:e3:42:ae:a0:b9:b0:88:37:62:78:d0:2b:15:8b:09:
         94:79:eb:a0:86:52:6a:a2:0c:72:d5:09:fe:44:7b:cd:7a:5b:
         fb:e1:b3:2e:f0:e1:3e:4f:dc:1e:35:7b:e5:fe:3a:a8:f0:8e:
         66:97:36:ef:4e:9d:eb:c1:82:d9:5d:ec:2f:fb:5d:df:e9:5e:
         be:4f:0d:e4:ec:b0:f4:7a:ed:a6:4b:16:29:24:0f:57:8d:2d:
         eb:f9:cd:c2:e7:26:c9:d5:fc:7a:66:89:b5:9b:55:31:67:37:
         91:f4:4d:78:c0:80:4d:65:24:96:a8:b6:f8:66:77:cb:62:16:
         b6:69:e7:47:e7:c9:fe:98:66:9e:41:f8:ee:fc:08:12:aa:77:
         f9:3b:41:df:4a:57:22:eb:bc:3d:00:da:97:16:a8:d6:80:e6:
         83:b0:32:58:ff:21:f6:7b:4e:d7:a9:c3:46:ac:c4:99:6c:83:
         78:62:6d:3d:76:cc:e1:b1:a6:74:fb:41:3c:24:ee:59:f5:d3:
         f2:ae:cd:31:8e:c8:2a:fb:39:4b:e1:8f:82:99:0b:01:72:a0:
         a1:6f:88:ec:32:f9:50:9c:e3:9e:da:89:32:24:7f:95:15:1a:
         0b:6f:60:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAexwc37vzvPydbrMHqKZO3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjOGU1NmUzNDZlYmE4NTcyMTFmZWYwZjUwYjE0ZDAyYWI3
OWRjMTEwHhcNMjQwNjE2MDIwMTE4WhcNMjQwNjE3MDIwMTE4WjAzMTEwLwYDVQQD
Eyg0ZDdmMDQzMmZlNGY1MTNlYWNkZmVlN2U2MWZjYzU5Y2QxMTgxMzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFkHLoueZ1VppJHRGBqgIADQuVgS
rQ3KSXccAEIJHlFQrOsKurwi48jQEYqTCxtAvolaMT/Ib9W4JIZ6Q4TyOOyv8oZL
9DT6E4Sij+ZGa01UrFVmq/xiHqCKqzBCUCFFNqErLMd7P5xZ8TXZ86NzqjUPr5bQ
OsiLUTTRufqovol6XGNEY2Qagnx0re1oA3XWKafvU3aquULl6lSZ9qXNYFUCl6By
UbOXUIfhXPfzB+g1o7FA3ReTZ8EbSKZbo5bB0jgb/xjnn3Yq0Kl5TwDrIE1jUX3F
wbPqv3q4Z2wA/ZC0VZ0PvPHjblOU1i+CXfvAanZs7J4GHOpNOt11hpyGxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1/BDL+T1E+rN/ufmH8xZzRGBMEMB8GA1UdIwQY
MBaAFHyOVuNG66hXIR/vD1CxTQKredwRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkk1VzQwYnJxRmNoSC04UFVMRk5BcXQ1M0JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kYzRkMDQtOTY3NC00ZGQyLWFkYWEt
NTc1NzUyNGU5ODZiLzEvZkk1VzQwYnJxRmNoSC04UFVMRk5BcXQ1M0JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9kYzRkMDQtOTY3NC00ZGQyLWFkYWEtNTc1NzUyNGU5ODZi
LzEvZkk1VzQwYnJxRmNoSC04UFVMRk5BcXQ1M0JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxfrDkpZ
6+2u8KMcxAdslMQRviQx40KuoLmwiDdieNArFYsJlHnroIZSaqIMctUJ/kR7zXpb
++GzLvDhPk/cHjV75f46qPCOZpc2706d68GC2V3sL/td3+levk8N5Oyw9HrtpksW
KSQPV40t6/nNwucmydX8emaJtZtVMWc3kfRNeMCATWUklqi2+GZ3y2IWtmnnR+fJ
/phmnkH47vwIEqp3+TtB30pXIuu8PQDalxao1oDmg7AyWP8h9ntO16nDRqzEmWyD
eGJtPXbM4bGmdPtBPCTuWfXT8q7NMY7IKvs5S+GPgpkLAXKgoW+I7DL5UJzjntqJ
MiR/lRUaC29gnQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:58:38 2024 by rpki-client on console-ams.rpki-client.org