Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/dc4d04-9674-4dd2-adaa-5757524e986b/1/fI5W40brqFchH-8PULFNAqt53BE.mft
File:                     fI5W40brqFchH-8PULFNAqt53BE.mft (raw, json)
Hash identifier:          qxURXhswEfINIYSkhPlTWjK+hrbHep5NtrdjmJhXVs8=
Subject key identifier:   47:69:5F:49:95:A1:44:DE:BE:69:23:3A:A7:D8:25:5D:7B:A6:45:9B
Authority key identifier: 7C:8E:56:E3:46:EB:A8:57:21:1F:EF:0F:50:B1:4D:02:AB:79:DC:11
Certificate issuer:       /CN=7c8e56e346eba857211fef0f50b14d02ab79dc11
Certificate serial:       019049438B7E18FE38CF78DBA2BA4BCF08E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fI5W40brqFchH-8PULFNAqt53BE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/dc4d04-9674-4dd2-adaa-5757524e986b/1/fI5W40brqFchH-8PULFNAqt53BE.mft
Manifest number:          06F5
Signing time:             Mon 24 Jun 2024 08:01:21 +0000
Manifest this update:     Mon 24 Jun 2024 08:01:21 +0000
Manifest next update:     Tue 25 Jun 2024 08:01:21 +0000
Files and hashes:         1: fI5W40brqFchH-8PULFNAqt53BE.crl (hash: YyuQxt5WV8nTJgL+cxcTINk5IlJ4TWuHR/BqXbRQI4I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/dc4d04-9674-4dd2-adaa-5757524e986b/1/fI5W40brqFchH-8PULFNAqt53BE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/dc4d04-9674-4dd2-adaa-5757524e986b/1/fI5W40brqFchH-8PULFNAqt53BE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fI5W40brqFchH-8PULFNAqt53BE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:49:43:8b:7e:18:fe:38:cf:78:db:a2:ba:4b:cf:08:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c8e56e346eba857211fef0f50b14d02ab79dc11
        Validity
            Not Before: Jun 24 08:01:21 2024 GMT
            Not After : Jun 25 08:01:21 2024 GMT
        Subject: CN=47695f4995a144debe69233aa7d8255d7ba6459b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f1:cb:54:27:fa:e9:79:12:4a:fe:f6:2b:26:
                    2d:48:12:0c:e2:8b:86:90:14:2f:63:84:51:59:37:
                    f3:19:bf:b9:cd:1f:05:56:0a:78:0c:8a:49:11:78:
                    74:14:6c:a5:6f:58:d0:c0:dd:a7:2f:39:bd:2a:da:
                    3b:a9:34:87:d6:de:4a:25:7b:40:23:85:b0:31:0a:
                    7d:3f:76:ed:00:70:01:11:c2:48:80:d5:ec:a9:65:
                    e1:74:a2:45:a4:84:cd:5d:b4:7b:4a:3c:a0:22:48:
                    c3:44:ae:98:08:b0:05:a6:9a:b9:25:b4:78:c0:78:
                    a1:d0:7d:42:eb:90:1b:e3:78:bb:b8:8f:c6:e6:42:
                    14:47:2a:26:a0:7d:d0:8a:e6:db:50:65:b4:df:4c:
                    60:d2:2d:a9:c8:50:71:10:df:39:f7:16:e6:28:3d:
                    48:de:48:9d:96:d4:b5:4f:c4:80:aa:49:8f:b7:b2:
                    40:be:27:1f:38:4e:cd:4d:22:81:ed:02:08:07:e6:
                    0b:5d:8a:21:60:4d:1c:70:d7:21:bf:ab:92:a7:f7:
                    92:29:12:da:1f:ae:33:3c:d6:4b:3f:20:f6:af:72:
                    2a:20:e7:f8:45:9b:31:a3:23:56:20:ec:e6:ad:15:
                    d3:87:67:63:13:28:41:c4:6d:b8:7e:a0:6f:97:af:
                    39:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:69:5F:49:95:A1:44:DE:BE:69:23:3A:A7:D8:25:5D:7B:A6:45:9B
            X509v3 Authority Key Identifier:
                keyid:7C:8E:56:E3:46:EB:A8:57:21:1F:EF:0F:50:B1:4D:02:AB:79:DC:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI5W40brqFchH-8PULFNAqt53BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/dc4d04-9674-4dd2-adaa-5757524e986b/1/fI5W40brqFchH-8PULFNAqt53BE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/dc4d04-9674-4dd2-adaa-5757524e986b/1/fI5W40brqFchH-8PULFNAqt53BE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:45:b9:ca:7b:94:82:32:e1:86:4e:e7:2c:9f:87:72:89:8d:
         54:e8:88:85:a7:e1:79:d2:32:4f:5e:c4:5a:9c:39:6d:f1:24:
         e0:0b:39:f1:52:f7:de:79:6f:8a:a4:b6:84:61:73:20:88:fe:
         b6:cf:6a:a3:8b:46:d0:79:53:7c:7b:0b:4d:81:24:6a:85:b8:
         77:b8:92:38:9c:1a:6c:3f:be:90:b2:59:69:1c:eb:bd:7d:61:
         23:32:95:af:94:31:3b:ef:0f:9b:22:b1:c0:1f:32:42:46:e2:
         50:d9:ac:d8:45:c3:f4:68:78:1d:ac:76:5a:74:5d:75:45:53:
         83:ff:d8:d6:f5:5a:ca:0c:c0:03:6e:18:71:84:0d:49:04:6d:
         3f:99:81:30:b6:84:ff:5c:02:41:05:49:a6:d3:b4:a4:1f:33:
         81:92:ce:db:a0:45:28:4f:b2:77:40:ae:23:2c:00:5c:17:93:
         49:c0:41:79:58:38:79:76:9a:9d:a6:40:aa:92:5f:d4:b7:cb:
         50:1e:06:12:69:8d:6a:f6:cd:35:56:4b:ca:b1:d6:59:47:1e:
         d5:6c:c4:99:28:e7:bb:4b:07:ea:17:8d:80:d5:68:d8:9c:92:
         e6:a1:a4:0c:73:86:9f:fd:b2:44:4c:74:d3:3f:11:98:0f:d7:
         fb:76:e7:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBJQ4t+GP44z3jborpLzwjpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjOGU1NmUzNDZlYmE4NTcyMTFmZWYwZjUwYjE0ZDAyYWI3
OWRjMTEwHhcNMjQwNjI0MDgwMTIxWhcNMjQwNjI1MDgwMTIxWjAzMTEwLwYDVQQD
Eyg0NzY5NWY0OTk1YTE0NGRlYmU2OTIzM2FhN2Q4MjU1ZDdiYTY0NTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fHLVCf66XkSSv72KyYtSBIM4ouG
kBQvY4RRWTfzGb+5zR8FVgp4DIpJEXh0FGylb1jQwN2nLzm9Kto7qTSH1t5KJXtA
I4WwMQp9P3btAHABEcJIgNXsqWXhdKJFpITNXbR7SjygIkjDRK6YCLAFppq5JbR4
wHih0H1C65Ab43i7uI/G5kIURyomoH3QiubbUGW030xg0i2pyFBxEN859xbmKD1I
3kidltS1T8SAqkmPt7JAvicfOE7NTSKB7QIIB+YLXYohYE0ccNchv6uSp/eSKRLa
H64zPNZLPyD2r3IqIOf4RZsxoyNWIOzmrRXTh2djEyhBxG24fqBvl685FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdpX0mVoUTevmkjOqfYJV17pkWbMB8GA1UdIwQY
MBaAFHyOVuNG66hXIR/vD1CxTQKredwRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkk1VzQwYnJxRmNoSC04UFVMRk5BcXQ1M0JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kYzRkMDQtOTY3NC00ZGQyLWFkYWEt
NTc1NzUyNGU5ODZiLzEvZkk1VzQwYnJxRmNoSC04UFVMRk5BcXQ1M0JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9kYzRkMDQtOTY3NC00ZGQyLWFkYWEtNTc1NzUyNGU5ODZi
LzEvZkk1VzQwYnJxRmNoSC04UFVMRk5BcXQ1M0JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0W5ynuU
gjLhhk7nLJ+HcomNVOiIhafhedIyT17EWpw5bfEk4As58VL33nlviqS2hGFzIIj+
ts9qo4tG0HlTfHsLTYEkaoW4d7iSOJwabD++kLJZaRzrvX1hIzKVr5QxO+8PmyKx
wB8yQkbiUNms2EXD9Gh4Hax2WnRddUVTg//Y1vVaygzAA24YcYQNSQRtP5mBMLaE
/1wCQQVJptO0pB8zgZLO26BFKE+yd0CuIywAXBeTScBBeVg4eXaanaZAqpJf1LfL
UB4GEmmNavbNNVZLyrHWWUce1WzEmSjnu0sH6heNgNVo2JyS5qGkDHOGn/2yREx0
0z8RmA/X+3bn0w==
-----END CERTIFICATE-----
Generated at Mon Jun 24 10:20:39 2024 by rpki-client on console-fra.rpki-client.org