Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
File:                     YE1FsSrOCsIjA-08d5S4MGpqtbA.mft (raw, json)
Hash identifier:          +tHg5lruDXn4mvlyf0Hc5Z7Dia4EEAQ+Cvhoj7quFb8=
Subject key identifier:   49:E6:49:D8:F7:39:53:63:EC:56:14:88:32:E1:0F:44:1A:2F:92:69
Authority key identifier: 60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0
Certificate issuer:       /CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
Certificate serial:       019040AF08A6A921E4587F3EE23832E27484
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
Manifest number:          1168
Signing time:             Sat 22 Jun 2024 16:02:11 +0000
Manifest this update:     Sat 22 Jun 2024 16:02:11 +0000
Manifest next update:     Sun 23 Jun 2024 16:02:11 +0000
Files and hashes:         1: YE1FsSrOCsIjA-08d5S4MGpqtbA.crl (hash: 5grSXFCgMuH6aszRCZsv/IGaO8pTNQAZTH+2xyITr8k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:af:08:a6:a9:21:e4:58:7f:3e:e2:38:32:e2:74:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
        Validity
            Not Before: Jun 22 16:02:11 2024 GMT
            Not After : Jun 23 16:02:11 2024 GMT
        Subject: CN=49e649d8f7395363ec56148832e10f441a2f9269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:00:17:ec:9e:11:8d:f6:57:fa:17:c7:a1:c3:
                    51:b1:9b:cf:03:b0:a9:68:4b:6e:54:5d:6f:f7:e3:
                    50:a2:10:4e:b9:2a:28:6f:01:b0:b5:99:bf:4c:8d:
                    14:38:fb:17:f1:55:98:85:76:13:be:b2:f5:f1:ab:
                    43:49:2a:36:54:22:dd:fd:3b:a2:c4:06:de:33:39:
                    8d:4b:f4:5b:29:10:5f:b6:16:e6:73:eb:2a:7b:f9:
                    10:11:ee:49:e0:ae:6c:76:50:32:7d:33:32:72:4e:
                    ca:3a:1a:ad:f2:ef:58:d4:88:8e:a0:84:cc:4b:9d:
                    7d:b3:b4:34:ce:77:59:32:7a:77:83:6d:05:40:b5:
                    19:29:88:61:6e:50:33:78:13:f5:b5:68:3e:b0:92:
                    d9:82:fc:d4:ae:f7:b9:11:c5:df:58:c7:50:81:47:
                    56:3f:05:1f:9e:5d:26:4e:35:cf:13:bc:5c:00:dd:
                    54:fb:88:a0:a9:95:2e:f4:8f:86:30:02:60:9c:67:
                    98:32:d7:2f:c1:5e:31:1b:be:ac:d4:42:1d:e0:fd:
                    ca:79:2c:18:5f:d9:b6:15:0c:7d:a0:5a:bf:aa:93:
                    37:cc:ae:bb:72:eb:27:dc:86:a5:f2:6b:45:3c:4c:
                    08:8f:2d:29:fb:ea:4b:37:29:75:f8:50:7d:1d:f8:
                    49:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E6:49:D8:F7:39:53:63:EC:56:14:88:32:E1:0F:44:1A:2F:92:69
            X509v3 Authority Key Identifier:
                keyid:60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:f5:8f:3f:56:0c:f5:ca:4f:31:91:49:05:84:68:3c:a5:f8:
         23:54:dd:04:d0:49:b6:df:b3:e4:ec:b9:00:d6:55:f4:25:54:
         88:9b:ac:90:71:04:2b:44:5e:7f:27:a7:35:f5:9c:9a:0a:da:
         f3:ca:65:05:18:5e:f5:09:ad:f1:9c:7f:0d:44:59:47:f3:d9:
         b7:94:51:aa:e0:05:05:96:d5:24:36:b6:b6:b9:65:54:39:5c:
         74:b6:48:4a:25:bb:f9:10:b2:e1:69:3a:fc:71:5b:b9:39:e5:
         3a:a2:13:60:c1:89:2e:d1:c3:23:d7:28:0a:0a:1c:73:a3:eb:
         1a:4b:3f:9e:48:5d:71:d1:a5:a4:e1:06:db:f7:f0:88:fd:91:
         27:b1:58:75:3f:bc:95:26:7d:79:11:cc:15:2c:6a:fa:6c:00:
         f7:96:27:ca:f5:9b:3a:cb:84:c2:fb:8a:bd:ee:ff:2e:56:6a:
         43:88:da:d1:b4:67:c3:85:dc:0f:13:7c:8f:5e:1b:73:28:8b:
         b9:5f:1c:8c:02:ec:e4:f8:4b:58:9e:fb:68:4c:b9:16:fd:08:
         a9:fc:81:3c:7c:d3:e2:2d:02:13:2b:79:08:26:c6:a2:62:29:
         7f:2c:ea:1b:95:dc:ee:7a:f6:4e:01:da:f6:27:af:d2:51:34:
         d4:72:e0:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBArwimqSHkWH8+4jgy4nSEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNGQ0NWIxMmFjZTBhYzIyMzAzZWQzYzc3OTRiODMwNmE2
YWI1YjAwHhcNMjQwNjIyMTYwMjExWhcNMjQwNjIzMTYwMjExWjAzMTEwLwYDVQQD
Eyg0OWU2NDlkOGY3Mzk1MzYzZWM1NjE0ODgzMmUxMGY0NDFhMmY5MjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQAX7J4RjfZX+hfHocNRsZvPA7Cp
aEtuVF1v9+NQohBOuSoobwGwtZm/TI0UOPsX8VWYhXYTvrL18atDSSo2VCLd/Tui
xAbeMzmNS/RbKRBfthbmc+sqe/kQEe5J4K5sdlAyfTMyck7KOhqt8u9Y1IiOoITM
S519s7Q0zndZMnp3g20FQLUZKYhhblAzeBP1tWg+sJLZgvzUrve5EcXfWMdQgUdW
PwUfnl0mTjXPE7xcAN1U+4igqZUu9I+GMAJgnGeYMtcvwV4xG76s1EId4P3KeSwY
X9m2FQx9oFq/qpM3zK67cusn3Ial8mtFPEwIjy0p++pLNyl1+FB9HfhJrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnmSdj3OVNj7FYUiDLhD0QaL5JpMB8GA1UdIwQY
MBaAFGBNRbEqzgrCIwPtPHeUuDBqarWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUUxRnNTck9Dc0lqQS0wOGQ1UzRNR3BxdGJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9jYTY4NTUtMThmNi00YmMwLThmYWIt
Mzc1N2Y5MzA4YWNjLzEvWUUxRnNTck9Dc0lqQS0wOGQ1UzRNR3BxdGJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9jYTY4NTUtMThmNi00YmMwLThmYWItMzc1N2Y5MzA4YWNj
LzEvWUUxRnNTck9Dc0lqQS0wOGQ1UzRNR3BxdGJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfWPP1YM
9cpPMZFJBYRoPKX4I1TdBNBJtt+z5Oy5ANZV9CVUiJuskHEEK0RefyenNfWcmgra
88plBRhe9Qmt8Zx/DURZR/PZt5RRquAFBZbVJDa2trllVDlcdLZISiW7+RCy4Wk6
/HFbuTnlOqITYMGJLtHDI9coCgocc6PrGks/nkhdcdGlpOEG2/fwiP2RJ7FYdT+8
lSZ9eRHMFSxq+mwA95YnyvWbOsuEwvuKve7/LlZqQ4ja0bRnw4XcDxN8j14bcyiL
uV8cjALs5PhLWJ77aEy5Fv0IqfyBPHzT4i0CEyt5CCbGomIpfyzqG5Xc7nr2TgHa
9iev0lE01HLgVg==
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:48:21 2024 by rpki-client on console-fra.rpki-client.org