Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
File:                     I-_rMup5TJRQkgia5cE1AvdxbN4.mft (raw, json)
Hash identifier:          LgRnQF4e35r89uJqfHsmsrJqSAYlprpcMaJxLZLRRzY=
Subject key identifier:   E9:D7:AA:37:E0:03:E4:7E:1A:0F:05:36:24:33:45:2E:2D:F8:87:09
Authority key identifier: 23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE
Certificate issuer:       /CN=23efeb32ea794c945092089ae5c13502f7716cde
Certificate serial:       018F407A12E297651420C42FB9F1850F780E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
Manifest number:          1150
Signing time:             Fri 03 May 2024 22:01:32 +0000
Manifest this update:     Fri 03 May 2024 22:01:32 +0000
Manifest next update:     Sat 04 May 2024 22:01:32 +0000
Files and hashes:         1: I-_rMup5TJRQkgia5cE1AvdxbN4.crl (hash: 0gcuaIS4tIS1IyGNby+u75zQ7tijA8oJbIQ6AzGYH/c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:40:7a:12:e2:97:65:14:20:c4:2f:b9:f1:85:0f:78:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23efeb32ea794c945092089ae5c13502f7716cde
        Validity
            Not Before: May  3 22:01:32 2024 GMT
            Not After : May  4 22:01:32 2024 GMT
        Subject: CN=e9d7aa37e003e47e1a0f05362433452e2df88709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:65:73:37:f6:c9:37:bc:a3:f2:5b:37:94:eb:
                    8a:72:89:06:56:25:c8:68:af:a7:cc:b1:d9:9f:2e:
                    43:4b:36:c5:bc:87:13:0b:04:1b:4d:86:d2:67:75:
                    0c:f3:a4:1d:06:e2:c9:64:90:65:a1:44:16:68:b2:
                    77:15:eb:1a:28:bc:74:2f:fc:66:b4:de:d8:63:62:
                    1e:dc:99:b0:0e:4c:2e:e9:b9:c6:37:ad:58:a9:d5:
                    c1:b1:64:01:66:76:2f:60:87:53:fc:bd:bf:b8:33:
                    cd:81:f9:0a:3d:21:d7:44:58:ad:cc:e7:0e:dc:48:
                    28:ff:ff:36:2c:97:06:f7:cf:23:b8:3d:a4:0d:85:
                    78:14:7a:b2:af:0d:a0:78:dc:99:a2:09:53:96:e9:
                    8c:26:c1:4b:30:b5:46:99:9c:aa:25:a4:91:83:78:
                    da:78:c9:5e:07:bb:3d:2f:36:20:30:c3:30:ce:fb:
                    3e:34:50:04:67:01:e1:9d:7a:38:15:81:2d:57:7f:
                    a4:ab:dd:49:71:72:a9:c8:a0:b7:1b:da:2d:98:1a:
                    5e:91:8d:8b:6d:1e:40:e4:16:2f:e9:57:a7:f5:d4:
                    e0:e3:cb:e2:9b:e0:f4:97:e1:89:3c:3d:27:95:11:
                    7c:27:dd:38:ad:d9:70:68:23:c4:ee:96:90:3f:67:
                    31:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D7:AA:37:E0:03:E4:7E:1A:0F:05:36:24:33:45:2E:2D:F8:87:09
            X509v3 Authority Key Identifier:
                keyid:23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:bc:98:cd:4b:47:31:d4:71:77:a3:67:9a:04:ab:61:3e:d2:
         82:3b:20:28:bf:a3:06:ff:04:9b:88:40:68:8c:22:3d:bb:e1:
         32:dc:37:12:19:b7:13:e0:e7:f2:20:db:6c:65:e0:fe:d1:2a:
         5f:bb:74:33:e0:b3:68:42:b2:2c:da:db:12:3d:35:ea:18:b0:
         bf:3d:51:92:76:7f:40:8a:98:18:a8:05:67:ce:67:73:ed:56:
         dc:72:af:42:87:ad:35:b2:12:41:e8:66:59:fd:29:c1:6e:32:
         5b:cb:02:52:b7:74:c5:9f:1c:ba:59:f6:30:e9:40:75:8d:82:
         d0:39:00:e0:ef:dc:79:af:e8:72:53:59:51:a7:67:0c:1c:c6:
         86:3f:c7:25:e6:79:18:d1:1d:b2:93:4a:a6:b0:f3:57:88:ff:
         50:15:62:44:3d:93:2a:e1:ec:e8:37:d4:25:e6:33:8d:1b:ed:
         df:db:12:42:c4:c1:d5:00:87:4d:47:13:53:be:b5:23:e9:dc:
         0c:36:f8:70:c2:88:39:ed:03:f5:be:bc:f4:9a:09:bb:fe:f1:
         e8:7c:7d:d3:7e:52:4e:2f:e0:29:5f:16:21:c1:ed:ee:b1:d7:
         ad:7b:a6:cf:96:82:5b:83:22:d3:f6:3c:2b:a1:85:99:e3:2c:
         64:91:70:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9AehLil2UUIMQvufGFD3gOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZWZlYjMyZWE3OTRjOTQ1MDkyMDg5YWU1YzEzNTAyZjc3
MTZjZGUwHhcNMjQwNTAzMjIwMTMyWhcNMjQwNTA0MjIwMTMyWjAzMTEwLwYDVQQD
EyhlOWQ3YWEzN2UwMDNlNDdlMWEwZjA1MzYyNDMzNDUyZTJkZjg4NzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WVzN/bJN7yj8ls3lOuKcokGViXI
aK+nzLHZny5DSzbFvIcTCwQbTYbSZ3UM86QdBuLJZJBloUQWaLJ3FesaKLx0L/xm
tN7YY2Ie3JmwDkwu6bnGN61YqdXBsWQBZnYvYIdT/L2/uDPNgfkKPSHXRFitzOcO
3Ego//82LJcG988juD2kDYV4FHqyrw2geNyZoglTlumMJsFLMLVGmZyqJaSRg3ja
eMleB7s9LzYgMMMwzvs+NFAEZwHhnXo4FYEtV3+kq91JcXKpyKC3G9otmBpekY2L
bR5A5BYv6Ven9dTg48vim+D0l+GJPD0nlRF8J904rdlwaCPE7paQP2cxPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnXqjfgA+R+Gg8FNiQzRS4t+IcJMB8GA1UdIwQY
MBaAFCPv6zLqeUyUUJIImuXBNQL3cWzeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSS1fck11cDVUSlJRa2dpYTVjRTFBdmR4Yk40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8yMDUyZjMtMmJlMS00MTdhLWE0MTYt
ZGZiZDViNWVhNzYwLzEvSS1fck11cDVUSlJRa2dpYTVjRTFBdmR4Yk40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8yMDUyZjMtMmJlMS00MTdhLWE0MTYtZGZiZDViNWVhNzYw
LzEvSS1fck11cDVUSlJRa2dpYTVjRTFBdmR4Yk40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABryYzUtH
MdRxd6NnmgSrYT7SgjsgKL+jBv8Em4hAaIwiPbvhMtw3Ehm3E+Dn8iDbbGXg/tEq
X7t0M+CzaEKyLNrbEj016hiwvz1RknZ/QIqYGKgFZ85nc+1W3HKvQoetNbISQehm
Wf0pwW4yW8sCUrd0xZ8culn2MOlAdY2C0DkA4O/cea/oclNZUadnDBzGhj/HJeZ5
GNEdspNKprDzV4j/UBViRD2TKuHs6DfUJeYzjRvt39sSQsTB1QCHTUcTU761I+nc
DDb4cMKIOe0D9b689JoJu/7x6Hx9035STi/gKV8WIcHt7rHXrXumz5aCW4Mi0/Y8
K6GFmeMsZJFwew==
-----END CERTIFICATE-----
Generated at Fri May 3 23:58:26 2024 by rpki-client on console-fra.rpki-client.org