Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft
File:                     obfHtAmGdKBPsXeELOxO65v4nh4.mft (raw, json)
Hash identifier:          HXLWu9Giv46qq2L7+cKHrHJMBUeUYvoF5+9kiqrvjWU=
Subject key identifier:   2D:51:72:5D:20:33:EF:33:04:2C:8F:5B:5B:E7:5A:7C:68:95:3C:05
Authority key identifier: A1:B7:C7:B4:09:86:74:A0:4F:B1:77:84:2C:EC:4E:EB:9B:F8:9E:1E
Certificate issuer:       /CN=a1b7c7b4098674a04fb177842cec4eeb9bf89e1e
Certificate serial:       018F874AEB76170737F807B754F141704194
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obfHtAmGdKBPsXeELOxO65v4nh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft
Manifest number:          1174
Signing time:             Fri 17 May 2024 16:03:05 +0000
Manifest this update:     Fri 17 May 2024 16:03:05 +0000
Manifest next update:     Sat 18 May 2024 16:03:05 +0000
Files and hashes:         1: obfHtAmGdKBPsXeELOxO65v4nh4.crl (hash: mDjMTNfrW/l4NYNDNpSSzc2EekS2KNOUKATLUVGaRRQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/obfHtAmGdKBPsXeELOxO65v4nh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:eb:76:17:07:37:f8:07:b7:54:f1:41:70:41:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b7c7b4098674a04fb177842cec4eeb9bf89e1e
        Validity
            Not Before: May 17 16:03:05 2024 GMT
            Not After : May 18 16:03:05 2024 GMT
        Subject: CN=2d51725d2033ef33042c8f5b5be75a7c68953c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:06:6c:35:ca:11:c2:ea:9b:69:9c:f5:4c:46:
                    e6:fc:33:bd:40:29:76:a0:73:c0:b2:26:d5:54:4a:
                    62:69:ab:f9:7d:8d:8f:2c:d4:d7:5a:bd:5d:6a:0e:
                    b4:9c:05:b0:63:8c:97:a0:a0:71:77:a4:c2:bf:5c:
                    49:04:d1:b4:63:a5:4c:cf:5c:92:2e:3b:63:1e:83:
                    f8:83:b2:89:b5:52:9a:e6:6e:2b:8d:d8:93:5a:c2:
                    9e:4a:35:8e:e7:24:7b:65:42:ef:8b:b8:b3:e9:b3:
                    f5:c0:e3:81:fa:7d:be:8a:83:69:c8:0c:34:ed:c9:
                    d2:81:c5:a8:25:a2:ad:3a:59:b0:62:0e:d1:9a:94:
                    a1:0b:cf:87:06:16:e2:fb:c6:e4:2f:1e:67:f3:d9:
                    80:c8:43:aa:a7:1b:bd:54:91:17:40:c2:d9:a6:e7:
                    9e:1e:c1:0c:a5:d1:46:fe:31:4b:37:71:04:ea:56:
                    87:9c:61:0f:3c:bc:69:a9:94:14:be:42:a1:a1:aa:
                    96:57:06:78:38:20:e5:92:90:d3:65:7c:e0:d6:c0:
                    34:dd:42:51:56:04:44:f8:c0:2c:92:bd:1d:4f:07:
                    6b:7a:de:f2:9e:74:ae:1e:2c:f3:94:fa:4b:4b:b7:
                    e5:b5:97:ab:a0:06:11:2f:86:4c:06:ac:43:54:39:
                    12:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:51:72:5D:20:33:EF:33:04:2C:8F:5B:5B:E7:5A:7C:68:95:3C:05
            X509v3 Authority Key Identifier:
                keyid:A1:B7:C7:B4:09:86:74:A0:4F:B1:77:84:2C:EC:4E:EB:9B:F8:9E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obfHtAmGdKBPsXeELOxO65v4nh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:c4:f3:ce:51:34:22:6c:58:f0:16:b9:cd:a1:60:0c:83:a3:
         7f:69:70:a9:60:37:82:fa:db:92:d1:6f:37:40:3a:d8:a9:95:
         d9:52:29:31:45:73:c3:e5:63:4e:2f:fa:41:8f:20:4f:8a:15:
         ae:30:fb:72:89:93:2e:83:62:13:77:e0:ec:29:cc:6b:1f:ca:
         9e:78:1f:07:8e:f7:cd:8c:c1:c9:1f:4a:27:36:12:57:5f:1e:
         4f:f8:ae:c7:30:a5:08:62:fe:df:d6:9a:c7:6e:52:60:c9:2b:
         d0:ab:bc:bb:e8:01:e9:be:c6:a2:2c:1f:f8:73:5e:39:fe:14:
         e9:f7:9f:67:b9:ae:c7:f2:6c:53:1a:d2:32:42:55:b7:20:b0:
         f8:0c:82:1b:d0:aa:72:11:5b:a1:ad:71:b7:62:ae:a0:51:6b:
         f6:0b:e3:bf:b4:6d:c2:cf:69:f7:df:56:f3:60:1e:cb:5c:8b:
         63:09:fd:ed:3f:12:c7:e5:45:63:60:8a:3a:a0:ea:58:94:3e:
         a7:04:43:cb:b6:2e:39:80:72:41:2a:bd:e8:14:e0:bd:3b:35:
         d1:ca:93:e8:a7:66:3b:89:12:16:b6:f6:33:5e:c7:a3:32:5f:
         f1:18:05:10:59:30:f1:08:be:c8:5a:3b:e1:8b:c8:ed:7d:38:
         f2:4c:28:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSut2Fwc3+Ae3VPFBcEGUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYjdjN2I0MDk4Njc0YTA0ZmIxNzc4NDJjZWM0ZWViOWJm
ODllMWUwHhcNMjQwNTE3MTYwMzA1WhcNMjQwNTE4MTYwMzA1WjAzMTEwLwYDVQQD
EygyZDUxNzI1ZDIwMzNlZjMzMDQyYzhmNWI1YmU3NWE3YzY4OTUzYzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gZsNcoRwuqbaZz1TEbm/DO9QCl2
oHPAsibVVEpiaav5fY2PLNTXWr1dag60nAWwY4yXoKBxd6TCv1xJBNG0Y6VMz1yS
LjtjHoP4g7KJtVKa5m4rjdiTWsKeSjWO5yR7ZULvi7iz6bP1wOOB+n2+ioNpyAw0
7cnSgcWoJaKtOlmwYg7RmpShC8+HBhbi+8bkLx5n89mAyEOqpxu9VJEXQMLZpuee
HsEMpdFG/jFLN3EE6laHnGEPPLxpqZQUvkKhoaqWVwZ4OCDlkpDTZXzg1sA03UJR
VgRE+MAskr0dTwdret7ynnSuHizzlPpLS7fltZeroAYRL4ZMBqxDVDkSVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1Rcl0gM+8zBCyPW1vnWnxolTwFMB8GA1UdIwQY
MBaAFKG3x7QJhnSgT7F3hCzsTuub+J4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2JmSHRBbUdkS0JQc1hlRUxPeE82NXY0bmg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84NWFlMWItYjA3Ny00NDhlLWEzMjgt
N2MwNWExZmY1NDliLzEvb2JmSHRBbUdkS0JQc1hlRUxPeE82NXY0bmg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS84NWFlMWItYjA3Ny00NDhlLWEzMjgtN2MwNWExZmY1NDli
LzEvb2JmSHRBbUdkS0JQc1hlRUxPeE82NXY0bmg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8TzzlE0
ImxY8Ba5zaFgDIOjf2lwqWA3gvrbktFvN0A62KmV2VIpMUVzw+VjTi/6QY8gT4oV
rjD7comTLoNiE3fg7CnMax/KnngfB473zYzByR9KJzYSV18eT/iuxzClCGL+39aa
x25SYMkr0Ku8u+gB6b7Goiwf+HNeOf4U6fefZ7mux/JsUxrSMkJVtyCw+AyCG9Cq
chFboa1xt2KuoFFr9gvjv7Rtws9p999W82Aey1yLYwn97T8Sx+VFY2CKOqDqWJQ+
pwRDy7YuOYByQSq96BTgvTs10cqT6KdmO4kSFrb2M17HozJf8RgFEFkw8Qi+yFo7
4YvI7X048kwo8A==
-----END CERTIFICATE-----
Generated at Fri May 17 18:16:17 2024 by rpki-client on console-fra.rpki-client.org