Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
File:                     B2KQRhen92vQw05C0bl_fIPc8Cg.mft (raw, json)
Hash identifier:          da/C9NJSCW3FnPM+ZftfcdU0mwQoFbNDTEADxMkpcJA=
Subject key identifier:   F8:02:4B:82:A3:8E:F3:AE:7F:91:9A:32:5A:C8:CF:66:F3:A0:23:9A
Authority key identifier: 07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28
Certificate issuer:       /CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028
Certificate serial:       018F362FB60166CCD84F2813265DB329694E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
Manifest number:          114C
Signing time:             Wed 01 May 2024 22:04:07 +0000
Manifest this update:     Wed 01 May 2024 22:04:07 +0000
Manifest next update:     Thu 02 May 2024 22:04:07 +0000
Files and hashes:         1: B2KQRhen92vQw05C0bl_fIPc8Cg.crl (hash: NEXEOcwqYOL6sdh/dSY8jd3R+4LDnW0ctTd+CP0KpVQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 22:04:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:2f:b6:01:66:cc:d8:4f:28:13:26:5d:b3:29:69:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028
        Validity
            Not Before: May  1 22:04:07 2024 GMT
            Not After : May  2 22:04:07 2024 GMT
        Subject: CN=f8024b82a38ef3ae7f919a325ac8cf66f3a0239a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8c:de:6a:59:ac:94:af:a2:6b:6b:b0:91:76:
                    6a:7e:c9:fb:e5:ec:db:aa:03:4d:14:4a:ee:01:da:
                    01:3d:64:84:8f:55:9d:56:0d:60:7e:4e:12:b4:5a:
                    7d:03:b7:f6:a7:14:0b:20:54:b5:43:67:08:74:c3:
                    1c:0c:22:75:73:68:d2:22:52:46:9f:f1:b9:e0:9e:
                    38:5f:f1:35:f4:56:69:f7:01:0e:ef:49:a1:0c:80:
                    13:1c:04:ee:1e:db:cf:35:0f:f0:c5:96:61:0f:c3:
                    b9:58:9b:99:cc:a3:ae:bf:3a:e2:87:d4:e1:8b:b4:
                    80:51:be:d2:96:49:b1:9e:8e:23:d0:1c:c1:23:f9:
                    84:d2:a7:ae:a1:f2:a6:d0:c5:6e:3d:6b:b7:9a:08:
                    0a:58:73:26:c6:cf:b6:5e:e7:57:d7:f0:67:ec:57:
                    03:8b:3f:f2:30:26:45:ca:63:18:4b:90:a9:5b:af:
                    40:4b:7a:89:4d:f5:79:53:6f:63:9f:2a:2f:0c:46:
                    8a:34:56:a1:7e:0d:17:40:b4:4a:41:51:7a:77:5c:
                    b9:ed:65:2e:36:40:13:c9:93:bf:5a:02:1d:37:5a:
                    f1:22:fe:0b:ba:b0:45:12:e4:6c:08:51:88:2e:07:
                    de:16:7b:84:83:fd:c9:29:65:f7:f2:7d:b7:e9:9e:
                    23:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:02:4B:82:A3:8E:F3:AE:7F:91:9A:32:5A:C8:CF:66:F3:A0:23:9A
            X509v3 Authority Key Identifier:
                keyid:07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:3d:2d:1b:c8:98:32:f0:d7:92:62:fc:49:39:39:9c:c0:f0:
         18:7e:82:ea:7a:6f:70:24:51:32:0a:05:97:da:39:5a:bb:12:
         ea:2c:0b:55:01:f8:48:c4:df:87:d1:ed:63:a6:c5:a2:d2:63:
         3b:f4:31:84:bf:cd:43:4e:7b:68:04:60:14:23:52:85:73:0a:
         4c:13:bc:c9:20:d8:26:15:d9:a6:d4:4b:4d:7b:d7:69:fa:1e:
         9c:8c:aa:51:9e:11:ac:85:bd:0b:31:ca:13:d2:85:9c:c5:3a:
         07:43:b5:15:54:af:29:c8:5a:a1:95:d9:32:1e:b9:15:5d:40:
         c0:77:66:5f:3a:71:76:35:e1:08:16:05:58:91:92:ff:b1:7e:
         a9:19:23:3b:fe:69:65:a5:5d:00:e9:cd:ca:29:77:a4:01:f5:
         8c:9e:b6:6b:a8:e6:65:ad:43:7d:bc:fa:ad:9e:44:63:70:a7:
         53:31:e4:37:d8:7f:94:56:4c:43:dc:d7:23:b7:f3:8f:a9:4b:
         3f:cf:c9:e0:48:79:bc:7f:f0:2d:1a:be:e2:1c:ca:58:e7:29:
         92:cc:e6:d7:4f:f8:f6:fb:fc:23:40:0b:32:7e:9e:0b:fa:40:
         14:14:59:1d:ac:29:71:6b:f2:61:f6:32:bc:cd:43:f6:9c:e8:
         26:38:b5:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY82L7YBZszYTygTJl2zKWlOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NjI5MDQ2MTdhN2Y3NmJkMGMzNGU0MmQxYjk3ZjdjODNk
Y2YwMjgwHhcNMjQwNTAxMjIwNDA3WhcNMjQwNTAyMjIwNDA3WjAzMTEwLwYDVQQD
EyhmODAyNGI4MmEzOGVmM2FlN2Y5MTlhMzI1YWM4Y2Y2NmYzYTAyMzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24zealmslK+ia2uwkXZqfsn75ezb
qgNNFEruAdoBPWSEj1WdVg1gfk4StFp9A7f2pxQLIFS1Q2cIdMMcDCJ1c2jSIlJG
n/G54J44X/E19FZp9wEO70mhDIATHATuHtvPNQ/wxZZhD8O5WJuZzKOuvzrih9Th
i7SAUb7Slkmxno4j0BzBI/mE0qeuofKm0MVuPWu3mggKWHMmxs+2XudX1/Bn7FcD
iz/yMCZFymMYS5CpW69AS3qJTfV5U29jnyovDEaKNFahfg0XQLRKQVF6d1y57WUu
NkATyZO/WgIdN1rxIv4LurBFEuRsCFGILgfeFnuEg/3JKWX38n236Z4jYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgCS4KjjvOuf5GaMlrIz2bzoCOaMB8GA1UdIwQY
MBaAFAdikEYXp/dr0MNOQtG5f3yD3PAoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjJLUVJoZW45MnZRdzA1QzBibF9mSVBjOENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi80NzQwNzMtYTk5NS00NDI1LTkzNDkt
MDQyNDhlMzc3YWY1LzEvQjJLUVJoZW45MnZRdzA1QzBibF9mSVBjOENnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi80NzQwNzMtYTk5NS00NDI1LTkzNDktMDQyNDhlMzc3YWY1
LzEvQjJLUVJoZW45MnZRdzA1QzBibF9mSVBjOENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhz0tG8iY
MvDXkmL8STk5nMDwGH6C6npvcCRRMgoFl9o5WrsS6iwLVQH4SMTfh9HtY6bFotJj
O/QxhL/NQ057aARgFCNShXMKTBO8ySDYJhXZptRLTXvXafoenIyqUZ4RrIW9CzHK
E9KFnMU6B0O1FVSvKchaoZXZMh65FV1AwHdmXzpxdjXhCBYFWJGS/7F+qRkjO/5p
ZaVdAOnNyil3pAH1jJ62a6jmZa1Dfbz6rZ5EY3CnUzHkN9h/lFZMQ9zXI7fzj6lL
P8/J4Eh5vH/wLRq+4hzKWOcpkszm10/49vv8I0ALMn6eC/pAFBRZHawpcWvyYfYy
vM1D9pzoJji1iQ==
-----END CERTIFICATE-----
Generated at Thu May 2 01:26:33 2024 by rpki-client on console-fra.rpki-client.org