Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
File:                     Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft (raw, json)
Hash identifier:          T72ualvCefXf+nXjDwMmKM66u+DpfEQ0AsTMC45H/QI=
Subject key identifier:   8E:86:F1:02:21:D9:FD:C5:B0:8D:73:6A:A4:2B:67:A4:A7:38:42:16
Authority key identifier: 26:4E:E8:D2:A3:70:D2:3E:24:11:BD:4A:E3:9F:F3:4A:9D:3F:0F:EE
Certificate issuer:       /CN=264ee8d2a370d23e2411bd4ae39ff34a9d3f0fee
Certificate serial:       018F874AC4F19F140763DA6C60699A4B06F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
Manifest number:          1173
Signing time:             Fri 17 May 2024 16:02:55 +0000
Manifest this update:     Fri 17 May 2024 16:02:55 +0000
Manifest next update:     Sat 18 May 2024 16:02:55 +0000
Files and hashes:         1: Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl (hash: +p/hxnAP0S/NAswcMiAVrYq0rVp/1/MQKKQ5mnB7uIk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:c4:f1:9f:14:07:63:da:6c:60:69:9a:4b:06:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=264ee8d2a370d23e2411bd4ae39ff34a9d3f0fee
        Validity
            Not Before: May 17 16:02:55 2024 GMT
            Not After : May 18 16:02:55 2024 GMT
        Subject: CN=8e86f10221d9fdc5b08d736aa42b67a4a7384216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:52:90:c3:16:22:d8:9b:c8:02:05:dd:fa:70:
                    3c:f6:e8:6c:a1:9b:71:11:3d:d8:8c:ff:3f:1c:5e:
                    3d:f0:0e:a1:64:60:71:2e:bd:d7:1c:58:d7:f6:b3:
                    77:a8:f5:a9:f2:75:26:15:8d:65:03:7a:3a:15:be:
                    54:95:85:92:69:64:0f:d2:2b:2d:1f:48:0b:a9:8b:
                    ee:36:f6:e9:11:7f:14:ec:98:04:be:3e:c8:e8:a6:
                    40:73:28:6c:a5:44:8c:c2:fb:3f:8a:8a:ec:06:76:
                    20:d3:5f:5e:d2:d8:8b:3d:61:55:3c:0e:2f:88:cb:
                    4d:45:79:7d:2b:23:1e:1b:e3:55:bc:fc:c8:a6:70:
                    11:ef:02:38:28:be:46:0c:11:dd:b7:fa:1b:d1:ad:
                    fd:50:2c:d6:79:a6:5e:d8:99:9e:67:37:8f:eb:6f:
                    46:9d:84:6e:0a:9a:58:8b:53:3f:5b:30:0d:79:ec:
                    6f:16:f2:b7:43:d5:c7:4e:03:84:37:c9:66:6a:4d:
                    f6:cb:c1:6e:ba:d9:46:a0:96:2e:a4:b3:b3:5d:cc:
                    e8:4c:7f:08:56:8b:ca:2c:58:de:ec:81:d5:4c:c6:
                    22:12:7b:e7:37:19:5d:1d:3e:01:11:a5:61:07:06:
                    e7:29:1d:c9:c2:b4:93:9d:9b:c5:e6:fd:90:8c:06:
                    10:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:86:F1:02:21:D9:FD:C5:B0:8D:73:6A:A4:2B:67:A4:A7:38:42:16
            X509v3 Authority Key Identifier:
                keyid:26:4E:E8:D2:A3:70:D2:3E:24:11:BD:4A:E3:9F:F3:4A:9D:3F:0F:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e4:7d:4e:b0:d8:aa:99:be:d4:56:22:6d:4c:f3:15:8c:e5:
         2f:c3:bd:78:7e:a2:95:d6:ce:68:0b:2e:ca:13:67:41:2e:69:
         f9:18:19:d4:5e:63:81:e1:0a:e2:8e:fd:48:9e:21:9e:30:6f:
         1d:9f:2d:85:b5:b3:c1:f3:9e:ad:47:76:53:4a:44:7b:19:c1:
         bb:fe:44:5c:53:5a:4a:9b:4a:e7:ad:97:8d:57:b7:3e:32:7d:
         8c:68:06:35:7b:69:97:b9:7f:c5:58:30:47:f8:f9:6c:5d:5f:
         27:9c:8c:4b:80:c1:c3:95:16:50:df:f0:b6:59:a3:86:a0:5a:
         c8:bc:35:66:2d:24:ba:68:9f:d1:36:1a:a5:9e:6a:26:9a:00:
         ff:84:f7:a5:01:ad:59:c7:af:c9:af:05:72:36:75:e7:eb:e1:
         25:10:a8:f7:f1:b2:0c:76:7a:6c:5e:26:d7:95:d7:e2:e0:dd:
         32:1c:04:b6:71:95:59:f8:ce:27:e9:83:e5:5b:d2:f6:df:d4:
         14:a4:f4:74:75:4d:6c:1c:65:51:69:06:46:22:22:d3:ff:95:
         e4:4d:1c:eb:5a:af:2f:29:dd:e6:44:53:eb:39:8b:fb:fd:3c:
         32:76:41:05:2b:b0:69:4b:22:a4:eb:b2:f2:88:e4:3f:ab:3d:
         f1:de:54:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSsTxnxQHY9psYGmaSwbwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NGVlOGQyYTM3MGQyM2UyNDExYmQ0YWUzOWZmMzRhOWQz
ZjBmZWUwHhcNMjQwNTE3MTYwMjU1WhcNMjQwNTE4MTYwMjU1WjAzMTEwLwYDVQQD
Eyg4ZTg2ZjEwMjIxZDlmZGM1YjA4ZDczNmFhNDJiNjdhNGE3Mzg0MjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01KQwxYi2JvIAgXd+nA89uhsoZtx
ET3YjP8/HF498A6hZGBxLr3XHFjX9rN3qPWp8nUmFY1lA3o6Fb5UlYWSaWQP0ist
H0gLqYvuNvbpEX8U7JgEvj7I6KZAcyhspUSMwvs/iorsBnYg019e0tiLPWFVPA4v
iMtNRXl9KyMeG+NVvPzIpnAR7wI4KL5GDBHdt/ob0a39UCzWeaZe2JmeZzeP629G
nYRuCppYi1M/WzANeexvFvK3Q9XHTgOEN8lmak32y8FuutlGoJYupLOzXczoTH8I
VovKLFje7IHVTMYiEnvnNxldHT4BEaVhBwbnKR3JwrSTnZvF5v2QjAYQ2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6G8QIh2f3FsI1zaqQrZ6SnOEIWMB8GA1UdIwQY
MBaAFCZO6NKjcNI+JBG9SuOf80qdPw/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSms3bzBxTncwajRrRWIxSzQ1X3pTcDBfRC00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy83MGUzNDEtNDU2Ni00NWRhLTgyNzMt
ZjU1MWIxYTA0NjJjLzEvSms3bzBxTncwajRrRWIxSzQ1X3pTcDBfRC00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy83MGUzNDEtNDU2Ni00NWRhLTgyNzMtZjU1MWIxYTA0NjJj
LzEvSms3bzBxTncwajRrRWIxSzQ1X3pTcDBfRC00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMuR9TrDY
qpm+1FYibUzzFYzlL8O9eH6ildbOaAsuyhNnQS5p+RgZ1F5jgeEK4o79SJ4hnjBv
HZ8thbWzwfOerUd2U0pEexnBu/5EXFNaSptK562XjVe3PjJ9jGgGNXtpl7l/xVgw
R/j5bF1fJ5yMS4DBw5UWUN/wtlmjhqBayLw1Zi0kumif0TYapZ5qJpoA/4T3pQGt
Wcevya8FcjZ15+vhJRCo9/GyDHZ6bF4m15XX4uDdMhwEtnGVWfjOJ+mD5VvS9t/U
FKT0dHVNbBxlUWkGRiIi0/+V5E0c61qvLynd5kRT6zmL+/08MnZBBSuwaUsipOuy
8ojkP6s98d5UpQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:18:18 2024 by rpki-client on console-fra.rpki-client.org