Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft
File:                     0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft (raw, json)
Hash identifier:          pZG+xKJ+9cMkianSjskdXTPpVS3orJZE6VfIBBllMl8=
Subject key identifier:   FA:2B:2F:66:54:07:4C:B5:6D:4A:8B:09:20:6E:2F:41:8C:68:39:52
Authority key identifier: D1:49:7B:32:47:76:7D:34:99:91:E9:96:CA:B8:AF:7D:49:94:2A:F4
Certificate issuer:       /CN=d1497b3247767d349991e996cab8af7d49942af4
Certificate serial:       018F3B53772686CA175FE3C2245C279572FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft
Manifest number:          10E1
Signing time:             Thu 02 May 2024 22:01:16 +0000
Manifest this update:     Thu 02 May 2024 22:01:16 +0000
Manifest next update:     Fri 03 May 2024 22:01:16 +0000
Files and hashes:         1: 0Ul7Mkd2fTSZkemWyrivfUmUKvQ.crl (hash: POcPVK2zFi1+U31dam+oSkZObg2ZrJ4XZTWW0ylIExM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:53:77:26:86:ca:17:5f:e3:c2:24:5c:27:95:72:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1497b3247767d349991e996cab8af7d49942af4
        Validity
            Not Before: May  2 22:01:16 2024 GMT
            Not After : May  3 22:01:16 2024 GMT
        Subject: CN=fa2b2f6654074cb56d4a8b09206e2f418c683952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cd:9c:02:16:06:5f:43:74:34:7e:36:36:d7:
                    31:7e:c1:11:79:9e:68:e2:81:4d:ab:f0:47:51:60:
                    b0:33:86:e8:df:47:e3:95:86:33:5c:44:e6:4a:d7:
                    59:aa:43:92:5f:9e:32:ca:fd:17:12:88:0a:47:fc:
                    6a:ed:e6:55:51:79:be:5b:fb:01:9a:7b:df:14:06:
                    84:dc:13:ff:70:03:ca:92:cf:59:d9:3b:18:ea:1d:
                    f8:52:0a:ff:66:98:6f:dc:e2:2c:af:00:b3:98:7c:
                    17:a6:1f:9e:5c:4d:33:5a:9f:16:c1:92:f3:5a:0c:
                    f3:8d:fa:68:30:6e:ac:f1:a1:e0:6d:26:97:00:1a:
                    69:2e:3a:81:5c:97:bc:79:12:b0:f1:bb:f4:67:30:
                    d0:e5:6b:4e:67:38:de:7c:de:15:96:98:f4:03:72:
                    3d:3c:92:0c:d8:0f:5d:27:9f:f7:b6:fc:a7:33:d1:
                    d5:1b:95:55:6f:8b:f2:25:9b:00:4b:c5:ac:6c:1e:
                    49:c9:d5:d7:09:5d:b7:4d:ac:5d:84:62:41:f9:79:
                    07:05:c1:b3:c1:f5:ce:82:a5:6c:97:2d:91:c7:c3:
                    52:29:93:6a:24:3b:2a:89:04:29:36:e5:98:90:be:
                    49:a0:dd:26:49:e5:63:5b:d7:0c:23:95:fe:7f:2a:
                    0c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2B:2F:66:54:07:4C:B5:6D:4A:8B:09:20:6E:2F:41:8C:68:39:52
            X509v3 Authority Key Identifier:
                keyid:D1:49:7B:32:47:76:7D:34:99:91:E9:96:CA:B8:AF:7D:49:94:2A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8a6744-39a2-4457-b845-d02eb27373e6/1/0Ul7Mkd2fTSZkemWyrivfUmUKvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:8e:e1:3a:65:81:25:b7:17:ef:90:5e:b9:1c:21:77:f6:91:
         4a:75:4c:0c:d0:44:16:0d:24:26:c7:32:7c:04:e4:40:7e:e6:
         ef:e9:41:e6:1d:da:ea:e8:95:97:91:4c:50:5c:81:fa:cd:b5:
         98:02:64:a6:08:33:46:cf:71:2b:b8:83:54:28:c0:9e:bf:32:
         dc:78:59:5e:3d:2f:a7:c0:a2:56:14:b8:d4:02:5c:9e:8a:6c:
         fa:8c:94:dc:7d:63:de:e6:bb:b0:c7:30:f9:2b:f7:3f:57:6b:
         16:3d:c5:84:1a:24:4b:19:6e:fb:8a:0c:59:65:d6:bf:5b:2b:
         ed:dc:bb:51:e5:da:c7:88:d2:b2:85:62:42:8b:d7:c9:77:38:
         73:85:e1:58:ce:b3:2c:31:98:fc:7a:9a:60:e2:e6:d1:d4:f0:
         f2:b6:dd:b8:97:cf:f3:1c:9e:d9:6f:1e:d7:0c:a9:25:3c:fa:
         2e:b0:b9:a6:93:d7:77:7a:7c:51:dc:1b:82:0c:a2:00:42:31:
         7b:1f:9f:ab:15:b7:d2:c2:cb:85:27:2d:68:14:be:6d:c2:98:
         c3:10:b1:9a:c1:e9:03:bd:13:1a:a8:3b:52:b2:ce:0f:f6:80:
         d5:96:15:ea:48:0f:bc:3c:fd:39:4b:aa:33:f1:fa:9e:53:ec:
         c2:61:97:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY87U3cmhsoXX+PCJFwnlXL/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNDk3YjMyNDc3NjdkMzQ5OTkxZTk5NmNhYjhhZjdkNDk5
NDJhZjQwHhcNMjQwNTAyMjIwMTE2WhcNMjQwNTAzMjIwMTE2WjAzMTEwLwYDVQQD
EyhmYTJiMmY2NjU0MDc0Y2I1NmQ0YThiMDkyMDZlMmY0MThjNjgzOTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM2cAhYGX0N0NH42NtcxfsEReZ5o
4oFNq/BHUWCwM4bo30fjlYYzXETmStdZqkOSX54yyv0XEogKR/xq7eZVUXm+W/sB
mnvfFAaE3BP/cAPKks9Z2TsY6h34Ugr/Zphv3OIsrwCzmHwXph+eXE0zWp8WwZLz
WgzzjfpoMG6s8aHgbSaXABppLjqBXJe8eRKw8bv0ZzDQ5WtOZzjefN4Vlpj0A3I9
PJIM2A9dJ5/3tvynM9HVG5VVb4vyJZsAS8WsbB5JydXXCV23TaxdhGJB+XkHBcGz
wfXOgqVsly2Rx8NSKZNqJDsqiQQpNuWYkL5JoN0mSeVjW9cMI5X+fyoMawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPorL2ZUB0y1bUqLCSBuL0GMaDlSMB8GA1UdIwQY
MBaAFNFJezJHdn00mZHplsq4r31JlCr0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFVsN01rZDJmVFNaa2VtV3lyaXZmVW1VS3ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi84YTY3NDQtMzlhMi00NDU3LWI4NDUt
ZDAyZWIyNzM3M2U2LzEvMFVsN01rZDJmVFNaa2VtV3lyaXZmVW1VS3ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi84YTY3NDQtMzlhMi00NDU3LWI4NDUtZDAyZWIyNzM3M2U2
LzEvMFVsN01rZDJmVFNaa2VtV3lyaXZmVW1VS3ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr47hOmWB
JbcX75BeuRwhd/aRSnVMDNBEFg0kJscyfATkQH7m7+lB5h3a6uiVl5FMUFyB+s21
mAJkpggzRs9xK7iDVCjAnr8y3HhZXj0vp8CiVhS41AJcnops+oyU3H1j3ua7sMcw
+Sv3P1drFj3FhBokSxlu+4oMWWXWv1sr7dy7UeXax4jSsoViQovXyXc4c4XhWM6z
LDGY/HqaYOLm0dTw8rbduJfP8xye2W8e1wypJTz6LrC5ppPXd3p8UdwbggyiAEIx
ex+fqxW30sLLhSctaBS+bcKYwxCxmsHpA70TGqg7UrLOD/aA1ZYV6kgPvDz9OUuq
M/H6nlPswmGXjA==
-----END CERTIFICATE-----
Generated at Fri May 3 02:02:25 2024 by rpki-client on console-fra.rpki-client.org