Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
File:                     q7zPUQ4allMK2M8UI_0lmLgv46Y.mft (raw, json)
Hash identifier:          PdTUMe0NCQabFZSMOzoLPM3uhPOcQ9iYYKpG8MJqpEg=
Subject key identifier:   22:39:F5:A5:D4:DC:C6:C3:C9:32:97:27:40:1D:A1:F4:B4:2D:8A:EB
Authority key identifier: AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
Certificate issuer:       /CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Certificate serial:       018F87B6C4DCDDE41EE693AC2FEF443FA71E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 18:00:53 +0000
Manifest this update:     Fri 17 May 2024 18:00:53 +0000
Manifest next update:     Sat 18 May 2024 18:00:53 +0000
Files and hashes:         1: q7zPUQ4allMK2M8UI_0lmLgv46Y.crl (hash: 3idZ0PmSI32mVzoB+DJ+fT6mGNJimSn1fOJz6Twmg5E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:c4:dc:dd:e4:1e:e6:93:ac:2f:ef:44:3f:a7:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
        Validity
            Not Before: May 17 18:00:53 2024 GMT
            Not After : May 18 18:00:53 2024 GMT
        Subject: CN=2239f5a5d4dcc6c3c9329727401da1f4b42d8aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fe:18:d1:26:4b:80:6d:3c:1e:52:dc:08:e1:
                    14:22:9b:d1:6e:c4:19:07:bc:83:db:53:f4:5e:bb:
                    7f:af:c9:e8:03:df:c6:a6:bf:10:55:dc:a0:d9:27:
                    19:52:8b:34:15:7f:5a:d1:e9:05:30:76:a1:d8:8b:
                    79:fd:20:cd:ac:76:a2:b8:b7:3c:9a:3c:35:77:92:
                    03:9a:56:1b:3a:12:b6:bc:0c:2d:00:9e:ed:82:e6:
                    78:ba:ef:89:01:a8:0f:d4:24:15:e1:ee:d9:fa:f4:
                    6a:b9:7d:4d:e0:d5:5e:0b:14:9a:f7:cc:d4:13:e1:
                    a1:2d:7d:73:7f:03:a8:ec:ef:1a:66:61:14:7f:b5:
                    8f:ce:33:d5:ca:ef:0d:aa:ca:a4:4b:fa:8d:a5:ce:
                    1e:d1:33:e3:9c:7b:37:fc:fe:49:72:de:c3:0f:c8:
                    0b:a2:be:c0:44:c7:65:28:50:6d:82:dc:91:0b:4d:
                    d3:e3:14:0d:7c:75:a4:3d:f0:73:e5:ad:cd:2f:cc:
                    93:d0:d6:7a:35:d1:2d:f2:bf:af:da:89:70:24:36:
                    7d:2d:fb:20:86:c3:db:4b:29:4f:8a:45:4a:9e:62:
                    4f:d0:b7:df:24:d6:5f:04:05:03:1c:08:38:66:a2:
                    6a:c1:05:35:a2:e7:5b:7a:cd:85:f2:6c:52:8b:a4:
                    b9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:39:F5:A5:D4:DC:C6:C3:C9:32:97:27:40:1D:A1:F4:B4:2D:8A:EB
            X509v3 Authority Key Identifier:
                keyid:AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:72:e0:83:b6:29:f0:01:de:25:c8:f2:65:6e:ee:3e:5a:a6:
         7e:3a:2d:3b:50:f8:a8:a3:42:c2:65:58:45:b9:dc:d9:47:b5:
         6d:4c:cd:c2:79:f9:89:77:0f:f2:c5:08:32:3b:e0:94:a7:98:
         da:88:01:84:9e:74:56:cd:82:a9:2d:40:66:16:16:2d:f6:97:
         fa:80:d1:7c:03:3c:67:be:ce:be:0c:ec:19:67:f2:10:c5:cc:
         14:e2:2b:b3:3b:2a:a0:23:05:c9:c9:14:3d:04:4c:69:a2:da:
         2d:2b:c0:bd:af:dc:b6:75:6b:b9:e1:22:d9:a3:63:fb:c4:b1:
         47:37:da:38:e4:34:bd:cd:2c:54:2d:73:1d:48:fc:f3:61:a3:
         cf:08:15:8a:9b:c0:76:9d:17:c2:cb:c3:8d:30:bb:9c:96:27:
         01:cb:af:c3:3f:ab:47:c3:c4:ff:64:ac:f4:9e:97:29:91:bc:
         b2:e4:a4:5e:7c:9b:61:13:29:7d:e0:6f:17:28:df:ec:e7:c5:
         b4:a8:0c:1c:8d:44:e2:7e:0a:53:55:32:05:50:83:de:58:23:
         17:9f:f1:82:31:35:c4:76:9a:c0:1a:a0:64:3e:bc:73:0d:c9:
         c5:08:ac:45:62:0f:3c:af:73:7f:e2:2e:43:b3:f8:64:6d:3d:
         b8:80:63:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtsTc3eQe5pOsL+9EP6ceMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYmNjZjUxMGUxYTk2NTMwYWQ4Y2YxNDIzZmQyNTk4Yjgy
ZmUzYTYwHhcNMjQwNTE3MTgwMDUzWhcNMjQwNTE4MTgwMDUzWjAzMTEwLwYDVQQD
EygyMjM5ZjVhNWQ0ZGNjNmMzYzkzMjk3Mjc0MDFkYTFmNGI0MmQ4YWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP4Y0SZLgG08HlLcCOEUIpvRbsQZ
B7yD21P0Xrt/r8noA9/Gpr8QVdyg2ScZUos0FX9a0ekFMHah2It5/SDNrHaiuLc8
mjw1d5IDmlYbOhK2vAwtAJ7tguZ4uu+JAagP1CQV4e7Z+vRquX1N4NVeCxSa98zU
E+GhLX1zfwOo7O8aZmEUf7WPzjPVyu8NqsqkS/qNpc4e0TPjnHs3/P5Jct7DD8gL
or7ARMdlKFBtgtyRC03T4xQNfHWkPfBz5a3NL8yT0NZ6NdEt8r+v2olwJDZ9Lfsg
hsPbSylPikVKnmJP0LffJNZfBAUDHAg4ZqJqwQU1oudbes2F8mxSi6S5CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCI59aXU3MbDyTKXJ0AdofS0LYrrMB8GA1UdIwQY
MBaAFKu8z1EOGpZTCtjPFCP9JZi4L+OmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTd6UFVRNGFsbE1LMk04VUlfMGxtTGd2NDZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mZWRkZmUtYjJiNy00NDRhLWJmNDIt
M2NmZmNlOTg5NDQyLzEvcTd6UFVRNGFsbE1LMk04VUlfMGxtTGd2NDZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9mZWRkZmUtYjJiNy00NDRhLWJmNDItM2NmZmNlOTg5NDQy
LzEvcTd6UFVRNGFsbE1LMk04VUlfMGxtTGd2NDZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIHLgg7Yp
8AHeJcjyZW7uPlqmfjotO1D4qKNCwmVYRbnc2Ue1bUzNwnn5iXcP8sUIMjvglKeY
2ogBhJ50Vs2CqS1AZhYWLfaX+oDRfAM8Z77OvgzsGWfyEMXMFOIrszsqoCMFyckU
PQRMaaLaLSvAva/ctnVrueEi2aNj+8SxRzfaOOQ0vc0sVC1zHUj882GjzwgVipvA
dp0XwsvDjTC7nJYnAcuvwz+rR8PE/2Ss9J6XKZG8suSkXnybYRMpfeBvFyjf7OfF
tKgMHI1E4n4KU1UyBVCD3lgjF5/xgjE1xHaawBqgZD68cw3JxQisRWIPPK9zf+Iu
Q7P4ZG09uIBj4g==
-----END CERTIFICATE-----
Generated at Fri May 17 23:43:12 2024 by rpki-client on console-ams.rpki-client.org