Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
File:                     qPSR8hDFe_RvtS1K8i5-z29M2oA.mft (raw, json)
Hash identifier:          MJjuJcmZDL/3ljNI6Aq488EIu4OYygcQurFejogdOmc=
Subject key identifier:   85:7F:52:2A:D0:F4:13:D0:09:36:F2:41:EF:51:69:5B:25:EF:52:F9
Authority key identifier: A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80
Certificate issuer:       /CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
Certificate serial:       018F88923544CC0EBC8B53F4593F239E9656
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
Manifest number:          0752
Signing time:             Fri 17 May 2024 22:00:34 +0000
Manifest this update:     Fri 17 May 2024 22:00:34 +0000
Manifest next update:     Sat 18 May 2024 22:00:34 +0000
Files and hashes:         1: qPSR8hDFe_RvtS1K8i5-z29M2oA.crl (hash: JlxaEhfOBts4NXhzxDAy4/hpsp996iUMcjbUUotFCp0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:35:44:cc:0e:bc:8b:53:f4:59:3f:23:9e:96:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
        Validity
            Not Before: May 17 22:00:34 2024 GMT
            Not After : May 18 22:00:34 2024 GMT
        Subject: CN=857f522ad0f413d00936f241ef51695b25ef52f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:54:20:59:de:6c:ba:ff:cf:61:75:8c:18:ad:
                    69:83:d8:fe:10:7b:a7:53:06:31:dc:89:76:b5:86:
                    3f:ea:ce:8f:cc:8e:76:1f:85:b0:39:28:fe:5d:1e:
                    72:4c:1d:aa:f0:b3:4f:ff:1a:c6:d8:f3:f2:ec:1a:
                    ce:ad:1a:4f:37:67:9f:b0:27:b7:c4:78:4d:98:75:
                    8e:dc:d9:9b:6f:16:8a:cf:f3:50:a8:db:5a:12:20:
                    7c:26:21:70:a8:8e:8c:72:6e:c8:68:4d:8a:c7:19:
                    ce:80:33:51:da:06:9e:ad:95:e7:a9:6b:37:d2:df:
                    c5:d8:b5:29:7c:97:3f:ce:9d:50:32:e9:4e:93:bd:
                    04:86:a7:c3:a5:8d:52:7e:3a:f4:73:70:11:36:89:
                    3d:d4:25:a7:56:55:68:4f:76:69:ef:89:27:ed:b7:
                    c1:e9:30:ca:34:0a:df:74:26:aa:c6:1b:7e:c8:09:
                    9f:ba:d7:51:d4:a2:4e:9a:0d:76:01:cb:4f:63:1d:
                    dc:d7:fc:27:36:45:64:74:44:e2:0b:c2:21:56:76:
                    97:4f:c4:40:f7:65:41:72:60:63:70:9c:55:60:60:
                    59:7f:59:da:d9:16:c0:22:15:3d:81:11:1e:93:89:
                    66:3d:ad:b8:a6:85:43:a1:a1:6d:17:93:49:6b:92:
                    1e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7F:52:2A:D0:F4:13:D0:09:36:F2:41:EF:51:69:5B:25:EF:52:F9
            X509v3 Authority Key Identifier:
                keyid:A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:67:8c:c8:31:4c:6d:3d:7e:bc:01:36:16:eb:06:1b:cc:f6:
         99:a8:fe:47:49:22:1e:e0:1e:49:27:d0:9e:62:f4:05:9f:67:
         aa:04:86:27:1b:c8:67:04:50:8d:ec:ba:30:10:72:d2:2f:84:
         ac:da:bf:56:ea:e4:55:43:19:45:ca:2b:7c:d3:74:5d:cf:e5:
         02:eb:60:ea:75:b1:11:50:10:4d:7a:74:59:e5:a8:08:53:d4:
         05:5a:3a:e7:3c:84:a8:df:e9:a6:d3:85:11:a0:65:4d:c2:00:
         9c:61:32:61:0b:11:25:1a:7f:c4:cd:4f:84:bf:80:fc:c5:4b:
         06:ff:4a:19:8f:57:fa:f6:b8:24:98:30:2f:35:75:d2:c0:65:
         89:b6:7a:77:53:24:69:94:29:f0:9f:80:57:84:11:0d:e5:57:
         be:11:da:85:c9:70:b9:45:d8:b5:ba:87:fa:dd:cb:6d:c4:70:
         93:6b:8d:b7:61:02:9e:77:12:ef:86:fd:2f:9d:5c:22:09:75:
         48:aa:2f:9c:de:f5:75:85:10:c2:e9:de:c2:6e:9e:53:de:f7:
         1b:e0:d5:94:61:fc:e2:42:64:f3:6e:de:0a:2f:a0:5c:9e:c5:
         6f:29:9a:03:dc:eb:03:ff:bb:59:67:c9:94:e4:a2:35:e2:39:
         2a:41:4c:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IkjVEzA68i1P0WT8jnpZWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZjQ5MWYyMTBjNTdiZjQ2ZmI1MmQ0YWYyMmU3ZWNmNmY0
Y2RhODAwHhcNMjQwNTE3MjIwMDM0WhcNMjQwNTE4MjIwMDM0WjAzMTEwLwYDVQQD
Eyg4NTdmNTIyYWQwZjQxM2QwMDkzNmYyNDFlZjUxNjk1YjI1ZWY1MmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FQgWd5suv/PYXWMGK1pg9j+EHun
UwYx3Il2tYY/6s6PzI52H4WwOSj+XR5yTB2q8LNP/xrG2PPy7BrOrRpPN2efsCe3
xHhNmHWO3NmbbxaKz/NQqNtaEiB8JiFwqI6Mcm7IaE2KxxnOgDNR2gaerZXnqWs3
0t/F2LUpfJc/zp1QMulOk70EhqfDpY1Sfjr0c3ARNok91CWnVlVoT3Zp74kn7bfB
6TDKNArfdCaqxht+yAmfutdR1KJOmg12ActPYx3c1/wnNkVkdETiC8IhVnaXT8RA
92VBcmBjcJxVYGBZf1na2RbAIhU9gREek4lmPa24poVDoaFtF5NJa5Ie2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIV/UirQ9BPQCTbyQe9RaVsl71L5MB8GA1UdIwQY
MBaAFKj0kfIQxXv0b7UtSvIufs9vTNqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVBTUjhoREZlX1J2dFMxSzhpNS16MjlNMm9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS84ZmJmNWMtZWY1MS00ZmQwLTlkM2Et
MzMwYjhhZDQyNGJkLzEvcVBTUjhoREZlX1J2dFMxSzhpNS16MjlNMm9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS84ZmJmNWMtZWY1MS00ZmQwLTlkM2EtMzMwYjhhZDQyNGJk
LzEvcVBTUjhoREZlX1J2dFMxSzhpNS16MjlNMm9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWeMyDFM
bT1+vAE2FusGG8z2maj+R0kiHuAeSSfQnmL0BZ9nqgSGJxvIZwRQjey6MBBy0i+E
rNq/VurkVUMZRcorfNN0Xc/lAutg6nWxEVAQTXp0WeWoCFPUBVo65zyEqN/pptOF
EaBlTcIAnGEyYQsRJRp/xM1PhL+A/MVLBv9KGY9X+va4JJgwLzV10sBlibZ6d1Mk
aZQp8J+AV4QRDeVXvhHahclwuUXYtbqH+t3LbcRwk2uNt2ECnncS74b9L51cIgl1
SKovnN71dYUQwunewm6eU973G+DVlGH84kJk827eCi+gXJ7FbymaA9zrA/+7WWfJ
lOSiNeI5KkFMbg==
-----END CERTIFICATE-----
Generated at Fri May 17 22:52:55 2024 by rpki-client on console-ams.rpki-client.org