Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
File:                     a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft (raw, json)
Hash identifier:          A51eS8iPDhvVKi9/rWd47mH9kigpDn7bW+qJecSbInc=
Subject key identifier:   BA:91:21:B3:72:40:DF:CC:6B:71:E7:48:B6:7D:93:74:A7:C9:E8:FC
Authority key identifier: 6B:EC:4E:29:C6:84:9C:5F:80:84:28:E6:68:58:F4:F0:EC:F4:A6:54
Certificate issuer:       /CN=6bec4e29c6849c5f808428e66858f4f0ecf4a654
Certificate serial:       018F893764A8767ADC995018C55F268CC47F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
Manifest number:          08E5
Signing time:             Sat 18 May 2024 01:00:59 +0000
Manifest this update:     Sat 18 May 2024 01:00:59 +0000
Manifest next update:     Sun 19 May 2024 01:00:59 +0000
Files and hashes:         1: a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl (hash: c8Tqy5YScTldkNQF9XAPULjIItgA21NWXfW/fbxiCiA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:64:a8:76:7a:dc:99:50:18:c5:5f:26:8c:c4:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bec4e29c6849c5f808428e66858f4f0ecf4a654
        Validity
            Not Before: May 18 01:00:59 2024 GMT
            Not After : May 19 01:00:59 2024 GMT
        Subject: CN=ba9121b37240dfcc6b71e748b67d9374a7c9e8fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8a:b7:9e:d9:cf:a6:82:86:2f:0a:a0:bf:3e:
                    5d:5a:32:d4:df:1b:30:ba:cd:52:50:a3:10:3c:72:
                    38:31:6f:44:37:a3:76:da:d1:41:89:8e:76:74:6d:
                    af:75:81:1d:f3:54:0a:2d:00:b0:9d:f8:80:98:8d:
                    d5:30:fc:09:e6:27:3f:7a:0a:46:09:2d:ea:5c:be:
                    01:e5:91:c9:d6:e6:45:3a:ad:d7:39:bf:53:2d:c6:
                    d0:57:90:dd:89:07:5c:a3:47:37:4f:4c:cb:82:a7:
                    87:fd:d9:8a:2d:c8:95:c2:8e:61:ee:a5:d4:64:07:
                    3b:4f:9a:35:7f:2c:1e:38:07:49:7b:2b:36:20:46:
                    5a:49:46:9c:b2:d1:4e:35:eb:c7:87:32:71:21:ac:
                    7a:d1:0a:d8:f4:a2:c2:d0:59:4d:4b:7c:8f:6e:0a:
                    ec:c2:37:5b:4a:3e:78:c0:fc:a1:01:40:69:3b:a7:
                    5f:e6:62:9a:28:b2:36:83:8b:f7:1e:7d:df:56:a5:
                    9e:23:a6:ab:46:06:10:f3:ad:1b:ff:cd:18:e4:f1:
                    4c:34:a7:aa:40:63:3c:c7:74:a8:18:75:ee:1e:a6:
                    8f:38:71:9e:96:76:4b:d8:b4:7d:d7:f3:bd:c1:2e:
                    ba:04:22:6e:25:ee:35:87:09:1b:6e:27:1c:3e:31:
                    00:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:91:21:B3:72:40:DF:CC:6B:71:E7:48:B6:7D:93:74:A7:C9:E8:FC
            X509v3 Authority Key Identifier:
                keyid:6B:EC:4E:29:C6:84:9C:5F:80:84:28:E6:68:58:F4:F0:EC:F4:A6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:e5:86:d2:8a:aa:d7:e6:00:f7:31:cc:0c:3b:af:33:62:38:
         82:5f:ef:a3:f3:91:6b:af:26:f4:a3:91:8e:ec:d4:38:f4:1e:
         21:da:8c:02:1a:0b:c3:6b:3b:bb:c5:ac:ba:3e:16:c5:30:49:
         7b:bc:a6:e5:7f:c1:94:bb:33:a4:9a:6b:58:74:39:69:6f:98:
         3b:68:44:03:77:ba:19:6e:50:71:40:e2:7b:8f:e7:42:25:28:
         28:cd:26:25:58:9f:c6:66:9a:18:39:49:31:b9:c7:f5:9e:11:
         bc:97:ef:c8:25:4d:c5:e5:77:ea:39:73:60:b6:58:7d:dc:1e:
         12:9c:ef:00:8e:46:86:6f:f7:83:3a:4d:4d:92:1b:31:5c:3a:
         39:a3:c4:24:e4:59:55:34:39:b4:7f:9e:8b:a0:41:50:82:50:
         c9:33:8d:aa:d9:e8:81:62:b7:d7:22:8d:a5:59:bd:35:24:ad:
         c6:b2:87:e4:b2:f9:39:e4:74:3f:d1:7e:54:ef:61:f3:66:44:
         56:5d:31:f1:f6:54:88:4d:34:8a:fa:2c:ff:a0:98:02:98:71:
         1f:7d:8c:75:f9:71:47:1d:5a:42:d0:d2:00:f5:c6:54:a0:32:
         ae:fb:c6:51:c2:af:0d:7c:89:89:20:55:83:80:06:cc:5b:3b:
         94:9e:c2:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+JN2SodnrcmVAYxV8mjMR/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZWM0ZTI5YzY4NDljNWY4MDg0MjhlNjY4NThmNGYwZWNm
NGE2NTQwHhcNMjQwNTE4MDEwMDU5WhcNMjQwNTE5MDEwMDU5WjAzMTEwLwYDVQQD
EyhiYTkxMjFiMzcyNDBkZmNjNmI3MWU3NDhiNjdkOTM3NGE3YzllOGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oq3ntnPpoKGLwqgvz5dWjLU3xsw
us1SUKMQPHI4MW9EN6N22tFBiY52dG2vdYEd81QKLQCwnfiAmI3VMPwJ5ic/egpG
CS3qXL4B5ZHJ1uZFOq3XOb9TLcbQV5DdiQdco0c3T0zLgqeH/dmKLciVwo5h7qXU
ZAc7T5o1fyweOAdJeys2IEZaSUacstFONevHhzJxIax60QrY9KLC0FlNS3yPbgrs
wjdbSj54wPyhAUBpO6df5mKaKLI2g4v3Hn3fVqWeI6arRgYQ860b/80Y5PFMNKeq
QGM8x3SoGHXuHqaPOHGelnZL2LR91/O9wS66BCJuJe41hwkbbiccPjEAQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqRIbNyQN/Ma3HnSLZ9k3Snyej8MB8GA1UdIwQY
MBaAFGvsTinGhJxfgIQo5mhY9PDs9KZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYS14T0tjYUVuRi1BaENqbWFGajA4T3owcGxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mOGFjOTktMGVhYS00ZjUxLThkNTgt
ZGJmYWVjZGM3ZWEzLzEvYS14T0tjYUVuRi1BaENqbWFGajA4T3owcGxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mOGFjOTktMGVhYS00ZjUxLThkNTgtZGJmYWVjZGM3ZWEz
LzEvYS14T0tjYUVuRi1BaENqbWFGajA4T3owcGxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALeWG0oqq
1+YA9zHMDDuvM2I4gl/vo/ORa68m9KORjuzUOPQeIdqMAhoLw2s7u8Wsuj4WxTBJ
e7ym5X/BlLszpJprWHQ5aW+YO2hEA3e6GW5QcUDie4/nQiUoKM0mJVifxmaaGDlJ
MbnH9Z4RvJfvyCVNxeV36jlzYLZYfdweEpzvAI5Ghm/3gzpNTZIbMVw6OaPEJORZ
VTQ5tH+ei6BBUIJQyTONqtnogWK31yKNpVm9NSStxrKH5LL5OeR0P9F+VO9h82ZE
Vl0x8fZUiE00ivos/6CYAphxH32MdflxRx1aQtDSAPXGVKAyrvvGUcKvDXyJiSBV
g4AGzFs7lJ7CNQ==
-----END CERTIFICATE-----