Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6de3b8-6ca1-410a-bb4f-75ead4802860/1/_LaLq741T05M8Ul53Mg3ooVJK30.mft
File:                     _LaLq741T05M8Ul53Mg3ooVJK30.mft (raw, json)
Hash identifier:          dP/myNUDSXQrp+Nb4NF4PLBa0WxiZ5zCMISzu/fV1GQ=
Subject key identifier:   3E:25:8C:49:AE:76:2F:E7:71:95:43:82:B9:E5:B3:71:BE:7D:6F:8E
Authority key identifier: FC:B6:8B:AB:BE:35:4F:4E:4C:F1:49:79:DC:C8:37:A2:85:49:2B:7D
Certificate issuer:       /CN=fcb68babbe354f4e4cf14979dcc837a285492b7d
Certificate serial:       018F88242961EF4047DE4D262E86970B4D89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_LaLq741T05M8Ul53Mg3ooVJK30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/6de3b8-6ca1-410a-bb4f-75ead4802860/1/_LaLq741T05M8Ul53Mg3ooVJK30.mft
Manifest number:          FC
Signing time:             Fri 17 May 2024 20:00:22 +0000
Manifest this update:     Fri 17 May 2024 20:00:22 +0000
Manifest next update:     Sat 18 May 2024 20:00:22 +0000
Files and hashes:         1: _LaLq741T05M8Ul53Mg3ooVJK30.crl (hash: B82d+9ppJEPCwvxXPnbF9SO/069s+LZDgbJ5aKJI1gU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/6de3b8-6ca1-410a-bb4f-75ead4802860/1/_LaLq741T05M8Ul53Mg3ooVJK30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/6de3b8-6ca1-410a-bb4f-75ead4802860/1/_LaLq741T05M8Ul53Mg3ooVJK30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_LaLq741T05M8Ul53Mg3ooVJK30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:29:61:ef:40:47:de:4d:26:2e:86:97:0b:4d:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb68babbe354f4e4cf14979dcc837a285492b7d
        Validity
            Not Before: May 17 20:00:22 2024 GMT
            Not After : May 18 20:00:22 2024 GMT
        Subject: CN=3e258c49ae762fe771954382b9e5b371be7d6f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e1:ae:48:03:44:e4:93:80:e4:3f:1a:43:16:
                    44:2a:8a:f3:b6:0b:58:50:5c:06:e6:b7:1a:fc:fd:
                    10:c3:03:40:55:2c:74:0f:af:b4:56:4c:12:5e:e2:
                    ff:44:5d:bb:32:47:19:ea:e9:39:31:6e:98:7e:8b:
                    88:62:3f:fd:c3:5f:0e:e0:06:49:c8:f6:86:5d:42:
                    6b:82:0d:26:ab:d3:ad:07:d5:fd:cc:6b:81:5a:72:
                    a6:52:e9:6d:29:2a:64:88:2a:0d:9f:4e:38:29:b3:
                    19:a3:0d:50:7c:38:0c:39:25:dc:35:dd:30:29:ef:
                    14:e0:f6:8d:07:64:5b:7c:9b:bd:01:c8:20:cf:45:
                    37:26:58:eb:a8:cc:f5:79:40:4a:03:7a:9b:92:17:
                    9f:59:28:f1:a3:99:56:50:93:59:13:9d:97:99:20:
                    f6:99:87:d9:ad:00:56:52:13:f5:c7:bd:51:c9:fb:
                    f8:cd:be:d8:48:f2:96:84:75:f3:1b:ad:3c:85:e6:
                    27:16:11:f7:21:37:63:b7:4b:7c:02:dc:88:32:fe:
                    46:4d:b0:8a:fe:e2:cf:89:6d:d1:78:fd:69:4a:8c:
                    cd:2a:9b:d2:e0:7b:36:34:d9:fb:77:70:02:1b:ce:
                    ef:0a:60:72:f9:32:b4:92:fc:cd:0d:fb:fe:2e:69:
                    23:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:25:8C:49:AE:76:2F:E7:71:95:43:82:B9:E5:B3:71:BE:7D:6F:8E
            X509v3 Authority Key Identifier:
                keyid:FC:B6:8B:AB:BE:35:4F:4E:4C:F1:49:79:DC:C8:37:A2:85:49:2B:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LaLq741T05M8Ul53Mg3ooVJK30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6de3b8-6ca1-410a-bb4f-75ead4802860/1/_LaLq741T05M8Ul53Mg3ooVJK30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6de3b8-6ca1-410a-bb4f-75ead4802860/1/_LaLq741T05M8Ul53Mg3ooVJK30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:d6:4d:c9:13:a3:e7:5a:4b:ed:f8:8e:f5:b2:02:a3:92:17:
         08:aa:c1:af:1b:17:3f:66:ee:8e:a0:28:16:d8:99:54:a0:5a:
         cf:0e:01:60:71:e5:bf:37:0c:d7:a2:b3:da:3a:65:7c:d0:a7:
         bd:0d:b5:65:35:60:5f:30:4b:97:0f:58:c4:4a:fa:61:2d:3a:
         c0:df:c7:18:98:1f:fb:93:08:7e:6a:eb:8d:95:59:81:58:21:
         eb:a2:50:5d:a7:a3:09:1e:dc:e5:9e:7f:d5:df:7c:f9:e6:22:
         c3:ec:bb:a1:a0:37:6e:eb:31:44:1f:87:cb:be:2f:b8:f1:fa:
         ef:cb:87:02:c7:41:5b:06:a5:1a:8b:b8:2a:4a:a5:e0:d1:e0:
         13:88:1f:f6:39:09:2c:b7:81:ae:98:f4:0c:a4:5e:7c:0d:bd:
         90:4c:07:54:fa:b1:13:cf:c4:7d:54:8d:9d:54:ce:70:82:2b:
         7c:55:f6:e5:1c:4f:76:4b:81:17:9e:91:08:f6:36:20:f3:1b:
         ee:50:be:db:44:20:f2:fd:04:ff:61:e0:0b:69:df:cf:ad:0b:
         52:c3:d4:fe:f7:20:f6:e2:fe:54:b6:12:99:46:ba:59:b4:0b:
         4c:d4:6a:ec:50:4f:40:19:49:e2:23:71:2f:3d:b7:bb:e7:c1:
         85:7c:59:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJClh70BH3k0mLoaXC02JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYjY4YmFiYmUzNTRmNGU0Y2YxNDk3OWRjYzgzN2EyODU0
OTJiN2QwHhcNMjQwNTE3MjAwMDIyWhcNMjQwNTE4MjAwMDIyWjAzMTEwLwYDVQQD
EygzZTI1OGM0OWFlNzYyZmU3NzE5NTQzODJiOWU1YjM3MWJlN2Q2ZjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteGuSANE5JOA5D8aQxZEKorztgtY
UFwG5rca/P0QwwNAVSx0D6+0VkwSXuL/RF27MkcZ6uk5MW6YfouIYj/9w18O4AZJ
yPaGXUJrgg0mq9OtB9X9zGuBWnKmUultKSpkiCoNn044KbMZow1QfDgMOSXcNd0w
Ke8U4PaNB2RbfJu9Acggz0U3JljrqMz1eUBKA3qbkhefWSjxo5lWUJNZE52XmSD2
mYfZrQBWUhP1x71Ryfv4zb7YSPKWhHXzG608heYnFhH3ITdjt0t8AtyIMv5GTbCK
/uLPiW3ReP1pSozNKpvS4Hs2NNn7d3ACG87vCmBy+TK0kvzNDfv+LmkjGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4ljEmudi/ncZVDgrnls3G+fW+OMB8GA1UdIwQY
MBaAFPy2i6u+NU9OTPFJedzIN6KFSSt9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0xhTHE3NDFUMDVNOFVsNTNNZzNvb1ZKSzMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82ZGUzYjgtNmNhMS00MTBhLWJiNGYt
NzVlYWQ0ODAyODYwLzEvX0xhTHE3NDFUMDVNOFVsNTNNZzNvb1ZKSzMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi82ZGUzYjgtNmNhMS00MTBhLWJiNGYtNzVlYWQ0ODAyODYw
LzEvX0xhTHE3NDFUMDVNOFVsNTNNZzNvb1ZKSzMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNZNyROj
51pL7fiO9bICo5IXCKrBrxsXP2bujqAoFtiZVKBazw4BYHHlvzcM16Kz2jplfNCn
vQ21ZTVgXzBLlw9YxEr6YS06wN/HGJgf+5MIfmrrjZVZgVgh66JQXaejCR7c5Z5/
1d98+eYiw+y7oaA3busxRB+Hy74vuPH678uHAsdBWwalGou4Kkql4NHgE4gf9jkJ
LLeBrpj0DKRefA29kEwHVPqxE8/EfVSNnVTOcIIrfFX25RxPdkuBF56RCPY2IPMb
7lC+20Qg8v0E/2HgC2nfz60LUsPU/vcg9uL+VLYSmUa6WbQLTNRq7FBPQBlJ4iNx
Lz23u+fBhXxZHw==
-----END CERTIFICATE-----
Generated at Fri May 17 21:11:37 2024 by rpki-client on console-ams.rpki-client.org