Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
File:                     1eKDzL8RaYtvIuwXtfY-OlPkESA.mft (raw, json)
Hash identifier:          3dIYpcn8/nDga+bOZThFZjjmsZBun03pHtk/Wn58x3U=
Subject key identifier:   A0:16:04:CD:DC:6A:CC:53:E6:50:09:96:13:19:03:3C:26:F6:E8:A8
Authority key identifier: D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
Certificate issuer:       /CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Certificate serial:       018F43B285C201ACE4B6F07DB8698EB2CD8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
Manifest number:          1151
Signing time:             Sat 04 May 2024 13:02:04 +0000
Manifest this update:     Sat 04 May 2024 13:02:04 +0000
Manifest next update:     Sun 05 May 2024 13:02:04 +0000
Files and hashes:         1: 1eKDzL8RaYtvIuwXtfY-OlPkESA.crl (hash: l3RDlOFBDll66W9hel5zZKywo2+mtGIrtBpRC4l5sIE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b2:85:c2:01:ac:e4:b6:f0:7d:b8:69:8e:b2:cd:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
        Validity
            Not Before: May  4 13:02:04 2024 GMT
            Not After : May  5 13:02:04 2024 GMT
        Subject: CN=a01604cddc6acc53e65009961319033c26f6e8a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:96:af:b1:a8:58:8a:ba:21:f0:48:35:a8:c2:
                    a2:09:91:48:a4:ee:ea:54:15:e6:6f:00:19:9b:2b:
                    9d:24:2f:71:f6:cb:d4:51:45:a9:67:9c:c7:14:19:
                    0c:9a:1b:37:bd:b0:1b:56:91:62:d7:7d:e0:f2:cc:
                    7d:14:b0:32:f6:9d:18:49:06:94:4b:2d:da:eb:46:
                    92:14:54:1b:f7:d2:7e:75:b8:b4:2a:45:db:ff:03:
                    28:5d:b9:7e:e2:9e:4b:1e:7c:98:fc:63:2a:f7:b9:
                    ea:99:4d:3c:94:22:27:85:5e:7f:9a:6f:7f:05:34:
                    47:68:68:8d:b3:4d:17:b4:9c:35:e6:11:71:d6:ff:
                    30:1b:5b:a7:da:20:43:9e:18:cc:35:31:db:fc:30:
                    ba:1d:7d:3d:9d:83:f3:68:4e:1f:ba:6c:49:60:64:
                    44:95:c4:f3:c3:ae:c4:fc:68:7a:c4:f1:45:e3:8b:
                    2b:f7:97:3d:a6:03:17:9a:dc:81:d9:0a:9b:04:99:
                    ed:9b:94:8f:f6:99:ae:fd:b7:44:dc:65:94:f8:c2:
                    47:cd:0e:ad:c5:3e:5a:2f:8d:a4:85:02:f3:8a:f5:
                    94:8f:6c:d7:60:c3:f6:d8:91:c0:22:29:33:04:22:
                    45:ac:3a:db:05:bc:b8:6d:a0:3a:2f:c1:64:45:26:
                    b9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:16:04:CD:DC:6A:CC:53:E6:50:09:96:13:19:03:3C:26:F6:E8:A8
            X509v3 Authority Key Identifier:
                keyid:D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e2:55:c0:b4:23:0e:95:4a:a2:3a:57:56:c2:6a:93:71:18:
         cd:f7:c0:2a:df:55:43:9f:be:2f:9c:25:21:64:74:66:ed:ad:
         e9:5d:76:72:72:21:1f:3f:a8:c5:4a:74:5d:65:96:22:c6:f9:
         81:2f:fd:f9:8a:f6:d8:22:b8:22:81:b3:32:d1:ad:33:3a:d1:
         d6:f1:26:84:33:4c:46:b8:e7:e0:25:52:86:38:ba:bb:41:1e:
         7f:f6:37:e1:21:92:16:b2:93:fa:f6:cf:50:f2:35:fd:ed:cb:
         e4:ec:ba:33:19:26:04:e8:fb:7f:f4:66:a3:02:36:be:a3:60:
         e6:cc:71:0a:44:08:ec:e2:7a:3a:f5:6a:41:b8:df:98:1d:c1:
         46:c3:58:67:23:74:a7:22:be:62:c6:b2:ee:34:23:33:3d:a3:
         54:11:a4:48:46:37:fd:0b:97:41:22:a8:e9:52:4b:91:42:3f:
         7a:15:24:24:61:54:d9:09:bd:da:8a:b6:7e:2e:a5:3a:34:d9:
         3a:d1:9f:51:90:e8:ea:3b:1a:4b:86:ae:c5:22:05:c8:96:9f:
         ea:40:6f:18:3f:bb:23:a1:70:a8:1a:89:be:ce:de:d4:5e:cb:
         f8:3b:2d:90:e8:56:7b:90:3c:9c:86:b9:a3:d1:89:8d:6d:52:
         2b:17:9e:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9DsoXCAazktvB9uGmOss2OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZTI4M2NjYmYxMTY5OGI2ZjIyZWMxN2I1ZjYzZTNhNTNl
NDExMjAwHhcNMjQwNTA0MTMwMjA0WhcNMjQwNTA1MTMwMjA0WjAzMTEwLwYDVQQD
EyhhMDE2MDRjZGRjNmFjYzUzZTY1MDA5OTYxMzE5MDMzYzI2ZjZlOGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJavsahYiroh8Eg1qMKiCZFIpO7q
VBXmbwAZmyudJC9x9svUUUWpZ5zHFBkMmhs3vbAbVpFi133g8sx9FLAy9p0YSQaU
Sy3a60aSFFQb99J+dbi0KkXb/wMoXbl+4p5LHnyY/GMq97nqmU08lCInhV5/mm9/
BTRHaGiNs00XtJw15hFx1v8wG1un2iBDnhjMNTHb/DC6HX09nYPzaE4fumxJYGRE
lcTzw67E/Gh6xPFF44sr95c9pgMXmtyB2QqbBJntm5SP9pmu/bdE3GWU+MJHzQ6t
xT5aL42khQLzivWUj2zXYMP22JHAIikzBCJFrDrbBby4baA6L8FkRSa5EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAWBM3casxT5lAJlhMZAzwm9uioMB8GA1UdIwQY
MBaAFNXig8y/EWmLbyLsF7X2PjpT5BEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWVLRHpMOFJhWXR2SXV3WHRmWS1PbFBrRVNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi82ZGFiZDAtNTU2NS00OTI1LWE3MDIt
MGY2MmJiZDliNTY4LzEvMWVLRHpMOFJhWXR2SXV3WHRmWS1PbFBrRVNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi82ZGFiZDAtNTU2NS00OTI1LWE3MDItMGY2MmJiZDliNTY4
LzEvMWVLRHpMOFJhWXR2SXV3WHRmWS1PbFBrRVNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+JVwLQj
DpVKojpXVsJqk3EYzffAKt9VQ5++L5wlIWR0Zu2t6V12cnIhHz+oxUp0XWWWIsb5
gS/9+Yr22CK4IoGzMtGtMzrR1vEmhDNMRrjn4CVShji6u0Eef/Y34SGSFrKT+vbP
UPI1/e3L5Oy6MxkmBOj7f/RmowI2vqNg5sxxCkQI7OJ6OvVqQbjfmB3BRsNYZyN0
pyK+Ysay7jQjMz2jVBGkSEY3/QuXQSKo6VJLkUI/ehUkJGFU2Qm92oq2fi6lOjTZ
OtGfUZDo6jsaS4auxSIFyJaf6kBvGD+7I6FwqBqJvs7e1F7L+DstkOhWe5A8nIa5
o9GJjW1SKxeeWw==
-----END CERTIFICATE-----
Generated at Sat May 4 18:11:30 2024 by rpki-client on console-fra.rpki-client.org