Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
File:                     97KiPZsF9XV53i8CRJtmYD4-Vzo.mft (raw, json)
Hash identifier:          8F3dSdN2qirUv8ga+7holdIK/vNJM+5LTS+JEnr6XF0=
Subject key identifier:   C6:9B:E5:85:82:41:84:FF:62:DF:51:1A:63:3F:86:04:12:07:80:24
Authority key identifier: F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A
Certificate issuer:       /CN=f7b2a23d9b05f57579de2f02449b66603e3e573a
Certificate serial:       018F4CB4F58D66FC217563A86DAE2B8CF57F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
Manifest number:          0D0D
Signing time:             Mon 06 May 2024 07:01:18 +0000
Manifest this update:     Mon 06 May 2024 07:01:18 +0000
Manifest next update:     Tue 07 May 2024 07:01:18 +0000
Files and hashes:         1: 97KiPZsF9XV53i8CRJtmYD4-Vzo.crl (hash: i1IdyjcuAB4Ml0YjMw8oUHG7Tput3NCeAiyZccFKEOk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 07:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:b4:f5:8d:66:fc:21:75:63:a8:6d:ae:2b:8c:f5:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b2a23d9b05f57579de2f02449b66603e3e573a
        Validity
            Not Before: May  6 07:01:18 2024 GMT
            Not After : May  7 07:01:18 2024 GMT
        Subject: CN=c69be585824184ff62df511a633f860412078024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:57:af:ef:b5:20:69:e8:2a:2f:d6:9c:83:1d:
                    c4:2c:78:c6:d1:1b:ed:fa:13:ee:b6:2b:88:bb:03:
                    ef:df:d9:88:8e:7b:6a:be:80:7f:e0:fe:b3:46:98:
                    8e:61:af:46:2d:71:9f:cc:fe:1a:05:7b:46:10:7e:
                    1f:4f:95:64:13:ee:9b:d7:83:e6:30:01:fa:0b:c7:
                    1c:07:b4:23:7e:39:1e:6c:ca:de:38:2d:fe:29:5f:
                    98:67:63:30:af:fb:80:93:5a:8a:51:18:e2:fe:e4:
                    93:d8:9a:0b:c7:48:31:65:a7:06:cf:f0:6e:f4:bb:
                    8c:b4:a8:2c:48:b3:90:d2:2c:9c:a9:19:ed:7c:5d:
                    9e:f8:d7:09:1b:56:85:7f:9b:50:96:d5:79:37:e4:
                    5b:41:36:44:83:87:87:7f:0e:50:77:0f:ce:5c:e2:
                    d5:6a:7b:1c:6a:dc:e6:14:a5:56:a0:5a:8d:5f:c9:
                    3c:9f:24:6e:ee:d4:14:88:39:9b:6e:c9:36:b7:3c:
                    51:1f:0b:d8:17:95:70:fa:53:3c:a0:3b:85:3c:02:
                    ac:5a:53:35:c9:dc:e8:47:f7:8e:a7:69:94:5e:dc:
                    45:8e:79:6d:60:f5:b1:7a:03:54:30:b1:04:ea:d8:
                    ea:70:eb:ef:40:72:0b:8e:6f:20:26:1a:b8:d3:eb:
                    ec:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9B:E5:85:82:41:84:FF:62:DF:51:1A:63:3F:86:04:12:07:80:24
            X509v3 Authority Key Identifier:
                keyid:F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:7c:80:96:5b:67:f5:31:56:64:93:51:99:e0:99:a5:0d:13:
         a0:e5:15:e8:70:e3:84:17:10:24:aa:41:03:ec:f4:b8:88:d5:
         a0:d0:69:b7:54:06:23:b3:1a:ce:92:22:1d:ed:af:db:be:bc:
         2e:a8:89:78:74:20:ee:a9:16:b4:95:84:e1:24:9c:61:f9:97:
         46:3d:7c:24:57:ce:ff:06:79:bb:99:72:f7:00:f9:82:d9:a8:
         c1:da:8a:f5:ba:d0:35:68:08:1b:d6:a6:9d:e8:67:6d:6e:08:
         71:4b:66:1d:bf:26:65:7c:10:62:2e:79:e6:06:36:2d:89:b8:
         ce:53:69:15:f6:8d:ca:85:4b:fa:6c:69:bc:91:5c:2d:5d:64:
         2f:11:c8:88:2f:0d:38:13:eb:b4:ba:e6:0a:75:02:3d:55:29:
         5f:d9:d5:a9:60:75:17:66:3b:18:42:f9:58:ec:94:de:ae:20:
         96:e2:e4:85:66:40:13:a5:dd:da:d7:2f:3e:95:35:f9:6d:e4:
         9c:9f:d3:4b:14:d3:6f:0e:e6:aa:41:ae:e4:c1:c9:cf:c2:85:
         a6:7b:3a:63:5a:7f:f8:73:fe:c9:b9:42:a1:ae:9b:fb:ea:f8:
         0c:5d:c4:66:75:05:cd:66:80:6d:83:9e:3c:ea:33:9c:07:71:
         5c:48:3b:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9MtPWNZvwhdWOoba4rjPV/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YjJhMjNkOWIwNWY1NzU3OWRlMmYwMjQ0OWI2NjYwM2Uz
ZTU3M2EwHhcNMjQwNTA2MDcwMTE4WhcNMjQwNTA3MDcwMTE4WjAzMTEwLwYDVQQD
EyhjNjliZTU4NTgyNDE4NGZmNjJkZjUxMWE2MzNmODYwNDEyMDc4MDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51ev77UgaegqL9acgx3ELHjG0Rvt
+hPutiuIuwPv39mIjntqvoB/4P6zRpiOYa9GLXGfzP4aBXtGEH4fT5VkE+6b14Pm
MAH6C8ccB7QjfjkebMreOC3+KV+YZ2Mwr/uAk1qKURji/uST2JoLx0gxZacGz/Bu
9LuMtKgsSLOQ0iycqRntfF2e+NcJG1aFf5tQltV5N+RbQTZEg4eHfw5Qdw/OXOLV
anscatzmFKVWoFqNX8k8nyRu7tQUiDmbbsk2tzxRHwvYF5Vw+lM8oDuFPAKsWlM1
ydzoR/eOp2mUXtxFjnltYPWxegNUMLEE6tjqcOvvQHILjm8gJhq40+vsFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMab5YWCQYT/Yt9RGmM/hgQSB4AkMB8GA1UdIwQY
MBaAFPeyoj2bBfV1ed4vAkSbZmA+Plc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTdLaVBac0Y5WFY1M2k4Q1JKdG1ZRDQtVnpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8wYTFiN2YtZGZkMi00NmY5LTgzMTMt
NWJlNmE3NTlmMzE4LzEvOTdLaVBac0Y5WFY1M2k4Q1JKdG1ZRDQtVnpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8wYTFiN2YtZGZkMi00NmY5LTgzMTMtNWJlNmE3NTlmMzE4
LzEvOTdLaVBac0Y5WFY1M2k4Q1JKdG1ZRDQtVnpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3yAlltn
9TFWZJNRmeCZpQ0ToOUV6HDjhBcQJKpBA+z0uIjVoNBpt1QGI7MazpIiHe2v2768
LqiJeHQg7qkWtJWE4SScYfmXRj18JFfO/wZ5u5ly9wD5gtmowdqK9brQNWgIG9am
nehnbW4IcUtmHb8mZXwQYi555gY2LYm4zlNpFfaNyoVL+mxpvJFcLV1kLxHIiC8N
OBPrtLrmCnUCPVUpX9nVqWB1F2Y7GEL5WOyU3q4gluLkhWZAE6Xd2tcvPpU1+W3k
nJ/TSxTTbw7mqkGu5MHJz8KFpns6Y1p/+HP+yblCoa6b++r4DF3EZnUFzWaAbYOe
POoznAdxXEg79A==
-----END CERTIFICATE-----
Generated at Mon May 6 12:12:50 2024 by rpki-client on console-fra.rpki-client.org