Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3e6167-a4b1-465f-ae21-b31c61248a7c/1/SOUJXaNXnKkQpCHWTgyHnI_TaVI.mft
File:                     SOUJXaNXnKkQpCHWTgyHnI_TaVI.mft (raw, json)
Hash identifier:          OhlSz0EZ23W5rLJuNXP6zn1yVqUQrquqNJKLSbIBXKw=
Subject key identifier:   13:FF:24:B5:95:E0:9F:0A:17:22:67:E5:A7:19:DC:60:ED:7D:39:F6
Authority key identifier: 48:E5:09:5D:A3:57:9C:A9:10:A4:21:D6:4E:0C:87:9C:8F:D3:69:52
Certificate issuer:       /CN=48e5095da3579ca910a421d64e0c879c8fd36952
Certificate serial:       018F87B6C8EE53E978B2E33410D8B34C97E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SOUJXaNXnKkQpCHWTgyHnI_TaVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/3e6167-a4b1-465f-ae21-b31c61248a7c/1/SOUJXaNXnKkQpCHWTgyHnI_TaVI.mft
Manifest number:          042B
Signing time:             Fri 17 May 2024 18:00:54 +0000
Manifest this update:     Fri 17 May 2024 18:00:54 +0000
Manifest next update:     Sat 18 May 2024 18:00:54 +0000
Files and hashes:         1: SOUJXaNXnKkQpCHWTgyHnI_TaVI.crl (hash: jQ3QFVU2nPi+3bnzECRNGJgDQFFwthXH33K1Dj6sXwc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/3e6167-a4b1-465f-ae21-b31c61248a7c/1/SOUJXaNXnKkQpCHWTgyHnI_TaVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/3e6167-a4b1-465f-ae21-b31c61248a7c/1/SOUJXaNXnKkQpCHWTgyHnI_TaVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SOUJXaNXnKkQpCHWTgyHnI_TaVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:c8:ee:53:e9:78:b2:e3:34:10:d8:b3:4c:97:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48e5095da3579ca910a421d64e0c879c8fd36952
        Validity
            Not Before: May 17 18:00:54 2024 GMT
            Not After : May 18 18:00:54 2024 GMT
        Subject: CN=13ff24b595e09f0a172267e5a719dc60ed7d39f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3c:d4:24:73:4a:d4:83:fd:8c:80:35:e3:fa:
                    59:1c:b5:02:ea:ba:e2:61:ee:38:fd:1f:18:84:e7:
                    ab:7a:a2:88:4f:f6:ca:ee:98:d3:ef:b2:59:56:52:
                    b9:a1:83:fe:38:45:32:25:1e:1e:78:ec:62:92:1f:
                    49:f3:8b:ad:5c:ef:27:bc:23:01:b3:3e:74:94:64:
                    12:a4:e6:1e:dc:d2:2a:52:5d:41:4d:bf:de:ea:1d:
                    e6:6c:e3:88:ba:ae:54:59:78:5f:4c:2e:4d:c4:99:
                    04:26:34:a9:91:fe:ae:41:ce:50:91:b4:e0:76:42:
                    3e:85:24:ab:55:11:e3:e7:ee:7d:cb:45:3f:26:9f:
                    06:da:7a:47:36:4b:7c:12:cc:9a:26:fe:7c:26:73:
                    35:48:65:4a:aa:d3:73:6e:32:ca:15:d3:15:68:3e:
                    30:92:9d:72:ed:52:f4:23:a0:54:9d:5e:4c:8d:ab:
                    3a:c3:8e:d5:6b:ca:e7:12:ee:4b:9a:79:0a:03:47:
                    42:9f:86:31:48:0f:ff:9f:d7:69:d1:3c:e8:e0:15:
                    f1:e9:99:8d:e2:25:3d:5d:3b:f0:41:ce:f8:ed:95:
                    d2:81:c7:6d:5a:aa:3b:a9:7d:a1:af:db:dd:52:0d:
                    ba:11:b0:c7:9a:77:dd:7f:3b:fb:11:9a:6a:cf:c5:
                    c6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FF:24:B5:95:E0:9F:0A:17:22:67:E5:A7:19:DC:60:ED:7D:39:F6
            X509v3 Authority Key Identifier:
                keyid:48:E5:09:5D:A3:57:9C:A9:10:A4:21:D6:4E:0C:87:9C:8F:D3:69:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOUJXaNXnKkQpCHWTgyHnI_TaVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3e6167-a4b1-465f-ae21-b31c61248a7c/1/SOUJXaNXnKkQpCHWTgyHnI_TaVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3e6167-a4b1-465f-ae21-b31c61248a7c/1/SOUJXaNXnKkQpCHWTgyHnI_TaVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:54:6c:32:a8:33:7b:e9:bb:c1:63:08:50:2c:fd:e4:b7:23:
         c2:cd:5b:8a:57:b4:76:e4:c0:18:c8:c4:11:3e:cd:2f:5c:fc:
         c4:2a:eb:eb:77:a1:ba:25:02:78:df:8d:bc:23:fb:3b:de:d2:
         6a:d1:47:0f:60:c0:d9:53:3a:45:00:b7:1a:36:a7:b8:0b:00:
         5d:b9:fc:3c:33:3e:44:b4:9e:e3:d5:7e:e0:b4:20:36:82:63:
         df:74:cc:84:95:94:99:9b:dd:94:4c:ff:d6:98:42:d3:4f:0a:
         30:dc:71:6d:f6:a4:36:a3:19:6f:11:30:93:5f:9e:92:ce:74:
         72:af:dd:90:01:2f:53:f9:f0:0f:e9:c7:56:71:73:4e:75:f5:
         2b:9b:4d:b1:d0:ec:90:2d:37:0a:67:b9:29:7b:1d:78:93:3a:
         13:bd:e5:c5:69:4b:b1:b6:81:f8:15:89:b4:27:51:85:14:e6:
         db:c0:d5:f4:ea:4b:7d:76:70:71:49:b5:6d:ba:f3:ae:28:4a:
         ea:53:b0:0c:c1:95:eb:d3:0d:8d:8f:48:f9:6e:69:12:d1:8e:
         76:81:f2:4f:19:36:9f:3f:e6:67:bc:b5:77:22:dd:c4:21:67:
         ae:1e:7d:db:6f:47:4e:c7:4e:0d:b9:21:b3:4e:fb:df:ca:10:
         20:c7:e8:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtsjuU+l4suM0ENizTJfnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZTUwOTVkYTM1NzljYTkxMGE0MjFkNjRlMGM4NzljOGZk
MzY5NTIwHhcNMjQwNTE3MTgwMDU0WhcNMjQwNTE4MTgwMDU0WjAzMTEwLwYDVQQD
EygxM2ZmMjRiNTk1ZTA5ZjBhMTcyMjY3ZTVhNzE5ZGM2MGVkN2QzOWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjzUJHNK1IP9jIA14/pZHLUC6rri
Ye44/R8YhOereqKIT/bK7pjT77JZVlK5oYP+OEUyJR4eeOxikh9J84utXO8nvCMB
sz50lGQSpOYe3NIqUl1BTb/e6h3mbOOIuq5UWXhfTC5NxJkEJjSpkf6uQc5QkbTg
dkI+hSSrVRHj5+59y0U/Jp8G2npHNkt8EsyaJv58JnM1SGVKqtNzbjLKFdMVaD4w
kp1y7VL0I6BUnV5Mjas6w47Va8rnEu5LmnkKA0dCn4YxSA//n9dp0Tzo4BXx6ZmN
4iU9XTvwQc747ZXSgcdtWqo7qX2hr9vdUg26EbDHmnfdfzv7EZpqz8XGBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBP/JLWV4J8KFyJn5acZ3GDtfTn2MB8GA1UdIwQY
MBaAFEjlCV2jV5ypEKQh1k4Mh5yP02lSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU09VSlhhTlhuS2tRcENIV1RneUhuSV9UYVZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zZTYxNjctYTRiMS00NjVmLWFlMjEt
YjMxYzYxMjQ4YTdjLzEvU09VSlhhTlhuS2tRcENIV1RneUhuSV9UYVZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8zZTYxNjctYTRiMS00NjVmLWFlMjEtYjMxYzYxMjQ4YTdj
LzEvU09VSlhhTlhuS2tRcENIV1RneUhuSV9UYVZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlRsMqgz
e+m7wWMIUCz95Lcjws1bile0duTAGMjEET7NL1z8xCrr63ehuiUCeN+NvCP7O97S
atFHD2DA2VM6RQC3GjanuAsAXbn8PDM+RLSe49V+4LQgNoJj33TMhJWUmZvdlEz/
1phC008KMNxxbfakNqMZbxEwk1+eks50cq/dkAEvU/nwD+nHVnFzTnX1K5tNsdDs
kC03Cme5KXsdeJM6E73lxWlLsbaB+BWJtCdRhRTm28DV9OpLfXZwcUm1bbrzrihK
6lOwDMGV69MNjY9I+W5pEtGOdoHyTxk2nz/mZ7y1dyLdxCFnrh59229HTsdODbkh
s07738oQIMfoRg==
-----END CERTIFICATE-----