Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
File:                     FReBYmtMfEio3NUUxqdUn_tPY6o.mft (raw, json)
Hash identifier:          hnN0xnS71C3Gl8UErtB8IB1aYcDapZCZAFLfd0ZzNuI=
Subject key identifier:   F8:A8:8F:6C:77:C1:E4:18:0D:56:3A:11:72:6D:47:9B:4B:DD:84:D1
Authority key identifier: 15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA
Certificate issuer:       /CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa
Certificate serial:       018F215C9AB608AAC11E31C96826D23D5B4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
Manifest number:          1141
Signing time:             Sat 27 Apr 2024 21:01:08 +0000
Manifest this update:     Sat 27 Apr 2024 21:01:08 +0000
Manifest next update:     Sun 28 Apr 2024 21:01:08 +0000
Files and hashes:         1: FReBYmtMfEio3NUUxqdUn_tPY6o.crl (hash: x/N+GgmbQ9megcJMkAJkQldEdyCvKj7KaDxWEMkHZNA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:21:5c:9a:b6:08:aa:c1:1e:31:c9:68:26:d2:3d:5b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa
        Validity
            Not Before: Apr 27 21:01:08 2024 GMT
            Not After : Apr 28 21:01:08 2024 GMT
        Subject: CN=f8a88f6c77c1e4180d563a11726d479b4bdd84d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b2:a9:cb:3c:93:78:64:e4:3e:35:bd:84:2e:
                    9c:6f:8b:33:00:cf:43:3f:97:c9:06:f3:28:47:a4:
                    da:21:87:bb:f6:cf:e3:e4:32:8a:71:4d:3b:a0:07:
                    84:fe:b7:5f:ad:2f:04:bb:fb:86:2e:03:27:6f:7e:
                    12:96:1b:30:5a:31:e1:bd:10:7d:f4:31:fb:f7:44:
                    34:ae:da:2e:ea:e1:5e:61:86:06:68:ce:5f:d0:c6:
                    c7:81:30:bf:71:58:31:c6:5c:f2:d2:f3:40:82:30:
                    d9:42:10:39:6b:63:db:ea:d5:c1:d3:5c:06:b2:e0:
                    3a:67:0f:26:fa:67:5f:6b:89:5e:65:21:d4:52:a4:
                    ae:d9:94:6c:f5:0d:80:f2:b7:86:27:93:32:cf:1e:
                    22:44:ce:91:77:65:d9:e0:40:d2:7c:80:d7:94:fc:
                    d4:3f:92:e3:5c:40:ab:4b:bc:02:0e:cb:7b:db:58:
                    58:62:9b:d7:ec:b9:7c:e7:43:1b:fb:3f:99:07:02:
                    ba:28:97:1b:67:4f:31:38:c7:ed:6c:7a:e1:d5:ad:
                    44:e0:25:c3:b7:5a:3d:f2:c6:34:d1:d7:c3:65:96:
                    b8:38:e2:86:27:90:ff:63:05:8d:2d:e7:6c:56:ec:
                    83:76:86:50:a6:54:1e:7f:9a:23:92:4b:cd:45:46:
                    1e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A8:8F:6C:77:C1:E4:18:0D:56:3A:11:72:6D:47:9B:4B:DD:84:D1
            X509v3 Authority Key Identifier:
                keyid:15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:66:43:79:2d:f9:2f:be:8e:81:79:a4:5b:23:30:e3:37:ed:
         43:4f:e4:05:fa:98:fe:84:01:43:4b:b0:75:57:36:55:0b:52:
         c9:a0:8e:28:dd:85:80:ab:a1:32:03:68:f3:e3:d6:f3:c9:66:
         f3:a4:8c:5b:0d:5e:e6:9d:34:eb:97:6d:20:9a:87:3d:f0:a4:
         5c:ef:4a:07:02:d6:56:a6:4b:48:e4:da:91:50:b6:a6:4d:56:
         f4:23:af:94:a7:a2:e9:4a:98:0f:86:a9:61:33:f3:eb:3a:3b:
         46:c4:90:b2:2a:18:cb:d9:4d:49:e6:e0:bb:68:d1:3d:fc:9c:
         a3:72:0d:55:f0:c9:23:dd:69:00:5d:54:38:d3:13:e3:7e:7b:
         1f:cb:f8:c8:ff:bc:77:af:15:b6:ca:24:da:9c:7a:58:6e:8f:
         e7:33:a5:d6:43:24:83:f1:a2:28:fe:64:b6:03:37:9c:84:73:
         31:ec:a9:d0:71:21:1e:49:e8:77:ae:97:3f:c6:d3:41:b8:a7:
         c7:2a:25:1b:78:22:ea:68:c8:79:3e:6f:5b:b0:89:3b:c6:73:
         89:d6:f6:5b:9c:6f:03:f5:ab:58:22:fe:32:81:1b:b2:a3:c8:
         cd:9e:26:ee:59:bd:2f:e3:d7:0d:bc:11:6e:2c:21:89:cf:62:
         c9:ee:d9:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8hXJq2CKrBHjHJaCbSPVtNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MTc4MTYyNmI0YzdjNDhhOGRjZDUxNGM2YTc1NDlmZmI0
ZjYzYWEwHhcNMjQwNDI3MjEwMTA4WhcNMjQwNDI4MjEwMTA4WjAzMTEwLwYDVQQD
EyhmOGE4OGY2Yzc3YzFlNDE4MGQ1NjNhMTE3MjZkNDc5YjRiZGQ4NGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bKpyzyTeGTkPjW9hC6cb4szAM9D
P5fJBvMoR6TaIYe79s/j5DKKcU07oAeE/rdfrS8Eu/uGLgMnb34SlhswWjHhvRB9
9DH790Q0rtou6uFeYYYGaM5f0MbHgTC/cVgxxlzy0vNAgjDZQhA5a2Pb6tXB01wG
suA6Zw8m+mdfa4leZSHUUqSu2ZRs9Q2A8reGJ5Myzx4iRM6Rd2XZ4EDSfIDXlPzU
P5LjXECrS7wCDst721hYYpvX7Ll850Mb+z+ZBwK6KJcbZ08xOMftbHrh1a1E4CXD
t1o98sY00dfDZZa4OOKGJ5D/YwWNLedsVuyDdoZQplQef5ojkkvNRUYeewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPioj2x3weQYDVY6EXJtR5tL3YTRMB8GA1UdIwQY
MBaAFBUXgWJrTHxIqNzVFManVJ/7T2OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlJlQlltdE1mRWlvM05VVXhxZFVuX3RQWTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iYjE4NTMtN2I5MC00YTJkLTg2OWQt
ZDE1MmFiODI4ZGQ1LzEvRlJlQlltdE1mRWlvM05VVXhxZFVuX3RQWTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9iYjE4NTMtN2I5MC00YTJkLTg2OWQtZDE1MmFiODI4ZGQ1
LzEvRlJlQlltdE1mRWlvM05VVXhxZFVuX3RQWTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWZDeS35
L76OgXmkWyMw4zftQ0/kBfqY/oQBQ0uwdVc2VQtSyaCOKN2FgKuhMgNo8+PW88lm
86SMWw1e5p0065dtIJqHPfCkXO9KBwLWVqZLSOTakVC2pk1W9COvlKei6UqYD4ap
YTPz6zo7RsSQsioYy9lNSebgu2jRPfyco3INVfDJI91pAF1UONMT4357H8v4yP+8
d68Vtsok2px6WG6P5zOl1kMkg/GiKP5ktgM3nIRzMeyp0HEhHknod66XP8bTQbin
xyolG3gi6mjIeT5vW7CJO8Zzidb2W5xvA/WrWCL+MoEbsqPIzZ4m7lm9L+PXDbwR
biwhic9iye7ZJQ==
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:35:24 2024 by rpki-client on console-ams.rpki-client.org