Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
File:                     rSRGM37TPO3jTe_1VxBdxxwDqRY.mft (raw, json)
Hash identifier:          BMeoVSHhCQimU2uEjz4FF+792EJDrroNdUC4vZvqMWs=
Subject key identifier:   25:4D:A5:EF:44:A3:42:0F:9B:06:60:94:33:B9:FF:4D:C5:30:80:D0
Authority key identifier: AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16
Certificate issuer:       /CN=ad2446337ed33cede34deff557105dc71c03a916
Certificate serial:       018F874A8C3848EE05115776274EC3BF4E99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
Manifest number:          0109
Signing time:             Fri 17 May 2024 16:02:40 +0000
Manifest this update:     Fri 17 May 2024 16:02:40 +0000
Manifest next update:     Sat 18 May 2024 16:02:40 +0000
Files and hashes:         1: rSRGM37TPO3jTe_1VxBdxxwDqRY.crl (hash: pUlQz9JncYrWAfPsUXFnplBfWkvKwTJJjjhNXLcHKms=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:8c:38:48:ee:05:11:57:76:27:4e:c3:bf:4e:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad2446337ed33cede34deff557105dc71c03a916
        Validity
            Not Before: May 17 16:02:40 2024 GMT
            Not After : May 18 16:02:40 2024 GMT
        Subject: CN=254da5ef44a3420f9b06609433b9ff4dc53080d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8e:e8:44:48:94:b3:9a:50:c7:7c:8c:c4:3f:
                    6e:a8:d1:70:7b:eb:41:34:fa:44:f5:d2:54:ce:e1:
                    2a:76:96:98:ca:1b:ee:8d:f3:6d:7a:94:d8:43:d9:
                    75:b4:43:bc:63:06:e1:43:fa:83:b2:12:72:55:d2:
                    ef:83:09:f5:21:09:3c:05:38:85:02:10:6b:53:eb:
                    af:e4:72:2b:72:e0:c4:05:01:cf:48:3d:bf:b3:5b:
                    f0:69:b3:44:0f:f0:d0:53:28:15:f4:4e:cb:e7:6c:
                    88:7e:3f:86:f0:d5:c2:c3:72:b2:97:d5:9a:70:06:
                    3b:79:90:5a:2c:a7:03:d7:a9:e7:00:5b:76:e8:74:
                    0a:14:e7:89:00:15:a1:c6:26:00:eb:20:fe:2e:09:
                    92:dc:6a:95:e2:27:68:8c:5e:47:88:0d:8f:4d:9a:
                    cb:d3:67:51:6d:ea:21:88:85:d3:72:b5:c7:12:40:
                    d6:d3:29:6b:25:ab:a6:4e:3c:b2:8c:43:6c:3e:f3:
                    b3:bf:43:19:68:a5:18:51:4d:f4:8f:9c:9d:2a:c0:
                    89:36:27:ab:51:5c:ad:60:10:e8:53:69:f4:d6:0a:
                    e5:4f:91:4b:a2:3d:86:4b:2c:f1:70:9c:7b:7a:f9:
                    45:b3:2f:38:da:67:bf:7a:81:4a:49:4a:d9:32:8f:
                    81:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:4D:A5:EF:44:A3:42:0F:9B:06:60:94:33:B9:FF:4D:C5:30:80:D0
            X509v3 Authority Key Identifier:
                keyid:AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:8e:03:7b:48:f8:49:07:2e:6c:ab:bf:19:77:e2:b2:06:be:
         63:86:46:1e:60:5a:75:5d:52:f1:8d:69:58:aa:9d:43:94:ec:
         4d:a4:72:fa:d8:30:79:6a:78:5d:c0:05:37:6f:78:1e:2a:4f:
         4f:1d:b8:a2:3a:ae:b4:ca:60:08:a1:9e:eb:3d:15:8a:66:83:
         91:32:88:dc:b4:5e:7c:59:53:06:1f:aa:fa:e6:2d:6f:bc:5c:
         51:ca:ab:87:e0:7a:06:b2:6e:39:2a:60:7e:9b:13:d0:59:4e:
         2d:d3:a2:32:82:63:18:23:75:c2:64:3c:73:ca:c4:0a:59:f4:
         63:ed:55:05:91:3c:59:e0:30:2d:3a:d4:42:d0:5c:ec:82:b7:
         b9:20:a8:c5:f7:cd:ad:c2:b2:94:5e:1c:15:e3:2b:78:a8:8a:
         d3:14:23:21:c5:b5:1b:5a:02:d4:c9:d5:d2:d7:99:63:9d:60:
         4f:29:31:78:a4:fb:10:0f:25:22:8b:e6:76:de:ad:c9:b7:9f:
         84:fa:6e:04:09:3e:da:44:e1:d2:12:74:a4:f3:ad:f3:1f:55:
         44:52:20:b3:7e:9b:76:80:b3:e3:04:3d:29:57:be:29:d9:ed:
         16:1d:50:89:18:b6:09:4c:61:61:2c:88:2d:3a:52:f7:d6:4b:
         69:d1:b7:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSow4SO4FEVd2J07Dv06ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMjQ0NjMzN2VkMzNjZWRlMzRkZWZmNTU3MTA1ZGM3MWMw
M2E5MTYwHhcNMjQwNTE3MTYwMjQwWhcNMjQwNTE4MTYwMjQwWjAzMTEwLwYDVQQD
EygyNTRkYTVlZjQ0YTM0MjBmOWIwNjYwOTQzM2I5ZmY0ZGM1MzA4MGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI7oREiUs5pQx3yMxD9uqNFwe+tB
NPpE9dJUzuEqdpaYyhvujfNtepTYQ9l1tEO8YwbhQ/qDshJyVdLvgwn1IQk8BTiF
AhBrU+uv5HIrcuDEBQHPSD2/s1vwabNED/DQUygV9E7L52yIfj+G8NXCw3Kyl9Wa
cAY7eZBaLKcD16nnAFt26HQKFOeJABWhxiYA6yD+LgmS3GqV4idojF5HiA2PTZrL
02dRbeohiIXTcrXHEkDW0ylrJaumTjyyjENsPvOzv0MZaKUYUU30j5ydKsCJNier
UVytYBDoU2n01grlT5FLoj2GSyzxcJx7evlFsy842me/eoFKSUrZMo+BdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVNpe9Eo0IPmwZglDO5/03FMIDQMB8GA1UdIwQY
MBaAFK0kRjN+0zzt403v9VcQXcccA6kWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclNSR00zN1RQTzNqVGVfMVZ4QmR4eHdEcVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9jZmE3NmMtMDVjYy00M2RjLTk4ZjEt
ZTcwN2RlYzdiZDZjLzEvclNSR00zN1RQTzNqVGVfMVZ4QmR4eHdEcVJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9jZmE3NmMtMDVjYy00M2RjLTk4ZjEtZTcwN2RlYzdiZDZj
LzEvclNSR00zN1RQTzNqVGVfMVZ4QmR4eHdEcVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlY4De0j4
SQcubKu/GXfisga+Y4ZGHmBadV1S8Y1pWKqdQ5TsTaRy+tgweWp4XcAFN294HipP
Tx24ojqutMpgCKGe6z0VimaDkTKI3LRefFlTBh+q+uYtb7xcUcqrh+B6BrJuOSpg
fpsT0FlOLdOiMoJjGCN1wmQ8c8rECln0Y+1VBZE8WeAwLTrUQtBc7IK3uSCoxffN
rcKylF4cFeMreKiK0xQjIcW1G1oC1MnV0teZY51gTykxeKT7EA8lIovmdt6tybef
hPpuBAk+2kTh0hJ0pPOt8x9VRFIgs36bdoCz4wQ9KVe+KdntFh1QiRi2CUxhYSyI
LTpS99ZLadG3UQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:23:54 2024 by rpki-client on console-fra.rpki-client.org