Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.mft
File:                     IaqfF_jMpH37krSQLSwrMgPb7aY.mft (raw, json)
Hash identifier:          eQvVbuYxDfxjWwdlSlv6mJ8WMDf/qgy90WwPEcOItGM=
Subject key identifier:   92:43:49:41:DE:FA:43:94:E2:B4:67:82:54:D3:6B:2E:DD:35:85:5D
Authority key identifier: 21:AA:9F:17:F8:CC:A4:7D:FB:92:B4:90:2D:2C:2B:32:03:DB:ED:A6
Certificate issuer:       /CN=21aa9f17f8cca47dfb92b4902d2c2b3203dbeda6
Certificate serial:       018F94CCE25E538C49F78A3278370974D02F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IaqfF_jMpH37krSQLSwrMgPb7aY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.mft
Manifest number:          021B
Signing time:             Mon 20 May 2024 07:00:06 +0000
Manifest this update:     Mon 20 May 2024 07:00:06 +0000
Manifest next update:     Tue 21 May 2024 07:00:06 +0000
Files and hashes:         1: IaqfF_jMpH37krSQLSwrMgPb7aY.crl (hash: J1OLqz7/EMRmygVRlW641YaC4+bMfzsu9nnP/tsUVQk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IaqfF_jMpH37krSQLSwrMgPb7aY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:94:cc:e2:5e:53:8c:49:f7:8a:32:78:37:09:74:d0:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21aa9f17f8cca47dfb92b4902d2c2b3203dbeda6
        Validity
            Not Before: May 20 07:00:06 2024 GMT
            Not After : May 21 07:00:06 2024 GMT
        Subject: CN=92434941defa4394e2b4678254d36b2edd35855d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:24:31:86:25:4b:5c:89:30:67:fd:aa:23:4f:
                    ea:5b:d4:74:98:37:0a:76:fb:04:45:cb:d2:ee:1e:
                    e1:84:51:9a:73:13:f9:02:b0:63:24:97:c3:12:59:
                    16:62:78:9b:2a:b6:38:14:f3:b0:a9:bd:aa:fb:bf:
                    f9:05:05:15:e5:3c:53:30:62:fd:9f:7e:d3:d7:15:
                    ed:54:6d:a3:c7:59:c1:88:0f:7a:dc:ad:65:e2:d1:
                    62:26:83:43:4b:cd:26:cc:3b:50:aa:20:7d:06:22:
                    95:5d:66:c9:61:35:25:76:57:b1:b9:9c:ba:ee:b0:
                    50:35:b7:70:db:1b:0a:84:06:1d:6d:e2:e2:e4:4a:
                    e6:f1:2c:10:12:4e:68:34:cb:3c:d3:65:7d:3d:2d:
                    09:0b:8f:35:26:7c:f2:c3:ac:bb:cf:c7:20:41:fc:
                    e6:39:17:3d:b5:8b:31:71:44:5c:4f:cd:21:6c:ef:
                    8a:ef:b1:35:fb:6b:e2:cd:01:a8:6e:5f:94:fd:bb:
                    3e:84:78:be:fe:53:32:37:72:3c:82:bf:d2:9a:a0:
                    ba:a7:ad:c2:11:92:e0:05:ac:94:6f:ef:a5:e5:21:
                    c1:64:db:95:8d:ec:42:6b:5d:55:98:02:25:78:78:
                    75:f1:85:1d:9f:47:c5:c8:07:7c:43:fb:cb:88:5b:
                    df:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:43:49:41:DE:FA:43:94:E2:B4:67:82:54:D3:6B:2E:DD:35:85:5D
            X509v3 Authority Key Identifier:
                keyid:21:AA:9F:17:F8:CC:A4:7D:FB:92:B4:90:2D:2C:2B:32:03:DB:ED:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaqfF_jMpH37krSQLSwrMgPb7aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:ea:30:b5:a0:55:b7:62:8e:b6:8e:66:25:a3:61:ab:11:d3:
         af:c2:e5:83:a3:86:7e:1a:5f:52:ed:cf:0c:39:79:5e:79:40:
         4f:66:a5:be:1c:4d:db:1e:73:90:e0:d8:02:11:4b:f0:9b:9b:
         3c:eb:db:3d:92:d9:43:a4:4e:07:de:e4:bf:61:73:0f:79:76:
         92:71:2b:cb:27:62:e3:25:24:9c:6e:9c:73:cf:92:42:b7:c5:
         05:b9:42:39:e0:e8:04:82:1c:d0:9c:2d:13:dc:a4:17:ff:54:
         83:42:2e:83:9b:71:83:e5:43:15:46:c2:99:01:9c:41:f5:6e:
         e9:1c:d9:5b:58:ae:8c:78:c9:50:67:56:93:44:97:d1:0a:73:
         17:6f:13:dc:ec:63:87:c7:cb:9c:20:c6:28:25:86:71:27:a0:
         e3:5e:4a:21:8f:8f:48:c6:7d:6e:ca:26:9b:18:59:56:a9:cc:
         07:0e:c6:7a:3d:f6:ad:4d:78:4a:45:55:a4:ab:7a:43:a3:c7:
         3e:1c:24:cd:98:60:00:ef:a3:a4:84:5c:5a:c7:28:5b:51:2c:
         0f:2a:45:c6:26:3f:d4:ba:86:cb:52:29:d5:8d:b0:35:44:53:
         91:90:95:46:f4:ae:78:71:84:4a:f1:7e:ee:7d:12:11:42:7c:
         05:6a:62:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+UzOJeU4xJ94oyeDcJdNAvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYWE5ZjE3ZjhjY2E0N2RmYjkyYjQ5MDJkMmMyYjMyMDNk
YmVkYTYwHhcNMjQwNTIwMDcwMDA2WhcNMjQwNTIxMDcwMDA2WjAzMTEwLwYDVQQD
Eyg5MjQzNDk0MWRlZmE0Mzk0ZTJiNDY3ODI1NGQzNmIyZWRkMzU4NTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCQxhiVLXIkwZ/2qI0/qW9R0mDcK
dvsERcvS7h7hhFGacxP5ArBjJJfDElkWYnibKrY4FPOwqb2q+7/5BQUV5TxTMGL9
n37T1xXtVG2jx1nBiA963K1l4tFiJoNDS80mzDtQqiB9BiKVXWbJYTUldlexuZy6
7rBQNbdw2xsKhAYdbeLi5Erm8SwQEk5oNMs802V9PS0JC481Jnzyw6y7z8cgQfzm
ORc9tYsxcURcT80hbO+K77E1+2vizQGobl+U/bs+hHi+/lMyN3I8gr/SmqC6p63C
EZLgBayUb++l5SHBZNuVjexCa11VmAIleHh18YUdn0fFyAd8Q/vLiFvfuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJDSUHe+kOU4rRnglTTay7dNYVdMB8GA1UdIwQY
MBaAFCGqnxf4zKR9+5K0kC0sKzID2+2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWFxZkZfak1wSDM3a3JTUUxTd3JNZ1BiN2FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kNjhkZmYtOTVlMS00YzkwLTllYzYt
NTUwMjkyODBmZWMxLzEvSWFxZkZfak1wSDM3a3JTUUxTd3JNZ1BiN2FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9kNjhkZmYtOTVlMS00YzkwLTllYzYtNTUwMjkyODBmZWMx
LzEvSWFxZkZfak1wSDM3a3JTUUxTd3JNZ1BiN2FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkOowtaBV
t2KOto5mJaNhqxHTr8Llg6OGfhpfUu3PDDl5XnlAT2alvhxN2x5zkODYAhFL8Jub
POvbPZLZQ6ROB97kv2FzD3l2knEryydi4yUknG6cc8+SQrfFBblCOeDoBIIc0Jwt
E9ykF/9Ug0Iug5txg+VDFUbCmQGcQfVu6RzZW1iujHjJUGdWk0SX0QpzF28T3Oxj
h8fLnCDGKCWGcSeg415KIY+PSMZ9bsommxhZVqnMBw7Gej32rU14SkVVpKt6Q6PH
PhwkzZhgAO+jpIRcWscoW1EsDypFxiY/1LqGy1Ip1Y2wNURTkZCVRvSueHGESvF+
7n0SEUJ8BWpiKw==
-----END CERTIFICATE-----
Generated at Mon May 20 11:21:51 2024 by rpki-client on console-fra.rpki-client.org