Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
File:                     m7OdtQEo2zUK68hDgISZGLsF5wU.mft (raw, json)
Hash identifier:          wZHCgDjpGe4LhBqKPHxImHIrW+7kFc2N745HKG9s2rY=
Subject key identifier:   C1:9D:9E:85:37:48:3C:00:51:AE:A2:4E:E2:E3:F8:FF:49:FB:52:EE
Authority key identifier: 9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
Certificate issuer:       /CN=9bb39db50128db350aebc84380849918bb05e705
Certificate serial:       018F882498B2678C246DC989A62702D7DD96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
Manifest number:          0BE9
Signing time:             Fri 17 May 2024 20:00:50 +0000
Manifest this update:     Fri 17 May 2024 20:00:50 +0000
Manifest next update:     Sat 18 May 2024 20:00:50 +0000
Files and hashes:         1: m7OdtQEo2zUK68hDgISZGLsF5wU.crl (hash: t+AGEAtiaAYP8FfEnYK1hgJ2dupvgcyDl1iB04QBX30=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:98:b2:67:8c:24:6d:c9:89:a6:27:02:d7:dd:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bb39db50128db350aebc84380849918bb05e705
        Validity
            Not Before: May 17 20:00:50 2024 GMT
            Not After : May 18 20:00:50 2024 GMT
        Subject: CN=c19d9e8537483c0051aea24ee2e3f8ff49fb52ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6b:33:97:b4:b2:bf:f1:44:f9:ef:dc:72:e2:
                    22:b2:35:50:b3:db:dc:a2:c3:72:b1:9b:2b:7e:0f:
                    a2:cc:57:31:3c:4a:6d:78:5a:98:08:cf:c1:7c:3f:
                    dc:f4:1a:50:6c:20:a0:34:46:5e:62:13:d6:11:9d:
                    83:13:86:3a:8a:e0:cc:04:af:d5:12:2c:f9:ec:f8:
                    cf:07:94:00:6b:06:50:7c:37:30:fb:ad:8b:32:24:
                    ef:03:75:f8:5c:9b:7f:18:55:e6:af:3e:8f:99:56:
                    25:b4:fa:a7:ea:72:6b:c9:cb:e2:b2:f4:33:77:4d:
                    f8:0d:84:7e:56:c8:76:31:a2:8f:d1:68:ca:3f:f7:
                    6d:03:79:cc:32:dd:fc:fa:5c:f1:55:f3:37:fb:0b:
                    7e:63:3c:67:b0:14:b6:6c:c3:6b:44:bb:68:b0:94:
                    f7:b2:d2:0a:da:19:0e:be:ca:a8:c1:32:67:65:65:
                    a2:92:b6:9d:f6:19:b2:ce:4b:76:89:3c:0e:b7:5a:
                    37:64:f0:d1:f7:d2:02:ea:db:95:f0:a6:a2:43:c2:
                    eb:6d:63:97:cc:e5:a5:ec:7e:4d:21:d0:20:e5:d7:
                    d5:04:f0:f9:31:30:60:50:4f:01:13:e3:a9:e3:16:
                    1e:eb:c4:0f:a7:8f:df:f7:f0:bf:e4:8d:55:ba:ed:
                    45:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9D:9E:85:37:48:3C:00:51:AE:A2:4E:E2:E3:F8:FF:49:FB:52:EE
            X509v3 Authority Key Identifier:
                keyid:9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:e8:10:eb:7b:11:e1:70:ab:cb:02:44:15:9f:c8:71:17:bb:
         00:42:5d:83:f5:9a:ae:c9:f3:33:f7:60:c1:d5:e3:40:5b:ff:
         a1:cf:b7:78:e1:76:5d:6c:c1:9b:fc:f0:03:6f:cb:60:f3:c2:
         52:9f:a8:b1:45:cf:1d:3e:02:a9:d7:ce:0f:a1:2e:33:58:1e:
         58:13:ff:78:2d:ae:30:57:a7:35:e0:62:c3:29:4c:a3:b6:76:
         e6:73:bc:20:a7:24:44:fc:38:5a:b0:83:15:89:8a:31:05:d2:
         0d:90:1e:02:50:f2:2e:7b:b3:bd:3d:80:76:d3:86:c6:70:4b:
         ed:d6:e8:b0:ba:02:5f:89:e7:f3:71:7a:e1:2a:57:7d:31:2d:
         f2:24:77:87:ba:3a:36:aa:4a:c4:a5:f0:51:72:84:62:63:f6:
         ae:60:60:39:ba:67:8e:2d:16:c0:46:78:2e:a5:0a:52:55:0d:
         49:58:bf:c2:fa:4a:a9:06:80:60:12:d3:ff:7f:79:86:ac:ad:
         f8:f0:e7:72:22:dd:89:e5:1d:7b:1b:ee:dd:c4:8d:c1:46:d9:
         76:ed:f4:2c:ad:06:07:e0:0d:70:22:8e:e1:39:bb:cf:63:36:
         17:81:30:b9:04:58:e9:43:b3:68:97:6f:ed:b4:b2:56:63:fa:
         9c:e1:86:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJJiyZ4wkbcmJpicC192WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYjM5ZGI1MDEyOGRiMzUwYWViYzg0MzgwODQ5OTE4YmIw
NWU3MDUwHhcNMjQwNTE3MjAwMDUwWhcNMjQwNTE4MjAwMDUwWjAzMTEwLwYDVQQD
EyhjMTlkOWU4NTM3NDgzYzAwNTFhZWEyNGVlMmUzZjhmZjQ5ZmI1MmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGszl7Syv/FE+e/ccuIisjVQs9vc
osNysZsrfg+izFcxPEpteFqYCM/BfD/c9BpQbCCgNEZeYhPWEZ2DE4Y6iuDMBK/V
Eiz57PjPB5QAawZQfDcw+62LMiTvA3X4XJt/GFXmrz6PmVYltPqn6nJrycvisvQz
d034DYR+Vsh2MaKP0WjKP/dtA3nMMt38+lzxVfM3+wt+YzxnsBS2bMNrRLtosJT3
stIK2hkOvsqowTJnZWWikrad9hmyzkt2iTwOt1o3ZPDR99IC6tuV8KaiQ8LrbWOX
zOWl7H5NIdAg5dfVBPD5MTBgUE8BE+Op4xYe68QPp4/f9/C/5I1Vuu1FmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGdnoU3SDwAUa6iTuLj+P9J+1LuMB8GA1UdIwQY
MBaAFJuznbUBKNs1CuvIQ4CEmRi7BecFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTdPZHRRRW8yelVLNjhoRGdJU1pHTHNGNXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lMWY5YzctNTkwMy00MmM4LTk4MzMt
ZTI4ZmEzOWI0YjE3LzEvbTdPZHRRRW8yelVLNjhoRGdJU1pHTHNGNXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9lMWY5YzctNTkwMy00MmM4LTk4MzMtZTI4ZmEzOWI0YjE3
LzEvbTdPZHRRRW8yelVLNjhoRGdJU1pHTHNGNXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGugQ63sR
4XCrywJEFZ/IcRe7AEJdg/WarsnzM/dgwdXjQFv/oc+3eOF2XWzBm/zwA2/LYPPC
Up+osUXPHT4CqdfOD6EuM1geWBP/eC2uMFenNeBiwylMo7Z25nO8IKckRPw4WrCD
FYmKMQXSDZAeAlDyLnuzvT2AdtOGxnBL7dbosLoCX4nn83F64SpXfTEt8iR3h7o6
NqpKxKXwUXKEYmP2rmBgObpnji0WwEZ4LqUKUlUNSVi/wvpKqQaAYBLT/395hqyt
+PDnciLdieUdexvu3cSNwUbZdu30LK0GB+ANcCKO4Tm7z2M2F4EwuQRY6UOzaJdv
7bSyVmP6nOGGPg==
-----END CERTIFICATE-----
Generated at Fri May 17 21:11:49 2024 by rpki-client on console-ams.rpki-client.org