Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
File:                     IMnySVGbH_R5NQ8xclT0Bei_yr0.mft (raw, json)
Hash identifier:          1CobkhLkITGE+BU4U5B1GMQBs37ow0XLpl96BdzlRsc=
Subject key identifier:   1C:3F:8A:93:F6:AE:82:51:5E:18:FD:0E:09:C0:3B:72:81:97:6E:0D
Authority key identifier: 20:C9:F2:49:51:9B:1F:F4:79:35:0F:31:72:54:F4:05:E8:BF:CA:BD
Certificate issuer:       /CN=20c9f249519b1ff479350f317254f405e8bfcabd
Certificate serial:       018F52128876D9C792A2B47E5FFF07205E02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
Manifest number:          0B52
Signing time:             Tue 07 May 2024 08:01:37 +0000
Manifest this update:     Tue 07 May 2024 08:01:37 +0000
Manifest next update:     Wed 08 May 2024 08:01:37 +0000
Files and hashes:         1: IMnySVGbH_R5NQ8xclT0Bei_yr0.crl (hash: /arEPgmVA/MJoTuJLsaOPDm8zrP5WUJGYe7Mr40XM08=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:52:12:88:76:d9:c7:92:a2:b4:7e:5f:ff:07:20:5e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c9f249519b1ff479350f317254f405e8bfcabd
        Validity
            Not Before: May  7 08:01:37 2024 GMT
            Not After : May  8 08:01:37 2024 GMT
        Subject: CN=1c3f8a93f6ae82515e18fd0e09c03b7281976e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:40:cf:3e:a0:79:d6:65:98:d1:f4:03:7f:a0:
                    a8:47:70:f2:e1:3f:7c:84:b8:61:8a:c4:33:de:a6:
                    f8:d2:2a:55:f7:c8:88:77:19:26:1e:31:13:dc:4e:
                    19:48:73:8e:62:da:67:af:eb:6d:af:5b:b2:63:f4:
                    81:d4:19:e3:41:6e:5c:aa:e6:ca:0f:16:3d:fb:f8:
                    08:7d:98:01:e3:21:81:0d:1c:76:ea:26:0f:42:e7:
                    c9:6e:31:e9:a5:74:1c:0e:94:ac:c1:48:59:df:78:
                    f5:f3:fb:7a:50:d2:e0:51:19:87:54:6f:97:c4:62:
                    94:47:56:09:25:98:8f:34:9b:57:0a:49:69:59:7d:
                    f4:a0:5e:3f:74:95:b0:20:f9:e8:28:49:f8:28:3d:
                    89:e0:20:aa:6f:92:0d:b4:74:a5:62:28:6b:06:a5:
                    13:9b:1a:14:23:4a:d4:1c:f6:d8:19:e8:f7:2d:a4:
                    68:ff:a7:e5:c5:a9:d9:25:96:5f:8b:91:2e:39:d8:
                    d3:5d:c1:b0:27:41:49:f7:06:42:1b:bc:0b:1e:b7:
                    08:13:09:30:83:65:c4:bc:a6:c5:eb:77:bc:92:17:
                    d7:aa:46:25:75:40:f6:e4:8f:13:07:98:e5:26:44:
                    bd:e6:a7:c6:5a:07:0c:34:f5:ba:e1:2f:d3:f6:7b:
                    2b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:3F:8A:93:F6:AE:82:51:5E:18:FD:0E:09:C0:3B:72:81:97:6E:0D
            X509v3 Authority Key Identifier:
                keyid:20:C9:F2:49:51:9B:1F:F4:79:35:0F:31:72:54:F4:05:E8:BF:CA:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:9a:3c:73:29:5d:23:bb:21:ce:dd:90:61:1e:7e:8c:a6:17:
         d4:d2:cf:d3:7f:7a:f2:43:84:ba:50:a6:7f:ff:8a:26:dc:cc:
         ae:5c:0c:3d:2b:84:9e:4b:55:0f:77:55:4d:19:d9:68:c1:a3:
         42:99:dd:a1:66:88:e4:22:50:88:27:fc:62:ff:e8:fd:af:01:
         4e:95:59:bd:4e:25:28:e6:fa:96:c6:0c:a0:fc:39:a1:ad:92:
         2c:0d:55:b5:9d:45:a2:a5:17:eb:d5:58:e3:ca:f5:24:d0:18:
         76:8c:ed:15:77:3b:dc:6b:3f:d9:03:ee:0b:9f:0e:64:29:dc:
         e9:ff:c3:1c:b6:24:42:08:4c:de:b0:d3:5b:1a:f7:cc:a5:36:
         fb:6c:7d:7f:20:39:a5:18:b2:15:4c:c2:4b:f4:0c:a0:b8:71:
         5d:e2:91:77:30:d0:0b:3f:a1:be:0a:24:44:5d:f6:98:95:5f:
         0d:d3:f3:9c:a2:a3:a1:39:0a:9e:7b:ab:82:61:16:a4:86:1f:
         fe:ad:10:ad:fd:b6:46:0e:1f:58:70:22:44:2d:a0:8e:6e:e1:
         05:b9:c1:1d:04:bb:e7:18:da:4a:6c:c1:1b:7c:a6:4d:2c:ea:
         3d:74:ec:5e:e5:2a:0e:12:51:dc:66:ef:51:cc:f1:2f:04:96:
         96:a7:d2:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9SEoh22ceSorR+X/8HIF4CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYzlmMjQ5NTE5YjFmZjQ3OTM1MGYzMTcyNTRmNDA1ZThi
ZmNhYmQwHhcNMjQwNTA3MDgwMTM3WhcNMjQwNTA4MDgwMTM3WjAzMTEwLwYDVQQD
EygxYzNmOGE5M2Y2YWU4MjUxNWUxOGZkMGUwOWMwM2I3MjgxOTc2ZTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEDPPqB51mWY0fQDf6CoR3Dy4T98
hLhhisQz3qb40ipV98iIdxkmHjET3E4ZSHOOYtpnr+ttr1uyY/SB1BnjQW5cqubK
DxY9+/gIfZgB4yGBDRx26iYPQufJbjHppXQcDpSswUhZ33j18/t6UNLgURmHVG+X
xGKUR1YJJZiPNJtXCklpWX30oF4/dJWwIPnoKEn4KD2J4CCqb5INtHSlYihrBqUT
mxoUI0rUHPbYGej3LaRo/6flxanZJZZfi5EuOdjTXcGwJ0FJ9wZCG7wLHrcIEwkw
g2XEvKbF63e8khfXqkYldUD25I8TB5jlJkS95qfGWgcMNPW64S/T9nsriQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBw/ipP2roJRXhj9DgnAO3KBl24NMB8GA1UdIwQY
MBaAFCDJ8klRmx/0eTUPMXJU9AXov8q9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1ueVNWR2JIX1I1TlE4eGNsVDBCZWlfeXIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zOGMyNmYtMjVhMi00YjIwLTllY2Qt
MGU2YmNlZDAwNDYzLzEvSU1ueVNWR2JIX1I1TlE4eGNsVDBCZWlfeXIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zOGMyNmYtMjVhMi00YjIwLTllY2QtMGU2YmNlZDAwNDYz
LzEvSU1ueVNWR2JIX1I1TlE4eGNsVDBCZWlfeXIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZo8cyld
I7shzt2QYR5+jKYX1NLP03968kOEulCmf/+KJtzMrlwMPSuEnktVD3dVTRnZaMGj
QpndoWaI5CJQiCf8Yv/o/a8BTpVZvU4lKOb6lsYMoPw5oa2SLA1VtZ1FoqUX69VY
48r1JNAYdoztFXc73Gs/2QPuC58OZCnc6f/DHLYkQghM3rDTWxr3zKU2+2x9fyA5
pRiyFUzCS/QMoLhxXeKRdzDQCz+hvgokRF32mJVfDdPznKKjoTkKnnurgmEWpIYf
/q0Qrf22Rg4fWHAiRC2gjm7hBbnBHQS75xjaSmzBG3ymTSzqPXTsXuUqDhJR3Gbv
UczxLwSWlqfS6w==
-----END CERTIFICATE-----
Generated at Tue May 7 14:30:58 2024 by rpki-client on console-ams.rpki-client.org