Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
File:                     ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft (raw, json)
Hash identifier:          xFE0wgOnO9b3PH8Nx4om8Bemcx2Bx7ZW+LRZORSZUTM=
Subject key identifier:   92:FB:1B:5F:E1:95:9F:14:A7:03:A6:B3:8E:DC:6A:9B:4B:A1:59:F6
Authority key identifier: 01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
Certificate issuer:       /CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Certificate serial:       018F497EC4DBB55F7219C1CB42A003B0332F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
Manifest number:          0D8F
Signing time:             Sun 05 May 2024 16:03:15 +0000
Manifest this update:     Sun 05 May 2024 16:03:15 +0000
Manifest next update:     Mon 06 May 2024 16:03:15 +0000
Files and hashes:         1: ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl (hash: 5pDPvtDpcN+H4mCvwhCy9LXA2nw166ldyB/jmkZ+MSs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 16:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:7e:c4:db:b5:5f:72:19:c1:cb:42:a0:03:b0:33:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
        Validity
            Not Before: May  5 16:03:15 2024 GMT
            Not After : May  6 16:03:15 2024 GMT
        Subject: CN=92fb1b5fe1959f14a703a6b38edc6a9b4ba159f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f3:25:81:e9:fa:1d:e1:b1:5a:61:b6:17:8d:
                    9c:b9:43:b4:94:12:bb:d9:3f:18:2a:ca:88:9e:ca:
                    8f:77:90:3c:a6:16:b8:3d:59:d7:e8:84:e6:86:f3:
                    9b:54:87:0e:7e:58:f3:f3:8f:bb:dc:7d:86:fb:41:
                    b0:de:ea:fa:31:66:70:6e:3b:c8:1b:dc:1e:15:fa:
                    b2:eb:bd:ff:16:53:59:48:96:04:dd:ad:17:2e:72:
                    d5:90:1f:e2:0d:93:bb:77:fb:c1:f5:95:db:be:39:
                    de:f1:41:ac:cb:4e:64:eb:2f:12:40:c9:f6:36:ae:
                    5c:a3:45:78:fd:30:f6:a2:69:40:48:1b:93:b2:ac:
                    2a:dd:bf:4b:f3:c1:4d:2f:7d:d2:eb:b0:4a:d1:21:
                    e4:73:76:2c:71:75:f0:14:48:01:a9:e0:f3:5b:e9:
                    b0:83:f5:6c:35:d3:50:8f:df:e9:44:b5:d3:bd:23:
                    8b:2a:a9:73:09:80:8f:34:a1:43:97:8f:14:42:8c:
                    e3:e8:c3:38:13:95:cf:19:12:3a:f0:3d:63:29:ae:
                    39:14:7d:09:d8:a2:cb:df:6a:d6:66:f5:40:5b:f1:
                    94:a2:cd:83:43:13:28:0b:f0:78:d5:04:c5:ca:5e:
                    4d:3e:29:10:67:ee:03:13:dc:6a:e3:0d:9b:08:a8:
                    50:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:FB:1B:5F:E1:95:9F:14:A7:03:A6:B3:8E:DC:6A:9B:4B:A1:59:F6
            X509v3 Authority Key Identifier:
                keyid:01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:9c:a9:6f:c8:1e:d8:b5:aa:0a:c8:9d:0b:2a:4d:95:0c:ff:
         1a:51:c0:a9:d9:78:4d:d3:cc:ef:42:f2:80:18:16:14:30:8c:
         a5:1f:00:51:8f:35:41:c0:d0:9b:2f:16:50:e7:1f:f6:72:0b:
         b1:36:e4:30:5a:e4:84:58:49:e5:df:56:be:67:93:26:60:90:
         2d:cc:c5:77:f6:01:51:53:3a:c7:35:26:16:87:ae:39:22:64:
         af:a1:d7:a5:fc:cf:63:63:4b:f0:85:a7:0f:ad:34:5d:37:55:
         71:2c:18:c0:2f:18:c9:de:9c:f1:6a:0c:11:a5:4f:93:01:9c:
         8b:69:35:45:5c:6b:10:10:32:65:08:fc:fe:d9:80:7f:c1:72:
         d4:87:fc:c6:00:1e:c8:f4:8d:55:57:d8:b5:1e:bf:f5:22:98:
         c9:47:6c:50:dd:aa:8c:37:52:b0:b6:7b:e9:de:a6:bb:a3:9c:
         7e:b9:0b:6d:d5:7b:6a:ec:66:37:c1:89:5c:d4:22:67:04:2a:
         d0:de:f1:c7:3d:97:86:49:61:79:a7:7f:d7:2f:b5:f2:6b:5c:
         05:ca:d2:92:51:40:3d:96:98:b9:99:ae:a2:8a:58:23:7c:8b:
         47:fc:a3:a6:0d:5a:09:18:53:b4:a3:1b:3e:cf:58:70:43:08:
         6e:07:35:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9JfsTbtV9yGcHLQqADsDMvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMTQ2M2ZmOTljMjRjMDkzN2E0MDY1ZDFmY2NmZWI5MDhm
YzNhZDIwHhcNMjQwNTA1MTYwMzE1WhcNMjQwNTA2MTYwMzE1WjAzMTEwLwYDVQQD
Eyg5MmZiMWI1ZmUxOTU5ZjE0YTcwM2E2YjM4ZWRjNmE5YjRiYTE1OWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvMlgen6HeGxWmG2F42cuUO0lBK7
2T8YKsqInsqPd5A8pha4PVnX6ITmhvObVIcOfljz84+73H2G+0Gw3ur6MWZwbjvI
G9weFfqy673/FlNZSJYE3a0XLnLVkB/iDZO7d/vB9ZXbvjne8UGsy05k6y8SQMn2
Nq5co0V4/TD2omlASBuTsqwq3b9L88FNL33S67BK0SHkc3YscXXwFEgBqeDzW+mw
g/VsNdNQj9/pRLXTvSOLKqlzCYCPNKFDl48UQozj6MM4E5XPGRI68D1jKa45FH0J
2KLL32rWZvVAW/GUos2DQxMoC/B41QTFyl5NPikQZ+4DE9xq4w2bCKhQVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJL7G1/hlZ8UpwOms47captLoVn2MB8GA1UdIwQY
MBaAFAEUY/+ZwkwJN6QGXR/M/rkI/DrSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVJSal81bkNUQWszcEFaZEg4ei11UWo4T3RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yNDAwMjQtZjQzMy00MjQxLWI0MGQt
ZDFlODRjZmE0NzhmLzEvQVJSal81bkNUQWszcEFaZEg4ei11UWo4T3RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8yNDAwMjQtZjQzMy00MjQxLWI0MGQtZDFlODRjZmE0Nzhm
LzEvQVJSal81bkNUQWszcEFaZEg4ei11UWo4T3RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJypb8ge
2LWqCsidCypNlQz/GlHAqdl4TdPM70LygBgWFDCMpR8AUY81QcDQmy8WUOcf9nIL
sTbkMFrkhFhJ5d9WvmeTJmCQLczFd/YBUVM6xzUmFoeuOSJkr6HXpfzPY2NL8IWn
D600XTdVcSwYwC8Yyd6c8WoMEaVPkwGci2k1RVxrEBAyZQj8/tmAf8Fy1If8xgAe
yPSNVVfYtR6/9SKYyUdsUN2qjDdSsLZ76d6mu6OcfrkLbdV7auxmN8GJXNQiZwQq
0N7xxz2Xhklhead/1y+18mtcBcrSklFAPZaYuZmuoopYI3yLR/yjpg1aCRhTtKMb
Ps9YcEMIbgc1oQ==
-----END CERTIFICATE-----
Generated at Sun May 5 18:49:09 2024 by rpki-client on console-fra.rpki-client.org