Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
File:                     Iqs7vLPNUyaosST8ld7RRFN1L6I.mft (raw, json)
Hash identifier:          Hlk4VKHKLPAnVUMonI7hbpY2aXtongvdjyrYJ8WA3Rc=
Subject key identifier:   92:C9:E1:38:49:55:40:7A:76:CC:F7:E6:F2:81:85:DE:E7:B5:FE:B6
Authority key identifier: 22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2
Certificate issuer:       /CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2
Certificate serial:       018F483328EC2A35B5BD91023960AAF2C95B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
Manifest number:          0BC4
Signing time:             Sun 05 May 2024 10:01:02 +0000
Manifest this update:     Sun 05 May 2024 10:01:02 +0000
Manifest next update:     Mon 06 May 2024 10:01:02 +0000
Files and hashes:         1: Iqs7vLPNUyaosST8ld7RRFN1L6I.crl (hash: gl0KzPKJNnohKKCYQCUtR5s+w/b9gqV1FdefbbTaBIo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 10:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:48:33:28:ec:2a:35:b5:bd:91:02:39:60:aa:f2:c9:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2
        Validity
            Not Before: May  5 10:01:02 2024 GMT
            Not After : May  6 10:01:02 2024 GMT
        Subject: CN=92c9e1384955407a76ccf7e6f28185dee7b5feb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:29:a6:a0:27:8f:2d:e3:8e:4f:70:b0:53:19:
                    9a:ac:de:f8:56:05:86:18:7c:48:7a:60:82:49:1c:
                    18:74:37:80:b2:b3:9d:13:29:d8:b3:56:26:f1:d8:
                    01:4c:93:8d:e4:6b:85:fa:0a:73:2a:9b:74:2d:8a:
                    8c:44:00:e7:b0:de:e6:14:47:2a:ef:35:01:ed:4f:
                    83:0d:99:b7:8c:e0:f2:c8:ed:50:14:55:3a:b9:c7:
                    7a:7b:ae:3d:69:a9:cc:1e:ba:48:86:69:da:31:f3:
                    27:b1:d5:bc:5d:ac:e8:84:ee:dd:94:18:b9:a9:42:
                    84:77:98:52:b3:2f:5c:4c:af:55:b7:3e:17:44:8e:
                    10:74:7c:f5:41:e7:9e:33:0e:92:55:20:34:99:85:
                    a9:10:dd:76:b9:5b:bf:02:f4:39:c1:88:8f:9e:21:
                    3f:42:a1:ca:dc:82:b6:1d:e1:08:8c:97:e3:a8:b8:
                    19:fd:d7:6f:ea:29:77:ff:05:69:69:0b:83:14:27:
                    48:48:c7:d3:2e:db:2c:4d:69:b3:cf:d2:e2:3e:78:
                    d5:9e:06:93:60:b6:82:65:f9:9a:1a:fc:48:ef:e8:
                    04:65:20:87:7e:42:16:74:70:17:f9:f0:18:76:a7:
                    ff:59:25:8b:37:16:74:0f:24:54:82:59:0d:2e:ee:
                    f4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C9:E1:38:49:55:40:7A:76:CC:F7:E6:F2:81:85:DE:E7:B5:FE:B6
            X509v3 Authority Key Identifier:
                keyid:22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c4:da:cc:4f:d8:1e:95:61:df:41:1f:89:98:e8:26:ba:ba:
         19:57:71:c4:6a:67:9e:f2:57:be:12:54:a9:70:82:78:58:d7:
         ab:a2:78:9d:4e:1d:af:fc:28:a2:fe:8f:cb:e4:17:8a:98:89:
         7d:55:4e:38:74:b0:d7:6c:c2:13:6e:55:e8:fd:cf:70:1c:31:
         cf:4f:26:e8:6e:d8:ac:a6:fb:67:a3:b9:af:b0:a5:1a:e6:6d:
         e0:7d:98:b8:35:c2:81:5d:25:4f:d2:70:e6:9f:5a:12:03:da:
         2a:70:cb:d0:ae:84:62:8f:da:b6:6e:37:4a:b6:a9:22:ff:63:
         c7:5c:b9:ea:e4:78:95:23:a6:6e:05:f5:ef:dc:e0:16:65:1d:
         14:3d:0e:a0:07:25:55:3a:7d:5b:3f:a8:9a:71:30:3e:2b:91:
         7d:dd:eb:18:e6:c6:59:ff:2a:91:d9:eb:f8:70:14:d3:45:e3:
         86:db:41:ec:0c:ac:e7:29:64:3b:34:15:ae:8d:17:b5:e8:f6:
         d0:f1:72:fa:8f:46:7e:5d:c7:01:32:78:8a:06:0f:ed:ce:03:
         ad:49:00:9e:f7:ef:15:e9:d5:ec:86:30:e0:43:c7:ce:8b:ed:
         e3:44:d6:48:41:53:68:31:2b:83:b9:18:12:26:13:be:96:cc:
         85:dd:f3:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9IMyjsKjW1vZECOWCq8slbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYWIzYmJjYjNjZDUzMjZhOGIxMjRmYzk1ZGVkMTQ0NTM3
NTJmYTIwHhcNMjQwNTA1MTAwMTAyWhcNMjQwNTA2MTAwMTAyWjAzMTEwLwYDVQQD
Eyg5MmM5ZTEzODQ5NTU0MDdhNzZjY2Y3ZTZmMjgxODVkZWU3YjVmZWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsymmoCePLeOOT3CwUxmarN74VgWG
GHxIemCCSRwYdDeAsrOdEynYs1Ym8dgBTJON5GuF+gpzKpt0LYqMRADnsN7mFEcq
7zUB7U+DDZm3jODyyO1QFFU6ucd6e649aanMHrpIhmnaMfMnsdW8XazohO7dlBi5
qUKEd5hSsy9cTK9Vtz4XRI4QdHz1QeeeMw6SVSA0mYWpEN12uVu/AvQ5wYiPniE/
QqHK3IK2HeEIjJfjqLgZ/ddv6il3/wVpaQuDFCdISMfTLtssTWmzz9LiPnjVngaT
YLaCZfmaGvxI7+gEZSCHfkIWdHAX+fAYdqf/WSWLNxZ0DyRUglkNLu70zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLJ4ThJVUB6dsz35vKBhd7ntf62MB8GA1UdIwQY
MBaAFCKrO7yzzVMmqLEk/JXe0URTdS+iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zOTI0ODktNzMzNy00YmQ3LTk1YWUt
ZmE4YTVlODZiMzQ4LzEvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8zOTI0ODktNzMzNy00YmQ3LTk1YWUtZmE4YTVlODZiMzQ4
LzEvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsTazE/Y
HpVh30EfiZjoJrq6GVdxxGpnnvJXvhJUqXCCeFjXq6J4nU4dr/woov6Py+QXipiJ
fVVOOHSw12zCE25V6P3PcBwxz08m6G7YrKb7Z6O5r7ClGuZt4H2YuDXCgV0lT9Jw
5p9aEgPaKnDL0K6EYo/atm43SrapIv9jx1y56uR4lSOmbgX179zgFmUdFD0OoAcl
VTp9Wz+omnEwPiuRfd3rGObGWf8qkdnr+HAU00XjhttB7Ays5ylkOzQVro0Xtej2
0PFy+o9Gfl3HATJ4igYP7c4DrUkAnvfvFenV7IYw4EPHzovt40TWSEFTaDErg7kY
EiYTvpbMhd3zsA==
-----END CERTIFICATE-----
Generated at Sun May 5 18:49:24 2024 by rpki-client on console-fra.rpki-client.org