Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/a20777-85d9-48b8-a90d-0025fb0ba817/1/oacUNoyt3jYFUYCftnU4i271BRw.mft
File:                     oacUNoyt3jYFUYCftnU4i271BRw.mft (raw, json)
Hash identifier:          0diNAcAR3UvTukCbY62H2YthCT30+Qlpqbm2v+EXxgo=
Subject key identifier:   20:2E:E4:42:0A:CB:54:BD:FA:0B:22:9E:8A:E7:A5:EF:AA:6B:7B:1B
Authority key identifier: A1:A7:14:36:8C:AD:DE:36:05:51:80:9F:B6:75:38:8B:6E:F5:05:1C
Certificate issuer:       /CN=a1a714368cadde360551809fb675388b6ef5051c
Certificate serial:       018F874AB57C7C04D3D87B7B1793B002457E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oacUNoyt3jYFUYCftnU4i271BRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/a20777-85d9-48b8-a90d-0025fb0ba817/1/oacUNoyt3jYFUYCftnU4i271BRw.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:02:51 +0000
Manifest this update:     Fri 17 May 2024 16:02:51 +0000
Manifest next update:     Sat 18 May 2024 16:02:51 +0000
Files and hashes:         1: oacUNoyt3jYFUYCftnU4i271BRw.crl (hash: lDlcraifT4H+xCHVOK14k06Ev9xQhUkkdiJtaWWyvxs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/a20777-85d9-48b8-a90d-0025fb0ba817/1/oacUNoyt3jYFUYCftnU4i271BRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/a20777-85d9-48b8-a90d-0025fb0ba817/1/oacUNoyt3jYFUYCftnU4i271BRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oacUNoyt3jYFUYCftnU4i271BRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:b5:7c:7c:04:d3:d8:7b:7b:17:93:b0:02:45:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1a714368cadde360551809fb675388b6ef5051c
        Validity
            Not Before: May 17 16:02:51 2024 GMT
            Not After : May 18 16:02:51 2024 GMT
        Subject: CN=202ee4420acb54bdfa0b229e8ae7a5efaa6b7b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:18:13:0f:81:38:00:b9:8c:37:1a:da:7f:ee:
                    c8:a0:2d:d3:1d:dd:42:93:29:0e:bc:fa:6e:c9:a3:
                    50:53:48:ec:9e:b2:9c:7b:3a:a0:09:14:1f:82:ec:
                    5e:5e:60:83:b1:34:c2:dc:59:b0:5b:84:bc:04:61:
                    06:af:ff:fd:86:27:cb:58:4f:97:fd:ca:02:cd:74:
                    77:ea:81:83:f4:f3:65:c8:95:7b:cc:81:4b:e2:68:
                    63:aa:76:7f:1e:a7:f8:d4:bb:6c:c8:7d:82:4c:bf:
                    f1:f9:b5:48:30:34:10:f2:ab:ec:19:d2:7e:b2:f8:
                    37:fb:dd:6b:18:76:a2:d0:9e:34:be:8f:a0:21:77:
                    4e:72:3a:f1:5b:2a:0c:ab:b2:5a:2a:a3:3e:46:b2:
                    28:21:90:1f:41:ca:4c:f5:63:bc:e2:6c:19:0f:1b:
                    8e:9a:95:4e:34:5a:04:a5:f8:d1:c3:70:c7:10:59:
                    5f:32:2c:53:52:1e:04:2b:ef:81:4f:fd:2a:03:a2:
                    80:f9:7a:1f:37:e4:d6:e5:78:1d:21:fc:ba:99:cb:
                    11:21:83:d8:8d:32:9a:53:2b:60:8e:09:80:81:4a:
                    d7:99:9b:0e:20:d0:a1:68:f3:74:30:d2:f6:06:cc:
                    b7:ff:75:0b:30:ec:31:96:dd:e0:3a:20:d3:11:f2:
                    57:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:2E:E4:42:0A:CB:54:BD:FA:0B:22:9E:8A:E7:A5:EF:AA:6B:7B:1B
            X509v3 Authority Key Identifier:
                keyid:A1:A7:14:36:8C:AD:DE:36:05:51:80:9F:B6:75:38:8B:6E:F5:05:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oacUNoyt3jYFUYCftnU4i271BRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a20777-85d9-48b8-a90d-0025fb0ba817/1/oacUNoyt3jYFUYCftnU4i271BRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a20777-85d9-48b8-a90d-0025fb0ba817/1/oacUNoyt3jYFUYCftnU4i271BRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:87:ed:7b:36:66:fe:9a:a9:b7:e0:b4:7f:cb:be:59:e7:4c:
         39:4f:96:3c:49:e1:a7:9e:03:19:4d:ed:08:9a:54:bf:c2:15:
         01:8c:94:e0:86:04:b6:3b:20:13:e8:52:ac:bd:9d:30:a9:a2:
         e6:f9:46:f5:4b:c3:7d:75:74:6b:12:fc:db:30:b7:88:ce:98:
         73:93:0b:e7:94:7a:96:b0:1b:20:ed:2e:20:93:cb:94:24:df:
         9e:18:aa:7c:fa:ed:30:35:d9:1e:15:28:39:90:16:f6:41:c5:
         ed:59:2f:06:c9:1e:8e:17:34:ed:d2:0c:d6:7c:a3:d1:41:53:
         8d:1f:82:fe:3f:4d:a4:b4:ac:f4:77:8d:c1:12:8e:45:de:50:
         0e:f6:37:db:d0:47:3b:be:76:79:dd:af:e9:02:41:8c:0e:b8:
         aa:78:9a:33:0a:d3:90:a1:35:55:65:7a:61:e8:0a:ad:49:2b:
         1f:0f:d1:60:cd:bc:fc:4f:a6:d5:11:18:50:e3:e3:dc:72:2a:
         b8:1d:4d:8e:ca:e9:d3:8f:4e:0d:8e:bb:b6:b5:26:b0:21:12:
         91:b4:d5:65:cc:a0:34:f9:03:a4:91:aa:7d:b8:12:7a:7e:cb:
         34:9f:02:ee:93:51:5f:cd:33:8e:d8:e9:04:0f:ff:24:bb:ae:
         ba:f9:ed:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSrV8fATT2Ht7F5OwAkV+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYTcxNDM2OGNhZGRlMzYwNTUxODA5ZmI2NzUzODhiNmVm
NTA1MWMwHhcNMjQwNTE3MTYwMjUxWhcNMjQwNTE4MTYwMjUxWjAzMTEwLwYDVQQD
EygyMDJlZTQ0MjBhY2I1NGJkZmEwYjIyOWU4YWU3YTVlZmFhNmI3YjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+hgTD4E4ALmMNxraf+7IoC3THd1C
kykOvPpuyaNQU0jsnrKcezqgCRQfguxeXmCDsTTC3FmwW4S8BGEGr//9hifLWE+X
/coCzXR36oGD9PNlyJV7zIFL4mhjqnZ/Hqf41LtsyH2CTL/x+bVIMDQQ8qvsGdJ+
svg3+91rGHai0J40vo+gIXdOcjrxWyoMq7JaKqM+RrIoIZAfQcpM9WO84mwZDxuO
mpVONFoEpfjRw3DHEFlfMixTUh4EK++BT/0qA6KA+XofN+TW5XgdIfy6mcsRIYPY
jTKaUytgjgmAgUrXmZsOINChaPN0MNL2Bsy3/3ULMOwxlt3gOiDTEfJXTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAu5EIKy1S9+gsinornpe+qa3sbMB8GA1UdIwQY
MBaAFKGnFDaMrd42BVGAn7Z1OItu9QUcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2FjVU5veXQzallGVVlDZnRuVTRpMjcxQlJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9hMjA3NzctODVkOS00OGI4LWE5MGQt
MDAyNWZiMGJhODE3LzEvb2FjVU5veXQzallGVVlDZnRuVTRpMjcxQlJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9hMjA3NzctODVkOS00OGI4LWE5MGQtMDAyNWZiMGJhODE3
LzEvb2FjVU5veXQzallGVVlDZnRuVTRpMjcxQlJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4ftezZm
/pqpt+C0f8u+WedMOU+WPEnhp54DGU3tCJpUv8IVAYyU4IYEtjsgE+hSrL2dMKmi
5vlG9UvDfXV0axL82zC3iM6Yc5ML55R6lrAbIO0uIJPLlCTfnhiqfPrtMDXZHhUo
OZAW9kHF7VkvBskejhc07dIM1nyj0UFTjR+C/j9NpLSs9HeNwRKORd5QDvY329BH
O752ed2v6QJBjA64qniaMwrTkKE1VWV6YegKrUkrHw/RYM28/E+m1REYUOPj3HIq
uB1Njsrp049ODY67trUmsCESkbTVZcygNPkDpJGqfbgSen7LNJ8C7pNRX80zjtjp
BA//JLuuuvntlg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:26:38 2024 by rpki-client on console-fra.rpki-client.org