Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
File:                     c4i9uc1_a6So9hjFpCp2quiSWc8.mft (raw, json)
Hash identifier:          ardmYaF+plprgxiPZNqocMrUJbAszcbY7zHWaP+srIs=
Subject key identifier:   F4:27:33:2C:DE:26:F7:0B:6A:CC:DE:27:EE:8B:A7:B9:13:0C:6B:AB
Authority key identifier: 73:88:BD:B9:CD:7F:6B:A4:A8:F6:18:C5:A4:2A:76:AA:E8:92:59:CF
Certificate issuer:       /CN=7388bdb9cd7f6ba4a8f618c5a42a76aae89259cf
Certificate serial:       018F874A8D12019527EF4211DBFA1B4A3414
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
Manifest number:          1174
Signing time:             Fri 17 May 2024 16:02:40 +0000
Manifest this update:     Fri 17 May 2024 16:02:40 +0000
Manifest next update:     Sat 18 May 2024 16:02:40 +0000
Files and hashes:         1: c4i9uc1_a6So9hjFpCp2quiSWc8.crl (hash: JbXhQQMC2dpSXU1tttoV3bLu6+rrqRE5sLie8yU8wPM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:8d:12:01:95:27:ef:42:11:db:fa:1b:4a:34:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7388bdb9cd7f6ba4a8f618c5a42a76aae89259cf
        Validity
            Not Before: May 17 16:02:40 2024 GMT
            Not After : May 18 16:02:40 2024 GMT
        Subject: CN=f427332cde26f70b6accde27ee8ba7b9130c6bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4b:53:38:23:61:11:3b:a2:8e:8e:26:59:c1:
                    a6:5c:42:0e:34:c7:a6:d9:0c:a0:32:dd:d9:41:49:
                    1a:dc:79:a2:46:84:fe:f5:31:e7:70:14:c5:6e:77:
                    dd:a3:52:dd:95:2d:56:e6:42:0c:1c:59:38:57:3a:
                    f8:59:62:1b:f0:1a:bf:83:15:cd:79:93:72:5e:b0:
                    53:92:69:58:73:06:74:fb:e9:f4:7b:8f:c6:40:0c:
                    47:e8:30:fb:28:55:40:d9:80:86:f4:ef:10:9d:76:
                    5e:81:0c:fe:76:e5:88:0b:88:52:22:52:55:92:b4:
                    30:89:0d:fa:44:14:22:b0:30:b3:42:81:27:56:8f:
                    19:79:88:46:2e:48:8d:48:b2:8a:3b:41:fe:19:68:
                    89:e8:e9:85:21:92:c6:7e:79:79:88:69:78:f1:23:
                    63:9e:20:a2:2c:5e:35:b7:72:2b:ae:b8:06:e7:71:
                    00:f5:69:0e:17:a5:e3:e2:23:90:71:cf:6a:e6:db:
                    5d:2f:71:84:cd:26:f7:33:b2:2b:b8:58:f4:3d:f2:
                    1f:1c:90:1b:60:9e:b1:1d:93:23:c1:5d:72:0b:90:
                    42:86:0f:9c:9a:41:0b:74:a9:d5:02:99:bc:f3:28:
                    be:18:41:2b:f9:12:af:a8:1c:d5:ac:f9:fc:b1:60:
                    62:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:27:33:2C:DE:26:F7:0B:6A:CC:DE:27:EE:8B:A7:B9:13:0C:6B:AB
            X509v3 Authority Key Identifier:
                keyid:73:88:BD:B9:CD:7F:6B:A4:A8:F6:18:C5:A4:2A:76:AA:E8:92:59:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:34:8c:5e:b7:95:1b:6f:53:ff:44:78:b3:be:54:06:0b:ee:
         00:56:2c:1d:44:7a:60:da:69:c9:52:25:1b:e5:9a:f3:71:bc:
         72:42:b9:07:e3:e7:ee:60:21:19:19:71:0a:41:1a:2b:8c:55:
         7e:97:3f:fb:ae:d0:6e:9f:44:33:fc:66:14:f5:64:d0:ec:31:
         92:5c:81:0c:bc:f6:3b:e9:5c:56:bf:75:71:37:a0:66:a3:c2:
         07:55:97:7e:d7:1f:45:fc:03:2f:45:d0:cb:ae:7c:73:05:7b:
         e1:39:1b:3e:b2:2a:be:4f:a1:26:64:da:9b:11:14:90:c4:dc:
         a4:7e:8d:b5:ba:4b:7b:48:6d:89:ea:65:1f:6d:e9:23:a4:4b:
         76:d2:98:aa:18:53:7c:27:b3:0c:77:7f:d0:35:04:3b:24:9f:
         25:cc:81:75:b8:58:9a:f7:40:1e:94:26:31:cb:03:38:82:52:
         66:0a:92:2b:e6:77:1e:bf:91:aa:ae:1b:1e:ae:4f:c0:4d:6e:
         bf:f9:73:69:d7:d4:31:9f:46:bd:52:45:7a:56:3b:26:85:bd:
         e3:56:80:35:05:8d:2e:08:4f:2f:43:a6:37:4e:f9:8f:6e:33:
         1a:53:89:f5:61:5f:0e:1c:55:56:d7:2b:a3:0b:c5:d0:27:64:
         2c:6c:c0:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSo0SAZUn70IR2/obSjQUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczODhiZGI5Y2Q3ZjZiYTRhOGY2MThjNWE0MmE3NmFhZTg5
MjU5Y2YwHhcNMjQwNTE3MTYwMjQwWhcNMjQwNTE4MTYwMjQwWjAzMTEwLwYDVQQD
EyhmNDI3MzMyY2RlMjZmNzBiNmFjY2RlMjdlZThiYTdiOTEzMGM2YmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ktTOCNhETuijo4mWcGmXEIONMem
2QygMt3ZQUka3HmiRoT+9THncBTFbnfdo1LdlS1W5kIMHFk4Vzr4WWIb8Bq/gxXN
eZNyXrBTkmlYcwZ0++n0e4/GQAxH6DD7KFVA2YCG9O8QnXZegQz+duWIC4hSIlJV
krQwiQ36RBQisDCzQoEnVo8ZeYhGLkiNSLKKO0H+GWiJ6OmFIZLGfnl5iGl48SNj
niCiLF41t3IrrrgG53EA9WkOF6Xj4iOQcc9q5ttdL3GEzSb3M7IruFj0PfIfHJAb
YJ6xHZMjwV1yC5BChg+cmkELdKnVApm88yi+GEEr+RKvqBzVrPn8sWBicwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQnMyzeJvcLaszeJ+6Lp7kTDGurMB8GA1UdIwQY
MBaAFHOIvbnNf2ukqPYYxaQqdqroklnPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzRpOXVjMV9hNlNvOWhqRnBDcDJxdWlTV2M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yM2U0NDAtODY1ZS00ZjRmLTlmYzkt
MTA4ZDViMTQ4ZjBjLzEvYzRpOXVjMV9hNlNvOWhqRnBDcDJxdWlTV2M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8yM2U0NDAtODY1ZS00ZjRmLTlmYzktMTA4ZDViMTQ4ZjBj
LzEvYzRpOXVjMV9hNlNvOWhqRnBDcDJxdWlTV2M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgTSMXreV
G29T/0R4s75UBgvuAFYsHUR6YNppyVIlG+Wa83G8ckK5B+Pn7mAhGRlxCkEaK4xV
fpc/+67Qbp9EM/xmFPVk0OwxklyBDLz2O+lcVr91cTegZqPCB1WXftcfRfwDL0XQ
y658cwV74TkbPrIqvk+hJmTamxEUkMTcpH6NtbpLe0htieplH23pI6RLdtKYqhhT
fCezDHd/0DUEOySfJcyBdbhYmvdAHpQmMcsDOIJSZgqSK+Z3Hr+Rqq4bHq5PwE1u
v/lzadfUMZ9GvVJFelY7JoW941aANQWNLghPL0OmN075j24zGlOJ9WFfDhxVVtcr
owvF0CdkLGzAbg==
-----END CERTIFICATE-----
Generated at Fri May 17 23:50:05 2024 by rpki-client on console-ams.rpki-client.org