Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/800359-09c0-42a8-9762-ea3a2096e357/1/ZTVXR1wNh8ZlMiFoxFQ30Q0lOl4.mft
File:                     ZTVXR1wNh8ZlMiFoxFQ30Q0lOl4.mft (raw, json)
Hash identifier:          Xki7WMQmT/bCej7zcgBXksPIBZYs7gNcUrIGcOZsotM=
Subject key identifier:   00:74:14:F0:CE:6D:5C:38:28:F5:F2:62:8C:4E:7E:4E:19:80:C9:1E
Authority key identifier: 65:35:57:47:5C:0D:87:C6:65:32:21:68:C4:54:37:D1:0D:25:3A:5E
Certificate issuer:       /CN=653557475c0d87c665322168c45437d10d253a5e
Certificate serial:       018F88C8C11958A70DB10F5B393FC11A1891
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZTVXR1wNh8ZlMiFoxFQ30Q0lOl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/800359-09c0-42a8-9762-ea3a2096e357/1/ZTVXR1wNh8ZlMiFoxFQ30Q0lOl4.mft
Manifest number:          095D
Signing time:             Fri 17 May 2024 23:00:09 +0000
Manifest this update:     Fri 17 May 2024 23:00:09 +0000
Manifest next update:     Sat 18 May 2024 23:00:09 +0000
Files and hashes:         1: ZTVXR1wNh8ZlMiFoxFQ30Q0lOl4.crl (hash: NrFPRTg42b9+M2FmC28ySSu7AzucqZvKjzHU6VQ3x9Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/800359-09c0-42a8-9762-ea3a2096e357/1/ZTVXR1wNh8ZlMiFoxFQ30Q0lOl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/800359-09c0-42a8-9762-ea3a2096e357/1/ZTVXR1wNh8ZlMiFoxFQ30Q0lOl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZTVXR1wNh8ZlMiFoxFQ30Q0lOl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:c8:c1:19:58:a7:0d:b1:0f:5b:39:3f:c1:1a:18:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=653557475c0d87c665322168c45437d10d253a5e
        Validity
            Not Before: May 17 23:00:09 2024 GMT
            Not After : May 18 23:00:09 2024 GMT
        Subject: CN=007414f0ce6d5c3828f5f2628c4e7e4e1980c91e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f8:c3:03:ed:a3:29:d2:01:75:ed:46:d2:a5:
                    89:8d:27:29:a1:ca:ee:04:bd:2f:7e:fc:47:c2:0f:
                    90:75:bb:0f:8d:bc:06:00:34:fd:4f:88:a0:a5:13:
                    74:23:1b:2f:55:89:72:2f:55:f0:9b:49:8c:48:10:
                    56:ff:5d:6f:87:3f:09:06:55:1c:df:d2:a7:57:a8:
                    c8:ee:d0:c9:18:13:2b:c7:b7:00:38:13:9c:ab:df:
                    68:17:88:0d:c1:0d:1e:fd:2b:27:79:72:a7:40:fa:
                    3d:f4:89:1e:2f:a7:16:0b:06:dd:72:61:c3:fe:10:
                    e5:8f:62:be:ca:5d:6f:01:3d:c7:46:37:28:ad:b7:
                    cb:01:1e:73:f7:e5:37:c0:ad:40:36:16:83:e8:7d:
                    d7:c5:81:8f:40:4c:ea:5a:fb:f5:76:9a:67:ed:16:
                    56:d5:5d:54:e4:a7:3e:ec:77:34:82:e8:f5:50:e7:
                    27:af:f1:de:06:62:ab:c5:f1:d6:c1:70:f2:b5:80:
                    b0:bc:50:02:1c:3c:12:0c:1a:03:e8:40:fd:0f:9a:
                    09:c4:f7:4f:f6:c3:c9:21:0d:8b:75:ac:46:59:3b:
                    e5:90:81:0b:cf:b7:03:61:2e:7a:b8:4c:bc:30:31:
                    88:3a:85:fe:cd:30:88:1e:f6:37:f7:23:8e:ce:8a:
                    09:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:74:14:F0:CE:6D:5C:38:28:F5:F2:62:8C:4E:7E:4E:19:80:C9:1E
            X509v3 Authority Key Identifier:
                keyid:65:35:57:47:5C:0D:87:C6:65:32:21:68:C4:54:37:D1:0D:25:3A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTVXR1wNh8ZlMiFoxFQ30Q0lOl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/800359-09c0-42a8-9762-ea3a2096e357/1/ZTVXR1wNh8ZlMiFoxFQ30Q0lOl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/800359-09c0-42a8-9762-ea3a2096e357/1/ZTVXR1wNh8ZlMiFoxFQ30Q0lOl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:5f:4f:8a:8c:f3:45:64:00:99:a6:5c:0b:1c:b7:29:23:06:
         bb:35:38:0f:66:6d:2d:35:f1:ec:c9:d9:22:37:5c:ac:cc:44:
         1a:f4:61:35:57:56:44:8c:a5:cd:1c:04:0a:cd:8d:2f:e4:38:
         86:59:30:7f:02:98:85:bc:50:cc:79:95:b7:fe:f0:32:df:95:
         96:c6:40:0d:16:65:4f:c0:85:55:ec:46:d7:01:dc:5f:90:1a:
         db:87:2c:10:70:9b:b9:4c:1c:e9:cf:75:ed:b5:e3:31:99:c4:
         3c:53:b8:10:38:c8:85:c8:36:39:fd:20:f4:90:e1:19:36:76:
         2b:5c:33:a3:16:e0:fd:a8:a5:27:a5:86:71:ee:ee:84:6a:37:
         9b:83:80:45:31:ca:35:de:7b:81:8f:92:ab:0a:29:3a:1d:c4:
         90:d3:f9:d2:0a:51:17:fb:d2:e0:f9:3c:3a:e2:9d:0a:df:f9:
         89:e6:4c:6b:08:ca:6f:ed:f5:0a:18:d6:8a:b1:b1:e5:1d:fa:
         95:ae:74:85:03:5d:93:56:d9:ac:c0:8c:fa:29:20:a1:b4:85:
         7b:88:70:a3:47:03:12:d6:ab:8b:72:d9:81:5c:5b:ba:28:36:
         9a:63:a7:88:7b:99:a0:ee:bc:36:39:40:98:58:5c:3f:6b:c8:
         f5:d1:a8:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IyMEZWKcNsQ9bOT/BGhiRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MzU1NzQ3NWMwZDg3YzY2NTMyMjE2OGM0NTQzN2QxMGQy
NTNhNWUwHhcNMjQwNTE3MjMwMDA5WhcNMjQwNTE4MjMwMDA5WjAzMTEwLwYDVQQD
EygwMDc0MTRmMGNlNmQ1YzM4MjhmNWYyNjI4YzRlN2U0ZTE5ODBjOTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/jDA+2jKdIBde1G0qWJjScpocru
BL0vfvxHwg+QdbsPjbwGADT9T4igpRN0IxsvVYlyL1Xwm0mMSBBW/11vhz8JBlUc
39KnV6jI7tDJGBMrx7cAOBOcq99oF4gNwQ0e/SsneXKnQPo99IkeL6cWCwbdcmHD
/hDlj2K+yl1vAT3HRjcorbfLAR5z9+U3wK1ANhaD6H3XxYGPQEzqWvv1dppn7RZW
1V1U5Kc+7Hc0guj1UOcnr/HeBmKrxfHWwXDytYCwvFACHDwSDBoD6ED9D5oJxPdP
9sPJIQ2LdaxGWTvlkIELz7cDYS56uEy8MDGIOoX+zTCIHvY39yOOzooJjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAB0FPDObVw4KPXyYoxOfk4ZgMkeMB8GA1UdIwQY
MBaAFGU1V0dcDYfGZTIhaMRUN9ENJTpeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlRWWFIxd05oOFpsTWlGb3hGUTMwUTBsT2w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC84MDAzNTktMDljMC00MmE4LTk3NjIt
ZWEzYTIwOTZlMzU3LzEvWlRWWFIxd05oOFpsTWlGb3hGUTMwUTBsT2w0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC84MDAzNTktMDljMC00MmE4LTk3NjItZWEzYTIwOTZlMzU3
LzEvWlRWWFIxd05oOFpsTWlGb3hGUTMwUTBsT2w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhl9Piozz
RWQAmaZcCxy3KSMGuzU4D2ZtLTXx7MnZIjdcrMxEGvRhNVdWRIylzRwECs2NL+Q4
hlkwfwKYhbxQzHmVt/7wMt+VlsZADRZlT8CFVexG1wHcX5Aa24csEHCbuUwc6c91
7bXjMZnEPFO4EDjIhcg2Of0g9JDhGTZ2K1wzoxbg/ailJ6WGce7uhGo3m4OARTHK
Nd57gY+SqwopOh3EkNP50gpRF/vS4Pk8OuKdCt/5ieZMawjKb+31ChjWirGx5R36
la50hQNdk1bZrMCM+ikgobSFe4hwo0cDEtari3LZgVxbuig2mmOniHuZoO68NjlA
mFhcP2vI9dGo2g==
-----END CERTIFICATE-----
Generated at Fri May 17 23:45:13 2024 by rpki-client on console-fra.rpki-client.org