Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
File:                     qjJY2XybwoTUhXvO498JCDa80hI.mft (raw, json)
Hash identifier:          NhOaA2NWN+F+9m/3tQbL2FYRxFQ1DCHX2sVdriSUc2c=
Subject key identifier:   34:1E:0C:71:84:7F:6B:2F:C9:CE:B0:EB:94:97:A7:71:FA:85:C8:6C
Authority key identifier: AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12
Certificate issuer:       /CN=aa3258d97c9bc284d4857bcee3df090836bcd212
Certificate serial:       018F874B21040406817E88DB0EFC1E9A3B4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
Manifest number:          10B1
Signing time:             Fri 17 May 2024 16:03:18 +0000
Manifest this update:     Fri 17 May 2024 16:03:18 +0000
Manifest next update:     Sat 18 May 2024 16:03:18 +0000
Files and hashes:         1: qjJY2XybwoTUhXvO498JCDa80hI.crl (hash: 9GkJQzPmuuQjtRaFnoc6jMm4j8hXMY87wMfUDiQR/wI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:21:04:04:06:81:7e:88:db:0e:fc:1e:9a:3b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa3258d97c9bc284d4857bcee3df090836bcd212
        Validity
            Not Before: May 17 16:03:18 2024 GMT
            Not After : May 18 16:03:18 2024 GMT
        Subject: CN=341e0c71847f6b2fc9ceb0eb9497a771fa85c86c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ae:b5:87:61:87:3b:ea:20:a2:a1:26:40:94:
                    7c:7a:ec:19:46:55:c2:1b:e8:0d:24:dc:a0:b0:ff:
                    98:36:f0:3f:3f:be:56:91:79:aa:30:62:62:3e:f8:
                    68:a2:0e:fa:d4:ca:74:9a:c0:21:59:7b:2d:03:56:
                    a0:0e:17:2a:81:2e:f0:39:e9:22:12:d8:c2:12:4c:
                    16:af:aa:f9:54:37:2c:49:94:82:8d:eb:e6:34:b3:
                    b0:d0:28:93:76:0e:b6:2a:fb:65:14:5c:f2:eb:fc:
                    21:0a:10:0a:96:e5:eb:34:c1:66:c2:03:99:a4:70:
                    48:5c:0f:2e:3b:a9:3c:f0:4a:3f:5d:7b:78:83:3b:
                    dd:7a:12:61:ea:96:2f:ce:fb:dd:a7:8b:cf:29:60:
                    e3:14:b5:99:31:23:d7:fb:1d:fa:fa:a6:39:1f:36:
                    a2:0d:78:b3:64:dd:f1:1e:6e:b8:da:5d:fb:a6:07:
                    c0:3a:ba:6d:e9:3d:9c:a7:b5:ec:2a:65:f7:db:01:
                    9b:a9:3e:95:32:53:70:2b:33:e9:12:e1:68:c6:08:
                    f4:f8:cf:00:5d:52:ab:53:56:a0:b6:c9:5e:2f:44:
                    93:63:16:a9:04:38:1c:f6:ce:0c:06:d1:ba:94:13:
                    98:69:0a:63:a7:44:64:c3:04:d0:a6:8c:09:6a:ab:
                    92:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1E:0C:71:84:7F:6B:2F:C9:CE:B0:EB:94:97:A7:71:FA:85:C8:6C
            X509v3 Authority Key Identifier:
                keyid:AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:d9:05:b1:67:0a:47:8a:5b:15:ca:f4:45:27:bb:1c:66:8c:
         ba:4a:ed:c2:97:47:ea:01:22:f6:42:ea:01:b4:55:13:79:a7:
         84:8f:ba:8c:53:d6:4f:01:00:3c:91:9c:ae:86:c3:1c:34:6f:
         56:e6:32:ac:9d:b3:99:2f:e9:e7:ba:67:d8:33:48:db:dc:85:
         a5:f4:52:7d:f8:a1:f2:0f:3e:04:d6:e0:f6:45:be:9f:6f:04:
         bc:59:da:af:01:7b:1d:d8:53:5c:4b:ad:08:e2:3d:9d:9d:cc:
         82:0e:a2:fa:25:8b:5c:09:79:3d:06:72:fc:b0:20:8d:f2:48:
         7b:21:db:3d:e8:8a:0d:52:e2:38:9b:44:db:4b:3b:9a:23:2c:
         75:50:ac:e0:fb:5d:67:e3:5c:54:6d:8d:e4:ba:37:6b:5a:e7:
         9b:a3:ca:2d:24:be:ce:f5:e1:c5:ab:84:45:fb:e6:1e:45:6e:
         e7:ad:58:0b:94:6b:ae:b3:c5:70:42:e3:1a:ec:62:85:a1:ec:
         8b:31:c8:b5:e2:5c:1e:cc:e4:77:0c:20:48:8c:7f:b7:db:4d:
         21:22:47:17:2a:51:d5:00:ec:6a:4d:5a:65:c3:f5:d9:a8:ae:
         db:53:c5:76:0c:df:19:26:15:e0:ea:35:05:72:0e:3d:f9:40:
         e0:9d:ff:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSyEEBAaBfojbDvwemjtLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMzI1OGQ5N2M5YmMyODRkNDg1N2JjZWUzZGYwOTA4MzZi
Y2QyMTIwHhcNMjQwNTE3MTYwMzE4WhcNMjQwNTE4MTYwMzE4WjAzMTEwLwYDVQQD
EygzNDFlMGM3MTg0N2Y2YjJmYzljZWIwZWI5NDk3YTc3MWZhODVjODZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq61h2GHO+ogoqEmQJR8euwZRlXC
G+gNJNygsP+YNvA/P75WkXmqMGJiPvhoog761Mp0msAhWXstA1agDhcqgS7wOeki
EtjCEkwWr6r5VDcsSZSCjevmNLOw0CiTdg62KvtlFFzy6/whChAKluXrNMFmwgOZ
pHBIXA8uO6k88Eo/XXt4gzvdehJh6pYvzvvdp4vPKWDjFLWZMSPX+x36+qY5Hzai
DXizZN3xHm642l37pgfAOrpt6T2cp7XsKmX32wGbqT6VMlNwKzPpEuFoxgj0+M8A
XVKrU1agtsleL0STYxapBDgc9s4MBtG6lBOYaQpjp0RkwwTQpowJaquSpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQeDHGEf2svyc6w65SXp3H6hchsMB8GA1UdIwQY
MBaAFKoyWNl8m8KE1IV7zuPfCQg2vNISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWpKWTJYeWJ3b1RVaFh2TzQ5OEpDRGE4MGhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85OGExNDEtYzQyZS00MTVlLWEzY2It
Zjk4ZGM1MzM4ZDJiLzEvcWpKWTJYeWJ3b1RVaFh2TzQ5OEpDRGE4MGhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC85OGExNDEtYzQyZS00MTVlLWEzY2ItZjk4ZGM1MzM4ZDJi
LzEvcWpKWTJYeWJ3b1RVaFh2TzQ5OEpDRGE4MGhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9kFsWcK
R4pbFcr0RSe7HGaMukrtwpdH6gEi9kLqAbRVE3mnhI+6jFPWTwEAPJGcrobDHDRv
VuYyrJ2zmS/p57pn2DNI29yFpfRSffih8g8+BNbg9kW+n28EvFnarwF7HdhTXEut
COI9nZ3Mgg6i+iWLXAl5PQZy/LAgjfJIeyHbPeiKDVLiOJtE20s7miMsdVCs4Ptd
Z+NcVG2N5Lo3a1rnm6PKLSS+zvXhxauERfvmHkVu561YC5RrrrPFcELjGuxihaHs
izHIteJcHszkdwwgSIx/t9tNISJHFypR1QDsak1aZcP12aiu21PFdgzfGSYV4Oo1
BXIOPflA4J3/cg==
-----END CERTIFICATE-----