Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f5ee76-eeae-436c-8843-862106853860/1/XtZ3K5AhLldySfc1bCGO0QaLZ3Y.mft
File:                     XtZ3K5AhLldySfc1bCGO0QaLZ3Y.mft (raw, json)
Hash identifier:          oxFAxUv+AXDKtxaBa1n3IXak5lEqiIysGD/nkltlsUE=
Subject key identifier:   A0:3C:7E:29:8A:B7:A7:00:F5:5B:10:10:D8:95:72:1C:31:0D:2C:C6
Authority key identifier: 5E:D6:77:2B:90:21:2E:57:72:49:F7:35:6C:21:8E:D1:06:8B:67:76
Certificate issuer:       /CN=5ed6772b90212e577249f7356c218ed1068b6776
Certificate serial:       018F89377309DEC9B15D877D2FCC7AA77CB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XtZ3K5AhLldySfc1bCGO0QaLZ3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/f5ee76-eeae-436c-8843-862106853860/1/XtZ3K5AhLldySfc1bCGO0QaLZ3Y.mft
Manifest number:          1177
Signing time:             Sat 18 May 2024 01:01:03 +0000
Manifest this update:     Sat 18 May 2024 01:01:03 +0000
Manifest next update:     Sun 19 May 2024 01:01:03 +0000
Files and hashes:         1: XtZ3K5AhLldySfc1bCGO0QaLZ3Y.crl (hash: NsMADGks0AxfvgCXsnUF9Rzw6kp7kHknOvxtO2ENFvY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/f5ee76-eeae-436c-8843-862106853860/1/XtZ3K5AhLldySfc1bCGO0QaLZ3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/f5ee76-eeae-436c-8843-862106853860/1/XtZ3K5AhLldySfc1bCGO0QaLZ3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XtZ3K5AhLldySfc1bCGO0QaLZ3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:73:09:de:c9:b1:5d:87:7d:2f:cc:7a:a7:7c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ed6772b90212e577249f7356c218ed1068b6776
        Validity
            Not Before: May 18 01:01:03 2024 GMT
            Not After : May 19 01:01:03 2024 GMT
        Subject: CN=a03c7e298ab7a700f55b1010d895721c310d2cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:49:87:0d:a3:d7:31:a7:5b:aa:75:3e:d1:36:
                    6a:a5:65:47:0b:05:f3:10:12:f1:9e:85:9a:e7:13:
                    6b:60:06:1a:7f:02:ad:14:ff:c9:35:fb:ad:d0:e3:
                    6e:3a:59:68:16:5f:e9:f4:3e:5d:13:5e:4f:1e:04:
                    6a:e6:5e:21:f5:df:14:03:d8:d6:7e:4c:9f:1f:ad:
                    91:6c:1a:f4:a7:de:68:47:45:db:74:67:4f:72:fd:
                    78:c1:27:bf:d8:33:6d:cf:7f:6a:44:36:7c:b6:ef:
                    60:98:87:91:08:c9:f6:de:0a:26:5f:9f:dc:ac:82:
                    99:77:be:46:55:a0:e6:d1:3a:2d:b1:3c:0f:af:52:
                    51:4c:3b:3a:3b:3a:c7:7c:be:f0:55:4a:e0:d9:79:
                    d1:d3:69:9d:23:eb:45:12:58:09:b4:ce:d5:7c:23:
                    1a:f6:89:9a:fa:fd:29:a0:ef:d5:7f:59:b2:f2:04:
                    18:24:76:6d:30:72:f8:f6:a2:f9:e1:2b:a0:a1:fe:
                    94:53:17:bf:e5:9a:89:f7:15:08:73:08:b4:f7:bc:
                    24:f4:3d:88:12:f1:a9:10:aa:d4:db:d6:2c:44:bb:
                    a5:6f:f3:e5:3c:59:a9:00:6b:a7:df:88:ea:0d:01:
                    c4:ac:d5:bd:4e:55:f3:82:d8:46:ac:34:b6:67:72:
                    38:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3C:7E:29:8A:B7:A7:00:F5:5B:10:10:D8:95:72:1C:31:0D:2C:C6
            X509v3 Authority Key Identifier:
                keyid:5E:D6:77:2B:90:21:2E:57:72:49:F7:35:6C:21:8E:D1:06:8B:67:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtZ3K5AhLldySfc1bCGO0QaLZ3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f5ee76-eeae-436c-8843-862106853860/1/XtZ3K5AhLldySfc1bCGO0QaLZ3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f5ee76-eeae-436c-8843-862106853860/1/XtZ3K5AhLldySfc1bCGO0QaLZ3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:de:1a:43:90:b7:ed:4f:18:a7:7d:52:3f:1a:a0:63:2e:15:
         eb:ff:9b:84:90:df:23:ed:4e:d3:c7:99:2a:72:3e:04:c4:0e:
         c0:ff:a0:c2:a5:3d:a6:e3:7b:3c:62:c5:25:60:a0:79:57:ba:
         14:a8:59:e1:36:ef:d0:2d:91:4e:88:26:e1:96:02:c2:48:0d:
         41:a4:15:43:79:e6:d7:9e:bf:98:97:c5:04:83:65:12:a5:41:
         e1:d3:b1:7e:61:f6:7b:69:1d:2f:28:76:32:0b:39:90:02:f7:
         66:06:5c:4f:bc:28:e1:22:89:4b:48:5f:08:2f:58:f7:32:a7:
         47:82:1f:ec:f6:a1:e9:99:2d:12:2e:9d:85:c6:59:67:96:fe:
         bf:fd:0f:c4:6b:20:d5:77:d8:1f:7b:88:f8:f6:31:1d:c5:49:
         00:5b:c4:df:05:31:db:a4:c2:6d:e9:67:4b:3d:c3:be:58:e2:
         f0:03:8a:9f:e0:2a:f8:42:17:84:1c:55:49:f8:84:f7:51:53:
         9e:02:55:f1:c5:1b:94:de:72:be:70:a3:6b:e8:53:f0:58:59:
         6b:e1:e6:9a:69:f8:3b:e1:fa:4c:63:5b:77:0f:10:93:15:27:
         20:bb:c2:18:6b:3e:36:42:90:03:39:7d:54:8b:53:26:64:d1:
         f4:11:55:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+JN3MJ3smxXYd9L8x6p3y1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZDY3NzJiOTAyMTJlNTc3MjQ5ZjczNTZjMjE4ZWQxMDY4
YjY3NzYwHhcNMjQwNTE4MDEwMTAzWhcNMjQwNTE5MDEwMTAzWjAzMTEwLwYDVQQD
EyhhMDNjN2UyOThhYjdhNzAwZjU1YjEwMTBkODk1NzIxYzMxMGQyY2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkmHDaPXMadbqnU+0TZqpWVHCwXz
EBLxnoWa5xNrYAYafwKtFP/JNfut0ONuOlloFl/p9D5dE15PHgRq5l4h9d8UA9jW
fkyfH62RbBr0p95oR0XbdGdPcv14wSe/2DNtz39qRDZ8tu9gmIeRCMn23gomX5/c
rIKZd75GVaDm0TotsTwPr1JRTDs6OzrHfL7wVUrg2XnR02mdI+tFElgJtM7VfCMa
9oma+v0poO/Vf1my8gQYJHZtMHL49qL54Sugof6UUxe/5ZqJ9xUIcwi097wk9D2I
EvGpEKrU29YsRLulb/PlPFmpAGun34jqDQHErNW9TlXzgthGrDS2Z3I4YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKA8fimKt6cA9VsQENiVchwxDSzGMB8GA1UdIwQY
MBaAFF7WdyuQIS5Xckn3NWwhjtEGi2d2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHRaM0s1QWhMbGR5U2ZjMWJDR08wUWFMWjNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mNWVlNzYtZWVhZS00MzZjLTg4NDMt
ODYyMTA2ODUzODYwLzEvWHRaM0s1QWhMbGR5U2ZjMWJDR08wUWFMWjNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mNWVlNzYtZWVhZS00MzZjLTg4NDMtODYyMTA2ODUzODYw
LzEvWHRaM0s1QWhMbGR5U2ZjMWJDR08wUWFMWjNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGt4aQ5C3
7U8Yp31SPxqgYy4V6/+bhJDfI+1O08eZKnI+BMQOwP+gwqU9puN7PGLFJWCgeVe6
FKhZ4Tbv0C2RTogm4ZYCwkgNQaQVQ3nm156/mJfFBINlEqVB4dOxfmH2e2kdLyh2
Mgs5kAL3ZgZcT7wo4SKJS0hfCC9Y9zKnR4If7Pah6ZktEi6dhcZZZ5b+v/0PxGsg
1XfYH3uI+PYxHcVJAFvE3wUx26TCbelnSz3Dvlji8AOKn+Aq+EIXhBxVSfiE91FT
ngJV8cUblN5yvnCja+hT8FhZa+Hmmmn4O+H6TGNbdw8QkxUnILvCGGs+NkKQAzl9
VItTJmTR9BFVng==
-----END CERTIFICATE-----
Generated at Sat May 18 01:57:51 2024 by rpki-client on console-fra.rpki-client.org