Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
File:                     apc35u85FOD8zAaQI76XGYuRN5E.mft (raw, json)
Hash identifier:          fvEdctOezPobrKzoBu7PDWvj1dd1gkbpo8T/td4ai50=
Subject key identifier:   E1:B0:7C:CB:EE:64:2C:F8:BB:62:81:6B:B6:6D:D9:56:DB:BA:F4:76
Authority key identifier: 6A:97:37:E6:EF:39:14:E0:FC:CC:06:90:23:BE:97:19:8B:91:37:91
Certificate issuer:       /CN=6a9737e6ef3914e0fccc069023be97198b913791
Certificate serial:       018F8748F20CB710ED0AB362702266F9A1AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
Manifest number:          1174
Signing time:             Fri 17 May 2024 16:00:55 +0000
Manifest this update:     Fri 17 May 2024 16:00:55 +0000
Manifest next update:     Sat 18 May 2024 16:00:55 +0000
Files and hashes:         1: apc35u85FOD8zAaQI76XGYuRN5E.crl (hash: +vZLA/O55+n5bjIhXMM0Rkl0RAw37l+bvQ2BvgqN6kg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:f2:0c:b7:10:ed:0a:b3:62:70:22:66:f9:a1:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a9737e6ef3914e0fccc069023be97198b913791
        Validity
            Not Before: May 17 16:00:55 2024 GMT
            Not After : May 18 16:00:55 2024 GMT
        Subject: CN=e1b07ccbee642cf8bb62816bb66dd956dbbaf476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0a:8a:69:84:14:fd:e6:6a:83:c0:a9:b9:a4:
                    9f:a1:16:cc:ed:d5:3f:2c:bf:e6:60:0b:26:a1:67:
                    4f:77:41:49:89:ff:32:d3:94:45:50:e8:a5:de:07:
                    a3:61:3c:5d:4b:30:7a:88:2b:82:14:47:f7:ea:65:
                    5b:f0:1e:29:a5:58:00:50:a0:b1:7c:1b:18:da:c7:
                    26:a3:31:68:29:87:d9:c1:30:6b:a9:b5:f6:2a:7a:
                    4b:bc:94:58:44:a2:51:cf:6c:2a:41:43:ca:1a:01:
                    99:c9:69:d4:bb:26:28:10:fb:01:6c:7f:e3:ad:93:
                    b5:f5:c1:9d:f2:e7:7c:62:ef:f3:4e:19:b9:c0:40:
                    bb:4d:de:a7:b7:24:f6:61:95:30:71:51:96:da:8a:
                    5b:e4:51:30:83:22:cb:30:c0:ff:0b:20:03:b7:49:
                    d9:4c:71:10:55:29:1d:06:87:87:f1:5c:50:a1:ac:
                    f1:54:45:5d:8c:64:21:92:85:34:02:53:b4:e9:3e:
                    f9:a8:1d:af:24:ae:3c:26:00:9a:26:7d:20:95:d2:
                    1c:f9:8b:7f:ec:c0:7f:29:cc:6d:07:58:96:b5:eb:
                    63:41:7e:ac:a7:a1:02:04:56:5f:6e:08:5b:f3:be:
                    61:91:66:e5:9b:08:57:18:3c:1a:43:fb:f8:c7:89:
                    5b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B0:7C:CB:EE:64:2C:F8:BB:62:81:6B:B6:6D:D9:56:DB:BA:F4:76
            X509v3 Authority Key Identifier:
                keyid:6A:97:37:E6:EF:39:14:E0:FC:CC:06:90:23:BE:97:19:8B:91:37:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ad:46:f5:f1:3f:c5:e3:2c:aa:9c:0d:cb:05:e8:f3:ee:27:
         94:30:be:92:51:20:6d:e9:d4:34:e2:9c:f3:c8:c2:0b:cb:02:
         d9:dd:3d:d7:a6:d1:11:b5:6f:6b:6c:13:f7:67:00:b7:4a:23:
         1d:35:67:4e:38:59:65:0d:40:24:e3:5c:82:07:91:3f:d9:9c:
         7e:f0:46:b1:15:be:24:be:e1:fb:ff:fc:39:9f:c0:0c:6f:91:
         a6:81:94:0e:56:03:c6:84:23:fa:c1:34:19:bc:5c:20:af:af:
         d6:73:16:ac:6c:ef:8e:ea:22:1a:7d:b4:c0:c0:b0:59:b6:c5:
         c0:7a:46:8e:f8:c9:ea:d0:02:15:82:8a:8c:8a:47:96:a2:6d:
         f8:f6:ef:15:36:a7:7f:f7:6d:06:f9:1e:fb:d4:16:5b:98:02:
         6e:9a:67:b7:d8:7e:04:47:b9:e5:60:9b:3b:83:69:cb:6c:04:
         3b:75:3e:03:f0:d2:91:67:04:86:31:fb:5e:84:9b:4c:f0:40:
         ad:6c:6c:29:e0:42:ae:4b:66:88:ff:66:29:4d:7f:cd:8c:bc:
         6f:7b:bc:83:57:35:de:cc:8d:dc:a7:e4:5c:01:9d:62:77:eb:
         2a:2b:fb:a0:1b:9d:b5:b6:2c:ad:dc:d4:51:47:fd:ef:5f:3b:
         93:ff:69:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSPIMtxDtCrNicCJm+aGtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOTczN2U2ZWYzOTE0ZTBmY2NjMDY5MDIzYmU5NzE5OGI5
MTM3OTEwHhcNMjQwNTE3MTYwMDU1WhcNMjQwNTE4MTYwMDU1WjAzMTEwLwYDVQQD
EyhlMWIwN2NjYmVlNjQyY2Y4YmI2MjgxNmJiNjZkZDk1NmRiYmFmNDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAqKaYQU/eZqg8CpuaSfoRbM7dU/
LL/mYAsmoWdPd0FJif8y05RFUOil3gejYTxdSzB6iCuCFEf36mVb8B4ppVgAUKCx
fBsY2scmozFoKYfZwTBrqbX2KnpLvJRYRKJRz2wqQUPKGgGZyWnUuyYoEPsBbH/j
rZO19cGd8ud8Yu/zThm5wEC7Td6ntyT2YZUwcVGW2opb5FEwgyLLMMD/CyADt0nZ
THEQVSkdBoeH8VxQoazxVEVdjGQhkoU0AlO06T75qB2vJK48JgCaJn0gldIc+Yt/
7MB/KcxtB1iWtetjQX6sp6ECBFZfbghb875hkWblmwhXGDwaQ/v4x4lbnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGwfMvuZCz4u2KBa7Zt2VbbuvR2MB8GA1UdIwQY
MBaAFGqXN+bvORTg/MwGkCO+lxmLkTeRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXBjMzV1ODVGT0Q4ekFhUUk3NlhHWXVSTjVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84NDM4ZjUtNmM5Yy00NzAzLTlmZTIt
MDE1ZmRlNDVkMGVhLzEvYXBjMzV1ODVGT0Q4ekFhUUk3NlhHWXVSTjVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84NDM4ZjUtNmM5Yy00NzAzLTlmZTItMDE1ZmRlNDVkMGVh
LzEvYXBjMzV1ODVGT0Q4ekFhUUk3NlhHWXVSTjVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAha1G9fE/
xeMsqpwNywXo8+4nlDC+klEgbenUNOKc88jCC8sC2d0916bREbVva2wT92cAt0oj
HTVnTjhZZQ1AJONcggeRP9mcfvBGsRW+JL7h+//8OZ/ADG+RpoGUDlYDxoQj+sE0
GbxcIK+v1nMWrGzvjuoiGn20wMCwWbbFwHpGjvjJ6tACFYKKjIpHlqJt+PbvFTan
f/dtBvke+9QWW5gCbppnt9h+BEe55WCbO4Npy2wEO3U+A/DSkWcEhjH7XoSbTPBA
rWxsKeBCrktmiP9mKU1/zYy8b3u8g1c13syN3KfkXAGdYnfrKiv7oBudtbYsrdzU
UUf97187k/9pZA==
-----END CERTIFICATE-----
Generated at Fri May 17 18:04:14 2024 by rpki-client on console-ams.rpki-client.org