Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
File:                     47jYb67zk4HWmiGCWVgq8oXquN8.mft (raw, json)
Hash identifier:          CNOI+IkgETdrXUJ27lOdZa8NZrN66iwlCiiXKsBXpGk=
Subject key identifier:   9C:84:D7:BA:85:D6:EB:2C:55:7A:13:E2:6C:1E:80:3B:E8:7F:FC:F8
Authority key identifier: E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
Certificate issuer:       /CN=e3b8d86faef39381d69a218259582af285eab8df
Certificate serial:       018F441FE1E856BC90FA3D48FDB471E3BDD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
Manifest number:          0753
Signing time:             Sat 04 May 2024 15:01:31 +0000
Manifest this update:     Sat 04 May 2024 15:01:31 +0000
Manifest next update:     Sun 05 May 2024 15:01:31 +0000
Files and hashes:         1: 47jYb67zk4HWmiGCWVgq8oXquN8.crl (hash: P12w78DKqtIS1QbiOBxOU9+oylycEpLpJtFzymLSDTw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:1f:e1:e8:56:bc:90:fa:3d:48:fd:b4:71:e3:bd:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3b8d86faef39381d69a218259582af285eab8df
        Validity
            Not Before: May  4 15:01:31 2024 GMT
            Not After : May  5 15:01:31 2024 GMT
        Subject: CN=9c84d7ba85d6eb2c557a13e26c1e803be87ffcf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f1:d7:c9:2e:74:af:f6:41:fb:40:b6:b2:2b:
                    41:ca:7f:9e:f7:f3:9e:46:6a:96:31:81:d6:91:bb:
                    81:81:6c:03:a0:f4:ce:02:14:c6:9c:6b:05:ec:35:
                    e6:61:af:f7:8b:96:33:f0:aa:93:1e:5e:ba:2f:44:
                    a0:b5:96:ff:85:21:bf:7e:9d:e7:75:23:9c:7c:48:
                    6a:c4:4a:f2:7c:53:3a:1a:5c:6f:50:6c:aa:87:a7:
                    29:f5:a0:34:bf:8b:6f:09:0b:d1:00:e4:c4:ff:9f:
                    4a:be:08:65:25:53:0f:03:38:f0:f9:77:a4:d1:4b:
                    ba:64:2a:e5:68:44:e0:c2:be:ad:1d:67:11:b8:01:
                    de:28:63:e9:db:17:5a:62:ca:79:34:46:70:07:68:
                    2b:b3:69:5c:73:73:b9:f4:5f:00:59:13:ff:a6:16:
                    8f:f9:3f:3b:4a:00:01:e3:86:a0:9f:ed:4d:56:7f:
                    9d:45:ca:c6:32:50:f3:dc:9d:79:3d:e1:ba:85:5f:
                    e4:87:0e:d1:17:29:e2:51:e9:fe:f9:06:ed:67:e9:
                    b8:50:92:3c:b7:e7:67:86:bb:20:71:4d:83:fc:51:
                    60:57:76:d1:d5:19:dc:92:25:91:79:85:5f:55:ab:
                    cd:b0:31:d5:0a:56:b5:09:06:fa:0e:b5:f4:a0:be:
                    0e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:84:D7:BA:85:D6:EB:2C:55:7A:13:E2:6C:1E:80:3B:E8:7F:FC:F8
            X509v3 Authority Key Identifier:
                keyid:E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:29:fc:fd:30:1f:36:2f:11:04:0b:bf:88:ab:d5:d5:03:83:
         27:42:42:6e:b0:5d:a2:0f:0e:a8:13:88:04:85:e5:a1:d0:b7:
         77:3c:11:a6:a6:83:c6:68:2e:3a:5a:c3:0f:15:33:e0:da:11:
         0c:81:a6:99:f1:14:9f:f5:92:12:a6:ad:39:fd:59:9d:ae:56:
         35:07:7b:ef:cf:10:b5:9a:05:26:b6:3d:d1:d3:ca:fd:9f:a0:
         50:af:0d:d1:c4:ed:5c:6c:06:7d:22:45:cd:6f:17:59:1e:34:
         96:bf:78:32:a7:65:7f:5d:e2:81:9f:10:79:60:ae:e1:8c:b7:
         c6:a2:c7:cb:88:ef:ba:73:61:3a:b2:30:cb:17:54:6c:8c:51:
         82:47:20:c9:1f:5d:57:1d:39:ff:63:c2:28:cf:3b:de:1d:fc:
         ea:56:a3:fb:b1:cf:1f:5b:0e:c0:17:9f:c0:b8:62:99:9d:ca:
         b7:c6:bf:14:a7:11:6d:74:62:d6:1a:77:9c:f9:89:f5:bb:c5:
         a7:0f:a8:73:78:79:91:4d:f6:79:01:50:a8:09:c7:8b:a2:b3:
         e3:e5:ec:4b:c7:30:6c:7e:78:bf:a4:eb:1c:00:67:09:69:3b:
         05:8a:b5:a6:9e:74:88:46:8a:b6:e7:ac:97:28:f3:6e:56:d7:
         9c:99:1e:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9EH+HoVryQ+j1I/bRx473WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYjhkODZmYWVmMzkzODFkNjlhMjE4MjU5NTgyYWYyODVl
YWI4ZGYwHhcNMjQwNTA0MTUwMTMxWhcNMjQwNTA1MTUwMTMxWjAzMTEwLwYDVQQD
Eyg5Yzg0ZDdiYTg1ZDZlYjJjNTU3YTEzZTI2YzFlODAzYmU4N2ZmY2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vHXyS50r/ZB+0C2sitByn+e9/Oe
RmqWMYHWkbuBgWwDoPTOAhTGnGsF7DXmYa/3i5Yz8KqTHl66L0SgtZb/hSG/fp3n
dSOcfEhqxEryfFM6GlxvUGyqh6cp9aA0v4tvCQvRAOTE/59KvghlJVMPAzjw+Xek
0Uu6ZCrlaETgwr6tHWcRuAHeKGPp2xdaYsp5NEZwB2grs2lcc3O59F8AWRP/phaP
+T87SgAB44agn+1NVn+dRcrGMlDz3J15PeG6hV/khw7RFyniUen++QbtZ+m4UJI8
t+dnhrsgcU2D/FFgV3bR1RnckiWReYVfVavNsDHVCla1CQb6DrX0oL4OIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyE17qF1ussVXoT4mwegDvof/z4MB8GA1UdIwQY
MBaAFOO42G+u85OB1pohgllYKvKF6rjfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDdqWWI2N3prNEhXbWlHQ1dWZ3E4b1hxdU44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82NTgzNzUtNDJjOC00ZmUyLTg1MDgt
YzI1YTJjODI4YzVmLzEvNDdqWWI2N3prNEhXbWlHQ1dWZ3E4b1hxdU44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS82NTgzNzUtNDJjOC00ZmUyLTg1MDgtYzI1YTJjODI4YzVm
LzEvNDdqWWI2N3prNEhXbWlHQ1dWZ3E4b1hxdU44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAISn8/TAf
Ni8RBAu/iKvV1QODJ0JCbrBdog8OqBOIBIXlodC3dzwRpqaDxmguOlrDDxUz4NoR
DIGmmfEUn/WSEqatOf1Zna5WNQd7788QtZoFJrY90dPK/Z+gUK8N0cTtXGwGfSJF
zW8XWR40lr94Mqdlf13igZ8QeWCu4Yy3xqLHy4jvunNhOrIwyxdUbIxRgkcgyR9d
Vx05/2PCKM873h386laj+7HPH1sOwBefwLhimZ3Kt8a/FKcRbXRi1hp3nPmJ9bvF
pw+oc3h5kU32eQFQqAnHi6Kz4+XsS8cwbH54v6TrHABnCWk7BYq1pp50iEaKtues
lyjzblbXnJkelA==
-----END CERTIFICATE-----
Generated at Sat May 4 15:58:11 2024 by rpki-client on console-ams.rpki-client.org