Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
File:                     ICsQHBBwOrYDIfxj3NZpClJNuxA.mft (raw, json)
Hash identifier:          crUV5SUFUYtp74AJgtJr7L7bH70sP1wfgeMeZOUlN/Y=
Subject key identifier:   B6:F2:06:DC:81:16:50:95:26:00:1B:7B:13:1F:0F:C2:87:99:F5:CD
Authority key identifier: 20:2B:10:1C:10:70:3A:B6:03:21:FC:63:DC:D6:69:0A:52:4D:BB:10
Certificate issuer:       /CN=202b101c10703ab60321fc63dcd6690a524dbb10
Certificate serial:       018F3FD6DF558BB90DF8FF03CEBE36520531
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ICsQHBBwOrYDIfxj3NZpClJNuxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
Manifest number:          04C6
Signing time:             Fri 03 May 2024 19:03:17 +0000
Manifest this update:     Fri 03 May 2024 19:03:17 +0000
Manifest next update:     Sat 04 May 2024 19:03:17 +0000
Files and hashes:         1: ICsQHBBwOrYDIfxj3NZpClJNuxA.crl (hash: 0DEOne87tSlPv3BpxQR69u6SZGYt/DaYASGiYNuySjA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ICsQHBBwOrYDIfxj3NZpClJNuxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3f:d6:df:55:8b:b9:0d:f8:ff:03:ce:be:36:52:05:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=202b101c10703ab60321fc63dcd6690a524dbb10
        Validity
            Not Before: May  3 19:03:17 2024 GMT
            Not After : May  4 19:03:17 2024 GMT
        Subject: CN=b6f206dc8116509526001b7b131f0fc28799f5cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:81:33:a7:fa:e8:37:65:da:77:9a:91:35:30:
                    84:fb:3e:1e:30:d2:01:bf:ad:78:b6:9e:bf:ae:f8:
                    0b:47:cf:61:c2:38:23:ed:6c:96:69:a9:5e:e2:c0:
                    2c:85:5a:ea:69:39:eb:0a:d1:b5:ea:cb:1c:03:7d:
                    08:3b:e5:b5:1a:89:70:a9:c1:56:2c:62:9f:46:cb:
                    3e:98:0f:de:14:d4:10:7e:3a:2e:e3:f5:2b:67:ed:
                    4c:63:c1:fe:5f:4c:08:88:ed:bc:4c:18:2f:44:de:
                    3d:b8:3d:ba:92:68:13:ac:ed:f7:3e:98:23:5a:0d:
                    a9:71:0d:00:b4:a7:4b:40:ae:9b:6e:20:f2:a4:3e:
                    38:11:ac:7d:25:50:04:e1:64:15:f6:2e:e5:7a:c8:
                    92:ef:0c:49:58:9a:6e:07:d4:64:fc:74:a8:99:cf:
                    65:1f:5e:e2:92:ff:ed:03:ae:86:e9:29:79:d4:2e:
                    1f:2a:06:79:38:4e:f5:77:51:98:4f:3d:1c:6e:66:
                    c4:a5:16:04:ed:a7:29:ed:85:77:05:4c:87:52:90:
                    c6:ca:e4:ee:c2:f8:92:08:c0:0b:d2:d6:d5:00:47:
                    f6:54:01:43:5b:3f:85:07:a4:f0:86:23:1f:b1:ea:
                    73:fc:ad:1e:03:40:91:58:c3:fd:43:8a:09:f9:c0:
                    4e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F2:06:DC:81:16:50:95:26:00:1B:7B:13:1F:0F:C2:87:99:F5:CD
            X509v3 Authority Key Identifier:
                keyid:20:2B:10:1C:10:70:3A:B6:03:21:FC:63:DC:D6:69:0A:52:4D:BB:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICsQHBBwOrYDIfxj3NZpClJNuxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:fc:0e:a1:65:13:f7:2d:8d:d7:3d:c0:2d:4a:2a:84:b9:fb:
         6c:c6:f0:01:f5:1e:5c:16:7f:1b:3d:74:f8:a5:94:15:57:14:
         81:42:c4:4e:54:87:83:47:f5:99:9c:8f:d3:75:5f:31:e8:5a:
         2f:63:98:63:85:34:13:01:34:1f:f3:d2:30:b0:40:09:ae:a8:
         97:21:4e:05:03:e0:ab:df:f4:86:ba:d3:d2:51:c8:06:0a:82:
         86:c7:7c:76:01:bb:54:07:9c:ff:ac:b9:fc:4a:88:27:52:92:
         cb:07:45:41:eb:ee:7b:4b:96:25:55:6f:07:49:88:31:20:04:
         dd:0c:31:4f:ad:fe:22:c5:57:f1:7b:71:f4:d4:9f:47:b6:ea:
         ba:45:41:57:c7:a3:2b:2e:07:eb:41:3b:0a:9a:0c:2e:cc:c0:
         e2:ef:fa:e4:8f:f4:c6:3c:a2:21:c1:4f:d6:73:e0:bd:36:e8:
         3d:b9:ca:cb:a2:76:95:f8:17:9e:f7:fc:4b:c3:81:9b:82:53:
         54:3e:7a:80:6a:05:42:f6:9f:8f:49:45:71:fd:18:6b:ab:3a:
         35:3f:ce:4e:48:a1:1f:5c:d9:8c:18:ed:f7:6f:92:1f:17:2e:
         dd:44:74:eb:8d:30:05:22:bb:7b:a8:9b:21:d5:b7:e8:cd:57:
         d1:c9:86:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8/1t9Vi7kN+P8Dzr42UgUxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMmIxMDFjMTA3MDNhYjYwMzIxZmM2M2RjZDY2OTBhNTI0
ZGJiMTAwHhcNMjQwNTAzMTkwMzE3WhcNMjQwNTA0MTkwMzE3WjAzMTEwLwYDVQQD
EyhiNmYyMDZkYzgxMTY1MDk1MjYwMDFiN2IxMzFmMGZjMjg3OTlmNWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoEzp/roN2Xad5qRNTCE+z4eMNIB
v614tp6/rvgLR89hwjgj7WyWaale4sAshVrqaTnrCtG16sscA30IO+W1GolwqcFW
LGKfRss+mA/eFNQQfjou4/UrZ+1MY8H+X0wIiO28TBgvRN49uD26kmgTrO33Ppgj
Wg2pcQ0AtKdLQK6bbiDypD44Eax9JVAE4WQV9i7lesiS7wxJWJpuB9Rk/HSomc9l
H17ikv/tA66G6Sl51C4fKgZ5OE71d1GYTz0cbmbEpRYE7acp7YV3BUyHUpDGyuTu
wviSCMAL0tbVAEf2VAFDWz+FB6TwhiMfsepz/K0eA0CRWMP9Q4oJ+cBO3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbyBtyBFlCVJgAbexMfD8KHmfXNMB8GA1UdIwQY
MBaAFCArEBwQcDq2AyH8Y9zWaQpSTbsQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUNzUUhCQndPcllESWZ4ajNOWnBDbEpOdXhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9iOThhZGMtZWRlMC00YzJhLThjNTYt
YTQ0YzhlNjU0ZGY2LzEvSUNzUUhCQndPcllESWZ4ajNOWnBDbEpOdXhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9iOThhZGMtZWRlMC00YzJhLThjNTYtYTQ0YzhlNjU0ZGY2
LzEvSUNzUUhCQndPcllESWZ4ajNOWnBDbEpOdXhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvwOoWUT
9y2N1z3ALUoqhLn7bMbwAfUeXBZ/Gz10+KWUFVcUgULETlSHg0f1mZyP03VfMeha
L2OYY4U0EwE0H/PSMLBACa6olyFOBQPgq9/0hrrT0lHIBgqChsd8dgG7VAec/6y5
/EqIJ1KSywdFQevue0uWJVVvB0mIMSAE3QwxT63+IsVX8Xtx9NSfR7bqukVBV8ej
Ky4H60E7CpoMLszA4u/65I/0xjyiIcFP1nPgvTboPbnKy6J2lfgXnvf8S8OBm4JT
VD56gGoFQvafj0lFcf0Ya6s6NT/OTkihH1zZjBjt92+SHxcu3UR0640wBSK7e6ib
IdW36M1X0cmG+A==
-----END CERTIFICATE-----
Generated at Sat May 4 00:16:22 2024 by rpki-client on console-fra.rpki-client.org