Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
File:                     7ix0WZPMS28UcK6rRhTwhdSuQKk.mft (raw, json)
Hash identifier:          tVu3ak7bt9Kthfd9DJKoK9DtH84tEMWGcdJdSEUDNKQ=
Subject key identifier:   62:E6:47:7C:8E:CE:3E:B1:28:02:DC:65:4F:AD:0C:A3:18:3E:C1:8F
Authority key identifier: EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
Certificate issuer:       /CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Certificate serial:       018F540068BC5B3CE9B78836E9DFA3E6C0D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
Manifest number:          0DF0
Signing time:             Tue 07 May 2024 17:01:03 +0000
Manifest this update:     Tue 07 May 2024 17:01:03 +0000
Manifest next update:     Wed 08 May 2024 17:01:03 +0000
Files and hashes:         1: 7ix0WZPMS28UcK6rRhTwhdSuQKk.crl (hash: KXje2VrFzR3OpV+LdpQVKl70/vmYQ+ALQgDTuhYZ8z0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:54:00:68:bc:5b:3c:e9:b7:88:36:e9:df:a3:e6:c0:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
        Validity
            Not Before: May  7 17:01:03 2024 GMT
            Not After : May  8 17:01:03 2024 GMT
        Subject: CN=62e6477c8ece3eb12802dc654fad0ca3183ec18f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:73:1a:f7:a2:ee:69:80:a4:a2:2e:3d:dd:60:
                    e1:99:76:1d:ef:49:22:e1:b9:be:40:fc:ed:dc:f0:
                    0e:6d:53:f8:84:22:dd:c6:8c:91:a3:69:75:78:48:
                    ae:fe:c0:27:0d:16:a6:5d:c4:ff:53:b8:27:95:a1:
                    d1:40:a0:b1:59:ae:fc:f7:af:e4:48:6d:de:d8:67:
                    28:99:2e:1a:fd:73:8c:ce:94:28:74:3d:eb:af:53:
                    02:bf:d4:1c:2a:5c:68:37:96:05:0e:80:78:02:14:
                    a7:aa:23:6c:9e:ef:8f:e9:6d:46:17:59:ab:ac:98:
                    dc:a1:55:b6:bd:16:fb:cf:ed:56:8e:48:65:9f:a2:
                    87:65:0c:c2:bd:4c:3f:17:65:0e:42:09:a6:5c:e2:
                    3f:9a:b8:e8:ff:e5:cd:fe:13:6e:d8:58:59:69:5d:
                    8b:a2:1a:23:b0:4a:48:90:18:78:5d:e4:ea:15:71:
                    d7:4d:6a:22:76:13:92:c7:49:00:30:0f:94:03:ea:
                    49:99:9b:f0:25:ae:36:6b:f7:3c:99:2a:22:2d:82:
                    65:ac:59:eb:ac:b5:16:0b:0e:04:4e:24:23:79:fd:
                    d2:0b:0c:31:92:fd:53:63:5a:b5:9b:64:71:de:31:
                    5e:33:1a:11:af:0e:2b:de:a6:d6:29:a1:21:57:ea:
                    61:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E6:47:7C:8E:CE:3E:B1:28:02:DC:65:4F:AD:0C:A3:18:3E:C1:8F
            X509v3 Authority Key Identifier:
                keyid:EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:12:3e:af:0d:8b:5b:a9:56:a9:e4:7c:9e:4f:21:32:71:e9:
         cf:56:25:bf:5b:1e:b7:d8:b2:f7:4d:e1:0c:34:2c:f1:e2:62:
         1a:f2:8d:9b:03:50:3e:84:c4:84:99:b5:0d:48:3b:ac:4b:59:
         d2:ab:d9:af:f4:34:d5:72:55:47:2c:9c:10:b7:81:e5:38:3b:
         d9:e9:5b:61:90:cc:f5:db:9c:b9:43:c1:be:05:05:f0:2c:1a:
         f2:bc:37:4d:f2:da:35:54:fe:51:0b:f2:20:7f:e2:51:50:60:
         ef:82:d0:17:85:67:07:57:15:ed:6b:23:81:97:c4:bb:f5:fb:
         9a:01:88:38:d7:63:59:df:6d:0c:51:b1:56:49:57:30:4b:2d:
         7a:c2:26:f8:86:92:64:1a:89:2e:93:9a:94:ac:82:f0:0e:05:
         c2:bf:43:6b:5c:c3:ec:87:b1:d9:e0:11:ca:39:0b:6a:00:ff:
         4d:c4:70:dd:90:44:ed:98:71:38:5c:28:c9:c3:ae:a3:12:14:
         19:b7:66:f1:5a:1e:68:cf:39:65:69:3d:37:63:4d:41:7f:a5:
         70:69:7d:77:d9:ee:4a:69:9a:a8:f5:20:03:63:26:7c:2c:f8:
         ae:ce:85:b3:40:cc:e8:24:b8:6f:44:cf:5f:8c:63:9c:7d:f6:
         76:eb:bf:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9UAGi8Wzzpt4g26d+j5sDSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMmM3NDU5OTNjYzRiNmYxNDcwYWVhYjQ2MTRmMDg1ZDRh
ZTQwYTkwHhcNMjQwNTA3MTcwMTAzWhcNMjQwNTA4MTcwMTAzWjAzMTEwLwYDVQQD
Eyg2MmU2NDc3YzhlY2UzZWIxMjgwMmRjNjU0ZmFkMGNhMzE4M2VjMThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXMa96LuaYCkoi493WDhmXYd70ki
4bm+QPzt3PAObVP4hCLdxoyRo2l1eEiu/sAnDRamXcT/U7gnlaHRQKCxWa7896/k
SG3e2GcomS4a/XOMzpQodD3rr1MCv9QcKlxoN5YFDoB4AhSnqiNsnu+P6W1GF1mr
rJjcoVW2vRb7z+1Wjkhln6KHZQzCvUw/F2UOQgmmXOI/mrjo/+XN/hNu2FhZaV2L
ohojsEpIkBh4XeTqFXHXTWoidhOSx0kAMA+UA+pJmZvwJa42a/c8mSoiLYJlrFnr
rLUWCw4ETiQjef3SCwwxkv1TY1q1m2Rx3jFeMxoRrw4r3qbWKaEhV+phtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLmR3yOzj6xKALcZU+tDKMYPsGPMB8GA1UdIwQY
MBaAFO4sdFmTzEtvFHCuq0YU8IXUrkCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2l4MFdaUE1TMjhVY0s2clJoVHdoZFN1UUtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8yZGI0ZDAtOTg4Mi00NTYzLWE1Nzgt
NzcyYzkxNzdkNTI5LzEvN2l4MFdaUE1TMjhVY0s2clJoVHdoZFN1UUtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8yZGI0ZDAtOTg4Mi00NTYzLWE1NzgtNzcyYzkxNzdkNTI5
LzEvN2l4MFdaUE1TMjhVY0s2clJoVHdoZFN1UUtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqxI+rw2L
W6lWqeR8nk8hMnHpz1Ylv1set9iy903hDDQs8eJiGvKNmwNQPoTEhJm1DUg7rEtZ
0qvZr/Q01XJVRyycELeB5Tg72elbYZDM9ducuUPBvgUF8Cwa8rw3TfLaNVT+UQvy
IH/iUVBg74LQF4VnB1cV7WsjgZfEu/X7mgGIONdjWd9tDFGxVklXMEstesIm+IaS
ZBqJLpOalKyC8A4Fwr9Da1zD7Iex2eARyjkLagD/TcRw3ZBE7ZhxOFwoycOuoxIU
Gbdm8VoeaM85ZWk9N2NNQX+lcGl9d9nuSmmaqPUgA2MmfCz4rs6Fs0DM6CS4b0TP
X4xjnH32duu/Nw==
-----END CERTIFICATE-----
Generated at Tue May 7 18:32:36 2024 by rpki-client on console-fra.rpki-client.org