Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58e432-b06e-4f0f-8529-d749897af60b/1/8Oen7AhMfvq_Zmijd5MsNqs62A0.mft
File:                     8Oen7AhMfvq_Zmijd5MsNqs62A0.mft (raw, json)
Hash identifier:          3JCpl6tDJyhiRdyrPxSw2VYMhVnECofZfOUZr+dvwVw=
Subject key identifier:   78:CA:04:35:96:9E:34:64:0B:85:A3:30:1F:ED:B9:3B:2D:79:D9:30
Authority key identifier: F0:E7:A7:EC:08:4C:7E:FA:BF:66:68:A3:77:93:2C:36:AB:3A:D8:0D
Certificate issuer:       /CN=f0e7a7ec084c7efabf6668a377932c36ab3ad80d
Certificate serial:       018F4CB53FFB54D7A8E5CD5EF44106B88B7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Oen7AhMfvq_Zmijd5MsNqs62A0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/58e432-b06e-4f0f-8529-d749897af60b/1/8Oen7AhMfvq_Zmijd5MsNqs62A0.mft
Manifest number:          0662
Signing time:             Mon 06 May 2024 07:01:37 +0000
Manifest this update:     Mon 06 May 2024 07:01:37 +0000
Manifest next update:     Tue 07 May 2024 07:01:37 +0000
Files and hashes:         1: 8Oen7AhMfvq_Zmijd5MsNqs62A0.crl (hash: AuK0gR68uaq5nxwrEl6/P3vJ77DP7MSpeGeASscDglQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/58e432-b06e-4f0f-8529-d749897af60b/1/8Oen7AhMfvq_Zmijd5MsNqs62A0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/58e432-b06e-4f0f-8529-d749897af60b/1/8Oen7AhMfvq_Zmijd5MsNqs62A0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Oen7AhMfvq_Zmijd5MsNqs62A0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:b5:3f:fb:54:d7:a8:e5:cd:5e:f4:41:06:b8:8b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0e7a7ec084c7efabf6668a377932c36ab3ad80d
        Validity
            Not Before: May  6 07:01:37 2024 GMT
            Not After : May  7 07:01:37 2024 GMT
        Subject: CN=78ca0435969e34640b85a3301fedb93b2d79d930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:65:48:a1:b3:8f:26:38:07:5c:01:8f:17:4e:
                    cf:5a:e1:c1:b3:71:e2:69:d6:21:8e:98:1b:67:ed:
                    b4:cc:07:84:86:17:75:86:6c:bc:b6:b1:24:73:58:
                    d9:32:52:d5:70:ef:de:4b:96:a3:73:cf:c0:b9:36:
                    f3:11:3a:75:b5:99:7d:6c:ab:a1:ed:2b:e8:db:2a:
                    ca:a9:17:26:73:22:05:00:42:bf:b2:b6:39:bb:2d:
                    72:63:ba:8b:7b:12:c4:86:5b:75:bf:54:3c:7d:00:
                    3e:4d:95:e8:ca:44:f2:22:e6:06:91:91:25:c2:e2:
                    3b:b3:2e:b8:24:05:76:3d:03:bf:e6:9d:d1:ad:46:
                    ce:46:f4:07:dd:6e:1e:b8:bf:da:c1:ff:90:7a:d7:
                    6e:c4:27:91:48:a5:69:b3:59:b4:36:3b:8e:40:49:
                    c1:e1:38:fa:f5:0a:d0:2b:5e:ff:26:bf:c3:5d:59:
                    db:c4:6f:ab:60:e5:0e:bd:3a:5a:b2:ca:39:5a:75:
                    18:b3:73:8c:99:70:35:d6:53:1c:1b:51:34:ef:e2:
                    0d:78:36:a5:a3:5f:c4:f9:ad:5c:fa:c6:97:6a:14:
                    81:b2:79:74:a1:f3:95:ae:2f:0f:e8:2b:04:c3:eb:
                    85:8b:da:96:ef:b6:7b:f6:b7:bb:81:eb:61:2d:29:
                    95:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CA:04:35:96:9E:34:64:0B:85:A3:30:1F:ED:B9:3B:2D:79:D9:30
            X509v3 Authority Key Identifier:
                keyid:F0:E7:A7:EC:08:4C:7E:FA:BF:66:68:A3:77:93:2C:36:AB:3A:D8:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oen7AhMfvq_Zmijd5MsNqs62A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58e432-b06e-4f0f-8529-d749897af60b/1/8Oen7AhMfvq_Zmijd5MsNqs62A0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58e432-b06e-4f0f-8529-d749897af60b/1/8Oen7AhMfvq_Zmijd5MsNqs62A0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:66:1c:31:5d:50:32:34:7e:f8:50:e2:8b:a0:de:7c:0a:07:
         7d:55:09:65:d0:b5:8a:83:cc:f6:36:9b:22:78:6d:c3:9f:f6:
         58:99:6b:0d:84:97:63:ba:ea:53:b7:d4:0f:3d:4e:8d:fd:a7:
         d4:af:ce:b7:0e:4f:9b:0b:a4:73:73:19:e8:d2:85:06:79:07:
         1e:12:e1:07:e8:7c:4f:c6:06:99:c4:2c:dc:6d:46:f3:a7:9b:
         f7:e6:c1:ef:7c:2a:d9:cd:10:93:1f:e8:ad:60:27:47:cc:b5:
         ca:ff:39:29:9a:95:b6:6b:d8:fc:39:57:dd:56:a5:99:ac:b0:
         2c:f7:52:6e:6e:b4:28:30:7d:43:14:a0:78:7a:3b:59:37:79:
         fb:23:15:05:1b:7e:0b:56:6f:8b:f8:64:b1:ab:71:32:46:d9:
         86:7f:13:3a:aa:bd:7d:de:31:53:3e:85:95:2a:e0:f5:87:2a:
         73:3e:1c:e8:3d:24:21:0c:7a:38:dc:dc:8d:e1:d8:c4:c7:38:
         35:9b:ef:eb:30:20:b4:6b:28:6f:84:18:f6:ab:ac:b6:80:b4:
         ea:08:8a:be:49:aa:0d:1c:2d:10:8e:1f:62:ff:59:cb:49:fc:
         40:dc:58:9a:03:9f:b5:2d:85:c5:d4:e5:14:f2:d4:62:d7:6f:
         32:54:6a:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9MtT/7VNeo5c1e9EEGuIt8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZTdhN2VjMDg0YzdlZmFiZjY2NjhhMzc3OTMyYzM2YWIz
YWQ4MGQwHhcNMjQwNTA2MDcwMTM3WhcNMjQwNTA3MDcwMTM3WjAzMTEwLwYDVQQD
Eyg3OGNhMDQzNTk2OWUzNDY0MGI4NWEzMzAxZmVkYjkzYjJkNzlkOTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mVIobOPJjgHXAGPF07PWuHBs3Hi
adYhjpgbZ+20zAeEhhd1hmy8trEkc1jZMlLVcO/eS5ajc8/AuTbzETp1tZl9bKuh
7Svo2yrKqRcmcyIFAEK/srY5uy1yY7qLexLEhlt1v1Q8fQA+TZXoykTyIuYGkZEl
wuI7sy64JAV2PQO/5p3RrUbORvQH3W4euL/awf+QetduxCeRSKVps1m0NjuOQEnB
4Tj69QrQK17/Jr/DXVnbxG+rYOUOvTpasso5WnUYs3OMmXA11lMcG1E07+INeDal
o1/E+a1c+saXahSBsnl0ofOVri8P6CsEw+uFi9qW77Z79re7gethLSmVxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjKBDWWnjRkC4WjMB/tuTstedkwMB8GA1UdIwQY
MBaAFPDnp+wITH76v2Zoo3eTLDarOtgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE9lbjdBaE1mdnFfWm1pamQ1TXNOcXM2MkEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81OGU0MzItYjA2ZS00ZjBmLTg1Mjkt
ZDc0OTg5N2FmNjBiLzEvOE9lbjdBaE1mdnFfWm1pamQ1TXNOcXM2MkEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC81OGU0MzItYjA2ZS00ZjBmLTg1MjktZDc0OTg5N2FmNjBi
LzEvOE9lbjdBaE1mdnFfWm1pamQ1TXNOcXM2MkEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2YcMV1Q
MjR++FDii6DefAoHfVUJZdC1ioPM9jabInhtw5/2WJlrDYSXY7rqU7fUDz1Ojf2n
1K/Otw5Pmwukc3MZ6NKFBnkHHhLhB+h8T8YGmcQs3G1G86eb9+bB73wq2c0Qkx/o
rWAnR8y1yv85KZqVtmvY/DlX3ValmaywLPdSbm60KDB9QxSgeHo7WTd5+yMVBRt+
C1Zvi/hksatxMkbZhn8TOqq9fd4xUz6FlSrg9Ycqcz4c6D0kIQx6ONzcjeHYxMc4
NZvv6zAgtGsob4QY9qustoC06giKvkmqDRwtEI4fYv9Zy0n8QNxYmgOftS2FxdTl
FPLUYtdvMlRqmg==
-----END CERTIFICATE-----
Generated at Mon May 6 09:33:50 2024 by rpki-client on console-fra.rpki-client.org