Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft
File:                     ISApS0bJAtk8B5wWhs_kW7ozGMs.mft (raw, json)
Hash identifier:          4/mQX6M09BLwtJprtJQzU3MNFn0pkgAKlJ5gbyZpm0Y=
Subject key identifier:   CE:CC:5A:47:B1:FF:60:A9:44:27:69:C2:BE:08:19:19:0E:13:B0:13
Authority key identifier: 21:20:29:4B:46:C9:02:D9:3C:07:9C:16:86:CF:E4:5B:BA:33:18:CB
Certificate issuer:       /CN=2120294b46c902d93c079c1686cfe45bba3318cb
Certificate serial:       018F3A0C347049BC905594CC4151A1ABFF64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ISApS0bJAtk8B5wWhs_kW7ozGMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft
Manifest number:          08E6
Signing time:             Thu 02 May 2024 16:03:49 +0000
Manifest this update:     Thu 02 May 2024 16:03:49 +0000
Manifest next update:     Fri 03 May 2024 16:03:49 +0000
Files and hashes:         1: ISApS0bJAtk8B5wWhs_kW7ozGMs.crl (hash: uKh5gJ/k4DJKvtuIWG18tv76MU8kM1m7jUMsAZWMXkg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ISApS0bJAtk8B5wWhs_kW7ozGMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0c:34:70:49:bc:90:55:94:cc:41:51:a1:ab:ff:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2120294b46c902d93c079c1686cfe45bba3318cb
        Validity
            Not Before: May  2 16:03:49 2024 GMT
            Not After : May  3 16:03:49 2024 GMT
        Subject: CN=cecc5a47b1ff60a9442769c2be0819190e13b013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f7:7f:96:3a:eb:f7:81:95:d0:38:2c:6f:65:
                    09:a3:d5:89:5b:22:a6:df:de:dd:0f:20:ae:38:09:
                    f7:0b:ae:ce:f9:18:b2:d7:11:a6:b8:c8:8e:39:a1:
                    ff:88:b1:af:68:90:62:74:8a:e2:87:08:0b:4b:c5:
                    ac:70:c9:d2:11:b1:8c:a9:e1:42:1c:6c:e1:06:0e:
                    37:ea:b0:1d:2b:15:25:4e:8c:d7:1d:00:99:37:56:
                    0b:ac:51:20:c5:ca:05:c9:22:1a:8d:88:74:95:5b:
                    0e:02:23:ff:d7:5b:39:77:7f:c5:32:ab:13:1a:cd:
                    34:3c:20:63:e8:fc:93:8d:34:fd:af:b6:44:17:c2:
                    8d:20:0d:b2:2d:3c:ca:91:73:38:e0:48:7f:c0:3d:
                    0b:cc:c5:52:3a:e5:dd:61:bf:90:8b:83:b7:c7:99:
                    f9:53:ad:13:fd:56:22:e0:66:7d:91:6e:3c:02:0e:
                    62:6b:fd:bf:f1:41:18:f8:0c:92:c5:a5:bf:2a:25:
                    6b:6b:ca:7d:78:bd:e1:42:5b:55:6e:9f:a5:66:17:
                    ee:42:2f:2d:0a:a6:e5:8b:4b:44:20:cc:95:06:c6:
                    ed:55:7b:14:42:1c:28:59:78:18:3f:e6:35:cf:a6:
                    3a:3b:ed:ca:ec:de:9f:0d:3b:1a:83:96:89:37:01:
                    ee:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CC:5A:47:B1:FF:60:A9:44:27:69:C2:BE:08:19:19:0E:13:B0:13
            X509v3 Authority Key Identifier:
                keyid:21:20:29:4B:46:C9:02:D9:3C:07:9C:16:86:CF:E4:5B:BA:33:18:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISApS0bJAtk8B5wWhs_kW7ozGMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/d7bcb7-94f2-4908-977d-a20da56c4184/1/ISApS0bJAtk8B5wWhs_kW7ozGMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:62:1f:0c:bf:5f:ac:68:a7:95:22:d8:54:42:45:ac:ae:4a:
         6e:13:94:5e:fc:78:00:1d:c4:26:7d:d1:b1:10:93:3c:c1:ee:
         cd:a1:d0:9f:e2:c8:91:de:1d:6d:9a:77:90:bc:72:25:f5:e6:
         22:e2:95:20:94:14:59:a2:71:20:17:ea:5d:bb:79:d4:24:d7:
         72:06:90:cf:2a:13:22:00:1b:23:53:44:c8:38:70:b5:9a:84:
         ea:25:ea:db:ee:1d:ed:de:49:34:bb:65:7c:f8:f0:9c:94:cb:
         8b:55:fe:91:d5:fd:00:5c:80:de:f8:f1:64:24:8d:32:63:4a:
         2d:47:38:e3:13:db:09:eb:5d:34:d1:ba:42:5d:b9:5e:f3:9c:
         f3:19:06:6a:c3:16:11:88:69:c2:91:5b:d8:38:9c:62:63:15:
         51:e2:cd:ab:39:94:f2:7a:37:3a:a8:22:4e:92:66:cd:e9:a1:
         62:c3:1d:88:9c:ce:44:a4:13:e7:ef:a5:31:4f:c3:b3:2a:be:
         fa:0c:6a:bf:b6:36:b0:1d:20:fd:46:2a:35:01:50:70:d1:29:
         2a:bc:6d:df:dc:c1:79:75:fd:fd:fd:9d:a5:a2:8e:41:8e:7b:
         53:d1:de:e8:63:ea:1f:9f:90:f0:90:6f:36:55:a0:27:ec:48:
         e8:df:86:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY86DDRwSbyQVZTMQVGhq/9kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMjAyOTRiNDZjOTAyZDkzYzA3OWMxNjg2Y2ZlNDViYmEz
MzE4Y2IwHhcNMjQwNTAyMTYwMzQ5WhcNMjQwNTAzMTYwMzQ5WjAzMTEwLwYDVQQD
EyhjZWNjNWE0N2IxZmY2MGE5NDQyNzY5YzJiZTA4MTkxOTBlMTNiMDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/d/ljrr94GV0Dgsb2UJo9WJWyKm
397dDyCuOAn3C67O+Riy1xGmuMiOOaH/iLGvaJBidIrihwgLS8WscMnSEbGMqeFC
HGzhBg436rAdKxUlTozXHQCZN1YLrFEgxcoFySIajYh0lVsOAiP/11s5d3/FMqsT
Gs00PCBj6PyTjTT9r7ZEF8KNIA2yLTzKkXM44Eh/wD0LzMVSOuXdYb+Qi4O3x5n5
U60T/VYi4GZ9kW48Ag5ia/2/8UEY+AySxaW/KiVra8p9eL3hQltVbp+lZhfuQi8t
Cqbli0tEIMyVBsbtVXsUQhwoWXgYP+Y1z6Y6O+3K7N6fDTsag5aJNwHuNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7MWkex/2CpRCdpwr4IGRkOE7ATMB8GA1UdIwQY
MBaAFCEgKUtGyQLZPAecFobP5Fu6MxjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVNBcFMwYkpBdGs4QjV3V2hzX2tXN296R01zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9kN2JjYjctOTRmMi00OTA4LTk3N2Qt
YTIwZGE1NmM0MTg0LzEvSVNBcFMwYkpBdGs4QjV3V2hzX2tXN296R01zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9kN2JjYjctOTRmMi00OTA4LTk3N2QtYTIwZGE1NmM0MTg0
LzEvSVNBcFMwYkpBdGs4QjV3V2hzX2tXN296R01zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGIfDL9f
rGinlSLYVEJFrK5KbhOUXvx4AB3EJn3RsRCTPMHuzaHQn+LIkd4dbZp3kLxyJfXm
IuKVIJQUWaJxIBfqXbt51CTXcgaQzyoTIgAbI1NEyDhwtZqE6iXq2+4d7d5JNLtl
fPjwnJTLi1X+kdX9AFyA3vjxZCSNMmNKLUc44xPbCetdNNG6Ql25XvOc8xkGasMW
EYhpwpFb2DicYmMVUeLNqzmU8no3OqgiTpJmzemhYsMdiJzORKQT5++lMU/Dsyq+
+gxqv7Y2sB0g/UYqNQFQcNEpKrxt39zBeXX9/f2dpaKOQY57U9He6GPqH5+Q8JBv
NlWgJ+xI6N+GNQ==
-----END CERTIFICATE-----
Generated at Thu May 2 20:36:56 2024 by rpki-client on console-ams.rpki-client.org