Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft
File:                     EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft (raw, json)
Hash identifier:          dOMIhEgo8nDbCqpQXpQ1NmjZ0evfTT8dtTzuNBgxic4=
Subject key identifier:   75:7A:F6:AB:EF:0B:9F:CC:79:2E:C0:D6:ED:EF:90:E1:68:DD:94:59
Authority key identifier: 13:23:BE:6D:54:81:45:86:78:63:B7:B2:FA:46:4B:DF:85:18:A0:C9
Certificate issuer:       /CN=1323be6d548145867863b7b2fa464bdf8518a0c9
Certificate serial:       018FD8664FE89F3612A13E21987A95EBCA81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft
Manifest number:          119F
Signing time:             Sun 02 Jun 2024 10:02:14 +0000
Manifest this update:     Sun 02 Jun 2024 10:02:14 +0000
Manifest next update:     Mon 03 Jun 2024 10:02:14 +0000
Files and hashes:         1: EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl (hash: uZimvG82W8eQLPi+l6UoT0q/Q7SasS7y2iGhM0l0jbI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 10:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d8:66:4f:e8:9f:36:12:a1:3e:21:98:7a:95:eb:ca:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1323be6d548145867863b7b2fa464bdf8518a0c9
        Validity
            Not Before: Jun  2 10:02:14 2024 GMT
            Not After : Jun  3 10:02:14 2024 GMT
        Subject: CN=757af6abef0b9fcc792ec0d6edef90e168dd9459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:06:ad:aa:d7:f3:be:1d:21:c1:40:ff:6a:00:
                    a7:e4:19:8d:14:11:90:b6:05:d3:c4:a5:87:af:0d:
                    32:1b:d1:c3:0c:fd:42:55:42:48:ec:f0:8f:20:c1:
                    ed:8c:3f:db:fa:e5:e9:86:17:61:3b:f9:84:2e:43:
                    70:75:bf:e5:2a:a8:0b:ba:91:03:fb:3c:04:31:64:
                    de:b1:b3:02:36:0a:9e:3e:58:4c:8f:71:89:5b:4b:
                    6d:73:ff:0a:44:48:a6:c0:a2:55:f2:c6:39:c6:19:
                    7b:d8:54:93:e3:97:f5:8f:0e:63:cd:13:19:06:ce:
                    c1:18:51:34:ca:31:27:5f:d2:82:4e:28:75:f8:fb:
                    fc:93:8b:98:4b:ee:c4:8d:44:09:e9:03:de:8e:d4:
                    e9:16:24:6f:84:59:b8:a5:c8:59:29:e7:11:95:60:
                    37:33:73:93:c0:3f:2a:ef:ed:d3:f6:f5:7b:34:a9:
                    ae:19:09:4b:9e:a2:38:ae:a3:0e:f7:ec:97:17:73:
                    ed:b6:9a:35:cc:f6:23:51:6c:55:2f:5d:e8:47:f4:
                    b0:d4:25:68:53:95:91:26:04:07:82:5a:66:c0:f5:
                    37:c2:a5:e0:13:58:b6:f7:3a:a7:6d:fb:62:42:55:
                    2a:d0:72:e7:8f:44:c2:4d:25:35:85:ae:a1:52:97:
                    98:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7A:F6:AB:EF:0B:9F:CC:79:2E:C0:D6:ED:EF:90:E1:68:DD:94:59
            X509v3 Authority Key Identifier:
                keyid:13:23:BE:6D:54:81:45:86:78:63:B7:B2:FA:46:4B:DF:85:18:A0:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:59:cd:52:1b:1b:8f:39:e5:c4:fa:08:a3:da:f2:66:5f:cb:
         6b:bd:06:39:45:81:6e:0b:42:7d:52:ed:28:85:8c:fe:09:fb:
         3e:38:e0:35:a3:cd:ef:38:55:8d:47:3b:96:01:20:71:9c:2d:
         c0:99:b5:da:1d:33:cc:4d:d2:d3:f6:d8:53:01:b2:d9:d6:9d:
         1b:9e:35:4b:0d:35:c7:3f:2e:72:cd:f6:3b:ed:a1:b1:ed:63:
         7d:8d:4b:aa:3b:eb:93:50:f8:54:d9:8c:27:c2:55:5d:07:ab:
         fa:10:16:90:85:91:b9:c0:18:6c:d3:d5:b5:46:ce:87:85:20:
         a5:66:24:22:49:07:e1:46:93:2a:2a:cb:ea:94:7f:2a:cf:4e:
         2d:ad:3c:6d:e3:30:0b:24:8e:08:25:e5:da:28:a4:f6:9b:bc:
         af:c9:29:36:8b:fc:04:dd:d3:91:19:c1:3d:1a:69:af:1a:05:
         93:99:33:80:1c:2d:a7:b1:88:c1:e1:b0:c1:29:6c:75:09:60:
         2b:2c:60:81:cb:56:f2:a2:4c:69:78:71:b4:da:2a:c2:0b:30:
         41:40:5c:2b:1b:0e:80:0e:fc:89:83:7a:fe:a2:3f:a2:17:eb:
         06:97:42:c7:9b:16:1e:a3:af:85:e7:a4:ef:59:8c:45:32:32:
         53:0e:21:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY/YZk/onzYSoT4hmHqV68qBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMjNiZTZkNTQ4MTQ1ODY3ODYzYjdiMmZhNDY0YmRmODUx
OGEwYzkwHhcNMjQwNjAyMTAwMjE0WhcNMjQwNjAzMTAwMjE0WjAzMTEwLwYDVQQD
Eyg3NTdhZjZhYmVmMGI5ZmNjNzkyZWMwZDZlZGVmOTBlMTY4ZGQ5NDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgatqtfzvh0hwUD/agCn5BmNFBGQ
tgXTxKWHrw0yG9HDDP1CVUJI7PCPIMHtjD/b+uXphhdhO/mELkNwdb/lKqgLupED
+zwEMWTesbMCNgqePlhMj3GJW0ttc/8KREimwKJV8sY5xhl72FST45f1jw5jzRMZ
Bs7BGFE0yjEnX9KCTih1+Pv8k4uYS+7EjUQJ6QPejtTpFiRvhFm4pchZKecRlWA3
M3OTwD8q7+3T9vV7NKmuGQlLnqI4rqMO9+yXF3Pttpo1zPYjUWxVL13oR/Sw1CVo
U5WRJgQHglpmwPU3wqXgE1i29zqnbftiQlUq0HLnj0TCTSU1ha6hUpeYKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHV69qvvC5/MeS7A1u3vkOFo3ZRZMB8GA1UdIwQY
MBaAFBMjvm1UgUWGeGO3svpGS9+FGKDJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXlPLWJWU0JSWVo0WTdleS1rWkwzNFVZb01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8yYTFmZWYtMjIxZC00MDU1LThjNTgt
NWRlMzJiNjZkYjBhLzEvRXlPLWJWU0JSWVo0WTdleS1rWkwzNFVZb01rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8yYTFmZWYtMjIxZC00MDU1LThjNTgtNWRlMzJiNjZkYjBh
LzEvRXlPLWJWU0JSWVo0WTdleS1rWkwzNFVZb01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv1nNUhsb
jznlxPoIo9ryZl/La70GOUWBbgtCfVLtKIWM/gn7PjjgNaPN7zhVjUc7lgEgcZwt
wJm12h0zzE3S0/bYUwGy2dadG541Sw01xz8ucs32O+2hse1jfY1Lqjvrk1D4VNmM
J8JVXQer+hAWkIWRucAYbNPVtUbOh4UgpWYkIkkH4UaTKirL6pR/Ks9OLa08beMw
CySOCCXl2iik9pu8r8kpNov8BN3TkRnBPRpprxoFk5kzgBwtp7GIweGwwSlsdQlg
KyxggctW8qJMaXhxtNoqwgswQUBcKxsOgA78iYN6/qI/ohfrBpdCx5sWHqOvheek
71mMRTIyUw4hmg==
-----END CERTIFICATE-----
Generated at Sun Jun 2 15:47:11 2024 by rpki-client on console-ams.rpki-client.org