Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
File:                     TTpxp39MqbpTb5hhKpxW1AwMO50.mft (raw, json)
Hash identifier:          1afvnLsBQZb498MJ9fAq2dkHIX+Xbp7gupfc3c3/Gak=
Subject key identifier:   D6:D4:9E:DB:A5:19:89:68:87:18:E7:44:06:5A:80:3C:45:CF:5C:70
Authority key identifier: 4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
Certificate issuer:       /CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Certificate serial:       018F8749B08D124B92D912A8C656C4620A0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:01:44 +0000
Manifest this update:     Fri 17 May 2024 16:01:44 +0000
Manifest next update:     Sat 18 May 2024 16:01:44 +0000
Files and hashes:         1: TTpxp39MqbpTb5hhKpxW1AwMO50.crl (hash: u1AhnjVzk4XXCiyI4uEhSRCVuNtrg4huN6cuYTl9J04=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:b0:8d:12:4b:92:d9:12:a8:c6:56:c4:62:0a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
        Validity
            Not Before: May 17 16:01:44 2024 GMT
            Not After : May 18 16:01:44 2024 GMT
        Subject: CN=d6d49edba51989688718e744065a803c45cf5c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c1:82:2e:56:05:e4:97:b4:7a:e5:ef:5e:d5:
                    3f:c1:62:c6:3c:03:c6:2c:eb:9b:35:1a:8a:cc:19:
                    b2:e1:ca:cf:80:53:45:fd:31:34:f3:60:33:94:e6:
                    45:53:01:05:3e:62:5a:1e:bc:e0:32:77:00:60:7b:
                    98:4a:3e:e7:25:a1:84:4c:40:7b:e8:7a:91:8d:ad:
                    79:4a:81:a8:aa:8b:1f:c0:c1:5f:e7:5f:07:b1:ff:
                    81:7b:8d:fb:4a:8f:a1:6f:f7:56:34:a3:f3:d9:c8:
                    74:44:a2:10:e1:79:52:f8:d6:74:13:ba:3f:71:73:
                    ae:a1:65:e0:c3:55:06:e7:35:f5:ca:b7:7c:72:b5:
                    04:e7:07:37:b4:32:3a:db:e8:cd:d6:3c:eb:b0:22:
                    ba:c7:c5:52:0e:66:98:81:92:2a:71:27:da:88:4a:
                    82:b6:18:e6:dd:22:ed:e9:ec:0e:7e:15:c4:32:ea:
                    22:bb:dc:f6:c3:6f:f1:bf:e9:df:b3:7b:e5:ae:35:
                    97:be:36:8d:74:5f:cf:24:bc:05:73:fc:41:4d:79:
                    54:85:f4:d0:da:96:d6:1e:85:f7:3a:58:02:8e:3e:
                    55:60:d6:a1:fc:a3:c8:b0:0a:18:b2:8b:e3:f0:37:
                    bc:d6:9d:53:96:19:4c:f6:23:58:e9:02:ff:b9:0a:
                    58:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D4:9E:DB:A5:19:89:68:87:18:E7:44:06:5A:80:3C:45:CF:5C:70
            X509v3 Authority Key Identifier:
                keyid:4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:de:da:93:9e:4b:3d:3e:72:19:05:6c:cc:b9:92:11:f8:a3:
         c1:7b:fa:b6:86:8a:3f:e0:05:a6:e9:a5:b1:bb:eb:d6:32:6a:
         95:bc:cf:a4:c7:c5:a6:cd:a8:c9:7c:99:b4:22:ca:d9:69:d5:
         d9:ac:f9:78:7a:53:e7:34:33:17:45:c4:4c:a8:1f:43:5f:98:
         83:f9:91:82:42:d0:d1:49:a2:23:4a:58:10:5b:06:fa:76:b5:
         5d:35:42:a9:b6:3a:15:5c:cd:60:67:fe:f8:06:55:79:d6:80:
         5a:99:ab:79:1a:6a:55:44:05:0b:db:93:c4:80:e3:2f:e7:0d:
         12:cb:72:27:53:90:06:a1:1c:74:bd:8a:f5:91:b0:8c:19:06:
         ee:bb:d0:d3:05:7d:b6:09:35:8e:7b:3b:8b:65:8d:a9:d0:ad:
         fd:2f:57:ae:b2:7d:e3:8f:7d:1d:18:58:ae:1a:24:aa:02:ea:
         f6:c0:b1:9d:24:e3:6e:7a:2c:9d:91:e9:62:d2:1e:d2:9f:bc:
         a1:cf:a7:a5:cc:f3:a7:19:ce:e2:be:71:a2:86:cc:67:5a:f7:
         f1:6f:85:7f:f8:91:51:74:65:8d:01:68:f4:6f:6f:d1:6a:52:
         f3:f5:a3:55:3f:57:d5:c9:38:e9:af:42:26:27:1d:0c:60:03:
         7c:d2:50:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSbCNEkuS2RKoxlbEYgoNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkM2E3MWE3N2Y0Y2E5YmE1MzZmOTg2MTJhOWM1NmQ0MGMw
YzNiOWQwHhcNMjQwNTE3MTYwMTQ0WhcNMjQwNTE4MTYwMTQ0WjAzMTEwLwYDVQQD
EyhkNmQ0OWVkYmE1MTk4OTY4ODcxOGU3NDQwNjVhODAzYzQ1Y2Y1YzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8GCLlYF5Je0euXvXtU/wWLGPAPG
LOubNRqKzBmy4crPgFNF/TE082AzlOZFUwEFPmJaHrzgMncAYHuYSj7nJaGETEB7
6HqRja15SoGoqosfwMFf518Hsf+Be437So+hb/dWNKPz2ch0RKIQ4XlS+NZ0E7o/
cXOuoWXgw1UG5zX1yrd8crUE5wc3tDI62+jN1jzrsCK6x8VSDmaYgZIqcSfaiEqC
thjm3SLt6ewOfhXEMuoiu9z2w2/xv+nfs3vlrjWXvjaNdF/PJLwFc/xBTXlUhfTQ
2pbWHoX3OlgCjj5VYNah/KPIsAoYsovj8De81p1TlhlM9iNY6QL/uQpYCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbUntulGYlohxjnRAZagDxFz1xwMB8GA1UdIwQY
MBaAFE06cad/TKm6U2+YYSqcVtQMDDudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFRweHAzOU1xYnBUYjVoaEtweFcxQXdNTzUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84ODc1MDEtNGQ4ZS00YmViLTk1OTAt
NjUwNzliNzU4NjhhLzEvVFRweHAzOU1xYnBUYjVoaEtweFcxQXdNTzUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84ODc1MDEtNGQ4ZS00YmViLTk1OTAtNjUwNzliNzU4Njhh
LzEvVFRweHAzOU1xYnBUYjVoaEtweFcxQXdNTzUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgN7ak55L
PT5yGQVszLmSEfijwXv6toaKP+AFpumlsbvr1jJqlbzPpMfFps2oyXyZtCLK2WnV
2az5eHpT5zQzF0XETKgfQ1+Yg/mRgkLQ0UmiI0pYEFsG+na1XTVCqbY6FVzNYGf+
+AZVedaAWpmreRpqVUQFC9uTxIDjL+cNEstyJ1OQBqEcdL2K9ZGwjBkG7rvQ0wV9
tgk1jns7i2WNqdCt/S9XrrJ94499HRhYrhokqgLq9sCxnSTjbnosnZHpYtIe0p+8
oc+npczzpxnO4r5xoobMZ1r38W+Ff/iRUXRljQFo9G9v0WpS8/WjVT9X1ck46a9C
JicdDGADfNJQpQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:06:00 2024 by rpki-client on console-ams.rpki-client.org