Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
File:                     A_g_WVVmnLCoGPusAnxoKurtXXI.mft (raw, json)
Hash identifier:          ppdmWEm9OwIrN5Rr2JY8i1wvuKShb24vVHWgnCpTRA4=
Subject key identifier:   08:CD:03:74:BF:70:87:AE:29:EF:32:C8:94:F9:68:B3:84:5B:A0:46
Authority key identifier: 03:F8:3F:59:55:66:9C:B0:A8:18:FB:AC:02:7C:68:2A:EA:ED:5D:72
Certificate issuer:       /CN=03f83f5955669cb0a818fbac027c682aeaed5d72
Certificate serial:       018F48D878BD07F9C3F098C4297A24FCF4DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
Manifest number:          0C77
Signing time:             Sun 05 May 2024 13:01:37 +0000
Manifest this update:     Sun 05 May 2024 13:01:37 +0000
Manifest next update:     Mon 06 May 2024 13:01:37 +0000
Files and hashes:         1: A_g_WVVmnLCoGPusAnxoKurtXXI.crl (hash: NL4X/50rvRj6yAGGHcNzAQzDVMP27qtiolUCJEPqU5k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 13:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:48:d8:78:bd:07:f9:c3:f0:98:c4:29:7a:24:fc:f4:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f83f5955669cb0a818fbac027c682aeaed5d72
        Validity
            Not Before: May  5 13:01:37 2024 GMT
            Not After : May  6 13:01:37 2024 GMT
        Subject: CN=08cd0374bf7087ae29ef32c894f968b3845ba046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d0:a0:ea:7d:53:5f:f0:2b:76:82:a2:ec:4e:
                    0e:5e:8f:f8:50:2d:bd:01:36:e9:9f:ae:b1:5a:97:
                    30:b1:13:37:ef:34:d5:06:01:9a:db:3f:64:0e:79:
                    7c:df:e9:3f:eb:1c:11:0f:7b:64:3d:53:ed:7e:37:
                    5b:7b:2e:4e:98:7c:b4:27:ef:59:b9:d9:0d:cc:74:
                    91:39:0f:f3:f6:b0:e4:28:c4:25:67:ca:e1:a0:68:
                    5e:b3:24:ae:da:df:19:93:1d:d0:f7:76:4a:1f:26:
                    b9:8d:fa:8f:6f:ea:7d:d7:82:0a:28:07:9d:dc:80:
                    90:e6:83:c5:30:14:44:97:91:81:e4:41:09:0e:4a:
                    c1:5e:8b:d5:2f:b6:95:e3:35:64:ba:7a:7a:ac:0f:
                    cf:77:30:78:e0:52:b1:ef:60:12:94:b5:c9:10:e7:
                    ed:8c:11:6e:17:e2:6d:29:70:77:5f:12:3a:6a:b6:
                    00:c1:a6:2b:8a:93:ca:d7:93:21:9d:04:e8:b6:13:
                    04:3d:aa:48:ee:09:2d:ac:2a:e4:60:b9:e3:71:cf:
                    ce:90:39:a8:a2:61:9a:89:39:63:bc:3f:c5:f6:51:
                    f8:46:8d:02:2a:d9:dc:b6:af:36:f7:6e:4b:96:17:
                    e4:38:a2:de:16:14:6b:4b:b0:e9:73:79:a7:47:3f:
                    b4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CD:03:74:BF:70:87:AE:29:EF:32:C8:94:F9:68:B3:84:5B:A0:46
            X509v3 Authority Key Identifier:
                keyid:03:F8:3F:59:55:66:9C:B0:A8:18:FB:AC:02:7C:68:2A:EA:ED:5D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:f0:45:6e:1e:90:19:61:39:ad:09:0c:71:30:c6:f9:31:30:
         fc:90:e7:aa:06:ad:f7:09:a8:03:ad:ea:95:a2:e9:ac:6f:01:
         fa:ef:17:eb:69:97:86:67:6b:86:a1:1f:92:da:d4:ca:5c:5c:
         11:d9:39:51:25:1b:5f:7c:b1:2f:46:5d:d8:e5:75:83:6b:e6:
         59:0b:01:08:68:c2:49:53:61:5c:04:c8:1c:47:82:5a:fb:a6:
         20:bd:9a:e5:76:22:5a:df:84:f4:ac:c0:40:9d:f1:01:c1:07:
         6a:f2:d3:39:e3:3c:20:86:04:19:a9:1a:b8:35:b7:36:89:92:
         8a:e7:03:12:34:10:8b:38:30:fe:a1:5f:73:08:8f:a2:24:0c:
         a2:d3:5a:31:c3:b8:71:5e:b1:ab:aa:78:0e:c0:c7:9c:e7:f6:
         7f:7e:2b:62:c2:25:63:be:4a:83:51:1f:68:db:89:6d:61:84:
         12:9f:26:8f:10:b2:c3:87:92:1a:e4:91:88:b2:0f:a2:dd:a8:
         bc:98:a9:24:ce:05:70:a4:73:32:bd:08:3b:49:cf:31:e0:bc:
         31:9e:3c:a6:d0:49:25:e8:6c:90:0f:26:01:4f:f3:c2:f5:8a:
         17:1f:9b:91:55:3c:7d:56:d3:31:45:5e:01:b8:eb:5b:69:b8:
         00:eb:74:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9I2Hi9B/nD8JjEKXok/PTfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZjgzZjU5NTU2NjljYjBhODE4ZmJhYzAyN2M2ODJhZWFl
ZDVkNzIwHhcNMjQwNTA1MTMwMTM3WhcNMjQwNTA2MTMwMTM3WjAzMTEwLwYDVQQD
EygwOGNkMDM3NGJmNzA4N2FlMjllZjMyYzg5NGY5NjhiMzg0NWJhMDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9Cg6n1TX/ArdoKi7E4OXo/4UC29
ATbpn66xWpcwsRM37zTVBgGa2z9kDnl83+k/6xwRD3tkPVPtfjdbey5OmHy0J+9Z
udkNzHSROQ/z9rDkKMQlZ8rhoGhesySu2t8Zkx3Q93ZKHya5jfqPb+p914IKKAed
3ICQ5oPFMBREl5GB5EEJDkrBXovVL7aV4zVkunp6rA/PdzB44FKx72ASlLXJEOft
jBFuF+JtKXB3XxI6arYAwaYripPK15MhnQTothMEPapI7gktrCrkYLnjcc/OkDmo
omGaiTljvD/F9lH4Ro0CKtnctq82925LlhfkOKLeFhRrS7Dpc3mnRz+0ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjNA3S/cIeuKe8yyJT5aLOEW6BGMB8GA1UdIwQY
MBaAFAP4P1lVZpywqBj7rAJ8aCrq7V1yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQV9nX1dWVm1uTENvR1B1c0FueG9LdXJ0WFhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZmJiMGYtNGE5YS00YzMwLThhNjIt
ZjE2ZjFhNzBhYjJkLzEvQV9nX1dWVm1uTENvR1B1c0FueG9LdXJ0WFhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZmJiMGYtNGE5YS00YzMwLThhNjItZjE2ZjFhNzBhYjJk
LzEvQV9nX1dWVm1uTENvR1B1c0FueG9LdXJ0WFhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfBFbh6Q
GWE5rQkMcTDG+TEw/JDnqgat9wmoA63qlaLprG8B+u8X62mXhmdrhqEfktrUylxc
Edk5USUbX3yxL0Zd2OV1g2vmWQsBCGjCSVNhXATIHEeCWvumIL2a5XYiWt+E9KzA
QJ3xAcEHavLTOeM8IIYEGakauDW3NomSiucDEjQQizgw/qFfcwiPoiQMotNaMcO4
cV6xq6p4DsDHnOf2f34rYsIlY75Kg1EfaNuJbWGEEp8mjxCyw4eSGuSRiLIPot2o
vJipJM4FcKRzMr0IO0nPMeC8MZ48ptBJJehskA8mAU/zwvWKFx+bkVU8fVbTMUVe
AbjrW2m4AOt0jQ==
-----END CERTIFICATE-----
Generated at Sun May 5 19:24:47 2024 by rpki-client on console-ams.rpki-client.org