Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
File:                     FMFDiPKGLX4nqH_m9gHjTzRXI04.mft (raw, json)
Hash identifier:          DNGioyXzMKTLtASuElzXL/h79XF6fvahthTEHRdv9+M=
Subject key identifier:   CB:6A:17:2A:67:18:F6:3A:D2:AE:7F:A5:69:FB:39:0F:F1:D9:43:8E
Authority key identifier: 14:C1:43:88:F2:86:2D:7E:27:A8:7F:E6:F6:01:E3:4F:34:57:23:4E
Certificate issuer:       /CN=14c14388f2862d7e27a87fe6f601e34f3457234e
Certificate serial:       018F30CF959FAB13A396EA00295DEF63CE30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
Manifest number:          05C4
Signing time:             Tue 30 Apr 2024 21:01:01 +0000
Manifest this update:     Tue 30 Apr 2024 21:01:01 +0000
Manifest next update:     Wed 01 May 2024 21:01:01 +0000
Files and hashes:         1: FMFDiPKGLX4nqH_m9gHjTzRXI04.crl (hash: i7PtVEV6OBHsrXQxKDsoY9iEMEIoOUKNAWuARP5dU+4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 13:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:30:cf:95:9f:ab:13:a3:96:ea:00:29:5d:ef:63:ce:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14c14388f2862d7e27a87fe6f601e34f3457234e
        Validity
            Not Before: Apr 30 21:01:01 2024 GMT
            Not After : May  1 21:01:01 2024 GMT
        Subject: CN=cb6a172a6718f63ad2ae7fa569fb390ff1d9438e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c2:9f:72:fc:7b:78:28:0f:d8:f9:45:85:87:
                    9d:f3:5a:34:23:d7:03:a0:17:78:f8:38:89:4c:c4:
                    64:f9:e1:2c:33:19:b0:b4:e6:0a:30:8b:50:2a:82:
                    76:3f:4e:d9:a0:a6:65:11:10:c1:51:12:80:6b:16:
                    91:e4:aa:fa:09:e5:f1:21:21:08:5a:39:8e:3e:2a:
                    93:0d:e5:89:53:1c:fb:53:4f:96:01:30:60:8a:f1:
                    7a:e0:cc:a1:32:40:54:fc:d0:d0:71:38:fe:90:79:
                    b8:79:54:d1:b6:60:d6:b7:28:36:09:99:6a:85:6d:
                    fb:96:ee:0c:f8:7a:91:14:d5:ce:b4:22:f9:48:df:
                    4e:59:69:9a:06:b7:f7:cb:16:74:f8:40:61:b1:93:
                    c2:b4:28:eb:03:70:8a:e0:b1:a2:40:8d:1a:fd:bd:
                    76:dd:7e:7e:8a:54:ce:5d:7b:ab:1f:6d:70:2e:fd:
                    ca:f2:b3:3b:0a:46:0f:1b:9d:8a:85:73:9f:12:5e:
                    a7:12:0d:2f:98:ea:a5:51:10:90:53:62:a1:45:1e:
                    c5:bd:ec:1f:c6:b3:ee:ad:d0:46:c6:30:ad:be:ad:
                    bc:be:bd:d4:c2:e5:c4:e0:ad:2f:f3:99:da:0d:99:
                    a6:c2:ba:32:6c:76:bd:d9:1e:d5:16:46:ca:55:90:
                    8b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6A:17:2A:67:18:F6:3A:D2:AE:7F:A5:69:FB:39:0F:F1:D9:43:8E
            X509v3 Authority Key Identifier:
                keyid:14:C1:43:88:F2:86:2D:7E:27:A8:7F:E6:F6:01:E3:4F:34:57:23:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ae:28:9b:6a:f9:70:06:95:af:96:d9:c5:64:cc:ac:d3:1e:
         24:b3:82:55:ee:32:56:bd:e0:1d:77:a9:6a:16:fa:de:62:2b:
         e2:ae:66:9c:78:47:08:3e:d7:47:dd:7d:40:cc:74:87:c6:3b:
         de:de:a7:7d:8a:82:f7:53:45:a9:62:b1:5b:18:ec:70:d6:4e:
         25:6e:71:3a:35:c5:ca:3b:16:b5:01:4f:5d:ce:8f:a2:63:f0:
         7e:75:1e:fc:9f:c0:19:78:cf:bf:36:04:24:74:fc:df:b3:d7:
         05:84:e3:e4:0e:29:0f:c2:99:30:35:47:3f:4c:d6:47:6e:85:
         65:90:bf:1b:dd:23:29:26:a9:ba:8e:3b:b3:24:9d:02:5c:bd:
         b5:e4:4f:81:95:dc:39:8f:f3:53:a8:76:88:83:f4:02:fd:79:
         01:dc:bc:99:1a:aa:97:03:d9:5e:18:66:f5:d6:89:56:9d:ea:
         fe:57:0b:28:4b:4e:2a:de:f2:3b:a1:80:5a:ee:0c:97:a4:c6:
         87:5e:4f:9b:5b:a5:67:0e:77:7b:56:12:d7:63:0e:75:ea:99:
         a9:5b:5c:e6:d4:1f:47:53:2f:f3:e1:53:9d:f0:2c:a9:24:b9:
         30:46:dc:64:fc:0d:ae:94:ec:93:c3:4f:c6:62:68:7e:b3:74:
         af:eb:7a:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8wz5WfqxOjluoAKV3vY84wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YzE0Mzg4ZjI4NjJkN2UyN2E4N2ZlNmY2MDFlMzRmMzQ1
NzIzNGUwHhcNMjQwNDMwMjEwMTAxWhcNMjQwNTAxMjEwMTAxWjAzMTEwLwYDVQQD
EyhjYjZhMTcyYTY3MThmNjNhZDJhZTdmYTU2OWZiMzkwZmYxZDk0MzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58Kfcvx7eCgP2PlFhYed81o0I9cD
oBd4+DiJTMRk+eEsMxmwtOYKMItQKoJ2P07ZoKZlERDBURKAaxaR5Kr6CeXxISEI
WjmOPiqTDeWJUxz7U0+WATBgivF64MyhMkBU/NDQcTj+kHm4eVTRtmDWtyg2CZlq
hW37lu4M+HqRFNXOtCL5SN9OWWmaBrf3yxZ0+EBhsZPCtCjrA3CK4LGiQI0a/b12
3X5+ilTOXXurH21wLv3K8rM7CkYPG52KhXOfEl6nEg0vmOqlURCQU2KhRR7Fvewf
xrPurdBGxjCtvq28vr3UwuXE4K0v85naDZmmwroybHa92R7VFkbKVZCLIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtqFypnGPY60q5/pWn7OQ/x2UOOMB8GA1UdIwQY
MBaAFBTBQ4jyhi1+J6h/5vYB4080VyNOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk1GRGlQS0dMWDRucUhfbTlnSGpUelJYSTA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYTZhMGYtYjljNy00ZjQwLTllM2Mt
ODhhNGJlN2E0Y2IzLzEvRk1GRGlQS0dMWDRucUhfbTlnSGpUelJYSTA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9iYTZhMGYtYjljNy00ZjQwLTllM2MtODhhNGJlN2E0Y2Iz
LzEvRk1GRGlQS0dMWDRucUhfbTlnSGpUelJYSTA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ64om2r5
cAaVr5bZxWTMrNMeJLOCVe4yVr3gHXepahb63mIr4q5mnHhHCD7XR919QMx0h8Y7
3t6nfYqC91NFqWKxWxjscNZOJW5xOjXFyjsWtQFPXc6PomPwfnUe/J/AGXjPvzYE
JHT837PXBYTj5A4pD8KZMDVHP0zWR26FZZC/G90jKSapuo47sySdAly9teRPgZXc
OY/zU6h2iIP0Av15Ady8mRqqlwPZXhhm9daJVp3q/lcLKEtOKt7yO6GAWu4Ml6TG
h15Pm1ulZw53e1YS12MOdeqZqVtc5tQfR1Mv8+FTnfAsqSS5MEbcZPwNrpTsk8NP
xmJofrN0r+t6+g==
-----END CERTIFICATE-----
Generated at Tue Apr 30 21:52:39 2024 by rpki-client on console-fra.rpki-client.org