Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
File:                     0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft (raw, json)
Hash identifier:          TeVgLm6atayNTsgbX18+NpmfJwQ21W7mK5E/15lGaM0=
Subject key identifier:   4C:63:CE:34:E9:2D:72:21:1A:D5:9E:77:EA:C9:D2:6B:6E:BF:08:AE
Authority key identifier: D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
Certificate issuer:       /CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Certificate serial:       018F497E4A6B123828CCA49A13DCDE7B749F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
Manifest number:          0E7D
Signing time:             Sun 05 May 2024 16:02:44 +0000
Manifest this update:     Sun 05 May 2024 16:02:44 +0000
Manifest next update:     Mon 06 May 2024 16:02:44 +0000
Files and hashes:         1: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl (hash: FH4hhFDz52q3I2Uz2LwmOPahKvjTLFJakrHA3A2q9Oo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:7e:4a:6b:12:38:28:cc:a4:9a:13:dc:de:7b:74:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
        Validity
            Not Before: May  5 16:02:44 2024 GMT
            Not After : May  6 16:02:44 2024 GMT
        Subject: CN=4c63ce34e92d72211ad59e77eac9d26b6ebf08ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:72:ae:8a:45:63:aa:b2:17:bf:43:a5:56:e9:
                    66:cf:f5:f2:35:22:52:ea:43:bc:ee:61:ea:25:94:
                    1a:2d:5a:dc:81:d9:22:9e:fc:d9:5c:76:96:67:61:
                    bb:41:c1:30:40:fa:2c:11:c3:d9:c7:cd:22:4a:94:
                    91:d1:17:32:22:9d:11:38:a0:1e:e2:69:bf:3e:22:
                    83:e0:da:57:16:ed:b7:84:c5:2b:42:79:71:cd:92:
                    3c:1e:ec:6e:03:a2:ca:b2:0e:a9:9a:7a:38:46:b0:
                    51:d2:52:b0:d6:b2:58:0d:18:61:d8:d6:ba:b2:e9:
                    8f:78:48:7c:30:d9:8e:04:b5:bd:98:85:d1:0d:9f:
                    ad:83:b4:ac:18:7d:0e:45:4b:b5:bf:9d:86:89:f7:
                    45:e7:63:56:72:77:35:51:1c:4a:2c:72:de:80:35:
                    82:91:4f:50:49:e0:24:f3:fb:00:39:84:9c:d5:5f:
                    32:6f:41:a2:b3:e2:b3:44:28:d4:fc:b1:b5:37:8f:
                    3d:eb:9b:87:5b:79:a9:25:d6:21:67:1c:54:6e:6b:
                    56:ea:ee:36:41:01:d9:44:3d:4a:42:d5:09:82:0b:
                    6f:d3:cd:0f:b7:f5:34:c2:fe:e5:ea:6b:96:3f:2d:
                    1e:d3:dc:fe:dc:58:fa:f9:3d:38:7e:60:82:a2:e9:
                    1f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:63:CE:34:E9:2D:72:21:1A:D5:9E:77:EA:C9:D2:6B:6E:BF:08:AE
            X509v3 Authority Key Identifier:
                keyid:D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:54:3f:ba:67:04:78:60:04:3b:50:50:9e:bd:94:4c:88:f4:
         3c:c0:ac:85:49:b4:31:b6:9f:86:04:ea:d6:60:32:45:24:4c:
         53:ea:f4:aa:be:ae:4e:33:44:ca:e9:7d:1d:90:55:cf:8f:bc:
         7b:ab:7c:c0:c4:b7:1e:05:52:f9:75:b5:c2:b5:25:67:74:bf:
         82:39:75:22:bc:b5:ad:03:7d:da:a1:19:6b:c3:af:f5:44:3e:
         ac:61:82:0e:c4:a6:6d:27:12:06:b5:85:e4:a8:85:2a:9b:4e:
         f3:00:31:e3:1f:fc:3d:d1:e8:4e:ff:14:f2:63:ca:2b:39:d8:
         af:0d:48:0b:04:1c:b6:b3:ec:2c:40:47:de:74:40:c4:b3:bf:
         5c:23:6c:dc:99:ac:7c:21:86:c4:9b:57:59:98:e5:8c:68:19:
         39:bf:9b:e1:08:93:1d:12:ac:f9:5f:1b:f7:87:e5:0d:96:d6:
         99:7d:e4:98:02:28:6f:fd:db:e8:e8:f2:7c:0f:0d:73:9a:ae:
         10:89:82:0c:de:08:75:9a:07:8e:2f:d7:2b:11:f1:70:b0:b0:
         60:be:77:66:f5:8f:04:95:84:6b:e0:0c:26:d0:59:36:02:35:
         4e:bc:04:3e:6c:56:9b:f0:d3:aa:0a:d3:51:45:4c:d4:bb:de:
         5e:a4:2a:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9JfkprEjgozKSaE9zee3SfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMmQ0ZDJmYjc1YTc1NTlhMjBmNzk1NDhjNDU4NTQyZmQw
YTlhNGMwHhcNMjQwNTA1MTYwMjQ0WhcNMjQwNTA2MTYwMjQ0WjAzMTEwLwYDVQQD
Eyg0YzYzY2UzNGU5MmQ3MjIxMWFkNTllNzdlYWM5ZDI2YjZlYmYwOGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HKuikVjqrIXv0OlVulmz/XyNSJS
6kO87mHqJZQaLVrcgdkinvzZXHaWZ2G7QcEwQPosEcPZx80iSpSR0RcyIp0ROKAe
4mm/PiKD4NpXFu23hMUrQnlxzZI8HuxuA6LKsg6pmno4RrBR0lKw1rJYDRhh2Na6
sumPeEh8MNmOBLW9mIXRDZ+tg7SsGH0ORUu1v52GifdF52NWcnc1URxKLHLegDWC
kU9QSeAk8/sAOYSc1V8yb0Gis+KzRCjU/LG1N48965uHW3mpJdYhZxxUbmtW6u42
QQHZRD1KQtUJggtv080Pt/U0wv7l6muWPy0e09z+3Fj6+T04fmCCoukfzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExjzjTpLXIhGtWed+rJ0mtuvwiuMB8GA1UdIwQY
MBaAFNEtTS+3WnVZog95VIxFhUL9CppMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81NzViZWYtOTcwYS00YjM3LWIxMmUt
MWVlY2Q1ODVkYjhjLzEvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi81NzViZWYtOTcwYS00YjM3LWIxMmUtMWVlY2Q1ODVkYjhj
LzEvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFQ/umcE
eGAEO1BQnr2UTIj0PMCshUm0MbafhgTq1mAyRSRMU+r0qr6uTjNEyul9HZBVz4+8
e6t8wMS3HgVS+XW1wrUlZ3S/gjl1Iry1rQN92qEZa8Ov9UQ+rGGCDsSmbScSBrWF
5KiFKptO8wAx4x/8PdHoTv8U8mPKKznYrw1ICwQctrPsLEBH3nRAxLO/XCNs3Jms
fCGGxJtXWZjljGgZOb+b4QiTHRKs+V8b94flDZbWmX3kmAIob/3b6OjyfA8Nc5qu
EImCDN4IdZoHji/XKxHxcLCwYL53ZvWPBJWEa+AMJtBZNgI1TrwEPmxWm/DTqgrT
UUVM1LveXqQqxw==
-----END CERTIFICATE-----
Generated at Sun May 5 16:52:24 2024 by rpki-client on console-ams.rpki-client.org