Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1368bd-7a3b-4725-9583-38bcce2cd88b/1/foNIgaqBpJmvueLYIdZcbJIUc-4.mft
File:                     foNIgaqBpJmvueLYIdZcbJIUc-4.mft (raw, json)
Hash identifier:          e4ZlHkarbCk+ti8mSwCC/5AloT3i6kgXxi4mfpkBOfw=
Subject key identifier:   67:47:45:A7:E7:91:76:B7:67:D6:C2:D3:87:0C:71:68:3C:EE:D6:80
Authority key identifier: 7E:83:48:81:AA:81:A4:99:AF:B9:E2:D8:21:D6:5C:6C:92:14:73:EE
Certificate issuer:       /CN=7e834881aa81a499afb9e2d821d65c6c921473ee
Certificate serial:       018FB1207281EA97A96B700B9192AE646FEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/foNIgaqBpJmvueLYIdZcbJIUc-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/1368bd-7a3b-4725-9583-38bcce2cd88b/1/foNIgaqBpJmvueLYIdZcbJIUc-4.mft
Manifest number:          0419
Signing time:             Sat 25 May 2024 19:00:44 +0000
Manifest this update:     Sat 25 May 2024 19:00:44 +0000
Manifest next update:     Sun 26 May 2024 19:00:44 +0000
Files and hashes:         1: foNIgaqBpJmvueLYIdZcbJIUc-4.crl (hash: 1vBwHAxM2TyTkqAQLd2RjhQmvQ5N5F6+mPAmgBUG61Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/1368bd-7a3b-4725-9583-38bcce2cd88b/1/foNIgaqBpJmvueLYIdZcbJIUc-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/1368bd-7a3b-4725-9583-38bcce2cd88b/1/foNIgaqBpJmvueLYIdZcbJIUc-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/foNIgaqBpJmvueLYIdZcbJIUc-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 19:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b1:20:72:81:ea:97:a9:6b:70:0b:91:92:ae:64:6f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e834881aa81a499afb9e2d821d65c6c921473ee
        Validity
            Not Before: May 25 19:00:44 2024 GMT
            Not After : May 26 19:00:44 2024 GMT
        Subject: CN=674745a7e79176b767d6c2d3870c71683ceed680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a1:2a:ce:3e:d5:01:27:1a:21:74:e1:6f:58:
                    c7:29:92:8a:20:54:a4:cd:54:47:3b:cd:3b:f1:29:
                    b7:14:26:cf:60:53:07:97:07:ec:5d:d3:b8:36:7b:
                    6d:67:19:8a:b4:56:57:5d:62:4f:f7:4c:46:35:3c:
                    9e:09:12:de:81:35:33:38:f4:25:86:28:4d:d2:57:
                    80:52:25:71:27:ff:d3:de:85:dd:69:ca:ee:db:c2:
                    44:64:a4:d6:a8:b0:0d:c3:f0:58:b3:6b:62:ee:6a:
                    c1:55:f6:ef:3e:e9:5d:b3:0c:5e:15:18:85:29:f9:
                    60:d4:09:eb:da:8b:d7:a0:e2:7e:c2:99:c4:d2:ea:
                    52:6c:fc:ec:05:7d:4b:77:e7:a0:0a:68:49:50:5e:
                    66:cb:7e:b7:2d:e9:12:4e:81:97:0b:ac:94:7a:59:
                    a7:79:53:1e:22:9f:bc:ed:8b:56:6a:40:d3:18:2a:
                    4e:af:0b:1e:03:ca:8f:13:01:e5:7f:aa:25:aa:03:
                    93:4d:9f:4e:c1:9e:8d:4d:98:d5:fa:72:85:18:ab:
                    2b:a2:87:81:ee:84:8b:78:10:db:66:c8:11:39:ef:
                    66:3d:cb:6a:76:71:6e:2f:7d:fa:f9:dd:05:39:85:
                    62:80:9d:58:8e:69:d0:c9:01:52:2d:1e:88:33:85:
                    1a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:47:45:A7:E7:91:76:B7:67:D6:C2:D3:87:0C:71:68:3C:EE:D6:80
            X509v3 Authority Key Identifier:
                keyid:7E:83:48:81:AA:81:A4:99:AF:B9:E2:D8:21:D6:5C:6C:92:14:73:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/foNIgaqBpJmvueLYIdZcbJIUc-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1368bd-7a3b-4725-9583-38bcce2cd88b/1/foNIgaqBpJmvueLYIdZcbJIUc-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1368bd-7a3b-4725-9583-38bcce2cd88b/1/foNIgaqBpJmvueLYIdZcbJIUc-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d3:8b:c7:fc:d8:c9:94:cf:76:df:3b:12:fc:d6:b9:33:a9:
         07:b7:87:48:71:99:b8:f2:09:56:cc:55:e0:0b:a5:0a:9a:c4:
         3a:2d:21:f5:2b:fe:05:62:2b:24:7e:5d:cb:fb:fb:7f:a8:f7:
         93:ad:5e:de:f8:32:39:e6:64:cc:be:ee:ca:a6:19:4e:61:29:
         4e:14:37:a2:34:1f:ad:c5:60:71:46:f3:e8:74:11:a0:37:4d:
         de:a0:26:78:c7:a3:ee:b9:7e:5e:9b:af:bf:85:e3:2b:d8:94:
         f4:27:db:11:8e:98:3b:7d:bc:8c:27:77:cd:5e:f1:49:2d:98:
         93:72:0b:8e:9c:9a:59:21:ba:ca:a3:e1:00:ce:c8:9a:eb:6f:
         a6:48:1f:06:6c:91:bb:b0:ab:5d:1d:43:34:ee:cd:45:84:80:
         ca:ce:3f:dc:65:2c:13:d6:02:a2:60:75:55:9b:94:31:9c:9d:
         3e:ef:76:9a:5d:57:62:f7:d8:49:96:97:a3:c0:55:b0:38:a1:
         e7:e3:18:cc:13:9d:bc:28:5b:2f:05:f5:eb:6b:6b:b5:c6:13:
         48:08:b0:02:c8:0d:d5:7f:a5:f6:f8:5f:bf:4d:45:d4:fe:ee:
         f4:96:4a:0e:cf:38:41:69:91:0a:49:7f:eb:d4:91:c2:8a:90:
         8b:b1:bc:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+xIHKB6pepa3ALkZKuZG/rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlODM0ODgxYWE4MWE0OTlhZmI5ZTJkODIxZDY1YzZjOTIx
NDczZWUwHhcNMjQwNTI1MTkwMDQ0WhcNMjQwNTI2MTkwMDQ0WjAzMTEwLwYDVQQD
Eyg2NzQ3NDVhN2U3OTE3NmI3NjdkNmMyZDM4NzBjNzE2ODNjZWVkNjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aEqzj7VAScaIXThb1jHKZKKIFSk
zVRHO8078Sm3FCbPYFMHlwfsXdO4NnttZxmKtFZXXWJP90xGNTyeCRLegTUzOPQl
hihN0leAUiVxJ//T3oXdacru28JEZKTWqLANw/BYs2ti7mrBVfbvPuldswxeFRiF
Kflg1Anr2ovXoOJ+wpnE0upSbPzsBX1Ld+egCmhJUF5my363LekSToGXC6yUelmn
eVMeIp+87YtWakDTGCpOrwseA8qPEwHlf6olqgOTTZ9OwZ6NTZjV+nKFGKsrooeB
7oSLeBDbZsgROe9mPctqdnFuL336+d0FOYVigJ1YjmnQyQFSLR6IM4UauQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdHRafnkXa3Z9bC04cMcWg87taAMB8GA1UdIwQY
MBaAFH6DSIGqgaSZr7ni2CHWXGySFHPuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm9OSWdhcUJwSm12dWVMWUlkWmNiSklVYy00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMzY4YmQtN2EzYi00NzI1LTk1ODMt
MzhiY2NlMmNkODhiLzEvZm9OSWdhcUJwSm12dWVMWUlkWmNiSklVYy00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xMzY4YmQtN2EzYi00NzI1LTk1ODMtMzhiY2NlMmNkODhi
LzEvZm9OSWdhcUJwSm12dWVMWUlkWmNiSklVYy00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9OLx/zY
yZTPdt87EvzWuTOpB7eHSHGZuPIJVsxV4AulCprEOi0h9Sv+BWIrJH5dy/v7f6j3
k61e3vgyOeZkzL7uyqYZTmEpThQ3ojQfrcVgcUbz6HQRoDdN3qAmeMej7rl+Xpuv
v4XjK9iU9CfbEY6YO328jCd3zV7xSS2Yk3ILjpyaWSG6yqPhAM7ImutvpkgfBmyR
u7CrXR1DNO7NRYSAys4/3GUsE9YComB1VZuUMZydPu92ml1XYvfYSZaXo8BVsDih
5+MYzBOdvChbLwX162trtcYTSAiwAsgN1X+l9vhfv01F1P7u9JZKDs84QWmRCkl/
69SRwoqQi7G8Jg==
-----END CERTIFICATE-----
Generated at Sun May 26 03:51:24 2024 by rpki-client on console-fra.rpki-client.org