Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft
File:                     FsF7vpSeJS3Q4skgr13ij96HRxw.mft (raw, json)
Hash identifier:          Rxbz6pVujP6L1gh8edXsXx0+fYakinVW9c+FKppNoT8=
Subject key identifier:   D4:84:FE:C6:F5:95:2F:D4:31:A0:B8:E2:3C:15:6A:77:9B:C5:55:D4
Authority key identifier: 16:C1:7B:BE:94:9E:25:2D:D0:E2:C9:20:AF:5D:E2:8F:DE:87:47:1C
Certificate issuer:       /CN=16c17bbe949e252dd0e2c920af5de28fde87471c
Certificate serial:       018F497F5C6E2B439409EADF0FE914515991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft
Manifest number:          1155
Signing time:             Sun 05 May 2024 16:03:54 +0000
Manifest this update:     Sun 05 May 2024 16:03:54 +0000
Manifest next update:     Mon 06 May 2024 16:03:54 +0000
Files and hashes:         1: FsF7vpSeJS3Q4skgr13ij96HRxw.crl (hash: WqvuwoE5XPTVfKMjXMI/A2GN7lIXberXa7w3RDURTEg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:7f:5c:6e:2b:43:94:09:ea:df:0f:e9:14:51:59:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16c17bbe949e252dd0e2c920af5de28fde87471c
        Validity
            Not Before: May  5 16:03:54 2024 GMT
            Not After : May  6 16:03:54 2024 GMT
        Subject: CN=d484fec6f5952fd431a0b8e23c156a779bc555d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1e:27:a5:80:16:a5:17:ab:c3:73:f9:94:f8:
                    e5:01:12:d1:95:5f:99:f8:8c:54:be:88:0c:f0:7e:
                    3b:ec:da:f8:c1:1e:6c:da:68:ad:c3:8b:c5:ea:1c:
                    d9:98:11:2c:80:52:de:73:e0:b8:8c:e4:d9:65:30:
                    10:0f:07:9f:c9:53:27:cf:6c:61:a5:21:18:65:4f:
                    4b:5a:67:33:3a:55:22:3f:c2:da:70:ab:71:61:33:
                    31:1c:ca:b3:4c:e4:8b:37:ed:53:a6:b3:92:d7:26:
                    92:85:58:8a:48:e9:3a:64:aa:bf:fe:3a:6d:90:34:
                    27:40:97:89:cb:68:c2:6d:da:6f:29:6b:c9:d4:03:
                    74:b8:15:ca:e9:9c:6b:da:90:4e:82:72:20:db:61:
                    3e:1a:a5:c6:0f:c2:7d:c6:ff:9a:a1:c0:77:8e:76:
                    12:10:46:7d:34:71:d3:11:0c:f4:c9:44:bb:d5:53:
                    ab:7a:44:9c:ea:6f:26:d6:0a:3e:6b:6e:91:f7:b1:
                    c2:7e:e2:7e:31:04:1e:ec:07:d1:38:e9:99:59:11:
                    9d:2b:b8:6b:98:48:4c:f5:a2:12:f8:f9:f0:a4:bc:
                    91:fe:dd:99:05:d3:a3:5f:37:b1:1a:75:a9:b0:e8:
                    dd:e6:bb:8f:c8:ff:b1:cd:70:3a:a8:ee:c8:06:54:
                    ac:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:84:FE:C6:F5:95:2F:D4:31:A0:B8:E2:3C:15:6A:77:9B:C5:55:D4
            X509v3 Authority Key Identifier:
                keyid:16:C1:7B:BE:94:9E:25:2D:D0:E2:C9:20:AF:5D:E2:8F:DE:87:47:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:a3:0b:83:a5:99:51:8c:0c:05:0b:57:e2:52:96:30:3f:ab:
         22:cd:b5:ca:6c:25:87:10:fe:10:50:fc:84:55:70:91:5a:74:
         45:37:d6:bc:d2:30:32:99:ea:32:a4:58:c9:92:7d:fc:71:90:
         61:24:47:8b:22:a4:4c:5b:0b:7f:4f:dc:6c:ee:79:a3:c2:61:
         a0:6e:82:69:d1:2e:f6:39:b4:b5:15:65:2a:d8:1f:bf:1b:84:
         9d:a9:b1:8b:03:ed:4f:fd:b7:20:cc:56:c3:73:f7:0b:25:b5:
         59:7e:95:bf:d9:36:ca:07:71:02:7f:b5:56:69:d8:e5:9b:f8:
         4d:5a:f4:0a:6e:9a:76:13:6b:9d:2b:14:d6:e7:80:d7:ae:49:
         ed:c4:21:ad:8c:7d:2e:11:a2:14:00:52:81:51:75:77:4f:1b:
         f0:24:33:63:c3:5e:d0:d4:14:db:fc:96:51:bc:a1:24:de:46:
         ed:97:45:fa:eb:33:e4:90:2e:3b:90:b3:12:94:4a:b8:37:45:
         da:a3:1c:8f:05:43:54:d9:25:d9:05:63:e9:36:86:fe:e5:11:
         8f:ce:4d:af:36:df:24:28:e5:bf:ee:3c:9a:f3:ff:76:16:b3:
         1b:59:26:6e:99:e1:9c:fb:b6:f8:17:84:6c:4a:fe:2b:ab:d8:
         fa:2b:ac:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Jf1xuK0OUCerfD+kUUVmRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YzE3YmJlOTQ5ZTI1MmRkMGUyYzkyMGFmNWRlMjhmZGU4
NzQ3MWMwHhcNMjQwNTA1MTYwMzU0WhcNMjQwNTA2MTYwMzU0WjAzMTEwLwYDVQQD
EyhkNDg0ZmVjNmY1OTUyZmQ0MzFhMGI4ZTIzYzE1NmE3NzliYzU1NWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh4npYAWpRerw3P5lPjlARLRlV+Z
+IxUvogM8H477Nr4wR5s2mitw4vF6hzZmBEsgFLec+C4jOTZZTAQDwefyVMnz2xh
pSEYZU9LWmczOlUiP8LacKtxYTMxHMqzTOSLN+1TprOS1yaShViKSOk6ZKq//jpt
kDQnQJeJy2jCbdpvKWvJ1AN0uBXK6Zxr2pBOgnIg22E+GqXGD8J9xv+aocB3jnYS
EEZ9NHHTEQz0yUS71VOrekSc6m8m1go+a26R97HCfuJ+MQQe7AfROOmZWRGdK7hr
mEhM9aIS+PnwpLyR/t2ZBdOjXzexGnWpsOjd5ruPyP+xzXA6qO7IBlSs6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSE/sb1lS/UMaC44jwVanebxVXUMB8GA1UdIwQY
MBaAFBbBe76UniUt0OLJIK9d4o/eh0ccMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnNGN3ZwU2VKUzNRNHNrZ3IxM2lqOTZIUnh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lOWM5ODgtYWRkNS00YTQ0LWEyOWMt
N2Y1OWJjNjBlMzAwLzEvRnNGN3ZwU2VKUzNRNHNrZ3IxM2lqOTZIUnh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9lOWM5ODgtYWRkNS00YTQ0LWEyOWMtN2Y1OWJjNjBlMzAw
LzEvRnNGN3ZwU2VKUzNRNHNrZ3IxM2lqOTZIUnh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANKMLg6WZ
UYwMBQtX4lKWMD+rIs21ymwlhxD+EFD8hFVwkVp0RTfWvNIwMpnqMqRYyZJ9/HGQ
YSRHiyKkTFsLf0/cbO55o8JhoG6CadEu9jm0tRVlKtgfvxuEnamxiwPtT/23IMxW
w3P3CyW1WX6Vv9k2ygdxAn+1VmnY5Zv4TVr0Cm6adhNrnSsU1ueA165J7cQhrYx9
LhGiFABSgVF1d08b8CQzY8Ne0NQU2/yWUbyhJN5G7ZdF+usz5JAuO5CzEpRKuDdF
2qMcjwVDVNkl2QVj6TaG/uURj85NrzbfJCjlv+48mvP/dhazG1kmbpnhnPu2+BeE
bEr+K6vY+iusIQ==
-----END CERTIFICATE-----
Generated at Sun May 5 16:52:54 2024 by rpki-client on console-ams.rpki-client.org