Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
File:                     H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft (raw, json)
Hash identifier:          LbSTxLCRP/8KRar/olpdj6YHgqm1kd1v37RYMUVhMqU=
Subject key identifier:   02:F5:2A:03:12:D1:05:36:F5:93:31:25:EC:98:E9:14:83:F6:EA:54
Authority key identifier: 1F:8C:D5:BD:A3:46:10:AD:AF:ED:1F:ED:43:A2:23:45:F0:76:7E:7F
Certificate issuer:       /CN=1f8cd5bda34610adafed1fed43a22345f0767e7f
Certificate serial:       018F3C66862128A62613E0D0E1282E5FD074
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
Manifest number:          1020
Signing time:             Fri 03 May 2024 03:01:42 +0000
Manifest this update:     Fri 03 May 2024 03:01:42 +0000
Manifest next update:     Sat 04 May 2024 03:01:42 +0000
Files and hashes:         1: H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl (hash: XUoXSNuLvqs9hFnZ2+nNjq/NjjYIR2BQ8Iy/Mq3JY08=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:66:86:21:28:a6:26:13:e0:d0:e1:28:2e:5f:d0:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f8cd5bda34610adafed1fed43a22345f0767e7f
        Validity
            Not Before: May  3 03:01:42 2024 GMT
            Not After : May  4 03:01:42 2024 GMT
        Subject: CN=02f52a0312d10536f5933125ec98e91483f6ea54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:dd:d1:c6:c1:98:62:30:1b:e2:37:61:4b:7e:
                    44:db:8b:a4:64:1d:91:1d:1c:b2:1b:3e:e6:43:23:
                    2c:0d:73:49:e5:b5:e9:60:71:4b:60:70:79:4f:3f:
                    f3:fe:bc:fc:34:bb:e5:b1:0c:8e:42:d4:2f:9d:c0:
                    e0:3f:44:75:50:91:d6:22:09:dc:19:f0:64:ec:9e:
                    fb:39:fe:08:1e:d8:00:c9:28:27:07:09:9c:42:97:
                    1c:01:e4:47:9e:02:72:2b:af:f7:da:05:80:54:9d:
                    9f:00:ec:06:b2:01:f3:f6:ea:8d:52:62:1b:34:0c:
                    7c:9f:9f:74:b6:ae:3c:56:a5:da:e6:32:1f:0d:a6:
                    a6:33:3d:07:cd:05:09:f4:bf:eb:b9:11:69:9f:af:
                    4d:b1:76:7d:b1:99:db:2a:cb:cd:77:b2:aa:61:4e:
                    aa:a3:86:4c:00:02:f1:11:78:28:41:8f:36:33:0a:
                    38:54:b6:08:34:40:38:9a:60:b1:b7:2e:0b:ce:b6:
                    0b:be:5c:8d:b9:b7:2c:20:31:7a:b6:46:02:4d:00:
                    91:d5:91:64:b7:90:f5:08:0f:75:be:c9:3d:fb:1e:
                    dd:cd:60:9d:cf:4d:2c:3d:22:05:d2:7e:9d:d4:4f:
                    55:8e:39:a5:9e:ee:32:69:52:84:19:2c:c8:17:b8:
                    ac:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F5:2A:03:12:D1:05:36:F5:93:31:25:EC:98:E9:14:83:F6:EA:54
            X509v3 Authority Key Identifier:
                keyid:1F:8C:D5:BD:A3:46:10:AD:AF:ED:1F:ED:43:A2:23:45:F0:76:7E:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:f3:fb:5f:08:38:1c:91:6e:63:cd:7a:70:a5:8c:07:90:60:
         fb:b7:7c:3b:a1:38:af:b3:53:d4:eb:76:7c:e1:6f:35:3f:66:
         5c:69:67:89:66:47:bd:97:69:63:7f:99:bc:22:ad:90:e0:37:
         ad:ad:8c:00:4d:96:8c:fc:6d:3e:c9:63:6e:00:58:43:37:40:
         8e:b9:4b:2c:89:bb:0d:2d:4e:56:d2:24:16:3a:bf:0f:db:97:
         fe:59:6d:ec:a4:17:29:d8:f3:45:68:d8:3d:65:70:33:28:82:
         a6:c6:68:fa:80:7d:0e:4a:b0:f8:14:ab:c9:33:4d:3e:21:c7:
         9e:c1:32:54:91:a1:d7:99:6b:4b:c9:3a:40:ba:fe:ca:83:d7:
         d9:20:b6:b0:a8:c8:75:fe:7e:11:63:c5:1c:f5:64:14:69:d2:
         5b:6b:95:8a:61:8e:f0:0d:e2:1d:94:81:b0:ff:cf:0c:a0:82:
         69:ab:db:81:d2:20:b7:97:5e:7c:33:8a:27:54:39:eb:e1:24:
         1e:47:9e:46:16:70:a0:e5:43:73:dc:fa:13:a6:ca:14:da:65:
         8d:02:34:38:e5:1f:ca:78:96:75:94:c9:3e:fe:a2:04:af:6f:
         42:27:b4:c4:39:51:e8:1a:02:68:c8:af:1d:0f:f3:da:53:89:
         ba:dd:53:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY88ZoYhKKYmE+DQ4SguX9B0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmOGNkNWJkYTM0NjEwYWRhZmVkMWZlZDQzYTIyMzQ1ZjA3
NjdlN2YwHhcNMjQwNTAzMDMwMTQyWhcNMjQwNTA0MDMwMTQyWjAzMTEwLwYDVQQD
EygwMmY1MmEwMzEyZDEwNTM2ZjU5MzMxMjVlYzk4ZTkxNDgzZjZlYTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAid3RxsGYYjAb4jdhS35E24ukZB2R
HRyyGz7mQyMsDXNJ5bXpYHFLYHB5Tz/z/rz8NLvlsQyOQtQvncDgP0R1UJHWIgnc
GfBk7J77Of4IHtgAySgnBwmcQpccAeRHngJyK6/32gWAVJ2fAOwGsgHz9uqNUmIb
NAx8n590tq48VqXa5jIfDaamMz0HzQUJ9L/ruRFpn69NsXZ9sZnbKsvNd7KqYU6q
o4ZMAALxEXgoQY82Mwo4VLYINEA4mmCxty4LzrYLvlyNubcsIDF6tkYCTQCR1ZFk
t5D1CA91vsk9+x7dzWCdz00sPSIF0n6d1E9Vjjmlnu4yaVKEGSzIF7isvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAL1KgMS0QU29ZMxJeyY6RSD9upUMB8GA1UdIwQY
MBaAFB+M1b2jRhCtr+0f7UOiI0Xwdn5/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDR6VnZhTkdFSzJ2N1JfdFE2SWpSZkIyZm44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My80OWM2MzAtODBkOC00OTU1LWJhNmUt
ZWU2ZGJmYTk4ZDJlLzEvSDR6VnZhTkdFSzJ2N1JfdFE2SWpSZkIyZm44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My80OWM2MzAtODBkOC00OTU1LWJhNmUtZWU2ZGJmYTk4ZDJl
LzEvSDR6VnZhTkdFSzJ2N1JfdFE2SWpSZkIyZm44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArPP7Xwg4
HJFuY816cKWMB5Bg+7d8O6E4r7NT1Ot2fOFvNT9mXGlniWZHvZdpY3+ZvCKtkOA3
ra2MAE2WjPxtPsljbgBYQzdAjrlLLIm7DS1OVtIkFjq/D9uX/llt7KQXKdjzRWjY
PWVwMyiCpsZo+oB9Dkqw+BSryTNNPiHHnsEyVJGh15lrS8k6QLr+yoPX2SC2sKjI
df5+EWPFHPVkFGnSW2uVimGO8A3iHZSBsP/PDKCCaavbgdIgt5defDOKJ1Q56+Ek
HkeeRhZwoOVDc9z6E6bKFNpljQI0OOUfyniWdZTJPv6iBK9vQie0xDlR6BoCaMiv
HQ/z2lOJut1T0Q==
-----END CERTIFICATE-----
Generated at Fri May 3 06:35:19 2024 by rpki-client on console-ams.rpki-client.org