Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft
File:                     dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft (raw, json)
Hash identifier:          ExmEPaLPDkaGK/Xz821E7PuP8LP4zzuBoL3CIHRVf1Q=
Subject key identifier:   21:E0:6D:71:D1:4C:E1:8F:53:43:31:6D:A2:A0:54:E0:4C:64:D6:33
Authority key identifier: 76:9C:74:45:F5:67:91:2C:E8:28:A5:F7:87:EC:94:4A:08:DB:FD:E3
Certificate issuer:       /CN=769c7445f567912ce828a5f787ec944a08dbfde3
Certificate serial:       018F8748FDF28A07BEED371A7EA977B37CD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dpx0RfVnkSzoKKX3h-yUSgjb_eM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft
Manifest number:          0D58
Signing time:             Fri 17 May 2024 16:00:58 +0000
Manifest this update:     Fri 17 May 2024 16:00:58 +0000
Manifest next update:     Sat 18 May 2024 16:00:58 +0000
Files and hashes:         1: dpx0RfVnkSzoKKX3h-yUSgjb_eM.crl (hash: 6a9YhlKoKNahNxPcwaPIyORekWb9D8g979kWlEHoLN8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dpx0RfVnkSzoKKX3h-yUSgjb_eM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:fd:f2:8a:07:be:ed:37:1a:7e:a9:77:b3:7c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=769c7445f567912ce828a5f787ec944a08dbfde3
        Validity
            Not Before: May 17 16:00:58 2024 GMT
            Not After : May 18 16:00:58 2024 GMT
        Subject: CN=21e06d71d14ce18f5343316da2a054e04c64d633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:92:bf:d4:8f:ec:1e:22:94:6b:3c:64:52:
                    d1:26:5f:f9:61:db:b4:8a:f2:16:7b:e1:a3:06:b1:
                    74:85:ee:de:23:6e:9c:ff:ea:d7:76:0f:f6:f6:7c:
                    fd:34:4e:e4:18:9d:56:96:9a:5e:7a:bf:bd:5e:e7:
                    c0:15:51:9c:d9:70:61:79:c1:6f:dd:2d:6f:bd:91:
                    26:bf:0b:43:ab:3f:c6:2b:ba:57:77:05:94:2c:23:
                    01:c8:8e:0e:9f:61:3c:79:97:45:6e:18:bf:40:a0:
                    dc:fd:3a:90:56:41:10:8a:c7:4b:03:88:ee:9f:84:
                    ec:12:ba:32:5e:cb:9e:52:39:b0:6d:a8:3c:0b:bc:
                    7d:1f:4f:ee:20:7d:c2:7c:74:32:69:1b:a4:89:8f:
                    33:16:96:c1:3a:18:02:4f:11:42:33:59:dc:27:91:
                    5b:d7:bc:3b:5a:2e:50:f5:4c:8f:2b:97:dc:85:20:
                    8b:5d:ee:3d:ec:16:61:c4:25:ba:39:94:d3:ed:2e:
                    cf:12:83:c6:57:b1:51:fa:e3:40:26:82:1b:29:24:
                    eb:2a:5e:5b:1f:53:47:12:24:c1:34:92:4b:10:e0:
                    2b:b3:fa:93:a0:89:52:7a:4c:3a:a4:a5:fa:56:af:
                    18:22:f3:33:60:a3:97:63:ad:e4:a4:1b:98:e5:f5:
                    24:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E0:6D:71:D1:4C:E1:8F:53:43:31:6D:A2:A0:54:E0:4C:64:D6:33
            X509v3 Authority Key Identifier:
                keyid:76:9C:74:45:F5:67:91:2C:E8:28:A5:F7:87:EC:94:4A:08:DB:FD:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpx0RfVnkSzoKKX3h-yUSgjb_eM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:99:a6:db:60:88:ae:59:c8:b2:ec:77:82:86:40:d4:70:d0:
         03:dc:2c:af:72:e0:e4:9e:d7:c4:a6:f4:1f:57:49:d6:ad:96:
         74:08:33:d8:71:ec:d6:b8:29:12:84:91:8b:02:53:b1:3b:dc:
         1f:cc:77:fd:0b:a7:b9:ef:b9:5a:97:a6:b8:bd:a5:06:d2:ad:
         7d:f7:53:f8:fe:1e:b4:f8:f6:f6:cb:47:cd:78:7a:8e:eb:c4:
         38:8e:f7:dd:89:9b:d1:4c:c4:67:4f:0e:eb:a2:b0:e6:0a:a2:
         ca:4d:d4:63:b6:b2:65:d4:87:e0:60:8f:2a:15:1f:f8:bd:b0:
         d6:00:6f:47:40:20:2f:07:92:02:4c:19:d7:ce:31:6a:c8:9e:
         29:a3:ae:ef:cf:e0:35:7d:79:c1:b1:cb:f5:0b:de:dc:f6:db:
         98:ac:a1:43:e5:4e:42:ee:26:b4:91:1f:d7:5c:4d:53:a5:cd:
         bd:29:84:ec:85:8b:a9:e1:a5:72:ab:d9:98:7c:df:1e:1b:2e:
         b2:49:ab:d9:59:8f:57:27:c0:48:41:ea:cd:90:8e:0d:17:5d:
         9e:46:93:46:1e:d5:1e:14:ab:e3:6e:ae:53:b5:cd:77:52:0f:
         1c:7c:ed:55:86:39:40:ca:d4:7d:a8:a1:5c:4d:96:3f:13:ab:
         5f:7b:ec:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSP3yige+7Tcafql3s3zSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2OWM3NDQ1ZjU2NzkxMmNlODI4YTVmNzg3ZWM5NDRhMDhk
YmZkZTMwHhcNMjQwNTE3MTYwMDU4WhcNMjQwNTE4MTYwMDU4WjAzMTEwLwYDVQQD
EygyMWUwNmQ3MWQxNGNlMThmNTM0MzMxNmRhMmEwNTRlMDRjNjRkNjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkuSv9SP7B4ilGs8ZFLRJl/5Ydu0
ivIWe+GjBrF0he7eI26c/+rXdg/29nz9NE7kGJ1Wlppeer+9XufAFVGc2XBhecFv
3S1vvZEmvwtDqz/GK7pXdwWULCMByI4On2E8eZdFbhi/QKDc/TqQVkEQisdLA4ju
n4TsEroyXsueUjmwbag8C7x9H0/uIH3CfHQyaRukiY8zFpbBOhgCTxFCM1ncJ5Fb
17w7Wi5Q9UyPK5fchSCLXe497BZhxCW6OZTT7S7PEoPGV7FR+uNAJoIbKSTrKl5b
H1NHEiTBNJJLEOArs/qToIlSekw6pKX6Vq8YIvMzYKOXY63kpBuY5fUk8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHgbXHRTOGPU0MxbaKgVOBMZNYzMB8GA1UdIwQY
MBaAFHacdEX1Z5Es6Cil94fslEoI2/3jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHB4MFJmVm5rU3pvS0tYM2gteVVTZ2piX2VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8wYjk3NzMtZjlkOC00ZDg3LTg3NzIt
NzAwOGJjOTdjN2IxLzEvZHB4MFJmVm5rU3pvS0tYM2gteVVTZ2piX2VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8wYjk3NzMtZjlkOC00ZDg3LTg3NzItNzAwOGJjOTdjN2Ix
LzEvZHB4MFJmVm5rU3pvS0tYM2gteVVTZ2piX2VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbJmm22CI
rlnIsux3goZA1HDQA9wsr3Lg5J7XxKb0H1dJ1q2WdAgz2HHs1rgpEoSRiwJTsTvc
H8x3/Qunue+5WpemuL2lBtKtffdT+P4etPj29stHzXh6juvEOI733Ymb0UzEZ08O
66Kw5gqiyk3UY7ayZdSH4GCPKhUf+L2w1gBvR0AgLweSAkwZ184xasieKaOu78/g
NX15wbHL9Qve3PbbmKyhQ+VOQu4mtJEf11xNU6XNvSmE7IWLqeGlcqvZmHzfHhsu
skmr2VmPVyfASEHqzZCODRddnkaTRh7VHhSr426uU7XNd1IPHHztVYY5QMrUfaih
XE2WPxOrX3vsIg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:08:33 2024 by rpki-client on console-ams.rpki-client.org