Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
File:                     fM2Lj3l51soXEsHVCkDU5VXJThM.mft (raw, json)
Hash identifier:          R0oC9ErQ/F8og+DoVDVkLLiiDkSDPwCuBeo/hxaA6ys=
Subject key identifier:   D2:1F:9C:B1:53:F3:C4:4E:98:46:28:59:0C:FC:56:4D:5D:51:F4:C3
Authority key identifier: 7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
Certificate issuer:       /CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Certificate serial:       018F87ED808B167A89EEC07E432B1020603D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
Manifest number:          050B
Signing time:             Fri 17 May 2024 19:00:40 +0000
Manifest this update:     Fri 17 May 2024 19:00:40 +0000
Manifest next update:     Sat 18 May 2024 19:00:40 +0000
Files and hashes:         1: fM2Lj3l51soXEsHVCkDU5VXJThM.crl (hash: UFZP/5P01MhgSQwR0uwgrkMfepX2gDQy0RmTMTu5YQw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:80:8b:16:7a:89:ee:c0:7e:43:2b:10:20:60:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
        Validity
            Not Before: May 17 19:00:40 2024 GMT
            Not After : May 18 19:00:40 2024 GMT
        Subject: CN=d21f9cb153f3c44e984628590cfc564d5d51f4c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6e:e6:b7:9f:ef:cf:c9:56:b6:cf:6e:d6:be:
                    a0:0d:9a:0e:a1:f8:96:08:a3:4e:38:d2:a2:bd:f4:
                    a8:79:62:2c:26:d5:43:c6:bf:b0:06:48:9e:cb:4f:
                    87:53:82:18:ea:8d:b1:0a:7b:70:9e:e8:19:11:5f:
                    68:7d:3e:b6:ec:49:ae:56:ce:05:80:e1:59:3a:a5:
                    5e:fc:d5:8d:28:7b:96:13:3a:d4:4b:1b:55:33:b8:
                    ac:75:54:67:92:13:ed:4f:6a:e5:0d:04:a7:94:0e:
                    f5:59:28:af:b3:b0:95:01:4e:9c:44:46:05:e6:ec:
                    01:bd:cd:16:f1:12:99:a2:e4:b3:ba:fc:6e:78:45:
                    d6:9e:e2:94:71:a9:87:8d:8b:b0:73:12:15:ac:fa:
                    f0:2d:02:f5:06:e3:b5:34:f7:0e:4e:4f:7c:7b:a8:
                    b4:73:af:f6:ce:b6:ae:04:d2:0a:17:32:3c:82:67:
                    7d:ca:f5:9f:d8:66:dd:98:8b:74:16:df:42:5f:17:
                    13:17:ab:e2:c5:62:ab:a7:0e:ae:1b:e2:c5:95:00:
                    bd:52:35:cd:60:2e:01:7d:74:6c:f1:8b:9c:e7:ee:
                    ed:a0:da:2c:53:73:d3:d6:e1:bb:49:bc:e6:35:b3:
                    f1:3e:81:ad:81:e5:fa:69:33:8c:39:08:7b:d7:ff:
                    ab:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1F:9C:B1:53:F3:C4:4E:98:46:28:59:0C:FC:56:4D:5D:51:F4:C3
            X509v3 Authority Key Identifier:
                keyid:7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:15:60:e5:b8:2d:ec:3d:ba:a7:2b:a7:d5:69:2f:6c:dc:f0:
         f9:26:cd:43:0d:64:59:e1:02:6c:01:86:de:48:86:21:28:92:
         08:a8:d6:38:9c:42:5e:0d:d7:94:7b:0b:17:bd:89:b7:ad:a7:
         84:38:f7:7d:65:03:89:cf:49:1c:01:1c:17:dc:0e:39:fb:a0:
         db:78:1d:ee:b4:89:06:c3:e7:b1:37:eb:9b:95:22:f3:76:6c:
         a5:61:f7:2b:8a:c8:04:12:43:e7:01:5b:f9:80:9d:0a:a1:bd:
         b6:f5:93:45:81:66:4d:c2:d3:fb:77:ab:aa:f4:44:f1:91:12:
         13:5c:48:24:85:ce:04:31:3f:47:dd:23:08:1f:61:cc:12:f9:
         65:3b:30:0f:75:3b:c6:28:c0:c7:95:60:88:a6:75:f8:ea:e2:
         39:6d:b9:0d:d4:a4:28:94:ea:e7:97:4d:1b:ae:34:60:2d:07:
         e0:20:ff:17:1e:df:60:42:ef:11:74:3e:38:d0:9a:ab:f5:67:
         84:da:b3:b7:78:6a:d9:41:18:f8:90:a2:90:36:8b:fa:67:6d:
         b4:60:2e:3d:49:c9:f5:7d:1e:4f:99:81:76:31:f5:4e:1b:83:
         0a:41:f4:8e:a5:ca:e2:13:17:75:50:90:05:05:72:a7:90:21:
         24:dd:65:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7YCLFnqJ7sB+QysQIGA9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjY2Q4YjhmNzk3OWQ2Y2ExNzEyYzFkNTBhNDBkNGU1NTVj
OTRlMTMwHhcNMjQwNTE3MTkwMDQwWhcNMjQwNTE4MTkwMDQwWjAzMTEwLwYDVQQD
EyhkMjFmOWNiMTUzZjNjNDRlOTg0NjI4NTkwY2ZjNTY0ZDVkNTFmNGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG7mt5/vz8lWts9u1r6gDZoOofiW
CKNOONKivfSoeWIsJtVDxr+wBkiey0+HU4IY6o2xCntwnugZEV9ofT627EmuVs4F
gOFZOqVe/NWNKHuWEzrUSxtVM7isdVRnkhPtT2rlDQSnlA71WSivs7CVAU6cREYF
5uwBvc0W8RKZouSzuvxueEXWnuKUcamHjYuwcxIVrPrwLQL1BuO1NPcOTk98e6i0
c6/2zrauBNIKFzI8gmd9yvWf2GbdmIt0Ft9CXxcTF6vixWKrpw6uG+LFlQC9UjXN
YC4BfXRs8Yuc5+7toNosU3PT1uG7SbzmNbPxPoGtgeX6aTOMOQh71/+r0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIfnLFT88ROmEYoWQz8Vk1dUfTDMB8GA1UdIwQY
MBaAFHzNi495edbKFxLB1QpA1OVVyU4TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk0yTGozbDUxc29YRXNIVkNrRFU1VlhKVGhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS84MTE1NmMtYjgxNC00OGNmLWEwYzMt
Y2FiNzg2MDc3ZTgzLzEvZk0yTGozbDUxc29YRXNIVkNrRFU1VlhKVGhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS84MTE1NmMtYjgxNC00OGNmLWEwYzMtY2FiNzg2MDc3ZTgz
LzEvZk0yTGozbDUxc29YRXNIVkNrRFU1VlhKVGhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdhVg5bgt
7D26pyun1WkvbNzw+SbNQw1kWeECbAGG3kiGISiSCKjWOJxCXg3XlHsLF72Jt62n
hDj3fWUDic9JHAEcF9wOOfug23gd7rSJBsPnsTfrm5Ui83ZspWH3K4rIBBJD5wFb
+YCdCqG9tvWTRYFmTcLT+3erqvRE8ZESE1xIJIXOBDE/R90jCB9hzBL5ZTswD3U7
xijAx5VgiKZ1+OriOW25DdSkKJTq55dNG640YC0H4CD/Fx7fYELvEXQ+ONCaq/Vn
hNqzt3hq2UEY+JCikDaL+mdttGAuPUnJ9X0eT5mBdjH1ThuDCkH0jqXK4hMXdVCQ
BQVyp5AhJN1lsw==
-----END CERTIFICATE-----
Generated at Fri May 17 20:15:22 2024 by rpki-client on console-fra.rpki-client.org