Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft
File:                     rARWSrE5dm8d7mSLNaChi702IQk.mft (raw, json)
Hash identifier:          DwNwkiybza0EPwh1ViiCctq73ukNjWQeCKI8/kDZ9hY=
Subject key identifier:   D0:40:2B:87:DC:52:F8:66:C9:69:C0:B0:0B:1E:61:E2:53:6A:7F:F2
Authority key identifier: AC:04:56:4A:B1:39:76:6F:1D:EE:64:8B:35:A0:A1:8B:BD:36:21:09
Certificate issuer:       /CN=ac04564ab139766f1dee648b35a0a18bbd362109
Certificate serial:       018F87B65ECD4688297B4E8A8515AB03DB82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rARWSrE5dm8d7mSLNaChi702IQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 18:00:26 +0000
Manifest this update:     Fri 17 May 2024 18:00:26 +0000
Manifest next update:     Sat 18 May 2024 18:00:26 +0000
Files and hashes:         1: rARWSrE5dm8d7mSLNaChi702IQk.crl (hash: fUqpqHT2+SoFtKnfLMajQTWa0DgLDX1gviDfE7yhSo0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rARWSrE5dm8d7mSLNaChi702IQk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:5e:cd:46:88:29:7b:4e:8a:85:15:ab:03:db:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac04564ab139766f1dee648b35a0a18bbd362109
        Validity
            Not Before: May 17 18:00:26 2024 GMT
            Not After : May 18 18:00:26 2024 GMT
        Subject: CN=d0402b87dc52f866c969c0b00b1e61e2536a7ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:24:6a:4e:30:12:ec:9b:ec:36:40:70:1b:03:
                    64:83:d6:4e:63:ce:7b:b7:05:2e:23:ad:de:4d:8a:
                    44:4c:8b:1b:02:34:3d:c1:05:0e:dc:5c:91:c6:7b:
                    8c:2d:39:3d:08:4a:eb:66:3a:50:e4:86:ab:bc:e0:
                    99:24:3c:32:a2:3f:58:99:f7:a4:ed:ab:e6:5e:bd:
                    84:c1:7d:45:83:fb:ad:24:53:6f:9a:80:72:9d:a5:
                    6e:30:3a:a1:eb:01:81:f3:d5:6e:43:d1:70:86:5c:
                    dd:52:8c:a6:2f:f0:d5:c4:f3:4b:2d:10:de:11:66:
                    9a:84:8c:4b:81:20:7b:9a:37:2b:45:27:aa:8f:e2:
                    b4:f4:4a:b2:df:96:8f:9e:d7:69:4e:c4:1f:d0:a4:
                    ef:1f:53:0f:72:c6:f9:d3:04:0e:fa:02:7b:52:66:
                    32:1a:9d:f8:5d:53:d8:66:ce:79:0b:e1:74:28:53:
                    3c:70:cf:12:04:47:29:9b:4e:76:73:25:88:38:e8:
                    0a:e0:8f:9f:cd:52:9d:1c:e3:c7:46:59:16:da:e8:
                    60:65:54:65:29:31:47:cb:ff:59:ea:f5:ac:92:ac:
                    a6:76:cf:01:24:9f:80:e4:6f:ed:13:22:a5:03:e0:
                    80:18:ac:51:89:4c:fa:4a:6a:7b:f5:36:98:0e:11:
                    2e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:40:2B:87:DC:52:F8:66:C9:69:C0:B0:0B:1E:61:E2:53:6A:7F:F2
            X509v3 Authority Key Identifier:
                keyid:AC:04:56:4A:B1:39:76:6F:1D:EE:64:8B:35:A0:A1:8B:BD:36:21:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rARWSrE5dm8d7mSLNaChi702IQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:86:0e:4e:4b:eb:e2:db:9b:d3:ce:2e:f4:b6:bf:72:37:74:
         2d:a5:32:9f:48:01:75:8b:6b:47:2e:bb:e7:77:70:a9:89:cf:
         11:d3:01:ac:af:57:37:e6:31:f5:8f:81:4b:43:f8:0a:6e:67:
         59:85:5a:48:90:be:82:0b:3d:3a:a4:ce:25:04:40:6d:74:63:
         95:09:e3:1a:48:ce:04:81:fe:26:ba:3a:ec:68:ba:c4:9f:78:
         c2:42:cf:8a:e0:d8:91:5d:88:56:93:f6:68:ce:f0:93:af:1a:
         85:d7:6f:3c:90:16:bb:48:bf:31:9c:da:47:e8:a2:f8:fe:24:
         38:c9:6e:23:d3:5d:ff:53:1f:96:9c:e9:e1:bc:9c:a2:86:06:
         9b:99:09:10:84:b5:d9:3b:ec:2c:e2:38:10:84:ec:2c:aa:24:
         d9:f3:1c:d9:a0:c7:1b:d6:f1:68:f4:7f:0c:73:ed:9f:26:5e:
         55:70:5e:7b:89:56:c9:4f:42:f6:7e:bd:8e:4d:28:ab:fc:93:
         35:3e:ee:a9:ef:0a:47:b8:63:60:fb:72:76:8e:ba:e9:35:aa:
         dc:ce:d8:c7:6d:00:2b:4c:d6:22:85:b6:b0:7b:82:5c:b7:cb:
         c9:ee:e1:87:06:e1:e6:4c:b1:43:9d:5b:ff:c5:9f:13:8c:87:
         58:7d:60:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Htl7NRogpe06KhRWrA9uCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMDQ1NjRhYjEzOTc2NmYxZGVlNjQ4YjM1YTBhMThiYmQz
NjIxMDkwHhcNMjQwNTE3MTgwMDI2WhcNMjQwNTE4MTgwMDI2WjAzMTEwLwYDVQQD
EyhkMDQwMmI4N2RjNTJmODY2Yzk2OWMwYjAwYjFlNjFlMjUzNmE3ZmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiRqTjAS7JvsNkBwGwNkg9ZOY857
twUuI63eTYpETIsbAjQ9wQUO3FyRxnuMLTk9CErrZjpQ5IarvOCZJDwyoj9Ymfek
7avmXr2EwX1Fg/utJFNvmoBynaVuMDqh6wGB89VuQ9FwhlzdUoymL/DVxPNLLRDe
EWaahIxLgSB7mjcrRSeqj+K09Eqy35aPntdpTsQf0KTvH1MPcsb50wQO+gJ7UmYy
Gp34XVPYZs55C+F0KFM8cM8SBEcpm052cyWIOOgK4I+fzVKdHOPHRlkW2uhgZVRl
KTFHy/9Z6vWskqymds8BJJ+A5G/tEyKlA+CAGKxRiUz6Smp79TaYDhEuZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBAK4fcUvhmyWnAsAseYeJTan/yMB8GA1UdIwQY
MBaAFKwEVkqxOXZvHe5kizWgoYu9NiEJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckFSV1NyRTVkbThkN21TTE5hQ2hpNzAySVFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80NjY4ZDEtMjJhNC00MzJlLTgxZmMt
Mjg0ZTliY2Y4MmM1LzEvckFSV1NyRTVkbThkN21TTE5hQ2hpNzAySVFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80NjY4ZDEtMjJhNC00MzJlLTgxZmMtMjg0ZTliY2Y4MmM1
LzEvckFSV1NyRTVkbThkN21TTE5hQ2hpNzAySVFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4YOTkvr
4tub084u9La/cjd0LaUyn0gBdYtrRy6753dwqYnPEdMBrK9XN+Yx9Y+BS0P4Cm5n
WYVaSJC+ggs9OqTOJQRAbXRjlQnjGkjOBIH+Jro67Gi6xJ94wkLPiuDYkV2IVpP2
aM7wk68ahddvPJAWu0i/MZzaR+ii+P4kOMluI9Nd/1Mflpzp4bycooYGm5kJEIS1
2TvsLOI4EITsLKok2fMc2aDHG9bxaPR/DHPtnyZeVXBee4lWyU9C9n69jk0oq/yT
NT7uqe8KR7hjYPtydo666TWq3M7Yx20AK0zWIoW2sHuCXLfLye7hhwbh5kyxQ51b
/8WfE4yHWH1g0Q==
-----END CERTIFICATE-----