Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft
File:                     MWxm5C6ILUAfr6K_pCru56dEZ3c.mft (raw, json)
Hash identifier:          Uj2v3Dr4wu29JoEtvcwG+WKIRLhvsuhv7y+jUlYpVu8=
Subject key identifier:   B6:BF:93:E7:D6:66:57:90:01:D2:7D:8F:3A:F4:D9:62:A5:B0:C5:E1
Authority key identifier: 31:6C:66:E4:2E:88:2D:40:1F:AF:A2:BF:A4:2A:EE:E7:A7:44:67:77
Certificate issuer:       /CN=316c66e42e882d401fafa2bfa42aeee7a7446777
Certificate serial:       018FB1C7773101F9E0572856CAE92A1B41A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft
Manifest number:          10EE
Signing time:             Sat 25 May 2024 22:03:10 +0000
Manifest this update:     Sat 25 May 2024 22:03:10 +0000
Manifest next update:     Sun 26 May 2024 22:03:10 +0000
Files and hashes:         1: MWxm5C6ILUAfr6K_pCru56dEZ3c.crl (hash: pXzfi3s2C1kQcwJX6IglEVKmeuB6EftmKi+hFwV1PpI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 22:03:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b1:c7:77:31:01:f9:e0:57:28:56:ca:e9:2a:1b:41:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316c66e42e882d401fafa2bfa42aeee7a7446777
        Validity
            Not Before: May 25 22:03:10 2024 GMT
            Not After : May 26 22:03:10 2024 GMT
        Subject: CN=b6bf93e7d666579001d27d8f3af4d962a5b0c5e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:bb:d3:88:3b:5d:30:86:b4:6f:db:9a:b5:1e:
                    8e:51:ef:8e:ce:92:a0:c0:25:2e:19:80:15:5a:49:
                    00:a5:1f:66:30:cf:85:f7:30:70:ce:87:3a:07:23:
                    2c:d8:73:9c:20:c8:00:c6:53:bd:ad:49:e9:dd:44:
                    ab:a0:ce:58:7a:fe:ec:81:3d:39:7e:38:93:b5:25:
                    6b:94:08:47:e7:76:11:44:c6:bb:17:bf:3f:33:c1:
                    38:04:16:b5:df:f3:3f:8d:2f:d6:91:48:27:23:c1:
                    c5:18:c1:2a:80:31:28:9d:c6:cf:5a:21:fa:d2:ac:
                    00:6c:6d:58:c1:7a:c8:2f:63:ee:d8:d4:ed:96:19:
                    c7:d3:ae:d9:a8:32:19:78:e3:81:31:a5:6d:9a:8f:
                    c4:96:44:09:12:64:14:5e:9e:15:9b:72:b9:3f:d5:
                    10:d6:99:8b:01:f1:f3:2a:13:59:9e:42:fc:cf:7b:
                    e0:e6:13:7d:4b:3c:9c:f4:6e:25:d0:65:00:4d:50:
                    53:8b:c4:17:80:13:c8:77:01:97:4e:2b:11:25:03:
                    b9:36:1f:a3:00:3a:9a:5b:4d:05:52:d1:23:b7:32:
                    c9:5e:62:4a:9f:08:04:d1:50:f4:9b:ab:72:7b:4e:
                    b7:07:24:1c:f3:ca:a9:dd:e5:67:73:bc:b5:1e:79:
                    8d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BF:93:E7:D6:66:57:90:01:D2:7D:8F:3A:F4:D9:62:A5:B0:C5:E1
            X509v3 Authority Key Identifier:
                keyid:31:6C:66:E4:2E:88:2D:40:1F:AF:A2:BF:A4:2A:EE:E7:A7:44:67:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:ad:26:a5:2d:fe:f1:d9:64:08:d0:b5:a4:ac:55:0c:77:8c:
         b1:e7:fc:1f:19:17:fa:21:09:ea:4c:e0:2c:26:d2:4a:33:56:
         c0:b2:0a:09:13:02:7d:d7:82:f2:b9:29:3c:54:1b:ec:4b:2f:
         d9:18:bf:f0:62:c9:2b:8f:bf:e5:f4:03:f6:9b:9f:5d:32:9d:
         77:6d:7c:8a:a0:e5:d0:00:eb:90:11:5e:aa:6d:10:98:9e:f8:
         fe:21:01:eb:13:13:d7:00:58:58:9e:46:22:47:2d:10:fd:73:
         6e:16:8e:6b:81:16:c2:aa:84:ce:69:b9:86:83:72:58:e4:1d:
         67:8b:4b:b0:7f:14:f8:7d:27:a7:e1:a7:4a:5e:8e:a2:14:4c:
         82:6b:eb:1d:02:14:96:12:a9:b8:9e:50:28:06:23:18:87:ed:
         26:e4:1e:e5:1c:57:2c:3f:8e:03:f5:64:9b:1b:91:4c:f3:cd:
         a1:ee:52:75:b2:8b:40:1b:61:8b:db:17:f4:80:b5:56:02:c2:
         ff:07:27:a1:58:a5:ac:86:2b:74:b9:df:a8:a7:63:de:cc:ad:
         e7:ef:a4:02:eb:66:13:7f:ce:81:1a:af:92:30:3e:db:df:ad:
         48:f7:ab:12:73:18:f0:da:71:ed:a4:01:be:2b:5a:b7:39:84:
         d9:f1:a8:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+xx3cxAfngVyhWyukqG0GlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxNmM2NmU0MmU4ODJkNDAxZmFmYTJiZmE0MmFlZWU3YTc0
NDY3NzcwHhcNMjQwNTI1MjIwMzEwWhcNMjQwNTI2MjIwMzEwWjAzMTEwLwYDVQQD
EyhiNmJmOTNlN2Q2NjY1NzkwMDFkMjdkOGYzYWY0ZDk2MmE1YjBjNWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8bvTiDtdMIa0b9uatR6OUe+OzpKg
wCUuGYAVWkkApR9mMM+F9zBwzoc6ByMs2HOcIMgAxlO9rUnp3USroM5Yev7sgT05
fjiTtSVrlAhH53YRRMa7F78/M8E4BBa13/M/jS/WkUgnI8HFGMEqgDEoncbPWiH6
0qwAbG1YwXrIL2Pu2NTtlhnH067ZqDIZeOOBMaVtmo/ElkQJEmQUXp4Vm3K5P9UQ
1pmLAfHzKhNZnkL8z3vg5hN9Szyc9G4l0GUATVBTi8QXgBPIdwGXTisRJQO5Nh+j
ADqaW00FUtEjtzLJXmJKnwgE0VD0m6tye063ByQc88qp3eVnc7y1HnmNMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLa/k+fWZleQAdJ9jzr02WKlsMXhMB8GA1UdIwQY
MBaAFDFsZuQuiC1AH6+iv6Qq7uenRGd3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVd4bTVDNklMVUFmcjZLX3BDcnU1NmRFWjNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jMGY2NTItNWMxYy00YWZhLTg2Zjct
OThkNjEzYjhkZGJkLzEvTVd4bTVDNklMVUFmcjZLX3BDcnU1NmRFWjNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jMGY2NTItNWMxYy00YWZhLTg2ZjctOThkNjEzYjhkZGJk
LzEvTVd4bTVDNklMVUFmcjZLX3BDcnU1NmRFWjNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyK0mpS3+
8dlkCNC1pKxVDHeMsef8HxkX+iEJ6kzgLCbSSjNWwLIKCRMCfdeC8rkpPFQb7Esv
2Ri/8GLJK4+/5fQD9pufXTKdd218iqDl0ADrkBFeqm0QmJ74/iEB6xMT1wBYWJ5G
IkctEP1zbhaOa4EWwqqEzmm5hoNyWOQdZ4tLsH8U+H0np+GnSl6OohRMgmvrHQIU
lhKpuJ5QKAYjGIftJuQe5RxXLD+OA/VkmxuRTPPNoe5SdbKLQBthi9sX9IC1VgLC
/wcnoVilrIYrdLnfqKdj3syt5++kAutmE3/OgRqvkjA+29+tSPerEnMY8Npx7aQB
vitatzmE2fGo/Q==
-----END CERTIFICATE-----
Generated at Sun May 26 03:54:10 2024 by rpki-client on console-fra.rpki-client.org