Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8fb61b-7170-43ef-8657-9bbf8e5e4133/1/If9YUL77ysK6MyWCSdG7_xv_RPM.mft
File:                     If9YUL77ysK6MyWCSdG7_xv_RPM.mft (raw, json)
Hash identifier:          a6V1A49TYEGSNY/noQ4uXtxsGpVGwqaVf4A4Ly3Trgs=
Subject key identifier:   8D:43:F9:96:EB:DB:49:AC:45:06:FA:CF:BC:66:0A:02:DB:52:7E:B7
Authority key identifier: 21:FF:58:50:BE:FB:CA:C2:BA:33:25:82:49:D1:BB:FF:1B:FF:44:F3
Certificate issuer:       /CN=21ff5850befbcac2ba33258249d1bbff1bff44f3
Certificate serial:       018F43E89008BC9EB7FAF6865DF92F44F060
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/If9YUL77ysK6MyWCSdG7_xv_RPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/8fb61b-7170-43ef-8657-9bbf8e5e4133/1/If9YUL77ysK6MyWCSdG7_xv_RPM.mft
Manifest number:          0CFE
Signing time:             Sat 04 May 2024 14:01:05 +0000
Manifest this update:     Sat 04 May 2024 14:01:05 +0000
Manifest next update:     Sun 05 May 2024 14:01:05 +0000
Files and hashes:         1: If9YUL77ysK6MyWCSdG7_xv_RPM.crl (hash: XmSwX6IJntib/yOVLSNI3j+x4DmpVDqFVIi8imSU1Ls=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/8fb61b-7170-43ef-8657-9bbf8e5e4133/1/If9YUL77ysK6MyWCSdG7_xv_RPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/8fb61b-7170-43ef-8657-9bbf8e5e4133/1/If9YUL77ysK6MyWCSdG7_xv_RPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/If9YUL77ysK6MyWCSdG7_xv_RPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:e8:90:08:bc:9e:b7:fa:f6:86:5d:f9:2f:44:f0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21ff5850befbcac2ba33258249d1bbff1bff44f3
        Validity
            Not Before: May  4 14:01:05 2024 GMT
            Not After : May  5 14:01:05 2024 GMT
        Subject: CN=8d43f996ebdb49ac4506facfbc660a02db527eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f2:76:0a:25:cd:ce:e6:88:cd:a0:21:b4:ab:
                    13:aa:4a:e9:87:5c:c8:ff:5c:65:2b:4c:67:54:f9:
                    54:29:26:4d:35:af:9a:b0:45:2a:26:d5:e6:10:cd:
                    8c:b9:a6:2e:8b:96:6b:ec:bb:d9:30:c8:44:0b:83:
                    72:14:df:cf:ba:ce:15:d8:ee:54:83:15:a1:94:f5:
                    cb:ec:2e:74:8d:6e:9f:99:6f:95:81:da:38:62:f1:
                    e6:87:d5:61:01:81:c7:f3:75:45:0d:d0:d9:b3:83:
                    8a:53:05:41:af:cf:2b:88:e4:be:6e:15:ca:7b:37:
                    45:18:7b:e0:f0:cb:ea:28:f5:cb:ec:a2:b0:b8:96:
                    2f:b3:2b:1d:e9:37:e8:b5:4b:cf:13:a6:54:c5:5c:
                    ad:0a:b6:b5:16:99:b4:d6:60:fa:23:97:91:04:f2:
                    ca:80:70:07:44:f6:cf:12:7d:38:24:f2:a9:7b:5f:
                    78:a2:b3:a0:9b:c3:fc:f1:29:04:8c:b2:52:88:aa:
                    ca:2d:0e:55:41:1a:69:c5:ac:95:27:20:fb:58:97:
                    b2:8a:cb:3f:ab:e0:2a:92:33:ed:c8:ad:72:6a:12:
                    24:d6:cc:50:a6:c0:b3:9e:92:b3:aa:82:2b:34:e8:
                    30:d1:d5:45:08:e4:e6:51:6f:04:8e:88:ed:44:45:
                    84:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:43:F9:96:EB:DB:49:AC:45:06:FA:CF:BC:66:0A:02:DB:52:7E:B7
            X509v3 Authority Key Identifier:
                keyid:21:FF:58:50:BE:FB:CA:C2:BA:33:25:82:49:D1:BB:FF:1B:FF:44:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/If9YUL77ysK6MyWCSdG7_xv_RPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8fb61b-7170-43ef-8657-9bbf8e5e4133/1/If9YUL77ysK6MyWCSdG7_xv_RPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8fb61b-7170-43ef-8657-9bbf8e5e4133/1/If9YUL77ysK6MyWCSdG7_xv_RPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:0c:48:9d:c1:6b:fb:3c:25:30:d7:e2:5e:0e:8f:c6:e7:18:
         6c:b6:c0:2b:fa:8c:ab:a9:5c:0d:d3:bd:4c:6d:e2:04:0a:65:
         88:56:26:68:c7:3d:a4:9f:95:c9:c9:f9:60:de:4c:80:25:80:
         4e:82:9f:7c:29:58:e9:26:89:4d:49:a1:ad:1f:7d:8a:47:24:
         f5:4e:fc:d1:62:65:56:82:df:02:03:4e:9c:f1:4d:89:38:70:
         e5:9a:df:f8:5b:3f:46:93:5f:51:cd:0b:5e:bc:d7:22:a9:3c:
         f8:ba:61:0f:83:62:24:bb:c8:13:5e:ef:5b:bd:f4:d7:6d:68:
         45:6e:24:ff:4b:a5:d5:7e:ab:80:63:89:0b:c7:80:43:db:da:
         c9:8f:fa:d4:b2:73:53:d5:53:26:c0:10:58:be:4b:4e:cf:46:
         67:07:de:19:7c:10:98:c1:97:6b:f5:f7:69:23:ac:9a:96:49:
         36:50:88:8e:a8:b1:a9:56:ad:27:b5:3d:6c:2b:ab:b2:76:21:
         3f:e4:1a:70:67:0f:0d:7d:77:ff:34:2c:e7:9e:5b:c9:6c:aa:
         35:e3:dd:c0:13:5b:8f:ab:7e:19:9d:0c:b6:74:d2:03:63:fd:
         c9:50:d4:dd:10:a1:6e:24:55:54:22:35:92:77:bc:90:45:93:
         a6:cd:de:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9D6JAIvJ63+vaGXfkvRPBgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZmY1ODUwYmVmYmNhYzJiYTMzMjU4MjQ5ZDFiYmZmMWJm
ZjQ0ZjMwHhcNMjQwNTA0MTQwMTA1WhcNMjQwNTA1MTQwMTA1WjAzMTEwLwYDVQQD
Eyg4ZDQzZjk5NmViZGI0OWFjNDUwNmZhY2ZiYzY2MGEwMmRiNTI3ZWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfJ2CiXNzuaIzaAhtKsTqkrph1zI
/1xlK0xnVPlUKSZNNa+asEUqJtXmEM2MuaYui5Zr7LvZMMhEC4NyFN/Pus4V2O5U
gxWhlPXL7C50jW6fmW+Vgdo4YvHmh9VhAYHH83VFDdDZs4OKUwVBr88riOS+bhXK
ezdFGHvg8MvqKPXL7KKwuJYvsysd6TfotUvPE6ZUxVytCra1Fpm01mD6I5eRBPLK
gHAHRPbPEn04JPKpe194orOgm8P88SkEjLJSiKrKLQ5VQRppxayVJyD7WJeyiss/
q+AqkjPtyK1yahIk1sxQpsCznpKzqoIrNOgw0dVFCOTmUW8EjojtREWEhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1D+Zbr20msRQb6z7xmCgLbUn63MB8GA1UdIwQY
MBaAFCH/WFC++8rCujMlgknRu/8b/0TzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWY5WVVMNzd5c0s2TXlXQ1NkRzdfeHZfUlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZmI2MWItNzE3MC00M2VmLTg2NTct
OWJiZjhlNWU0MTMzLzEvSWY5WVVMNzd5c0s2TXlXQ1NkRzdfeHZfUlBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84ZmI2MWItNzE3MC00M2VmLTg2NTctOWJiZjhlNWU0MTMz
LzEvSWY5WVVMNzd5c0s2TXlXQ1NkRzdfeHZfUlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQxIncFr
+zwlMNfiXg6PxucYbLbAK/qMq6lcDdO9TG3iBApliFYmaMc9pJ+Vycn5YN5MgCWA
ToKffClY6SaJTUmhrR99ikck9U780WJlVoLfAgNOnPFNiThw5Zrf+Fs/RpNfUc0L
XrzXIqk8+LphD4NiJLvIE17vW730121oRW4k/0ul1X6rgGOJC8eAQ9vayY/61LJz
U9VTJsAQWL5LTs9GZwfeGXwQmMGXa/X3aSOsmpZJNlCIjqixqVatJ7U9bCursnYh
P+QacGcPDX13/zQs555byWyqNePdwBNbj6t+GZ0MtnTSA2P9yVDU3RChbiRVVCI1
kne8kEWTps3eag==
-----END CERTIFICATE-----
Generated at Sat May 4 22:04:40 2024 by rpki-client on console-fra.rpki-client.org