Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
File:                     pgkmXYlPp5_NZUL6zAujiXOMhFk.mft (raw, json)
Hash identifier:          NnaPYqBcxU/MxZK2EwbzJmfxBx/UJ8JVgNxhfap+W+c=
Subject key identifier:   55:C0:11:E2:16:B7:D1:55:66:B0:C3:67:5F:E2:77:48:EF:6A:CF:3A
Authority key identifier: A6:09:26:5D:89:4F:A7:9F:CD:65:42:FA:CC:0B:A3:89:73:8C:84:59
Certificate issuer:       /CN=a609265d894fa79fcd6542facc0ba389738c8459
Certificate serial:       018F87499248AE2888FB16D08732BC60CEEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
Manifest number:          0490
Signing time:             Fri 17 May 2024 16:01:36 +0000
Manifest this update:     Fri 17 May 2024 16:01:36 +0000
Manifest next update:     Sat 18 May 2024 16:01:36 +0000
Files and hashes:         1: pgkmXYlPp5_NZUL6zAujiXOMhFk.crl (hash: 11zTwp2bm0S7+4WRYFzBVFfnDKoMn4L3eovBs/5O6tU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:92:48:ae:28:88:fb:16:d0:87:32:bc:60:ce:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a609265d894fa79fcd6542facc0ba389738c8459
        Validity
            Not Before: May 17 16:01:36 2024 GMT
            Not After : May 18 16:01:36 2024 GMT
        Subject: CN=55c011e216b7d15566b0c3675fe27748ef6acf3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:50:f6:74:e6:ce:00:69:21:81:68:62:0e:a0:
                    aa:48:2a:eb:d8:42:a2:aa:bd:18:ba:b4:52:02:fd:
                    b0:0d:0a:eb:46:0e:66:9b:6e:0d:f8:d0:69:54:1d:
                    9f:0a:fd:9b:6d:10:da:3c:8f:fa:22:98:1b:c1:e1:
                    5d:74:2d:6e:21:2c:04:c2:3c:f6:97:a3:5c:0f:80:
                    28:d6:02:f0:51:5d:5c:54:d7:78:65:e9:92:bf:b8:
                    bd:05:af:c5:36:f1:65:71:ac:bc:36:2e:bc:54:eb:
                    33:e3:42:bf:d7:0f:39:cd:f5:b8:d6:78:ce:03:fa:
                    2f:8b:6d:a3:14:d3:94:0e:6d:18:25:59:2c:f8:10:
                    7d:45:4a:9a:db:b8:50:63:e0:6c:b2:03:da:5d:68:
                    6f:8e:a8:d3:e1:e6:ec:a6:5d:8b:5d:43:d1:d3:cb:
                    1b:b4:dc:5f:04:26:88:f2:ce:17:a9:76:56:0c:63:
                    f5:36:ca:3e:3c:4c:4b:35:e6:6f:06:fd:10:44:27:
                    0b:b2:cd:29:83:5e:d9:fe:53:17:ce:8a:42:ff:41:
                    71:fb:f0:a3:d1:06:ae:b7:ef:a6:34:5b:5e:3e:cc:
                    97:83:2d:dc:6c:c3:45:09:ce:00:dd:e9:4e:03:31:
                    12:34:fb:25:93:c1:fb:3c:9d:92:e4:88:e2:6c:a5:
                    9f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C0:11:E2:16:B7:D1:55:66:B0:C3:67:5F:E2:77:48:EF:6A:CF:3A
            X509v3 Authority Key Identifier:
                keyid:A6:09:26:5D:89:4F:A7:9F:CD:65:42:FA:CC:0B:A3:89:73:8C:84:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:9b:aa:a1:23:d4:6b:41:f2:bf:a8:77:b4:c8:3a:1b:88:c1:
         af:8e:ea:80:83:2d:c0:ef:59:d9:6c:b6:1a:9d:d7:89:26:ef:
         19:f7:c7:80:8d:38:e8:bd:e1:8d:9c:4a:4c:0f:96:db:02:8f:
         dd:69:57:82:0c:7c:21:a1:1c:af:2e:51:5d:53:b9:9d:9e:75:
         8b:a8:53:dd:60:b6:de:bc:01:de:2b:7e:7a:57:64:4a:9c:35:
         a4:08:78:1d:ce:b4:0f:e7:a9:1c:bb:01:c7:9c:8e:f8:03:4c:
         e1:6b:bb:34:98:da:52:0e:26:25:f8:8d:01:ac:d2:b7:03:98:
         00:87:e3:22:e7:1f:99:f8:9a:f6:0c:32:c5:5a:57:71:7a:7d:
         bb:d7:ee:3b:66:a2:88:68:c1:1c:6e:e0:a7:ce:0c:22:bb:b3:
         b5:0b:27:54:9a:42:58:de:4c:d0:e9:36:76:bc:fd:49:af:9a:
         c7:9d:6d:70:74:74:e5:ed:33:70:f3:f9:dc:10:b7:22:b5:5a:
         d8:79:79:6a:3e:6f:2b:30:aa:cc:68:3f:c5:9e:43:34:7d:ad:
         3e:77:60:04:79:7b:50:b7:8e:d1:ec:de:b4:41:b2:e4:89:c6:
         5d:37:82:92:76:5c:4d:6d:1b:af:ed:58:9c:33:ea:19:54:06:
         2e:e1:b3:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSZJIriiI+xbQhzK8YM7qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MDkyNjVkODk0ZmE3OWZjZDY1NDJmYWNjMGJhMzg5NzM4
Yzg0NTkwHhcNMjQwNTE3MTYwMTM2WhcNMjQwNTE4MTYwMTM2WjAzMTEwLwYDVQQD
Eyg1NWMwMTFlMjE2YjdkMTU1NjZiMGMzNjc1ZmUyNzc0OGVmNmFjZjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31D2dObOAGkhgWhiDqCqSCrr2EKi
qr0YurRSAv2wDQrrRg5mm24N+NBpVB2fCv2bbRDaPI/6IpgbweFddC1uISwEwjz2
l6NcD4Ao1gLwUV1cVNd4ZemSv7i9Ba/FNvFlcay8Ni68VOsz40K/1w85zfW41njO
A/ovi22jFNOUDm0YJVks+BB9RUqa27hQY+BssgPaXWhvjqjT4ebspl2LXUPR08sb
tNxfBCaI8s4XqXZWDGP1Nso+PExLNeZvBv0QRCcLss0pg17Z/lMXzopC/0Fx+/Cj
0Qaut++mNFtePsyXgy3cbMNFCc4A3elOAzESNPslk8H7PJ2S5IjibKWfAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFXAEeIWt9FVZrDDZ1/id0jvas86MB8GA1UdIwQY
MBaAFKYJJl2JT6efzWVC+swLo4lzjIRZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGdrbVhZbFBwNV9OWlVMNnpBdWppWE9NaEZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS83MzBkNGQtZDRhYi00Mjc5LWIyMjUt
NmRjMGRhMWY1ZGVlLzEvcGdrbVhZbFBwNV9OWlVMNnpBdWppWE9NaEZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS83MzBkNGQtZDRhYi00Mjc5LWIyMjUtNmRjMGRhMWY1ZGVl
LzEvcGdrbVhZbFBwNV9OWlVMNnpBdWppWE9NaEZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5uqoSPU
a0Hyv6h3tMg6G4jBr47qgIMtwO9Z2Wy2Gp3XiSbvGffHgI046L3hjZxKTA+W2wKP
3WlXggx8IaEcry5RXVO5nZ51i6hT3WC23rwB3it+eldkSpw1pAh4Hc60D+epHLsB
x5yO+ANM4Wu7NJjaUg4mJfiNAazStwOYAIfjIucfmfia9gwyxVpXcXp9u9fuO2ai
iGjBHG7gp84MIruztQsnVJpCWN5M0Ok2drz9Sa+ax51tcHR05e0zcPP53BC3IrVa
2Hl5aj5vKzCqzGg/xZ5DNH2tPndgBHl7ULeO0ezetEGy5InGXTeCknZcTW0br+1Y
nDPqGVQGLuGzNA==
-----END CERTIFICATE-----