Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
File:                     kTkWd63vei6bCw5A6TssSvxNs14.mft (raw, json)
Hash identifier:          WfHQCzH2RMQB6v4AvhDR2xJSjGcBm+DLYokbbj4ol+A=
Subject key identifier:   36:AA:21:B1:2B:C9:80:15:3E:61:9B:C1:A1:FC:34:B8:FA:C9:52:07
Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
Certificate issuer:       /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Certificate serial:       018F874A51A243831D42C5CB9ED92FC62687
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
Manifest number:          0AD4
Signing time:             Fri 17 May 2024 16:02:25 +0000
Manifest this update:     Fri 17 May 2024 16:02:25 +0000
Manifest next update:     Sat 18 May 2024 16:02:25 +0000
Files and hashes:         1: kTkWd63vei6bCw5A6TssSvxNs14.crl (hash: i0fcYv+tBgd1Z/hJg1dPa7krRsaFpPTQ1g1hC7ni0sc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:51:a2:43:83:1d:42:c5:cb:9e:d9:2f:c6:26:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
        Validity
            Not Before: May 17 16:02:25 2024 GMT
            Not After : May 18 16:02:25 2024 GMT
        Subject: CN=36aa21b12bc980153e619bc1a1fc34b8fac95207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:85:47:28:be:d0:64:67:dc:4c:98:f6:12:22:
                    d3:45:16:49:95:0b:4e:be:86:9d:01:02:1b:fe:76:
                    de:16:72:5b:25:14:49:0a:8d:3b:7a:31:18:07:36:
                    e4:5d:85:22:40:bd:67:9b:5f:0a:f2:38:90:7e:b9:
                    01:1d:4a:d0:4a:cf:d8:2f:ce:cd:9f:4e:a9:21:bc:
                    9b:48:4d:a9:6a:00:3a:18:cb:91:22:02:49:df:3b:
                    a9:81:d6:2f:4e:71:45:3f:0f:b7:20:6c:3e:14:e0:
                    3e:7e:c2:f1:7c:e2:9f:ea:fa:38:2c:04:51:59:d0:
                    55:79:ea:ea:91:e1:7b:6f:f6:31:ff:4f:d4:5f:0f:
                    aa:58:08:da:52:54:f8:34:b0:53:9b:5b:ea:85:0f:
                    a1:2c:9c:62:23:df:f3:20:f9:11:b5:53:20:2c:71:
                    9a:b2:30:02:7c:87:ba:8d:e6:03:e0:e8:a5:8e:6c:
                    ce:38:3f:64:c3:0e:f2:43:b8:46:1e:21:c7:63:3e:
                    cc:4e:74:e0:ce:32:6b:69:96:56:8a:6e:81:98:80:
                    9f:68:b9:a3:b0:e1:bf:f0:f6:4a:19:2e:5e:72:94:
                    d1:15:f4:63:97:8a:5b:e9:9a:8d:7d:1a:fd:64:c3:
                    8a:3a:25:2c:88:41:4a:7c:92:37:ad:89:69:94:8b:
                    b0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:AA:21:B1:2B:C9:80:15:3E:61:9B:C1:A1:FC:34:B8:FA:C9:52:07
            X509v3 Authority Key Identifier:
                keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:4b:2c:56:af:ca:68:c0:fe:fe:68:54:19:21:59:0c:8b:aa:
         d7:b6:9b:4c:05:74:42:96:9d:af:8a:1f:75:fa:d7:bd:35:b1:
         44:47:76:21:cb:f4:3f:cb:25:e7:b4:8a:e5:7f:45:bd:da:b6:
         91:0f:68:80:36:c6:c7:79:e2:c0:79:81:46:3b:af:02:44:d5:
         a3:d8:95:2f:19:7a:10:ae:a8:20:53:82:06:78:6a:25:6e:93:
         ee:9a:a3:7b:04:73:f1:37:fe:dc:28:24:32:80:ab:20:10:b1:
         e2:59:86:fc:d9:6a:6e:33:b5:72:11:7b:46:bf:bc:e4:48:5e:
         d4:5b:73:7d:a2:d2:9f:9a:1b:ff:67:8b:e4:9e:fd:a4:e1:76:
         59:1d:ad:49:cc:98:d4:d4:0d:00:34:e4:71:05:74:a0:f5:ac:
         8d:5a:00:f3:f5:a0:bc:02:77:99:05:ed:a9:34:c4:c5:30:63:
         6b:39:2e:0a:cb:e4:01:49:f0:99:9f:ec:52:3a:03:97:1e:ef:
         90:9f:61:2f:05:cd:46:80:aa:68:bc:e5:49:a8:5b:b2:12:08:
         ad:b0:0a:04:61:a4:bf:21:ba:6e:77:7d:07:3a:ff:bf:e8:e8:
         3e:f8:d9:f8:ba:ef:e5:2e:cf:39:48:92:58:02:0f:14:86:9b:
         12:4f:fa:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSlGiQ4MdQsXLntkvxiaHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMzkxNjc3YWRlZjdhMmU5YjBiMGU0MGU5M2IyYzRhZmM0
ZGIzNWUwHhcNMjQwNTE3MTYwMjI1WhcNMjQwNTE4MTYwMjI1WjAzMTEwLwYDVQQD
EygzNmFhMjFiMTJiYzk4MDE1M2U2MTliYzFhMWZjMzRiOGZhYzk1MjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IVHKL7QZGfcTJj2EiLTRRZJlQtO
voadAQIb/nbeFnJbJRRJCo07ejEYBzbkXYUiQL1nm18K8jiQfrkBHUrQSs/YL87N
n06pIbybSE2pagA6GMuRIgJJ3zupgdYvTnFFPw+3IGw+FOA+fsLxfOKf6vo4LARR
WdBVeerqkeF7b/Yx/0/UXw+qWAjaUlT4NLBTm1vqhQ+hLJxiI9/zIPkRtVMgLHGa
sjACfIe6jeYD4OiljmzOOD9kww7yQ7hGHiHHYz7MTnTgzjJraZZWim6BmICfaLmj
sOG/8PZKGS5ecpTRFfRjl4pb6ZqNfRr9ZMOKOiUsiEFKfJI3rYlplIuwPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaqIbEryYAVPmGbwaH8NLj6yVIHMB8GA1UdIwQY
MBaAFJE5Fnet73oumwsOQOk7LEr8TbNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1RrV2Q2M3ZlaTZiQ3c1QTZUc3NTdnhOczE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9jZmRlZjQtMDMyOS00OGQxLWEzYzMt
NDZiY2IzNmRmNGIzLzEva1RrV2Q2M3ZlaTZiQ3c1QTZUc3NTdnhOczE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9jZmRlZjQtMDMyOS00OGQxLWEzYzMtNDZiY2IzNmRmNGIz
LzEva1RrV2Q2M3ZlaTZiQ3c1QTZUc3NTdnhOczE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0ssVq/K
aMD+/mhUGSFZDIuq17abTAV0Qpadr4ofdfrXvTWxREd2Icv0P8sl57SK5X9Fvdq2
kQ9ogDbGx3niwHmBRjuvAkTVo9iVLxl6EK6oIFOCBnhqJW6T7pqjewRz8Tf+3Cgk
MoCrIBCx4lmG/NlqbjO1chF7Rr+85Ehe1FtzfaLSn5ob/2eL5J79pOF2WR2tScyY
1NQNADTkcQV0oPWsjVoA8/WgvAJ3mQXtqTTExTBjazkuCsvkAUnwmZ/sUjoDlx7v
kJ9hLwXNRoCqaLzlSahbshIIrbAKBGGkvyG6bnd9Bzr/v+joPvjZ+Lrv5S7POUiS
WAIPFIabEk/6sQ==
-----END CERTIFICATE-----