Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
File:                     EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft (raw, json)
Hash identifier:          eQBRLFBafWq02xO7jJdnzjqE8U+OVl7FBpr4iDnVFEM=
Subject key identifier:   1F:99:43:95:D6:3D:A2:3A:ED:88:12:22:77:0B:A4:D6:D8:25:54:7B
Authority key identifier: 11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3
Certificate issuer:       /CN=110f053a6db54b1bf396f85063a6fcca0a346ec3
Certificate serial:       018F3BF847AD2E3AD65E52C016B6C544DAAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
Manifest number:          1150
Signing time:             Fri 03 May 2024 01:01:18 +0000
Manifest this update:     Fri 03 May 2024 01:01:18 +0000
Manifest next update:     Sat 04 May 2024 01:01:18 +0000
Files and hashes:         1: EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl (hash: MB+7yaAQncC8jCs++3HKecj0eyvy6MQ0PToxR82LyBw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f8:47:ad:2e:3a:d6:5e:52:c0:16:b6:c5:44:da:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110f053a6db54b1bf396f85063a6fcca0a346ec3
        Validity
            Not Before: May  3 01:01:18 2024 GMT
            Not After : May  4 01:01:18 2024 GMT
        Subject: CN=1f994395d63da23aed881222770ba4d6d825547b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:13:04:46:5d:49:8f:79:f0:0a:8e:42:95:b7:
                    6d:45:58:b6:43:51:f2:4d:45:74:f7:28:61:33:33:
                    71:e2:01:41:b0:44:fb:28:aa:c3:2e:b3:83:90:f1:
                    28:a0:31:8a:a3:8c:93:85:a0:41:f3:45:bf:ba:01:
                    c3:4c:34:c7:57:73:b3:a4:fc:32:7a:ee:4c:d0:24:
                    f8:f8:80:6b:e0:35:4c:b1:0e:88:b7:a7:be:1e:53:
                    59:24:99:3f:1c:ed:2b:1c:25:5b:f0:a6:8a:de:43:
                    ce:99:a8:a8:cd:30:00:66:8e:0a:91:8b:43:b3:cb:
                    3b:8c:28:30:68:30:11:c2:64:35:df:2c:23:34:e3:
                    91:bd:6f:2f:9a:dc:00:70:90:bf:b8:f3:56:d9:b9:
                    34:c2:29:37:13:2a:15:6c:f1:a2:9a:7e:8e:0b:fa:
                    82:6b:c0:70:61:69:52:cd:ea:e2:ad:ce:5e:49:1c:
                    cf:43:b1:9d:f5:f7:bf:a0:1d:ee:61:46:1e:d9:ed:
                    d4:fe:19:d4:e8:44:ac:ac:46:75:9d:b7:2f:b5:fd:
                    97:42:7c:fd:af:f5:c2:36:b8:a4:8d:03:73:b7:0b:
                    3b:55:7d:4f:f2:a6:7f:1a:6f:58:f2:f0:c4:81:95:
                    89:60:86:0b:5e:1e:63:82:b0:d0:67:c1:e0:d3:7f:
                    ec:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:99:43:95:D6:3D:A2:3A:ED:88:12:22:77:0B:A4:D6:D8:25:54:7B
            X509v3 Authority Key Identifier:
                keyid:11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:4c:fc:0e:c3:51:29:5e:e5:d8:5e:5d:7c:b4:c4:8c:41:50:
         9d:ff:63:27:73:a5:d4:b9:8e:9d:61:cf:81:12:bf:76:ea:d8:
         c5:b4:6a:d4:14:8a:1a:22:85:a7:b4:2a:76:ec:0d:49:a9:59:
         42:bc:92:22:d6:ad:18:35:86:6f:2e:90:50:d5:2e:9b:f0:66:
         a4:df:b7:58:29:fa:8e:c3:b8:f7:88:3e:52:d4:c4:51:d1:37:
         02:f3:70:25:cd:9d:f6:e2:db:07:81:9b:0b:75:c0:c9:cb:60:
         43:54:85:25:69:e9:67:77:0b:90:f4:fa:32:d8:f8:77:3d:4a:
         6a:4b:83:4d:e5:dc:38:d8:cf:6e:ed:e9:5c:0a:21:b2:38:b2:
         c6:ba:85:cf:03:cf:1e:02:62:89:4d:83:2c:9c:fd:b5:a5:ef:
         12:fa:51:1a:1c:7c:86:a2:bc:24:72:78:90:95:05:74:9c:56:
         3d:c4:ad:9a:df:60:d1:a5:b5:93:78:f7:7b:80:df:60:09:51:
         cb:b5:1f:1c:2c:14:80:23:93:d7:1c:d5:da:d0:17:4a:49:5e:
         a3:36:e8:30:b8:48:12:1a:bd:d1:6d:d9:0a:5f:5f:10:bb:ac:
         80:f9:9d:f9:45:07:bb:c6:03:3d:b9:92:e2:96:4a:97:a1:14:
         83:7e:68:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY87+EetLjrWXlLAFrbFRNqqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMGYwNTNhNmRiNTRiMWJmMzk2Zjg1MDYzYTZmY2NhMGEz
NDZlYzMwHhcNMjQwNTAzMDEwMTE4WhcNMjQwNTA0MDEwMTE4WjAzMTEwLwYDVQQD
EygxZjk5NDM5NWQ2M2RhMjNhZWQ4ODEyMjI3NzBiYTRkNmQ4MjU1NDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hMERl1Jj3nwCo5ClbdtRVi2Q1Hy
TUV09yhhMzNx4gFBsET7KKrDLrODkPEooDGKo4yThaBB80W/ugHDTDTHV3OzpPwy
eu5M0CT4+IBr4DVMsQ6It6e+HlNZJJk/HO0rHCVb8KaK3kPOmaiozTAAZo4KkYtD
s8s7jCgwaDARwmQ13ywjNOORvW8vmtwAcJC/uPNW2bk0wik3EyoVbPGimn6OC/qC
a8BwYWlSzerirc5eSRzPQ7Gd9fe/oB3uYUYe2e3U/hnU6ESsrEZ1nbcvtf2XQnz9
r/XCNrikjQNztws7VX1P8qZ/Gm9Y8vDEgZWJYIYLXh5jgrDQZ8Hg03/sTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+ZQ5XWPaI67YgSIncLpNbYJVR7MB8GA1UdIwQY
MBaAFBEPBTpttUsb85b4UGOm/MoKNG7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVE4Rk9tMjFTeHZ6bHZoUVk2Yjh5Z28wYnNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81M2QxOGUtY2FjZS00ZWE0LTlhMDgt
MzhiZmJkMzQ3OTllLzEvRVE4Rk9tMjFTeHZ6bHZoUVk2Yjh5Z28wYnNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni81M2QxOGUtY2FjZS00ZWE0LTlhMDgtMzhiZmJkMzQ3OTll
LzEvRVE4Rk9tMjFTeHZ6bHZoUVk2Yjh5Z28wYnNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkz8DsNR
KV7l2F5dfLTEjEFQnf9jJ3Ol1LmOnWHPgRK/durYxbRq1BSKGiKFp7QqduwNSalZ
QrySItatGDWGby6QUNUum/BmpN+3WCn6jsO494g+UtTEUdE3AvNwJc2d9uLbB4Gb
C3XAyctgQ1SFJWnpZ3cLkPT6Mtj4dz1KakuDTeXcONjPbu3pXAohsjiyxrqFzwPP
HgJiiU2DLJz9taXvEvpRGhx8hqK8JHJ4kJUFdJxWPcStmt9g0aW1k3j3e4DfYAlR
y7UfHCwUgCOT1xzV2tAXSkleozboMLhIEhq90W3ZCl9fELusgPmd+UUHu8YDPbmS
4pZKl6EUg35oMA==
-----END CERTIFICATE-----
Generated at Fri May 3 11:10:44 2024 by rpki-client on console-ams.rpki-client.org