Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
File:                     1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft (raw, json)
Hash identifier:          JcMcGC0Qiq2eND3/p9kXfmb0n2yEU35lm0QosrZnlgo=
Subject key identifier:   C5:C2:CC:0A:AD:C8:B7:D4:84:C7:BF:9E:5F:8E:9B:E4:F8:F4:47:3D
Authority key identifier: D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB
Certificate issuer:       /CN=d4e883b5b923678fa07321f25c18ff3a26c250fb
Certificate serial:       018F4D5C36E43183DB938D9EC00CBCCA8A11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
Manifest number:          0B85
Signing time:             Mon 06 May 2024 10:04:00 +0000
Manifest this update:     Mon 06 May 2024 10:04:00 +0000
Manifest next update:     Tue 07 May 2024 10:04:00 +0000
Files and hashes:         1: 1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl (hash: BM1TPSxZbaKIrlYwrzzIE3XZDE4+dRFyfeR0LDjJrrk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 10:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:5c:36:e4:31:83:db:93:8d:9e:c0:0c:bc:ca:8a:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4e883b5b923678fa07321f25c18ff3a26c250fb
        Validity
            Not Before: May  6 10:04:00 2024 GMT
            Not After : May  7 10:04:00 2024 GMT
        Subject: CN=c5c2cc0aadc8b7d484c7bf9e5f8e9be4f8f4473d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:04:11:93:2e:88:2b:d9:91:e8:1e:00:e7:6c:
                    24:64:47:3e:a4:33:7b:df:cc:bd:f8:ff:8c:91:c4:
                    2e:81:6b:a7:41:c6:2f:43:62:3c:5f:b4:e7:d7:b3:
                    35:7c:48:f4:e2:0e:ff:28:69:c2:e2:48:4d:d5:71:
                    4f:08:16:eb:bc:ca:ae:2e:fc:11:aa:74:5f:e9:cb:
                    c9:3f:3a:7e:f1:1d:89:a8:56:02:6d:c3:47:99:80:
                    05:e2:24:ef:45:14:2b:34:d8:7c:d0:28:0c:d9:5c:
                    37:9b:43:99:b1:68:ea:d8:bf:3d:a5:bd:1b:e5:2f:
                    4c:df:d0:15:9c:bd:2b:e0:04:8d:42:88:fe:92:bb:
                    6c:f3:e6:29:9a:7f:04:cb:3b:7f:a3:b4:45:ee:27:
                    e0:99:28:58:34:00:cf:05:8f:03:d5:65:81:53:67:
                    11:09:5e:00:41:a1:f2:54:13:83:91:fb:44:4a:aa:
                    01:3b:3a:68:cb:03:05:68:cf:a7:4f:6f:77:4a:53:
                    5d:fd:ff:66:81:42:fd:eb:5e:63:ed:1e:e6:30:2c:
                    ee:5f:01:ac:fc:55:9f:1a:79:3b:c4:d6:4c:57:ac:
                    46:83:58:0d:2b:74:63:43:56:50:3a:20:e4:bb:84:
                    f0:43:be:07:fc:c7:69:4e:89:58:ac:ea:a3:cb:e5:
                    a3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C2:CC:0A:AD:C8:B7:D4:84:C7:BF:9E:5F:8E:9B:E4:F8:F4:47:3D
            X509v3 Authority Key Identifier:
                keyid:D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f5:19:38:4d:ab:e6:2c:06:82:80:c6:97:46:27:17:6f:3c:
         83:00:8b:a7:c1:12:b2:fd:6f:ab:a0:01:2f:e2:5d:96:09:b5:
         63:4a:11:84:e4:58:16:4b:cc:f2:d3:0a:c9:12:44:ee:15:98:
         44:94:f4:d5:44:80:80:af:bf:84:26:87:ba:b8:19:c1:7a:cf:
         02:eb:10:cf:bf:91:d6:13:8b:48:8d:21:09:ef:c9:8b:e9:07:
         ae:8f:ff:cb:bf:95:77:bb:27:96:c0:93:4c:10:c1:86:ca:6c:
         d2:00:36:2a:5a:40:cd:1a:e1:2c:e9:8d:ed:bd:03:cb:99:f0:
         65:02:58:80:8c:78:f2:22:96:2b:41:ea:c7:67:48:6c:cf:00:
         cd:75:b9:fa:1c:23:d2:09:52:8a:b3:bc:5d:1d:a9:09:d8:8c:
         3d:c7:35:11:81:5c:52:0f:af:fa:ab:a5:20:55:e9:38:52:23:
         4c:60:ee:22:44:1c:01:33:86:e5:92:53:65:eb:f2:54:db:47:
         7c:2c:d4:54:0e:22:e1:58:cc:05:fc:7c:d2:9a:25:89:fc:f6:
         53:d9:67:80:57:b5:2a:a4:2a:74:74:9d:d3:09:5f:72:92:b5:
         3d:55:c8:d7:ce:a5:91:e9:bc:40:ac:d6:37:d0:94:25:c0:e8:
         2e:db:43:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9NXDbkMYPbk42ewAy8yooRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZTg4M2I1YjkyMzY3OGZhMDczMjFmMjVjMThmZjNhMjZj
MjUwZmIwHhcNMjQwNTA2MTAwNDAwWhcNMjQwNTA3MTAwNDAwWjAzMTEwLwYDVQQD
EyhjNWMyY2MwYWFkYzhiN2Q0ODRjN2JmOWU1ZjhlOWJlNGY4ZjQ0NzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQQRky6IK9mR6B4A52wkZEc+pDN7
38y9+P+MkcQugWunQcYvQ2I8X7Tn17M1fEj04g7/KGnC4khN1XFPCBbrvMquLvwR
qnRf6cvJPzp+8R2JqFYCbcNHmYAF4iTvRRQrNNh80CgM2Vw3m0OZsWjq2L89pb0b
5S9M39AVnL0r4ASNQoj+krts8+Ypmn8Eyzt/o7RF7ifgmShYNADPBY8D1WWBU2cR
CV4AQaHyVBODkftESqoBOzpoywMFaM+nT293SlNd/f9mgUL9615j7R7mMCzuXwGs
/FWfGnk7xNZMV6xGg1gNK3RjQ1ZQOiDku4TwQ74H/MdpTolYrOqjy+WjtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXCzAqtyLfUhMe/nl+Om+T49Ec9MB8GA1UdIwQY
MBaAFNTog7W5I2ePoHMh8lwY/zomwlD7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU9pRHRia2paNC1nY3lIeVhCal9PaWJDVVBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hMWI1OGEtY2MxYy00ODY1LTkzZGUt
MmQzZWY5YjBhZDIzLzEvMU9pRHRia2paNC1nY3lIeVhCal9PaWJDVVBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9hMWI1OGEtY2MxYy00ODY1LTkzZGUtMmQzZWY5YjBhZDIz
LzEvMU9pRHRia2paNC1nY3lIeVhCal9PaWJDVVBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYfUZOE2r
5iwGgoDGl0YnF288gwCLp8ESsv1vq6ABL+Jdlgm1Y0oRhORYFkvM8tMKyRJE7hWY
RJT01USAgK+/hCaHurgZwXrPAusQz7+R1hOLSI0hCe/Ji+kHro//y7+Vd7snlsCT
TBDBhsps0gA2KlpAzRrhLOmN7b0Dy5nwZQJYgIx48iKWK0Hqx2dIbM8AzXW5+hwj
0glSirO8XR2pCdiMPcc1EYFcUg+v+qulIFXpOFIjTGDuIkQcATOG5ZJTZevyVNtH
fCzUVA4i4VjMBfx80polifz2U9lngFe1KqQqdHSd0wlfcpK1PVXI186lkem8QKzW
N9CUJcDoLttD3g==
-----END CERTIFICATE-----
Generated at Mon May 6 18:10:48 2024 by rpki-client on console-fra.rpki-client.org