Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
File:                     AoDVqrjuctqjUocfunLspFGnDtw.mft (raw, json)
Hash identifier:          16mlMETLAaDT/0OJX62tut24z5joNxinCehV+zHFD84=
Subject key identifier:   A8:EB:1B:0F:6E:0A:23:05:12:5A:B6:42:FF:A6:90:C4:B8:2C:D8:7E
Authority key identifier: 02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC
Certificate issuer:       /CN=0280d5aab8ee72daa352871fba72eca451a70edc
Certificate serial:       018F411EF12BCB9EA7DA4B09DBD3D7B50746
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
Manifest number:          040D
Signing time:             Sat 04 May 2024 01:01:37 +0000
Manifest this update:     Sat 04 May 2024 01:01:37 +0000
Manifest next update:     Sun 05 May 2024 01:01:37 +0000
Files and hashes:         1: AoDVqrjuctqjUocfunLspFGnDtw.crl (hash: zi81iB+nUW7TSUem6YmKd2Q+seWZTaT6uc+BvsufE+k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:1e:f1:2b:cb:9e:a7:da:4b:09:db:d3:d7:b5:07:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0280d5aab8ee72daa352871fba72eca451a70edc
        Validity
            Not Before: May  4 01:01:37 2024 GMT
            Not After : May  5 01:01:37 2024 GMT
        Subject: CN=a8eb1b0f6e0a2305125ab642ffa690c4b82cd87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:eb:39:33:12:a5:60:4b:da:a0:fa:7f:f9:b1:
                    93:04:68:8b:4b:c2:f4:04:19:4e:46:23:be:92:2e:
                    0b:d7:fa:74:10:19:fa:09:10:38:39:70:89:c6:7a:
                    f8:9e:8d:e5:8b:35:10:ea:e7:c1:49:f5:df:43:a6:
                    25:f2:cb:44:2f:78:d1:8a:45:c5:71:db:7d:b0:35:
                    cc:95:e9:e5:8e:f7:65:54:f1:c3:3f:58:ba:da:82:
                    39:54:1a:77:07:c3:72:c8:c2:8d:ed:43:3d:fe:d3:
                    0b:01:80:fc:a6:6c:c1:2c:9a:f6:c4:26:d4:0a:e9:
                    00:57:e9:ce:40:32:b7:49:53:d7:44:e0:f5:f8:2c:
                    24:a7:b6:cb:7d:c5:69:e5:93:ae:db:9f:eb:fe:5d:
                    f9:d9:db:60:92:ef:a5:54:4b:18:f5:24:ce:ac:9d:
                    57:42:0e:f5:92:c7:50:3e:57:4f:71:13:24:76:22:
                    76:4d:0a:6a:fe:67:32:82:a6:52:8d:a5:13:66:c5:
                    91:f6:0a:a9:55:77:18:ac:7f:a0:a1:83:af:a8:69:
                    5e:f1:36:f6:0e:3f:e0:e0:ef:c9:e2:e3:85:12:f7:
                    de:c6:b5:27:cd:03:0a:76:5b:02:4a:3c:4e:3c:09:
                    ce:2b:44:d2:bd:8c:35:43:99:cf:2b:b2:f4:a6:fe:
                    87:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EB:1B:0F:6E:0A:23:05:12:5A:B6:42:FF:A6:90:C4:B8:2C:D8:7E
            X509v3 Authority Key Identifier:
                keyid:02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d1:c3:e6:9f:bc:5e:ae:22:9c:ed:0a:d6:88:38:fe:cc:af:
         10:fe:39:de:ff:47:cb:77:5e:89:97:09:a9:1b:2e:97:3c:db:
         89:02:f1:5f:8c:5e:c0:44:73:08:b9:b0:06:05:63:f5:8b:72:
         a0:fa:16:54:99:7b:38:a7:fe:e6:21:77:6b:c7:5d:0a:45:38:
         0c:11:ff:4d:63:57:d1:f5:b0:69:30:f0:1d:14:fa:92:29:fd:
         50:08:52:33:f2:12:18:3d:1c:61:10:a6:30:f0:a3:65:5f:c2:
         e7:d9:4c:f1:07:57:d2:7c:0f:6f:c5:ce:9c:ba:38:ab:60:2e:
         c7:d2:01:b8:b3:58:a1:a7:61:ed:4f:c7:52:21:b3:be:3b:7d:
         33:12:6c:24:bf:bc:94:e0:7a:09:27:0c:04:0a:ae:21:9c:f2:
         bf:a0:ad:ce:77:5c:64:89:5f:3c:7f:f0:b6:dd:8f:08:3f:1b:
         eb:50:8b:d4:19:b7:e7:c2:c3:b3:74:e4:c8:6e:8c:ff:db:97:
         b5:7d:c6:36:b1:2d:1d:70:fe:04:1c:57:c8:f0:7e:dc:de:ab:
         e5:25:0e:f9:12:c0:9d:06:c6:7c:ef:8d:48:fb:16:2e:41:36:
         55:0b:9d:60:56:b2:ea:72:66:46:75:6c:b3:45:e7:38:b1:18:
         6f:3b:35:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9BHvEry56n2ksJ29PXtQdGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyODBkNWFhYjhlZTcyZGFhMzUyODcxZmJhNzJlY2E0NTFh
NzBlZGMwHhcNMjQwNTA0MDEwMTM3WhcNMjQwNTA1MDEwMTM3WjAzMTEwLwYDVQQD
EyhhOGViMWIwZjZlMGEyMzA1MTI1YWI2NDJmZmE2OTBjNGI4MmNkODdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApus5MxKlYEvaoPp/+bGTBGiLS8L0
BBlORiO+ki4L1/p0EBn6CRA4OXCJxnr4no3lizUQ6ufBSfXfQ6Yl8stEL3jRikXF
cdt9sDXMlenljvdlVPHDP1i62oI5VBp3B8NyyMKN7UM9/tMLAYD8pmzBLJr2xCbU
CukAV+nOQDK3SVPXROD1+Cwkp7bLfcVp5ZOu25/r/l352dtgku+lVEsY9STOrJ1X
Qg71ksdQPldPcRMkdiJ2TQpq/mcygqZSjaUTZsWR9gqpVXcYrH+goYOvqGle8Tb2
Dj/g4O/J4uOFEvfexrUnzQMKdlsCSjxOPAnOK0TSvYw1Q5nPK7L0pv6HmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjrGw9uCiMFElq2Qv+mkMS4LNh+MB8GA1UdIwQY
MBaAFAKA1aq47nLao1KHH7py7KRRpw7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9EVnFyanVjdHFqVW9jZnVuTHNwRkduRHR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9iOGVjOTEtM2VhNi00NTI5LThjZTEt
ZjQwNmUwODc4ZDU0LzEvQW9EVnFyanVjdHFqVW9jZnVuTHNwRkduRHR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9iOGVjOTEtM2VhNi00NTI5LThjZTEtZjQwNmUwODc4ZDU0
LzEvQW9EVnFyanVjdHFqVW9jZnVuTHNwRkduRHR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAntHD5p+8
Xq4inO0K1og4/syvEP453v9Hy3deiZcJqRsulzzbiQLxX4xewERzCLmwBgVj9Yty
oPoWVJl7OKf+5iF3a8ddCkU4DBH/TWNX0fWwaTDwHRT6kin9UAhSM/ISGD0cYRCm
MPCjZV/C59lM8QdX0nwPb8XOnLo4q2Aux9IBuLNYoadh7U/HUiGzvjt9MxJsJL+8
lOB6CScMBAquIZzyv6CtzndcZIlfPH/wtt2PCD8b61CL1Bm358LDs3TkyG6M/9uX
tX3GNrEtHXD+BBxXyPB+3N6r5SUO+RLAnQbGfO+NSPsWLkE2VQudYFay6nJmRnVs
s0XnOLEYbzs1yg==
-----END CERTIFICATE-----
Generated at Sat May 4 03:08:30 2024 by rpki-client on console-fra.rpki-client.org