Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
File:                     ecIGSHmLtlNrI6TrxYgEVBX5boA.mft (raw, json)
Hash identifier:          nO+SPVR0815HThFhTin2RTRLXbxiKL/69cj3N48/QIQ=
Subject key identifier:   FF:A2:BE:F2:7B:1A:97:2E:B1:AA:47:5A:0F:CA:28:91:80:8E:F3:AE
Authority key identifier: 79:C2:06:48:79:8B:B6:53:6B:23:A4:EB:C5:88:04:54:15:F9:6E:80
Certificate issuer:       /CN=79c20648798bb6536b23a4ebc588045415f96e80
Certificate serial:       018F87B651FB24059EC9CF72F544B874A33D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
Manifest number:          0131
Signing time:             Fri 17 May 2024 18:00:23 +0000
Manifest this update:     Fri 17 May 2024 18:00:23 +0000
Manifest next update:     Sat 18 May 2024 18:00:23 +0000
Files and hashes:         1: ecIGSHmLtlNrI6TrxYgEVBX5boA.crl (hash: Zfun9JLFwjtq62TzikoWT3k79ZPkZm44wKf/ElT6jDQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:51:fb:24:05:9e:c9:cf:72:f5:44:b8:74:a3:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79c20648798bb6536b23a4ebc588045415f96e80
        Validity
            Not Before: May 17 18:00:23 2024 GMT
            Not After : May 18 18:00:23 2024 GMT
        Subject: CN=ffa2bef27b1a972eb1aa475a0fca2891808ef3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3d:f7:5c:4a:6c:40:3b:be:39:e6:cd:e6:e4:
                    66:fc:fd:42:70:97:78:73:a8:df:f0:85:f8:f4:fc:
                    41:61:22:c5:13:8e:78:f3:4a:01:63:76:2a:62:d3:
                    b6:15:87:87:fe:0f:5f:9d:1b:1a:ef:b2:20:84:a0:
                    c5:e1:38:8f:e7:d6:05:d5:88:d9:19:a7:9e:5b:52:
                    a6:75:96:b5:3b:d3:d2:c2:12:43:59:95:dd:62:60:
                    c8:c2:0d:62:7b:a1:20:98:83:27:10:1d:07:bf:e5:
                    2e:ad:41:b7:d6:1b:f9:7a:db:86:68:62:7e:ca:57:
                    c6:14:a5:27:77:ed:24:33:03:b7:ee:0b:eb:62:66:
                    4b:a3:cd:c8:d8:c6:53:c8:cf:22:52:43:0d:a9:db:
                    46:5b:0b:c9:2a:aa:74:dc:68:fa:31:95:8f:e9:d3:
                    c5:16:11:b9:f9:46:6a:97:82:df:5e:72:b8:e4:74:
                    16:cd:98:b1:39:19:b0:35:16:7e:f4:b1:61:af:2d:
                    29:08:c2:9d:be:d4:f1:a0:36:ea:0f:88:a5:02:cc:
                    87:01:fa:d0:34:4c:7d:ef:af:4e:10:12:ae:ca:bb:
                    4a:6e:e3:55:b1:7d:2a:d1:70:e8:0d:b0:7e:05:25:
                    24:a0:61:8d:29:8a:b3:54:fb:de:24:2c:29:21:e5:
                    b6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A2:BE:F2:7B:1A:97:2E:B1:AA:47:5A:0F:CA:28:91:80:8E:F3:AE
            X509v3 Authority Key Identifier:
                keyid:79:C2:06:48:79:8B:B6:53:6B:23:A4:EB:C5:88:04:54:15:F9:6E:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:4e:8f:ff:bf:9d:41:4f:53:7e:95:df:36:ac:39:14:07:64:
         5b:fa:ef:78:8d:ba:57:19:51:34:3c:e3:69:58:a0:ea:92:ba:
         e6:8a:9d:fd:d6:ec:c3:fa:94:c4:28:97:75:ad:29:c4:7e:10:
         34:6d:b9:77:ca:9d:53:79:61:05:4f:f4:a0:45:a9:b3:c3:09:
         c1:1c:ff:28:de:80:83:2f:f6:1d:b3:5f:af:46:53:aa:b2:1c:
         a0:c3:57:87:6f:5e:6d:f3:8d:8b:b3:d1:15:b0:31:7f:a7:fa:
         48:33:27:48:dc:96:47:06:74:53:ae:bd:ad:cf:90:bf:44:2b:
         1a:a8:fe:7b:9c:a1:b1:1c:59:c0:06:a9:d7:9d:4d:f0:02:0f:
         42:79:9d:48:a8:02:d5:fd:4d:20:75:5e:12:bb:69:5c:aa:30:
         c3:c0:1c:41:bf:8e:46:39:d9:42:8b:78:e2:cd:a2:b5:e5:85:
         b7:ca:eb:44:f2:44:b9:73:db:10:b6:89:10:2c:e7:b5:0b:74:
         c6:19:28:01:40:c9:d2:5a:05:18:44:1f:4a:40:c7:d3:12:4b:
         2c:5d:90:f6:52:d4:d2:e2:c6:bb:8b:0d:de:72:4b:fb:84:4e:
         24:a9:6f:7b:58:97:be:4b:4a:ff:55:c0:9e:12:8f:bf:d6:5e:
         ec:fa:85:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtlH7JAWeyc9y9US4dKM9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YzIwNjQ4Nzk4YmI2NTM2YjIzYTRlYmM1ODgwNDU0MTVm
OTZlODAwHhcNMjQwNTE3MTgwMDIzWhcNMjQwNTE4MTgwMDIzWjAzMTEwLwYDVQQD
EyhmZmEyYmVmMjdiMWE5NzJlYjFhYTQ3NWEwZmNhMjg5MTgwOGVmM2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3j33XEpsQDu+OebN5uRm/P1CcJd4
c6jf8IX49PxBYSLFE45480oBY3YqYtO2FYeH/g9fnRsa77IghKDF4TiP59YF1YjZ
GaeeW1KmdZa1O9PSwhJDWZXdYmDIwg1ie6EgmIMnEB0Hv+UurUG31hv5etuGaGJ+
ylfGFKUnd+0kMwO37gvrYmZLo83I2MZTyM8iUkMNqdtGWwvJKqp03Gj6MZWP6dPF
FhG5+UZql4LfXnK45HQWzZixORmwNRZ+9LFhry0pCMKdvtTxoDbqD4ilAsyHAfrQ
NEx9769OEBKuyrtKbuNVsX0q0XDoDbB+BSUkoGGNKYqzVPveJCwpIeW27QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+ivvJ7GpcusapHWg/KKJGAjvOuMB8GA1UdIwQY
MBaAFHnCBkh5i7ZTayOk68WIBFQV+W6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWNJR1NIbUx0bE5ySTZUcnhZZ0VWQlg1Ym9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS80MDVjMzEtNzI0ZS00N2MxLTk0ZTAt
MWZhMTZlZjhjMWFkLzEvZWNJR1NIbUx0bE5ySTZUcnhZZ0VWQlg1Ym9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS80MDVjMzEtNzI0ZS00N2MxLTk0ZTAtMWZhMTZlZjhjMWFk
LzEvZWNJR1NIbUx0bE5ySTZUcnhZZ0VWQlg1Ym9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmE6P/7+d
QU9TfpXfNqw5FAdkW/rveI26VxlRNDzjaVig6pK65oqd/dbsw/qUxCiXda0pxH4Q
NG25d8qdU3lhBU/0oEWps8MJwRz/KN6Agy/2HbNfr0ZTqrIcoMNXh29ebfONi7PR
FbAxf6f6SDMnSNyWRwZ0U669rc+Qv0QrGqj+e5yhsRxZwAap151N8AIPQnmdSKgC
1f1NIHVeErtpXKoww8AcQb+ORjnZQot44s2iteWFt8rrRPJEuXPbELaJECzntQt0
xhkoAUDJ0loFGEQfSkDH0xJLLF2Q9lLU0uLGu4sN3nJL+4ROJKlve1iXvktK/1XA
nhKPv9Ze7PqFsQ==
-----END CERTIFICATE-----
Generated at Fri May 17 20:16:17 2024 by rpki-client on console-fra.rpki-client.org