Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bc86bd-e3c4-4172-bc10-0251d104dd46/1/vxyx6NN85X_iALAnQQb1pYFeoi4.mft
File:                     vxyx6NN85X_iALAnQQb1pYFeoi4.mft (raw, json)
Hash identifier:          xHPwOzDWsHgAEoHKDKKKnGNOkUjNuywevcxjy/wlfvw=
Subject key identifier:   77:70:4D:D0:61:48:1A:77:B6:03:4C:C7:22:00:0D:D5:B3:97:A3:09
Authority key identifier: BF:1C:B1:E8:D3:7C:E5:7F:E2:00:B0:27:41:06:F5:A5:81:5E:A2:2E
Certificate issuer:       /CN=bf1cb1e8d37ce57fe200b0274106f5a5815ea22e
Certificate serial:       018F8749DE61CF183B54640ED2CD2CAB8739
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vxyx6NN85X_iALAnQQb1pYFeoi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/bc86bd-e3c4-4172-bc10-0251d104dd46/1/vxyx6NN85X_iALAnQQb1pYFeoi4.mft
Manifest number:          1173
Signing time:             Fri 17 May 2024 16:01:56 +0000
Manifest this update:     Fri 17 May 2024 16:01:56 +0000
Manifest next update:     Sat 18 May 2024 16:01:56 +0000
Files and hashes:         1: vxyx6NN85X_iALAnQQb1pYFeoi4.crl (hash: dn3QrIaj1KAjx9UwkNE5nT61B4oRDSr3NQ/rfC9TbaE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/bc86bd-e3c4-4172-bc10-0251d104dd46/1/vxyx6NN85X_iALAnQQb1pYFeoi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/bc86bd-e3c4-4172-bc10-0251d104dd46/1/vxyx6NN85X_iALAnQQb1pYFeoi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vxyx6NN85X_iALAnQQb1pYFeoi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:de:61:cf:18:3b:54:64:0e:d2:cd:2c:ab:87:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1cb1e8d37ce57fe200b0274106f5a5815ea22e
        Validity
            Not Before: May 17 16:01:56 2024 GMT
            Not After : May 18 16:01:56 2024 GMT
        Subject: CN=77704dd061481a77b6034cc722000dd5b397a309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:36:fb:d9:e4:6a:63:c1:7e:ef:1a:ec:5e:65:
                    f4:0d:67:e7:90:0b:2a:50:80:e0:7e:18:6b:09:db:
                    da:1d:17:47:7a:17:f9:5a:ef:9c:b5:04:15:20:46:
                    f8:96:40:be:63:b9:11:3a:4c:f9:79:5c:41:bb:5a:
                    71:3c:98:84:03:d3:1e:1e:19:76:ae:7d:d8:f8:e4:
                    f4:87:28:8c:6f:86:8d:1c:b2:f6:98:7f:f7:80:83:
                    a2:5e:c1:04:1e:9e:47:76:bd:f7:72:b8:9a:81:d3:
                    97:cf:a4:9b:04:7d:0a:72:ea:a2:f9:ef:28:5e:44:
                    53:7c:d1:37:32:6d:6b:94:19:00:3c:17:bd:b1:e6:
                    7e:57:20:de:05:d6:b2:4c:e1:75:59:8f:e3:23:1d:
                    c8:df:44:97:a4:16:e0:ae:7d:8a:2d:42:03:20:91:
                    39:32:39:69:ae:74:cc:1c:0c:2c:bd:ea:7d:fa:de:
                    8a:1e:c3:f4:2b:2a:58:45:5e:86:a1:b0:04:50:c8:
                    22:f2:92:6f:94:dd:d3:44:b5:56:86:14:84:ea:7e:
                    25:ad:5c:7d:fe:eb:fb:e0:a9:0b:ef:3d:f1:ad:9f:
                    80:f8:d9:82:78:85:cf:c6:21:11:18:ed:10:df:9b:
                    ca:27:20:43:64:ad:8b:be:80:15:52:92:c4:23:92:
                    98:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:70:4D:D0:61:48:1A:77:B6:03:4C:C7:22:00:0D:D5:B3:97:A3:09
            X509v3 Authority Key Identifier:
                keyid:BF:1C:B1:E8:D3:7C:E5:7F:E2:00:B0:27:41:06:F5:A5:81:5E:A2:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxyx6NN85X_iALAnQQb1pYFeoi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bc86bd-e3c4-4172-bc10-0251d104dd46/1/vxyx6NN85X_iALAnQQb1pYFeoi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bc86bd-e3c4-4172-bc10-0251d104dd46/1/vxyx6NN85X_iALAnQQb1pYFeoi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:d4:f8:f7:56:2b:89:25:ed:db:25:dd:0b:3a:ba:ea:ee:05:
         83:01:95:0a:0c:98:32:96:95:2d:11:80:92:6d:36:f0:cc:1c:
         ce:36:78:f8:a3:9d:f8:9f:6f:92:2f:16:fc:cd:bc:1b:af:49:
         c6:0d:ea:60:1b:36:f0:9d:68:d6:a8:ce:4e:af:88:a1:f8:b2:
         b6:04:c1:3f:26:97:91:12:7c:a1:40:94:7e:8a:97:d3:36:c8:
         0f:37:17:d3:44:05:2f:37:75:5e:4b:d3:56:89:39:31:1f:6a:
         0d:08:49:c4:70:9d:1a:fc:66:5d:20:fe:79:18:a1:23:b1:7e:
         41:51:a8:17:58:c4:56:d4:d0:45:38:0b:0e:ba:72:6c:c0:94:
         9a:0e:9f:ef:37:36:e1:49:b3:37:b5:e2:f0:11:e5:d0:9a:46:
         e8:cb:ad:f1:71:89:dc:d0:a3:f9:2b:74:40:33:b4:95:a2:8e:
         89:88:53:71:a6:d5:40:28:50:13:13:3a:28:24:36:1e:ac:12:
         28:c3:f2:a9:27:93:f4:f8:6e:20:0b:a4:73:8f:32:30:a9:0b:
         5f:dc:0d:26:0d:cd:f7:e1:c2:3d:f1:8e:ea:ae:7c:64:5c:16:
         b8:f6:bc:08:9d:6a:89:30:84:47:2d:9a:51:ef:86:96:d6:5c:
         d8:05:37:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSd5hzxg7VGQO0s0sq4c5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMWNiMWU4ZDM3Y2U1N2ZlMjAwYjAyNzQxMDZmNWE1ODE1
ZWEyMmUwHhcNMjQwNTE3MTYwMTU2WhcNMjQwNTE4MTYwMTU2WjAzMTEwLwYDVQQD
Eyg3NzcwNGRkMDYxNDgxYTc3YjYwMzRjYzcyMjAwMGRkNWIzOTdhMzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDb72eRqY8F+7xrsXmX0DWfnkAsq
UIDgfhhrCdvaHRdHehf5Wu+ctQQVIEb4lkC+Y7kROkz5eVxBu1pxPJiEA9MeHhl2
rn3Y+OT0hyiMb4aNHLL2mH/3gIOiXsEEHp5Hdr33criagdOXz6SbBH0Kcuqi+e8o
XkRTfNE3Mm1rlBkAPBe9seZ+VyDeBdayTOF1WY/jIx3I30SXpBbgrn2KLUIDIJE5
MjlprnTMHAwsvep9+t6KHsP0KypYRV6GobAEUMgi8pJvlN3TRLVWhhSE6n4lrVx9
/uv74KkL7z3xrZ+A+NmCeIXPxiERGO0Q35vKJyBDZK2LvoAVUpLEI5KYXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdwTdBhSBp3tgNMxyIADdWzl6MJMB8GA1UdIwQY
MBaAFL8csejTfOV/4gCwJ0EG9aWBXqIuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnh5eDZOTjg1WF9pQUxBblFRYjFwWUZlb2k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iYzg2YmQtZTNjNC00MTcyLWJjMTAt
MDI1MWQxMDRkZDQ2LzEvdnh5eDZOTjg1WF9pQUxBblFRYjFwWUZlb2k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9iYzg2YmQtZTNjNC00MTcyLWJjMTAtMDI1MWQxMDRkZDQ2
LzEvdnh5eDZOTjg1WF9pQUxBblFRYjFwWUZlb2k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhtT491Yr
iSXt2yXdCzq66u4FgwGVCgyYMpaVLRGAkm028MwczjZ4+KOd+J9vki8W/M28G69J
xg3qYBs28J1o1qjOTq+IofiytgTBPyaXkRJ8oUCUfoqX0zbIDzcX00QFLzd1XkvT
Vok5MR9qDQhJxHCdGvxmXSD+eRihI7F+QVGoF1jEVtTQRTgLDrpybMCUmg6f7zc2
4UmzN7Xi8BHl0JpG6Mut8XGJ3NCj+St0QDO0laKOiYhTcabVQChQExM6KCQ2HqwS
KMPyqSeT9PhuIAukc48yMKkLX9wNJg3N9+HCPfGO6q58ZFwWuPa8CJ1qiTCERy2a
Ue+GltZc2AU3kA==
-----END CERTIFICATE-----
Generated at Fri May 17 23:56:17 2024 by rpki-client on console-fra.rpki-client.org