Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
File:                     Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft (raw, json)
Hash identifier:          8UFCHBHyjpBQYhAc1YxVyVgBCt9fdrSeMZIZcbKIxvI=
Subject key identifier:   E3:1A:E5:68:E6:A8:73:39:7B:60:A5:6E:C2:8D:F5:68:E5:3F:65:12
Authority key identifier: 2A:BB:5C:D8:5F:52:53:02:FD:04:FF:2B:67:21:86:2B:20:40:64:D4
Certificate issuer:       /CN=2abb5cd85f525302fd04ff2b6721862b204064d4
Certificate serial:       018F8749F98E0C99776D13B5B6C44C0FE075
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
Manifest number:          0218
Signing time:             Fri 17 May 2024 16:02:03 +0000
Manifest this update:     Fri 17 May 2024 16:02:03 +0000
Manifest next update:     Sat 18 May 2024 16:02:03 +0000
Files and hashes:         1: Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl (hash: F+WvfLnFs9de3osunVJHKcVEPgOWJB6tq92d6gco90Q=)
                          2: Uj_14N-lY3D5PtScJ9x5vWeUls0.roa (hash: vs0vP/kWCnfPpZpKUb9cH/Vt5Tk8I78FllNN3gDQgoA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:f9:8e:0c:99:77:6d:13:b5:b6:c4:4c:0f:e0:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2abb5cd85f525302fd04ff2b6721862b204064d4
        Validity
            Not Before: May 17 16:02:03 2024 GMT
            Not After : May 18 16:02:03 2024 GMT
        Subject: CN=e31ae568e6a873397b60a56ec28df568e53f6512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4d:21:16:01:06:f0:ca:46:4b:d8:15:84:29:
                    1a:cc:05:3e:41:28:ad:06:15:49:dc:f7:84:a0:c5:
                    f9:0c:16:ba:4a:4f:de:4d:b3:57:37:1f:28:43:a1:
                    0e:3a:ca:24:4e:0a:1c:27:d4:ed:77:b9:cf:bf:e9:
                    24:54:d0:c7:1e:f4:e3:34:8b:ef:3e:e2:91:40:6d:
                    de:74:fc:cc:d8:a9:a1:30:73:ed:69:75:08:09:5f:
                    a6:9e:1d:7c:ca:d9:ba:70:51:32:37:d9:ca:76:36:
                    27:95:c9:b3:e6:c5:85:da:94:8d:5b:10:65:d8:be:
                    5d:03:9d:93:71:bf:3a:4d:fe:26:7c:b3:3d:27:2b:
                    4f:78:0f:22:36:40:8a:6b:89:02:f8:d3:8f:51:82:
                    38:77:d4:06:e3:05:67:73:ce:86:31:14:53:f2:9a:
                    4c:ab:48:17:63:49:93:55:6a:99:25:b5:65:46:c9:
                    d3:8d:46:ac:24:db:78:d7:8a:dc:ed:a1:fd:38:1f:
                    02:d1:3a:aa:73:95:3d:f7:aa:86:8c:ec:e1:82:bd:
                    52:fc:7f:b4:e3:6e:18:aa:14:2b:c7:3a:31:c4:dc:
                    bc:35:5a:46:b4:00:cf:b8:e1:7b:e5:9a:b1:a1:21:
                    1e:8a:a1:d5:40:1d:bb:de:34:e4:7e:7b:09:5b:ab:
                    2a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1A:E5:68:E6:A8:73:39:7B:60:A5:6E:C2:8D:F5:68:E5:3F:65:12
            X509v3 Authority Key Identifier:
                keyid:2A:BB:5C:D8:5F:52:53:02:FD:04:FF:2B:67:21:86:2B:20:40:64:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:23:33:a0:55:b1:d6:ba:c3:92:70:1f:80:bb:98:61:ff:20:
         62:70:2b:9d:85:c5:1d:bc:c7:85:30:c4:01:0a:84:ec:40:6b:
         9c:78:31:bf:62:30:69:40:6d:fe:85:2a:44:ec:c9:94:63:85:
         fd:4f:cf:ae:84:c3:d0:01:57:3f:f7:24:2d:90:91:88:31:b8:
         21:f4:3f:a1:e1:a4:4b:55:15:23:48:18:51:3a:4a:b7:bb:f0:
         c3:d6:5d:52:eb:31:21:70:18:f6:93:07:9c:a3:9d:99:5c:af:
         d4:66:66:4e:d7:e2:16:fc:91:ad:bb:fd:d7:c4:6b:ba:d0:39:
         76:63:70:ad:2b:e0:2c:63:c9:50:b5:4a:1d:53:47:9b:fe:3e:
         99:fb:76:51:32:8d:8a:ef:03:c5:50:56:3d:65:9c:a2:a5:ed:
         d2:07:56:b0:65:25:34:1a:ab:27:ff:f5:f4:33:fa:8e:bc:0a:
         ef:ef:0f:04:58:f2:d1:2f:e7:03:01:56:f6:7d:63:11:bc:56:
         2f:ee:5f:ac:58:9f:81:99:3f:b3:23:5b:a0:42:12:0f:60:af:
         9f:cf:01:29:46:38:a4:e4:2f:78:55:88:10:8b:62:8e:86:f5:
         a0:b4:f7:66:c0:3d:f9:ee:98:56:e8:ab:d6:f7:0c:04:d2:c0:
         57:ec:9b:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSfmODJl3bRO1tsRMD+B1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYmI1Y2Q4NWY1MjUzMDJmZDA0ZmYyYjY3MjE4NjJiMjA0
MDY0ZDQwHhcNMjQwNTE3MTYwMjAzWhcNMjQwNTE4MTYwMjAzWjAzMTEwLwYDVQQD
EyhlMzFhZTU2OGU2YTg3MzM5N2I2MGE1NmVjMjhkZjU2OGU1M2Y2NTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6U0hFgEG8MpGS9gVhCkazAU+QSit
BhVJ3PeEoMX5DBa6Sk/eTbNXNx8oQ6EOOsokTgocJ9Ttd7nPv+kkVNDHHvTjNIvv
PuKRQG3edPzM2KmhMHPtaXUICV+mnh18ytm6cFEyN9nKdjYnlcmz5sWF2pSNWxBl
2L5dA52Tcb86Tf4mfLM9JytPeA8iNkCKa4kC+NOPUYI4d9QG4wVnc86GMRRT8ppM
q0gXY0mTVWqZJbVlRsnTjUasJNt414rc7aH9OB8C0Tqqc5U996qGjOzhgr1S/H+0
424YqhQrxzoxxNy8NVpGtADPuOF75ZqxoSEeiqHVQB273jTkfnsJW6sqkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMa5WjmqHM5e2ClbsKN9WjlP2USMB8GA1UdIwQY
MBaAFCq7XNhfUlMC/QT/K2chhisgQGTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3J0YzJGOVNVd0w5QlA4clp5R0dLeUJBWk5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi82OTA0ODItOWRlYy00OWYyLWFiNTUt
NzIxZDI1MmYzNTI2LzEvS3J0YzJGOVNVd0w5QlA4clp5R0dLeUJBWk5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi82OTA0ODItOWRlYy00OWYyLWFiNTUtNzIxZDI1MmYzNTI2
LzEvS3J0YzJGOVNVd0w5QlA4clp5R0dLeUJBWk5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSMzoFWx
1rrDknAfgLuYYf8gYnArnYXFHbzHhTDEAQqE7EBrnHgxv2IwaUBt/oUqROzJlGOF
/U/ProTD0AFXP/ckLZCRiDG4IfQ/oeGkS1UVI0gYUTpKt7vww9ZdUusxIXAY9pMH
nKOdmVyv1GZmTtfiFvyRrbv918RrutA5dmNwrSvgLGPJULVKHVNHm/4+mft2UTKN
iu8DxVBWPWWcoqXt0gdWsGUlNBqrJ//19DP6jrwK7+8PBFjy0S/nAwFW9n1jEbxW
L+5frFifgZk/syNboEISD2Cvn88BKUY4pOQveFWIEItijob1oLT3ZsA9+e6YVuir
1vcMBNLAV+yb+A==
-----END CERTIFICATE-----
Generated at Sat May 18 00:02:05 2024 by rpki-client on console-ams.rpki-client.org