Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
File:                     LuUlFj3AHc0wibsdz7CRLnftr5g.mft (raw, json)
Hash identifier:          pcatzZAXarc6t9XndRfhmtfplp4wNo8x37hJflnAEg8=
Subject key identifier:   97:90:CB:08:42:DF:63:82:FC:BF:98:E8:73:3E:49:3F:B8:FF:80:D4
Authority key identifier: 2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
Certificate issuer:       /CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Certificate serial:       018F88249CD22D860F293AF2A6D033CD6DC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 20:00:51 +0000
Manifest this update:     Fri 17 May 2024 20:00:51 +0000
Manifest next update:     Sat 18 May 2024 20:00:51 +0000
Files and hashes:         1: LuUlFj3AHc0wibsdz7CRLnftr5g.crl (hash: rJPplZ3AeYq1B8Qc9zu/ZapU3l+PVFLURSDmF6vFFxw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:9c:d2:2d:86:0f:29:3a:f2:a6:d0:33:cd:6d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
        Validity
            Not Before: May 17 20:00:51 2024 GMT
            Not After : May 18 20:00:51 2024 GMT
        Subject: CN=9790cb0842df6382fcbf98e8733e493fb8ff80d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3d:47:4b:fd:8e:21:22:0b:8e:1a:e4:0f:cf:
                    d0:fc:c0:45:70:18:5a:3e:5c:5e:e4:97:98:06:d1:
                    63:fc:62:12:01:35:69:c1:ae:21:75:0e:77:7a:a2:
                    ff:82:93:2c:eb:3d:68:6c:c0:ed:ac:2b:33:7b:ed:
                    68:e8:14:c3:3b:34:f4:fa:1a:1d:08:01:47:0f:3a:
                    70:59:c6:f9:3c:5a:3b:82:b3:a9:b0:c1:ef:cf:c7:
                    0f:b7:32:2c:51:f9:73:a0:58:5b:cd:5b:0c:30:80:
                    cf:f1:ec:fa:14:f5:30:f1:c4:ce:17:8e:e4:9b:78:
                    27:15:7e:34:9b:86:19:85:5e:d5:a5:92:60:96:f8:
                    27:e5:64:8f:be:97:8f:40:44:a8:ac:e5:dd:25:29:
                    82:ae:be:a4:42:0a:74:4b:d2:f2:3d:e6:96:0d:1c:
                    9f:4e:00:10:68:45:54:65:e9:10:73:70:c5:ea:ee:
                    d0:eb:85:35:c6:90:a0:44:8a:15:df:bb:25:e0:fe:
                    6d:8b:c2:68:91:88:0c:6d:36:81:58:14:34:28:22:
                    da:dc:78:93:45:4d:25:f4:06:81:f9:0d:f7:49:db:
                    25:a3:66:33:23:46:2d:ae:1c:50:fb:cf:9d:99:34:
                    0c:d7:ca:18:28:e8:86:30:d2:1b:8a:5c:ea:41:f1:
                    47:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:90:CB:08:42:DF:63:82:FC:BF:98:E8:73:3E:49:3F:B8:FF:80:D4
            X509v3 Authority Key Identifier:
                keyid:2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:e3:bb:84:dc:55:01:6f:7f:f3:8f:c2:ff:3f:7d:e2:41:43:
         dc:d6:f8:f6:5c:2c:a4:98:97:f0:fa:88:d4:96:5f:a6:b4:e7:
         a4:b0:aa:6b:9d:a7:18:08:11:37:e4:08:76:37:45:f7:a6:c3:
         68:6e:a8:e4:98:a3:e3:ea:42:0f:eb:9d:b2:53:f7:25:d9:1d:
         9e:4e:73:b8:1a:cd:78:c8:03:fa:b7:83:cb:e0:fd:db:07:1c:
         9d:e0:cf:b1:55:90:dd:ac:91:d6:9d:f0:73:69:67:3f:9e:47:
         7a:41:af:12:3d:2b:ac:37:b1:1b:68:e0:a8:39:02:50:ad:80:
         f3:d4:0e:9d:f0:0f:83:30:61:20:6d:df:30:15:5f:0f:6e:98:
         74:cc:b0:56:98:4c:ce:a1:2f:74:6c:84:03:4d:fe:71:ab:30:
         f5:a1:30:5b:14:85:c7:8c:69:90:c1:63:bd:be:46:89:85:32:
         fa:5a:db:88:3f:c8:8f:fe:34:0f:5f:b6:71:c9:02:d3:aa:f5:
         15:35:9f:72:0a:74:f0:59:56:e9:7d:2c:c3:60:c7:c5:0a:3e:
         f9:ee:4e:6f:31:71:53:1f:cc:c3:7d:e3:36:71:95:22:20:74:
         86:ae:34:7a:e6:80:a7:01:06:43:45:6a:cc:d0:ec:aa:07:a5:
         1b:ef:63:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJJzSLYYPKTryptAzzW3BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZTUyNTE2M2RjMDFkY2QzMDg5YmIxZGNmYjA5MTJlNzdl
ZGFmOTgwHhcNMjQwNTE3MjAwMDUxWhcNMjQwNTE4MjAwMDUxWjAzMTEwLwYDVQQD
Eyg5NzkwY2IwODQyZGY2MzgyZmNiZjk4ZTg3MzNlNDkzZmI4ZmY4MGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD1HS/2OISILjhrkD8/Q/MBFcBha
Plxe5JeYBtFj/GISATVpwa4hdQ53eqL/gpMs6z1obMDtrCsze+1o6BTDOzT0+hod
CAFHDzpwWcb5PFo7grOpsMHvz8cPtzIsUflzoFhbzVsMMIDP8ez6FPUw8cTOF47k
m3gnFX40m4YZhV7VpZJglvgn5WSPvpePQESorOXdJSmCrr6kQgp0S9LyPeaWDRyf
TgAQaEVUZekQc3DF6u7Q64U1xpCgRIoV37sl4P5ti8JokYgMbTaBWBQ0KCLa3HiT
RU0l9AaB+Q33Sdslo2YzI0YtrhxQ+8+dmTQM18oYKOiGMNIbilzqQfFHRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJeQywhC32OC/L+Y6HM+ST+4/4DUMB8GA1UdIwQY
MBaAFC7lJRY9wB3NMIm7Hc+wkS537a+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHVVbEZqM0FIYzB3aWJzZHo3Q1JMbmZ0cjVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8zNWNmN2ItMDE0NC00NTA3LWJmMzkt
Y2M2OGRjODU0ZTg4LzEvTHVVbEZqM0FIYzB3aWJzZHo3Q1JMbmZ0cjVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8zNWNmN2ItMDE0NC00NTA3LWJmMzktY2M2OGRjODU0ZTg4
LzEvTHVVbEZqM0FIYzB3aWJzZHo3Q1JMbmZ0cjVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApOO7hNxV
AW9/84/C/z994kFD3Nb49lwspJiX8PqI1JZfprTnpLCqa52nGAgRN+QIdjdF96bD
aG6o5Jij4+pCD+udslP3Jdkdnk5zuBrNeMgD+reDy+D92wccneDPsVWQ3ayR1p3w
c2lnP55HekGvEj0rrDexG2jgqDkCUK2A89QOnfAPgzBhIG3fMBVfD26YdMywVphM
zqEvdGyEA03+casw9aEwWxSFx4xpkMFjvb5GiYUy+lrbiD/Ij/40D1+2cckC06r1
FTWfcgp08FlW6X0sw2DHxQo++e5ObzFxUx/Mw33jNnGVIiB0hq40euaApwEGQ0Vq
zNDsqgelG+9jNg==
-----END CERTIFICATE-----
Generated at Fri May 17 21:01:13 2024 by rpki-client on console-fra.rpki-client.org