Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
File:                     DDvIzqseeTohA5zQseVHLHJkH2g.mft (raw, json)
Hash identifier:          tLlklZKKrNzOhtG4Fi3rIoWMZHpGNdsQSSBKeKgjEFo=
Subject key identifier:   00:C9:B5:B9:9D:C8:55:37:30:FB:4F:89:91:99:BC:5F:5C:1D:D8:12
Authority key identifier: 0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68
Certificate issuer:       /CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68
Certificate serial:       018F486A8C50E65177FF17162319CC7D8BB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
Manifest number:          1155
Signing time:             Sun 05 May 2024 11:01:33 +0000
Manifest this update:     Sun 05 May 2024 11:01:33 +0000
Manifest next update:     Mon 06 May 2024 11:01:33 +0000
Files and hashes:         1: DDvIzqseeTohA5zQseVHLHJkH2g.crl (hash: rXuOOzhpMBZ965il0J/VPCR5Ox43nHbnwDwfBTDh3yo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:48:6a:8c:50:e6:51:77:ff:17:16:23:19:cc:7d:8b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68
        Validity
            Not Before: May  5 11:01:33 2024 GMT
            Not After : May  6 11:01:33 2024 GMT
        Subject: CN=00c9b5b99dc8553730fb4f899199bc5f5c1dd812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ea:52:5e:71:d5:47:bf:b8:6a:c3:ba:e8:96:
                    9c:37:b5:ea:4d:89:7e:39:d7:80:4a:f9:2c:d1:30:
                    94:80:a3:67:51:23:7e:db:c8:a4:06:76:88:22:c5:
                    09:35:cf:e2:00:2b:bd:3b:c5:c7:16:8f:26:1c:d1:
                    6a:31:62:31:e0:37:89:cf:ed:7b:0c:59:14:e9:09:
                    5d:7c:56:f2:98:56:3a:8b:07:ab:94:8d:ca:8f:51:
                    be:48:ba:ed:10:e6:99:4a:11:78:93:a0:54:17:24:
                    53:f9:42:00:85:83:ad:1f:37:4c:a3:7c:9a:79:dd:
                    cc:56:64:c9:9c:4f:a1:69:c8:97:f3:b8:d1:ae:13:
                    4a:3c:ef:e4:25:df:ce:92:4e:ad:89:c2:4a:7e:33:
                    34:ae:23:08:1e:a4:d4:35:a6:38:91:d8:01:ac:61:
                    eb:c7:e8:e8:6e:a8:cf:b1:78:80:4f:cc:ca:74:a4:
                    3d:f6:82:ae:2e:8d:e4:bc:68:b3:8c:61:02:dd:08:
                    97:28:6a:a6:1c:5c:ed:6d:65:2c:6d:af:ac:71:b8:
                    84:92:0b:66:88:1d:7a:3e:64:1a:da:5c:9a:6c:1f:
                    41:e9:e7:4a:fa:11:e5:56:7d:ae:8c:78:37:66:4c:
                    9e:59:30:e3:3f:af:b2:82:2f:af:1c:51:bb:8d:e3:
                    17:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C9:B5:B9:9D:C8:55:37:30:FB:4F:89:91:99:BC:5F:5C:1D:D8:12
            X509v3 Authority Key Identifier:
                keyid:0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:83:94:94:13:78:53:65:88:e7:14:44:44:e2:08:a0:85:c7:
         19:58:79:4d:84:22:72:f9:22:f6:a5:76:c9:b5:98:93:26:0c:
         e0:b0:f7:ed:bb:ae:ff:18:b3:39:8a:46:b4:eb:07:8a:e0:38:
         89:79:45:f8:64:24:9f:d0:93:c1:31:d8:94:3d:c7:a4:01:01:
         dc:9f:ff:95:39:33:3f:31:c0:88:ec:03:43:c4:96:7a:69:23:
         98:b0:eb:84:b2:4e:70:b2:45:01:06:cd:00:ec:85:71:ac:d1:
         f7:01:65:5b:14:cd:6a:fe:ca:06:af:6a:75:51:35:b8:1f:78:
         c0:b9:de:ea:88:2d:02:25:8b:6c:56:32:bc:c2:cd:6d:d1:b6:
         d3:82:84:3a:c3:a8:6e:25:3f:3b:fe:47:ff:8a:e9:99:30:60:
         b6:37:05:df:61:a7:71:df:f0:83:7a:22:41:4d:dd:7b:03:d0:
         18:c8:48:f5:66:c6:8f:f2:c1:2d:93:4d:a6:a2:9f:fb:d9:76:
         4a:4a:4b:72:97:1f:81:94:b9:ce:1a:88:a4:dd:85:73:bb:52:
         f0:94:ab:aa:66:d4:d9:f6:a7:fd:5a:46:5b:77:f6:ee:65:4e:
         6b:a7:29:fa:ce:58:fa:49:51:d8:83:25:e0:2c:35:89:ba:59:
         23:70:ff:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9IaoxQ5lF3/xcWIxnMfYu1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjM2JjOGNlYWIxZTc5M2EyMTAzOWNkMGIxZTU0NzJjNzI2
NDFmNjgwHhcNMjQwNTA1MTEwMTMzWhcNMjQwNTA2MTEwMTMzWjAzMTEwLwYDVQQD
EygwMGM5YjViOTlkYzg1NTM3MzBmYjRmODk5MTk5YmM1ZjVjMWRkODEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+pSXnHVR7+4asO66JacN7XqTYl+
OdeASvks0TCUgKNnUSN+28ikBnaIIsUJNc/iACu9O8XHFo8mHNFqMWIx4DeJz+17
DFkU6QldfFbymFY6iwerlI3Kj1G+SLrtEOaZShF4k6BUFyRT+UIAhYOtHzdMo3ya
ed3MVmTJnE+haciX87jRrhNKPO/kJd/Okk6ticJKfjM0riMIHqTUNaY4kdgBrGHr
x+jobqjPsXiAT8zKdKQ99oKuLo3kvGizjGEC3QiXKGqmHFztbWUsba+scbiEkgtm
iB16PmQa2lyabB9B6edK+hHlVn2ujHg3ZkyeWTDjP6+ygi+vHFG7jeMXoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADJtbmdyFU3MPtPiZGZvF9cHdgSMB8GA1UdIwQY
MBaAFAw7yM6rHnk6IQOc0LHlRyxyZB9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRER2SXpxc2VlVG9oQTV6UXNlVkhMSEprSDJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9jZjNjNmUtNDgzNi00NDE1LTkxZDQt
ZjhiYWM0ZmI4ZjhhLzEvRER2SXpxc2VlVG9oQTV6UXNlVkhMSEprSDJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9jZjNjNmUtNDgzNi00NDE1LTkxZDQtZjhiYWM0ZmI4Zjhh
LzEvRER2SXpxc2VlVG9oQTV6UXNlVkhMSEprSDJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMIOUlBN4
U2WI5xREROIIoIXHGVh5TYQicvki9qV2ybWYkyYM4LD37buu/xizOYpGtOsHiuA4
iXlF+GQkn9CTwTHYlD3HpAEB3J//lTkzPzHAiOwDQ8SWemkjmLDrhLJOcLJFAQbN
AOyFcazR9wFlWxTNav7KBq9qdVE1uB94wLne6ogtAiWLbFYyvMLNbdG204KEOsOo
biU/O/5H/4rpmTBgtjcF32Gncd/wg3oiQU3dewPQGMhI9WbGj/LBLZNNpqKf+9l2
SkpLcpcfgZS5zhqIpN2Fc7tS8JSrqmbU2fan/VpGW3f27mVOa6cp+s5Y+klR2IMl
4Cw1ibpZI3D/8Q==
-----END CERTIFICATE-----
Generated at Sun May 5 12:22:27 2024 by rpki-client on console-ams.rpki-client.org