Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.mft
File:                     VRy0WKT6JZKw_GZGRuJzws9HgkY.mft (raw, json)
Hash identifier:          W0Sl5zITKhawz6zmkkbSNg4Tbih480/GCSEVPS7jD1A=
Subject key identifier:   5B:77:1F:84:A3:74:F5:68:39:4C:42:7A:50:B9:77:3A:DC:CD:DB:3B
Authority key identifier: 55:1C:B4:58:A4:FA:25:92:B0:FC:66:46:46:E2:73:C2:CF:47:82:46
Certificate issuer:       /CN=551cb458a4fa2592b0fc664646e273c2cf478246
Certificate serial:       018F874869BABBE539EC83AFC2BF89131649
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VRy0WKT6JZKw_GZGRuJzws9HgkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.mft
Manifest number:          EC
Signing time:             Fri 17 May 2024 16:00:20 +0000
Manifest this update:     Fri 17 May 2024 16:00:20 +0000
Manifest next update:     Sat 18 May 2024 16:00:20 +0000
Files and hashes:         1: VRy0WKT6JZKw_GZGRuJzws9HgkY.crl (hash: GcIFedDnYwHjy7ASIbETrOW+yBkbTT+dqFgmVJs2pA4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VRy0WKT6JZKw_GZGRuJzws9HgkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:69:ba:bb:e5:39:ec:83:af:c2:bf:89:13:16:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551cb458a4fa2592b0fc664646e273c2cf478246
        Validity
            Not Before: May 17 16:00:20 2024 GMT
            Not After : May 18 16:00:20 2024 GMT
        Subject: CN=5b771f84a374f568394c427a50b9773adccddb3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:73:72:5a:5a:af:02:ca:31:9b:b6:24:de:98:
                    88:8f:09:04:bd:f8:bd:9f:a8:76:00:c9:96:0b:67:
                    a0:7e:0f:2e:03:9e:93:fc:62:10:84:1c:08:28:ef:
                    30:b7:bb:a2:5d:12:1b:a5:bd:f7:03:4d:74:4a:8e:
                    3d:f7:d2:99:e1:e2:5b:94:4d:23:6a:cc:a9:d2:7b:
                    39:56:1d:09:44:e5:b8:6b:0f:6c:bc:a3:1e:11:5f:
                    c5:fc:75:9d:44:35:1e:47:65:0b:87:61:ae:43:40:
                    e4:12:0c:59:ef:77:9e:73:10:24:56:64:b6:78:dd:
                    86:29:27:e0:45:54:f3:19:99:10:05:d6:a7:81:aa:
                    16:7e:94:c0:3b:6e:47:a9:57:4e:2b:e0:87:96:67:
                    0d:e3:29:65:a9:8d:e5:a0:25:b8:ed:3b:97:d2:71:
                    1c:96:af:c1:fa:5e:ef:4d:db:ad:15:58:1e:53:f0:
                    22:cd:a0:09:6f:96:4c:11:10:f8:97:f1:31:f5:45:
                    af:9f:9a:27:55:c8:1c:f5:e9:7f:6b:6f:12:65:88:
                    7e:03:86:1e:e3:2e:0f:c3:fb:16:cb:c8:81:61:ea:
                    80:31:5b:c5:18:8e:32:03:79:c4:f5:d4:ae:c0:d5:
                    a2:26:dc:a0:3d:69:48:53:1f:bf:52:e0:38:d6:da:
                    35:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:77:1F:84:A3:74:F5:68:39:4C:42:7A:50:B9:77:3A:DC:CD:DB:3B
            X509v3 Authority Key Identifier:
                keyid:55:1C:B4:58:A4:FA:25:92:B0:FC:66:46:46:E2:73:C2:CF:47:82:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRy0WKT6JZKw_GZGRuJzws9HgkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ea:a1:53:10:3a:1c:0b:58:32:96:24:68:83:8c:da:4b:f0:
         72:92:84:d6:02:5a:b0:7f:eb:8e:e0:54:db:61:ec:c6:66:d9:
         1b:0f:2b:82:21:42:31:30:b1:ce:c7:a1:fe:9f:12:c4:87:c8:
         35:3f:7d:ef:ee:51:b2:1c:c8:77:a8:ff:4d:7d:62:56:96:de:
         b6:a4:04:ad:cb:24:35:9a:03:fe:b0:45:de:7e:c4:4e:d8:ff:
         88:4e:36:d0:b8:23:fa:21:c5:e2:d1:37:1a:7a:f5:d6:6d:64:
         9e:a7:da:49:1d:95:fe:0a:d7:da:39:9a:c8:88:85:f2:ff:bf:
         1a:89:ef:c8:9d:f9:1b:04:ef:5b:bd:d3:25:24:99:46:d5:63:
         19:5d:57:7d:cb:dc:a3:e1:93:fe:4e:b7:e9:a3:fa:d5:dd:53:
         28:31:a7:e7:44:5f:93:88:05:4a:c8:32:b7:3f:67:23:8c:f2:
         d8:25:db:46:ec:1f:96:6d:e4:7e:47:5b:e3:2d:c2:a1:12:d1:
         6c:d0:d7:49:76:0b:d7:19:35:7f:3d:3f:d0:4e:87:be:42:df:
         3d:a1:a5:42:34:4a:5d:eb:1a:10:8f:d9:e6:e8:5e:2d:93:9f:
         6f:1d:fe:84:3d:9f:69:35:84:8e:35:a3:25:43:8a:00:ea:64:
         c7:a3:c5:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSGm6u+U57IOvwr+JExZJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MWNiNDU4YTRmYTI1OTJiMGZjNjY0NjQ2ZTI3M2MyY2Y0
NzgyNDYwHhcNMjQwNTE3MTYwMDIwWhcNMjQwNTE4MTYwMDIwWjAzMTEwLwYDVQQD
Eyg1Yjc3MWY4NGEzNzRmNTY4Mzk0YzQyN2E1MGI5NzczYWRjY2RkYjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3NyWlqvAsoxm7Yk3piIjwkEvfi9
n6h2AMmWC2egfg8uA56T/GIQhBwIKO8wt7uiXRIbpb33A010So4999KZ4eJblE0j
asyp0ns5Vh0JROW4aw9svKMeEV/F/HWdRDUeR2ULh2GuQ0DkEgxZ73eecxAkVmS2
eN2GKSfgRVTzGZkQBdangaoWfpTAO25HqVdOK+CHlmcN4yllqY3loCW47TuX0nEc
lq/B+l7vTdutFVgeU/AizaAJb5ZMERD4l/Ex9UWvn5onVcgc9el/a28SZYh+A4Ye
4y4Pw/sWy8iBYeqAMVvFGI4yA3nE9dSuwNWiJtygPWlIUx+/UuA41to1SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFt3H4SjdPVoOUxCelC5dzrczds7MB8GA1UdIwQY
MBaAFFUctFik+iWSsPxmRkbic8LPR4JGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlJ5MFdLVDZKWkt3X0daR1J1Snp3czlIZ2tZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xMmU4NzEtYjI5Zi00YjYwLWJhZTMt
OWQ0ZTYxODZiYjgzLzEvVlJ5MFdLVDZKWkt3X0daR1J1Snp3czlIZ2tZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xMmU4NzEtYjI5Zi00YjYwLWJhZTMtOWQ0ZTYxODZiYjgz
LzEvVlJ5MFdLVDZKWkt3X0daR1J1Snp3czlIZ2tZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROqhUxA6
HAtYMpYkaIOM2kvwcpKE1gJasH/rjuBU22HsxmbZGw8rgiFCMTCxzseh/p8SxIfI
NT997+5RshzId6j/TX1iVpbetqQErcskNZoD/rBF3n7ETtj/iE420Lgj+iHF4tE3
Gnr11m1knqfaSR2V/grX2jmayIiF8v+/GonvyJ35GwTvW73TJSSZRtVjGV1Xfcvc
o+GT/k636aP61d1TKDGn50Rfk4gFSsgytz9nI4zy2CXbRuwflm3kfkdb4y3CoRLR
bNDXSXYL1xk1fz0/0E6HvkLfPaGlQjRKXesaEI/Z5uheLZOfbx3+hD2faTWEjjWj
JUOKAOpkx6PFjQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:38:58 2024 by rpki-client on console-fra.rpki-client.org