Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/fef866-d56e-4309-bb39-278b0c20337a/1/C5aPKuJz2wxoYOdQSAKWhc6-9EM.mft
File:                     C5aPKuJz2wxoYOdQSAKWhc6-9EM.mft (raw, json)
Hash identifier:          5oIrlPBoim5lFJC3YG6726Rh9otinN83FN06WoSN3mI=
Subject key identifier:   45:E2:AF:D0:C2:6E:7E:97:12:12:C8:C0:2F:CB:7A:CE:91:2D:E1:C1
Authority key identifier: 0B:96:8F:2A:E2:73:DB:0C:68:60:E7:50:48:02:96:85:CE:BE:F4:43
Certificate issuer:       /CN=0b968f2ae273db0c6860e75048029685cebef443
Certificate serial:       018F4BD9E9B4B286CE112D1631996E384EA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C5aPKuJz2wxoYOdQSAKWhc6-9EM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/fef866-d56e-4309-bb39-278b0c20337a/1/C5aPKuJz2wxoYOdQSAKWhc6-9EM.mft
Manifest number:          0C3A
Signing time:             Mon 06 May 2024 03:02:03 +0000
Manifest this update:     Mon 06 May 2024 03:02:03 +0000
Manifest next update:     Tue 07 May 2024 03:02:03 +0000
Files and hashes:         1: C5aPKuJz2wxoYOdQSAKWhc6-9EM.crl (hash: F0iJqYSCKvdzkpYnwpY9SZwPlQMI0zI6+GxPOu/kaZI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/fef866-d56e-4309-bb39-278b0c20337a/1/C5aPKuJz2wxoYOdQSAKWhc6-9EM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/fef866-d56e-4309-bb39-278b0c20337a/1/C5aPKuJz2wxoYOdQSAKWhc6-9EM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C5aPKuJz2wxoYOdQSAKWhc6-9EM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:d9:e9:b4:b2:86:ce:11:2d:16:31:99:6e:38:4e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b968f2ae273db0c6860e75048029685cebef443
        Validity
            Not Before: May  6 03:02:03 2024 GMT
            Not After : May  7 03:02:03 2024 GMT
        Subject: CN=45e2afd0c26e7e971212c8c02fcb7ace912de1c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:62:1b:3e:2e:ca:c4:97:9a:3e:f4:52:3d:44:
                    6e:36:48:d0:98:df:cd:f0:67:1d:85:b6:9b:da:02:
                    d8:ca:63:9c:d7:30:91:71:bc:5f:68:05:91:7e:4b:
                    a0:ce:5f:a0:9c:b8:49:6d:14:66:8f:95:a5:ed:ae:
                    42:1a:8e:89:b5:4c:c0:c1:48:7c:72:57:f7:a0:15:
                    e4:be:60:16:f3:b7:10:93:97:4e:4b:80:a7:e4:37:
                    6d:73:fa:03:00:c6:83:94:a4:7a:80:dd:5c:00:ae:
                    b6:fc:98:dc:1b:07:b0:95:38:96:73:7d:ee:c3:2b:
                    b3:50:4c:be:50:5b:5c:ec:fa:1e:a0:c1:33:08:17:
                    84:41:93:e8:1f:22:9d:56:61:d4:71:63:27:a0:a8:
                    be:fe:76:88:88:9a:e8:52:17:bb:1f:c3:02:9b:63:
                    f7:8a:8e:3f:e7:21:0a:d3:ad:b4:55:d9:cc:44:dc:
                    2e:24:65:61:40:c3:21:fc:b2:56:5e:f6:cd:1b:2b:
                    36:64:fe:81:90:78:32:f3:77:a0:d3:94:a5:c1:e7:
                    d7:d5:79:91:23:e9:f6:14:ec:9f:ea:9b:35:c3:e9:
                    14:fa:65:87:bf:bd:e1:98:97:e8:71:d5:60:47:22:
                    38:4f:e2:d5:fa:24:96:1b:c4:52:92:4a:fe:b8:70:
                    8c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E2:AF:D0:C2:6E:7E:97:12:12:C8:C0:2F:CB:7A:CE:91:2D:E1:C1
            X509v3 Authority Key Identifier:
                keyid:0B:96:8F:2A:E2:73:DB:0C:68:60:E7:50:48:02:96:85:CE:BE:F4:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5aPKuJz2wxoYOdQSAKWhc6-9EM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fef866-d56e-4309-bb39-278b0c20337a/1/C5aPKuJz2wxoYOdQSAKWhc6-9EM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fef866-d56e-4309-bb39-278b0c20337a/1/C5aPKuJz2wxoYOdQSAKWhc6-9EM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c3:51:48:5c:83:d0:0b:2c:bd:b6:5a:7d:ee:a6:00:9e:75:
         67:84:cf:aa:29:4c:1a:2b:a8:b5:45:76:3c:45:e0:61:bc:60:
         69:f3:fa:75:a3:51:59:6c:3e:ea:c9:16:e2:84:51:b6:da:d0:
         c7:9b:41:68:8d:55:d9:e8:31:7f:53:69:94:28:f9:39:c7:ca:
         8e:8b:f5:79:20:c2:de:8a:93:bf:1c:7a:0c:7b:1a:0f:2d:44:
         75:fc:ac:e5:e1:28:4f:ec:f2:cc:50:34:27:ba:de:09:99:6d:
         89:43:9b:0e:65:f1:2b:22:be:5b:cd:0c:05:d9:08:40:94:2b:
         4f:46:2a:0e:4b:c0:0d:62:79:59:be:1f:53:8b:71:d6:09:35:
         3e:16:9d:8d:f6:c8:aa:ed:38:fc:a0:51:bf:1a:f9:0b:59:38:
         06:15:e3:b3:33:73:d5:fd:ce:fe:ac:a1:60:21:e6:cf:7e:78:
         0d:2c:4c:1e:f2:09:a6:ce:99:87:5c:8f:da:ab:84:95:7a:9e:
         1e:b8:1f:13:2a:1e:62:fb:f2:68:6e:7f:da:f2:55:3b:84:98:
         ef:ff:bd:2a:82:07:78:12:9d:20:fa:c8:a1:b1:e2:15:62:06:
         77:52:06:79:8a:0c:1c:43:49:99:ef:da:97:56:e3:39:0f:aa:
         44:82:cd:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9L2em0sobOES0WMZluOE6pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiOTY4ZjJhZTI3M2RiMGM2ODYwZTc1MDQ4MDI5Njg1Y2Vi
ZWY0NDMwHhcNMjQwNTA2MDMwMjAzWhcNMjQwNTA3MDMwMjAzWjAzMTEwLwYDVQQD
Eyg0NWUyYWZkMGMyNmU3ZTk3MTIxMmM4YzAyZmNiN2FjZTkxMmRlMWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGIbPi7KxJeaPvRSPURuNkjQmN/N
8Gcdhbab2gLYymOc1zCRcbxfaAWRfkugzl+gnLhJbRRmj5Wl7a5CGo6JtUzAwUh8
clf3oBXkvmAW87cQk5dOS4Cn5Ddtc/oDAMaDlKR6gN1cAK62/JjcGwewlTiWc33u
wyuzUEy+UFtc7PoeoMEzCBeEQZPoHyKdVmHUcWMnoKi+/naIiJroUhe7H8MCm2P3
io4/5yEK0620VdnMRNwuJGVhQMMh/LJWXvbNGys2ZP6BkHgy83eg05SlwefX1XmR
I+n2FOyf6ps1w+kU+mWHv73hmJfocdVgRyI4T+LV+iSWG8RSkkr+uHCMdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXir9DCbn6XEhLIwC/Les6RLeHBMB8GA1UdIwQY
MBaAFAuWjyric9sMaGDnUEgCloXOvvRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzVhUEt1Snoyd3hvWU9kUVNBS1doYzYtOUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9mZWY4NjYtZDU2ZS00MzA5LWJiMzkt
Mjc4YjBjMjAzMzdhLzEvQzVhUEt1Snoyd3hvWU9kUVNBS1doYzYtOUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9mZWY4NjYtZDU2ZS00MzA5LWJiMzktMjc4YjBjMjAzMzdh
LzEvQzVhUEt1Snoyd3hvWU9kUVNBS1doYzYtOUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb8NRSFyD
0AssvbZafe6mAJ51Z4TPqilMGiuotUV2PEXgYbxgafP6daNRWWw+6skW4oRRttrQ
x5tBaI1V2egxf1NplCj5OcfKjov1eSDC3oqTvxx6DHsaDy1Edfys5eEoT+zyzFA0
J7reCZltiUObDmXxKyK+W80MBdkIQJQrT0YqDkvADWJ5Wb4fU4tx1gk1PhadjfbI
qu04/KBRvxr5C1k4BhXjszNz1f3O/qyhYCHmz354DSxMHvIJps6Zh1yP2quElXqe
HrgfEyoeYvvyaG5/2vJVO4SY7/+9KoIHeBKdIPrIobHiFWIGd1IGeYoMHENJme/a
l1bjOQ+qRILNkA==
-----END CERTIFICATE-----
Generated at Mon May 6 08:33:16 2024 by rpki-client on console-ams.rpki-client.org