Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/216de3-25fd-417b-9b62-646f5c6f1416/1/T-IhgZlVyiLjveo0hzc-GLSW2iI.mft
File:                     T-IhgZlVyiLjveo0hzc-GLSW2iI.mft (raw, json)
Hash identifier:          kdX+OAfGCWdv3hIu+5yUk4TDCQU6bxYW5I45inEtmCg=
Subject key identifier:   35:D3:6B:08:18:A6:67:8D:95:39:8D:F4:A8:2C:4C:C3:B9:56:2E:B3
Authority key identifier: 4F:E2:21:81:99:55:CA:22:E3:BD:EA:34:87:37:3E:18:B4:96:DA:22
Certificate issuer:       /CN=4fe221819955ca22e3bdea3487373e18b496da22
Certificate serial:       018F87ED2A5397842DEC0B5B831A58EF1994
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T-IhgZlVyiLjveo0hzc-GLSW2iI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/216de3-25fd-417b-9b62-646f5c6f1416/1/T-IhgZlVyiLjveo0hzc-GLSW2iI.mft
Manifest number:          0348
Signing time:             Fri 17 May 2024 19:00:17 +0000
Manifest this update:     Fri 17 May 2024 19:00:17 +0000
Manifest next update:     Sat 18 May 2024 19:00:17 +0000
Files and hashes:         1: T-IhgZlVyiLjveo0hzc-GLSW2iI.crl (hash: XVb9HcsVxRLNBWbyAVWgsnH98NujToONWYEbcEH5wZg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/216de3-25fd-417b-9b62-646f5c6f1416/1/T-IhgZlVyiLjveo0hzc-GLSW2iI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/216de3-25fd-417b-9b62-646f5c6f1416/1/T-IhgZlVyiLjveo0hzc-GLSW2iI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T-IhgZlVyiLjveo0hzc-GLSW2iI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:2a:53:97:84:2d:ec:0b:5b:83:1a:58:ef:19:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fe221819955ca22e3bdea3487373e18b496da22
        Validity
            Not Before: May 17 19:00:17 2024 GMT
            Not After : May 18 19:00:17 2024 GMT
        Subject: CN=35d36b0818a6678d95398df4a82c4cc3b9562eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:71:56:c6:9b:5c:11:b8:80:38:4b:b1:d5:5c:
                    30:7a:6b:71:da:2c:2c:30:86:07:22:49:18:ae:6e:
                    8d:d5:c6:63:2c:19:11:16:af:04:4a:ed:f3:cb:be:
                    c9:bb:7b:53:8b:d6:cb:92:62:ab:f1:0c:e5:50:74:
                    51:a4:9b:8c:c2:f3:0c:61:7c:a6:9e:6b:c7:40:5d:
                    19:74:60:dc:44:2a:a5:61:bb:ba:9f:89:e9:4e:c0:
                    39:8f:67:bb:32:b5:84:c6:ee:47:18:9b:03:e3:eb:
                    75:1e:a5:7f:42:37:4f:5d:4e:af:c6:78:de:95:34:
                    23:3d:91:c2:20:f3:e6:00:a1:1b:80:86:b3:26:a1:
                    4d:00:14:fe:70:36:90:5e:57:ee:f8:90:d5:d8:a2:
                    4f:b6:31:ac:e2:78:74:11:e5:b6:85:9d:dd:d7:6d:
                    64:6d:1a:d4:34:1c:f6:9c:e1:b8:33:bf:16:69:a0:
                    55:5d:74:b4:6a:03:03:9c:a4:ed:2d:60:93:81:bc:
                    a5:07:d3:61:ee:89:e0:61:57:44:b8:26:30:64:41:
                    43:46:1d:a2:84:f4:3b:db:2b:0b:4b:96:04:c2:e7:
                    33:9c:97:1b:33:3d:7a:eb:e8:29:d4:38:7f:0f:91:
                    f7:a0:00:a1:73:7e:a1:c4:93:cb:8f:91:fa:02:62:
                    42:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D3:6B:08:18:A6:67:8D:95:39:8D:F4:A8:2C:4C:C3:B9:56:2E:B3
            X509v3 Authority Key Identifier:
                keyid:4F:E2:21:81:99:55:CA:22:E3:BD:EA:34:87:37:3E:18:B4:96:DA:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-IhgZlVyiLjveo0hzc-GLSW2iI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/216de3-25fd-417b-9b62-646f5c6f1416/1/T-IhgZlVyiLjveo0hzc-GLSW2iI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/216de3-25fd-417b-9b62-646f5c6f1416/1/T-IhgZlVyiLjveo0hzc-GLSW2iI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:8b:37:7d:42:db:01:e8:bf:af:b3:43:b2:ca:e0:37:7a:60:
         27:e9:eb:43:0f:86:55:38:3f:ad:a3:8e:6a:50:4d:f0:94:10:
         9f:d3:c8:91:d0:16:b6:53:24:b5:fe:b3:b4:c6:e5:73:48:24:
         b1:29:ec:c6:4a:f7:06:52:62:85:88:33:75:c8:1d:58:ec:b5:
         3d:14:e8:12:3f:94:76:8e:d0:f6:b8:27:3f:48:d2:b9:ce:00:
         31:13:e3:9e:64:55:55:a5:3f:76:a5:42:d8:60:6a:43:b2:90:
         10:2e:00:26:1a:f6:a0:35:5d:0b:b9:39:15:62:a7:ca:14:fe:
         62:b6:16:e4:bf:7a:8b:85:7e:f3:69:5e:0e:d8:92:c1:17:68:
         fd:44:69:ba:a0:7d:2c:4c:96:55:43:34:fb:a9:98:36:b9:4a:
         c7:c9:3f:40:4d:85:9e:be:28:2e:4d:16:9c:6d:77:9a:0d:c4:
         db:6d:70:df:f1:89:dc:66:e2:6d:32:d0:75:97:e2:48:80:06:
         50:7b:3b:70:2d:77:6c:e9:57:53:bb:ea:7d:b3:5e:11:f4:d8:
         3b:71:18:ec:a2:fa:22:79:e2:55:3a:ca:68:7e:36:88:49:65:
         85:25:38:0f:52:29:83:b6:c3:1f:d3:b7:c9:80:9b:3b:48:bd:
         10:67:b5:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7SpTl4Qt7AtbgxpY7xmUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZTIyMTgxOTk1NWNhMjJlM2JkZWEzNDg3MzczZTE4YjQ5
NmRhMjIwHhcNMjQwNTE3MTkwMDE3WhcNMjQwNTE4MTkwMDE3WjAzMTEwLwYDVQQD
EygzNWQzNmIwODE4YTY2NzhkOTUzOThkZjRhODJjNGNjM2I5NTYyZWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnFWxptcEbiAOEux1Vwwemtx2iws
MIYHIkkYrm6N1cZjLBkRFq8ESu3zy77Ju3tTi9bLkmKr8QzlUHRRpJuMwvMMYXym
nmvHQF0ZdGDcRCqlYbu6n4npTsA5j2e7MrWExu5HGJsD4+t1HqV/QjdPXU6vxnje
lTQjPZHCIPPmAKEbgIazJqFNABT+cDaQXlfu+JDV2KJPtjGs4nh0EeW2hZ3d121k
bRrUNBz2nOG4M78WaaBVXXS0agMDnKTtLWCTgbylB9Nh7ongYVdEuCYwZEFDRh2i
hPQ72ysLS5YEwucznJcbMz166+gp1Dh/D5H3oAChc36hxJPLj5H6AmJCgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXTawgYpmeNlTmN9KgsTMO5Vi6zMB8GA1UdIwQY
MBaAFE/iIYGZVcoi473qNIc3Phi0ltoiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVC1JaGdabFZ5aUxqdmVvMGh6Yy1HTFNXMmlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yMTZkZTMtMjVmZC00MTdiLTliNjIt
NjQ2ZjVjNmYxNDE2LzEvVC1JaGdabFZ5aUxqdmVvMGh6Yy1HTFNXMmlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8yMTZkZTMtMjVmZC00MTdiLTliNjItNjQ2ZjVjNmYxNDE2
LzEvVC1JaGdabFZ5aUxqdmVvMGh6Yy1HTFNXMmlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUos3fULb
Aei/r7NDssrgN3pgJ+nrQw+GVTg/raOOalBN8JQQn9PIkdAWtlMktf6ztMblc0gk
sSnsxkr3BlJihYgzdcgdWOy1PRToEj+Udo7Q9rgnP0jSuc4AMRPjnmRVVaU/dqVC
2GBqQ7KQEC4AJhr2oDVdC7k5FWKnyhT+YrYW5L96i4V+82leDtiSwRdo/URpuqB9
LEyWVUM0+6mYNrlKx8k/QE2Fnr4oLk0WnG13mg3E221w3/GJ3GbibTLQdZfiSIAG
UHs7cC13bOlXU7vqfbNeEfTYO3EY7KL6InniVTrKaH42iEllhSU4D1Ipg7bDH9O3
yYCbO0i9EGe1Tg==
-----END CERTIFICATE-----
Generated at Sat May 18 00:02:48 2024 by rpki-client on console-ams.rpki-client.org