Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft
File:                     3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft (raw, json)
Hash identifier:          jvD0QZqaMWh1IdBAKfvI98KhMAcsfrvd3nvGzQaFiSE=
Subject key identifier:   49:85:D2:9F:FA:87:46:BB:33:22:A2:E2:FE:8D:4A:86:D7:EF:09:72
Authority key identifier: DD:70:C5:F0:9B:62:68:32:92:FD:91:09:E6:94:71:35:90:28:1F:8D
Certificate issuer:       /CN=dd70c5f09b62683292fd9109e694713590281f8d
Certificate serial:       018F4268614BC3E87DF28BFD6A140F0E287D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft
Manifest number:          1151
Signing time:             Sat 04 May 2024 07:01:27 +0000
Manifest this update:     Sat 04 May 2024 07:01:27 +0000
Manifest next update:     Sun 05 May 2024 07:01:27 +0000
Files and hashes:         1: 3XDF8JtiaDKS_ZEJ5pRxNZAoH40.crl (hash: S4+hpRv3X2/+rpKfWnOmQ7WSr+fu053hx2Ui3mOtxvY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:68:61:4b:c3:e8:7d:f2:8b:fd:6a:14:0f:0e:28:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd70c5f09b62683292fd9109e694713590281f8d
        Validity
            Not Before: May  4 07:01:27 2024 GMT
            Not After : May  5 07:01:27 2024 GMT
        Subject: CN=4985d29ffa8746bb3322a2e2fe8d4a86d7ef0972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:90:d7:be:24:8e:22:e1:31:87:fe:42:b5:b5:
                    42:01:f9:8b:3a:73:60:d1:cd:84:7c:f2:60:ae:4a:
                    78:1c:02:fc:98:08:a9:63:d5:b3:59:13:3a:90:7b:
                    79:e6:45:79:72:cb:e9:d2:3c:52:9b:b6:ca:4d:00:
                    c4:45:af:bc:cc:0e:74:da:eb:2f:19:6f:4a:99:db:
                    cb:1c:32:0c:6c:11:0c:d1:21:19:4b:12:61:a2:17:
                    79:11:31:45:59:75:aa:94:57:bb:b9:3a:8e:3a:42:
                    b5:98:c3:b7:4b:be:fd:2e:c9:14:ab:c0:4e:3d:e2:
                    ea:b7:44:47:46:28:30:f7:60:c0:7d:57:00:17:f0:
                    f4:b2:46:2e:f6:f4:a9:51:21:23:f3:a7:7c:1f:ec:
                    d4:62:12:2d:a7:14:d1:2c:5e:c1:f8:33:3d:8f:9a:
                    0d:fe:03:77:41:6a:61:6a:18:8f:67:9c:63:f8:f0:
                    8b:c0:f7:53:ea:6c:e1:c1:e7:c3:86:4d:65:b3:f8:
                    81:6e:f5:3b:7d:7e:e6:20:cf:32:a5:52:38:79:ee:
                    14:9c:4a:b0:8a:7b:6c:d2:0b:2e:c9:b2:42:25:a8:
                    09:40:4a:97:8e:c6:6c:d1:31:84:87:0e:ff:d3:59:
                    f2:87:33:80:09:11:15:2b:77:47:f0:55:ab:0e:7c:
                    49:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:85:D2:9F:FA:87:46:BB:33:22:A2:E2:FE:8D:4A:86:D7:EF:09:72
            X509v3 Authority Key Identifier:
                keyid:DD:70:C5:F0:9B:62:68:32:92:FD:91:09:E6:94:71:35:90:28:1F:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:1b:a4:6f:33:44:c5:4a:65:5c:36:57:ca:7c:f9:17:d4:dc:
         3f:b8:78:a8:20:8e:45:d8:60:dc:57:e8:37:68:23:18:5c:2d:
         c3:63:a8:50:07:41:2a:a6:47:53:36:7a:09:d7:5d:84:7c:f5:
         7d:45:79:90:87:84:87:89:a7:de:c4:ed:26:a5:57:ae:8d:48:
         f2:f4:64:af:53:34:22:4b:1d:35:b4:fb:33:8f:87:18:05:2b:
         38:2f:70:ed:4e:c0:2e:c4:cf:f4:90:e3:84:5c:3c:79:b6:ac:
         41:33:96:fa:81:41:a3:b5:ad:8d:a6:14:35:8e:61:d0:3a:fa:
         80:75:ac:10:a1:62:3d:de:b4:74:9a:15:09:fc:08:d3:84:01:
         21:ec:19:1e:58:31:d1:e2:71:1b:25:75:95:a3:8c:d3:0f:fa:
         02:7b:3b:a8:23:f6:58:ff:b6:1b:b4:f5:22:72:2b:cf:19:97:
         e5:10:90:80:65:0d:60:f3:a0:6b:7d:a6:69:48:e7:3a:b0:05:
         c3:2f:19:88:cd:59:a8:11:bb:67:50:73:40:23:93:bb:00:b6:
         3d:94:bf:17:4e:ed:2c:f8:3f:67:4c:e1:b6:d6:e4:a0:98:a5:
         7a:8c:49:7c:79:90:b0:36:5b:f3:e1:7b:ec:63:93:d6:1d:fe:
         c9:9b:c2:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9CaGFLw+h98ov9ahQPDih9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNzBjNWYwOWI2MjY4MzI5MmZkOTEwOWU2OTQ3MTM1OTAy
ODFmOGQwHhcNMjQwNTA0MDcwMTI3WhcNMjQwNTA1MDcwMTI3WjAzMTEwLwYDVQQD
Eyg0OTg1ZDI5ZmZhODc0NmJiMzMyMmEyZTJmZThkNGE4NmQ3ZWYwOTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpDXviSOIuExh/5CtbVCAfmLOnNg
0c2EfPJgrkp4HAL8mAipY9WzWRM6kHt55kV5csvp0jxSm7bKTQDERa+8zA502usv
GW9KmdvLHDIMbBEM0SEZSxJhohd5ETFFWXWqlFe7uTqOOkK1mMO3S779LskUq8BO
PeLqt0RHRigw92DAfVcAF/D0skYu9vSpUSEj86d8H+zUYhItpxTRLF7B+DM9j5oN
/gN3QWphahiPZ5xj+PCLwPdT6mzhwefDhk1ls/iBbvU7fX7mIM8ypVI4ee4UnEqw
ints0gsuybJCJagJQEqXjsZs0TGEhw7/01nyhzOACREVK3dH8FWrDnxJpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmF0p/6h0a7MyKi4v6NSobX7wlyMB8GA1UdIwQY
MBaAFN1wxfCbYmgykv2RCeaUcTWQKB+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1hERjhKdGlhREtTX1pFSjVwUnhOWkFvSDQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9hNjc1NTctZDg5YS00ZWYxLWJkNjMt
YTdmY2FiOWFhN2FhLzEvM1hERjhKdGlhREtTX1pFSjVwUnhOWkFvSDQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9hNjc1NTctZDg5YS00ZWYxLWJkNjMtYTdmY2FiOWFhN2Fh
LzEvM1hERjhKdGlhREtTX1pFSjVwUnhOWkFvSDQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRukbzNE
xUplXDZXynz5F9TcP7h4qCCORdhg3FfoN2gjGFwtw2OoUAdBKqZHUzZ6CdddhHz1
fUV5kIeEh4mn3sTtJqVXro1I8vRkr1M0IksdNbT7M4+HGAUrOC9w7U7ALsTP9JDj
hFw8ebasQTOW+oFBo7WtjaYUNY5h0Dr6gHWsEKFiPd60dJoVCfwI04QBIewZHlgx
0eJxGyV1laOM0w/6Ans7qCP2WP+2G7T1InIrzxmX5RCQgGUNYPOga32maUjnOrAF
wy8ZiM1ZqBG7Z1BzQCOTuwC2PZS/F07tLPg/Z0zhttbkoJileoxJfHmQsDZb8+F7
7GOT1h3+yZvCXw==
-----END CERTIFICATE-----
Generated at Sat May 4 09:19:16 2024 by rpki-client on console-ams.rpki-client.org