Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
File:                     r03WWsHW2oS6m4HCCeCnYXNF6iM.mft (raw, json)
Hash identifier:          o0yLrp26RenhvnTp8GbcR0tmZ2nrAuj0hgwQVRd8G7A=
Subject key identifier:   48:55:01:E4:EC:F2:BA:57:F3:D0:CE:DD:80:CA:B7:14:67:56:91:72
Authority key identifier: AF:4D:D6:5A:C1:D6:DA:84:BA:9B:81:C2:09:E0:A7:61:73:45:EA:23
Certificate issuer:       /CN=af4dd65ac1d6da84ba9b81c209e0a7617345ea23
Certificate serial:       018F87482EAB8539A0D94CE5889E737F33EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
Manifest number:          04AA
Signing time:             Fri 17 May 2024 16:00:05 +0000
Manifest this update:     Fri 17 May 2024 16:00:05 +0000
Manifest next update:     Sat 18 May 2024 16:00:05 +0000
Files and hashes:         1: r03WWsHW2oS6m4HCCeCnYXNF6iM.crl (hash: e8SmbOwwJtnRbJt6CoikTL4gURtW9PkdAPT0MmuVRxg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:2e:ab:85:39:a0:d9:4c:e5:88:9e:73:7f:33:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af4dd65ac1d6da84ba9b81c209e0a7617345ea23
        Validity
            Not Before: May 17 16:00:05 2024 GMT
            Not After : May 18 16:00:05 2024 GMT
        Subject: CN=485501e4ecf2ba57f3d0cedd80cab71467569172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:28:ce:68:b6:60:df:9d:4c:6b:3b:6d:9f:8e:
                    a8:f9:f1:f9:92:7a:cd:51:d2:6e:91:70:b5:c8:c1:
                    86:12:f6:c5:3a:ca:93:8d:af:5c:16:69:38:bf:66:
                    6f:8a:76:0d:f5:20:8a:c5:07:3c:0d:96:6e:0d:cb:
                    84:4c:47:03:dd:4d:09:a6:d7:78:6f:4d:3d:93:2c:
                    9a:40:f2:96:02:12:e3:75:06:e8:d4:fc:30:1a:f8:
                    4e:9d:a4:2e:9a:91:7c:82:da:2c:e0:62:da:c6:6a:
                    4f:06:55:44:26:3d:42:5c:20:0b:71:94:d6:8a:85:
                    cb:91:4a:38:37:db:ce:2f:ce:67:0b:32:dd:ee:f5:
                    35:1b:7c:fa:57:9f:ff:b4:37:3f:38:87:58:b0:cb:
                    75:01:c8:7b:82:7e:87:7d:0c:eb:d3:0c:8b:ce:01:
                    42:56:0c:5c:3c:31:c7:a5:08:44:c1:59:46:b7:7b:
                    3d:80:29:e9:2f:3d:e5:6f:f3:b9:d6:36:c3:68:6d:
                    35:fa:f5:e9:87:fe:af:f8:e0:48:69:15:f8:d2:60:
                    a6:6a:90:ed:23:59:2b:9a:31:46:e1:52:8b:57:fd:
                    af:92:08:35:8e:ef:87:f0:d1:a2:2c:b2:e0:48:c5:
                    58:f3:35:6e:44:9d:bb:ae:be:09:27:cc:04:f0:26:
                    28:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:55:01:E4:EC:F2:BA:57:F3:D0:CE:DD:80:CA:B7:14:67:56:91:72
            X509v3 Authority Key Identifier:
                keyid:AF:4D:D6:5A:C1:D6:DA:84:BA:9B:81:C2:09:E0:A7:61:73:45:EA:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:49:3b:73:33:6d:a5:f4:23:d3:2f:ce:73:ee:a5:d2:70:ea:
         74:60:f2:c1:e3:e3:08:65:da:fc:ec:fd:cb:c2:c2:1c:4a:25:
         eb:56:d3:30:6c:b4:40:91:16:9d:97:9e:9f:9e:19:a0:36:0b:
         50:96:0f:14:91:be:09:1c:a3:61:49:53:eb:d6:65:7d:f3:33:
         55:d5:b1:08:c9:65:dd:92:ed:c9:79:ca:fa:a9:ad:53:b5:6f:
         b5:5b:20:73:01:b8:c4:f1:f9:d4:f3:30:86:30:42:b6:bd:4b:
         02:e9:74:1f:43:0e:e4:77:22:70:f5:6f:7e:d2:06:fc:28:b5:
         16:8a:5a:16:13:65:40:6d:de:18:ef:d3:ee:b6:54:62:73:ec:
         14:96:0e:0f:b4:3c:0f:5a:62:86:d9:97:6e:c8:01:67:86:06:
         af:23:7b:8b:15:bd:e5:7f:84:ef:3e:cc:cd:2d:2d:be:55:1a:
         e5:de:2f:84:bf:cd:90:b5:a2:32:63:57:c3:b2:97:fd:85:5b:
         16:de:8d:4f:19:d2:a4:e1:b0:e9:35:85:97:b8:78:40:8a:a2:
         41:39:61:0c:73:2c:d9:6a:2c:1c:01:6d:f7:75:bf:12:83:8e:
         f8:69:86:11:fe:8e:59:03:31:fe:83:c2:a0:b9:d7:ce:39:57:
         a7:e5:41:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSC6rhTmg2UzliJ5zfzPqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNGRkNjVhYzFkNmRhODRiYTliODFjMjA5ZTBhNzYxNzM0
NWVhMjMwHhcNMjQwNTE3MTYwMDA1WhcNMjQwNTE4MTYwMDA1WjAzMTEwLwYDVQQD
Eyg0ODU1MDFlNGVjZjJiYTU3ZjNkMGNlZGQ4MGNhYjcxNDY3NTY5MTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ijOaLZg351Mazttn46o+fH5knrN
UdJukXC1yMGGEvbFOsqTja9cFmk4v2ZvinYN9SCKxQc8DZZuDcuETEcD3U0Jptd4
b009kyyaQPKWAhLjdQbo1PwwGvhOnaQumpF8gtos4GLaxmpPBlVEJj1CXCALcZTW
ioXLkUo4N9vOL85nCzLd7vU1G3z6V5//tDc/OIdYsMt1Ach7gn6HfQzr0wyLzgFC
VgxcPDHHpQhEwVlGt3s9gCnpLz3lb/O51jbDaG01+vXph/6v+OBIaRX40mCmapDt
I1krmjFG4VKLV/2vkgg1ju+H8NGiLLLgSMVY8zVuRJ27rr4JJ8wE8CYoZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhVAeTs8rpX89DO3YDKtxRnVpFyMB8GA1UdIwQY
MBaAFK9N1lrB1tqEupuBwgngp2FzReojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjAzV1dzSFcyb1M2bTRIQ0NlQ25ZWE5GNmlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS85YWJkZTAtZGI1Yi00NTY0LWJkODUt
OGY5NmQ3MjlmMDg0LzEvcjAzV1dzSFcyb1M2bTRIQ0NlQ25ZWE5GNmlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS85YWJkZTAtZGI1Yi00NTY0LWJkODUtOGY5NmQ3MjlmMDg0
LzEvcjAzV1dzSFcyb1M2bTRIQ0NlQ25ZWE5GNmlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGkk7czNt
pfQj0y/Oc+6l0nDqdGDywePjCGXa/Oz9y8LCHEol61bTMGy0QJEWnZeen54ZoDYL
UJYPFJG+CRyjYUlT69ZlffMzVdWxCMll3ZLtyXnK+qmtU7VvtVsgcwG4xPH51PMw
hjBCtr1LAul0H0MO5HcicPVvftIG/Ci1FopaFhNlQG3eGO/T7rZUYnPsFJYOD7Q8
D1pihtmXbsgBZ4YGryN7ixW95X+E7z7MzS0tvlUa5d4vhL/NkLWiMmNXw7KX/YVb
Ft6NTxnSpOGw6TWFl7h4QIqiQTlhDHMs2WosHAFt93W/EoOO+GmGEf6OWQMx/oPC
oLnXzjlXp+VBfw==
-----END CERTIFICATE-----
Generated at Fri May 17 18:39:49 2024 by rpki-client on console-fra.rpki-client.org