Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
File:                     fvoucF0jP_80WpErLyObWs43K7k.mft (raw, json)
Hash identifier:          loStbKIf5qspe1ognCHrMhRQAGfeU4NN/vijGgtBCkg=
Subject key identifier:   3C:40:89:5A:E2:BA:B5:FB:EE:AF:B4:7E:51:42:93:D7:A1:BC:9A:FA
Authority key identifier: 7E:FA:2E:70:5D:23:3F:FF:34:5A:91:2B:2F:23:9B:5A:CE:37:2B:B9
Certificate issuer:       /CN=7efa2e705d233fff345a912b2f239b5ace372bb9
Certificate serial:       018F8824895A5A371B55BD63C8C43DD8BCB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
Manifest number:          B5
Signing time:             Fri 17 May 2024 20:00:46 +0000
Manifest this update:     Fri 17 May 2024 20:00:46 +0000
Manifest next update:     Sat 18 May 2024 20:00:46 +0000
Files and hashes:         1: fvoucF0jP_80WpErLyObWs43K7k.crl (hash: 64PTh4KbKoO2Vji/AGKI/T6Xxkc8MmQg4WzzaWzS4Y8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:89:5a:5a:37:1b:55:bd:63:c8:c4:3d:d8:bc:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7efa2e705d233fff345a912b2f239b5ace372bb9
        Validity
            Not Before: May 17 20:00:46 2024 GMT
            Not After : May 18 20:00:46 2024 GMT
        Subject: CN=3c40895ae2bab5fbeeafb47e514293d7a1bc9afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:27:7d:29:d4:f0:20:6a:9c:86:71:46:cb:31:
                    03:c1:5b:54:81:2f:cc:5c:e3:35:8e:21:51:73:8b:
                    03:ee:93:1d:a8:0e:8f:28:75:cf:76:da:56:26:69:
                    77:9e:bf:34:d6:0c:04:cd:63:19:72:a9:e5:b9:82:
                    35:e9:2a:da:4b:36:81:0a:98:ec:87:e3:d0:23:e8:
                    62:49:a5:c1:bc:e7:69:eb:08:27:68:bd:05:94:fa:
                    8b:1f:32:3f:15:2e:c0:4a:90:53:a2:8b:0b:cf:4e:
                    e1:7f:46:09:7f:99:0f:e7:d3:16:49:1a:4c:64:2d:
                    76:6b:d9:18:c6:99:4f:cf:04:6f:60:9d:12:5e:35:
                    17:29:92:71:ad:13:c1:ed:e1:b9:2d:85:39:00:2d:
                    ba:fa:26:48:a1:52:a5:1d:32:aa:0e:65:71:45:47:
                    22:b2:72:f1:72:2c:16:5b:df:ff:a1:1a:fb:11:02:
                    40:5e:b7:6e:63:d0:08:7c:ab:d8:23:e8:b4:91:b8:
                    e5:ec:8a:59:03:36:ef:7f:56:12:20:e0:08:fc:62:
                    40:ab:1f:3a:85:fc:9e:50:c8:59:6d:57:78:81:00:
                    74:4a:c1:5e:c0:92:38:24:ab:e0:38:d6:f9:3e:ce:
                    d2:f2:b8:c4:f3:d5:d2:d2:52:b6:d8:62:b6:f3:ab:
                    60:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:40:89:5A:E2:BA:B5:FB:EE:AF:B4:7E:51:42:93:D7:A1:BC:9A:FA
            X509v3 Authority Key Identifier:
                keyid:7E:FA:2E:70:5D:23:3F:FF:34:5A:91:2B:2F:23:9B:5A:CE:37:2B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:0e:d9:05:db:ec:e0:89:34:bb:2f:54:b7:17:24:aa:35:ed:
         24:30:a5:61:bb:27:91:44:7d:78:41:2a:29:c4:5e:18:2f:2c:
         c8:7e:90:75:72:ce:6b:b3:2e:41:fe:ba:d0:8a:79:08:5b:49:
         ef:d1:dd:f5:94:2c:a8:71:e2:b2:af:85:a0:8d:50:9f:8f:2f:
         ae:5b:3f:bf:5d:40:9f:84:33:b3:2c:b8:60:47:ea:0b:85:d9:
         7f:20:3a:c6:f2:19:e1:c2:11:8b:c3:41:90:5c:cd:72:3c:80:
         6b:40:d1:b9:e8:ff:bc:ac:cd:ed:99:2b:41:78:c3:92:c0:ca:
         1d:56:83:fb:1c:17:b4:3d:fb:fe:7f:20:f5:a5:05:d0:90:98:
         63:0d:39:db:7b:cb:8f:90:64:a0:f4:f8:02:ea:49:ab:18:5f:
         50:67:4b:06:0f:b1:4e:f3:fb:0a:7b:2b:e9:e7:bb:f8:b4:df:
         24:76:f9:f8:1b:55:97:80:5b:29:14:95:14:7b:ee:f2:75:2c:
         76:e3:e8:a8:f8:a6:99:47:0f:da:f7:d5:42:95:79:b4:31:2f:
         a4:2a:bd:7e:38:2e:c8:af:cc:bd:61:13:4f:9b:58:56:6b:24:
         8a:84:05:b9:7e:05:73:a6:c6:ce:3d:4d:11:2b:50:4f:1f:b1:
         b5:39:0d:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJIlaWjcbVb1jyMQ92Ly3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZmEyZTcwNWQyMzNmZmYzNDVhOTEyYjJmMjM5YjVhY2Uz
NzJiYjkwHhcNMjQwNTE3MjAwMDQ2WhcNMjQwNTE4MjAwMDQ2WjAzMTEwLwYDVQQD
EygzYzQwODk1YWUyYmFiNWZiZWVhZmI0N2U1MTQyOTNkN2ExYmM5YWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyd9KdTwIGqchnFGyzEDwVtUgS/M
XOM1jiFRc4sD7pMdqA6PKHXPdtpWJml3nr801gwEzWMZcqnluYI16SraSzaBCpjs
h+PQI+hiSaXBvOdp6wgnaL0FlPqLHzI/FS7ASpBToosLz07hf0YJf5kP59MWSRpM
ZC12a9kYxplPzwRvYJ0SXjUXKZJxrRPB7eG5LYU5AC26+iZIoVKlHTKqDmVxRUci
snLxciwWW9//oRr7EQJAXrduY9AIfKvYI+i0kbjl7IpZAzbvf1YSIOAI/GJAqx86
hfyeUMhZbVd4gQB0SsFewJI4JKvgONb5Ps7S8rjE89XS0lK22GK286tgoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxAiVriurX77q+0flFCk9ehvJr6MB8GA1UdIwQY
MBaAFH76LnBdIz//NFqRKy8jm1rONyu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnZvdWNGMGpQXzgwV3BFckx5T2JXczQzSzdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85ZjZiYTQtMWFkNy00ZmUzLWIyMTEt
Nzc4MjdmZTE1NTViLzEvZnZvdWNGMGpQXzgwV3BFckx5T2JXczQzSzdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC85ZjZiYTQtMWFkNy00ZmUzLWIyMTEtNzc4MjdmZTE1NTVi
LzEvZnZvdWNGMGpQXzgwV3BFckx5T2JXczQzSzdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcg7ZBdvs
4Ik0uy9UtxckqjXtJDClYbsnkUR9eEEqKcReGC8syH6QdXLOa7MuQf660Ip5CFtJ
79Hd9ZQsqHHisq+FoI1Qn48vrls/v11An4Qzsyy4YEfqC4XZfyA6xvIZ4cIRi8NB
kFzNcjyAa0DRuej/vKzN7ZkrQXjDksDKHVaD+xwXtD37/n8g9aUF0JCYYw0523vL
j5BkoPT4AupJqxhfUGdLBg+xTvP7Cnsr6ee7+LTfJHb5+BtVl4BbKRSVFHvu8nUs
duPoqPimmUcP2vfVQpV5tDEvpCq9fjguyK/MvWETT5tYVmskioQFuX4Fc6bGzj1N
EStQTx+xtTkNMg==
-----END CERTIFICATE-----
Generated at Sat May 18 02:25:22 2024 by rpki-client on console-ams.rpki-client.org