Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
File:                     z_jVsaHSJUEodoK9xpNv8sUlq7w.mft (raw, json)
Hash identifier:          H11BA5Z0mES8/VUnPige2KzhhKXHgzY5WAKvp37AbO0=
Subject key identifier:   A9:B6:E2:BF:4F:66:00:E6:CD:C2:79:F0:EF:9B:C9:87:3C:EA:FE:0A
Authority key identifier: CF:F8:D5:B1:A1:D2:25:41:28:76:82:BD:C6:93:6F:F2:C5:25:AB:BC
Certificate issuer:       /CN=cff8d5b1a1d22541287682bdc6936ff2c525abbc
Certificate serial:       018F889239D623D31EF35B3443BD3B79FA63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
Manifest number:          0711
Signing time:             Fri 17 May 2024 22:00:35 +0000
Manifest this update:     Fri 17 May 2024 22:00:35 +0000
Manifest next update:     Sat 18 May 2024 22:00:35 +0000
Files and hashes:         1: z_jVsaHSJUEodoK9xpNv8sUlq7w.crl (hash: xr28xJ+C7pMuwturNuF3cpXsQVszqE8oOmelMwIKWQc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:39:d6:23:d3:1e:f3:5b:34:43:bd:3b:79:fa:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cff8d5b1a1d22541287682bdc6936ff2c525abbc
        Validity
            Not Before: May 17 22:00:35 2024 GMT
            Not After : May 18 22:00:35 2024 GMT
        Subject: CN=a9b6e2bf4f6600e6cdc279f0ef9bc9873ceafe0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5a:02:39:4c:9c:70:3d:eb:02:4f:7f:98:f3:
                    ca:70:14:a8:c1:75:fc:dd:1d:f8:36:06:70:d6:a5:
                    fd:35:93:e0:53:b2:1c:1e:b0:03:35:db:cc:ee:0e:
                    35:04:af:d0:5f:59:f0:f3:71:68:c1:98:78:7d:3f:
                    d5:b4:6d:37:e0:ef:c0:d4:3c:37:4c:93:2b:30:3e:
                    6c:3e:31:9b:95:22:50:86:78:de:dd:3c:c4:f5:9f:
                    2f:27:77:39:71:a4:e7:ff:81:18:7f:5e:b4:78:ad:
                    5c:a4:96:14:5d:11:30:41:43:94:4d:1f:47:eb:e8:
                    65:99:15:80:12:9f:1c:93:61:7b:f0:1a:bb:71:85:
                    27:94:74:da:19:9a:2c:56:2f:7b:02:72:0d:46:b8:
                    aa:04:ee:1e:c3:22:c7:8b:87:a4:13:51:62:45:2d:
                    ef:9b:ca:f0:86:bb:d1:85:f9:60:a6:ac:d8:1b:5e:
                    c8:66:d9:cc:03:04:41:a8:24:57:d6:06:67:4b:59:
                    8d:f7:99:72:e6:c7:30:fb:7f:50:22:86:98:33:3b:
                    44:ee:ec:77:88:5a:21:fd:29:e8:e1:8e:50:6b:9f:
                    f9:8d:23:12:56:82:ed:9a:50:0f:0e:1e:8f:57:5c:
                    f1:be:f2:2e:28:74:28:04:65:ce:8a:5e:67:79:f9:
                    48:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B6:E2:BF:4F:66:00:E6:CD:C2:79:F0:EF:9B:C9:87:3C:EA:FE:0A
            X509v3 Authority Key Identifier:
                keyid:CF:F8:D5:B1:A1:D2:25:41:28:76:82:BD:C6:93:6F:F2:C5:25:AB:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:22:22:c8:18:ca:22:bb:c9:15:14:68:a5:29:a5:da:e2:e0:
         c8:65:9c:ba:a9:b4:c6:72:64:47:0d:59:8f:6d:f5:17:f3:dc:
         3a:77:59:6b:e5:5d:e1:c2:f2:80:74:6e:01:a7:f3:3d:36:93:
         34:76:19:2e:60:50:94:6d:c3:09:9c:ef:63:5c:42:a0:2a:ae:
         7a:15:c1:a9:65:01:38:d3:83:fd:c7:93:3d:cb:50:20:8e:c7:
         e4:9c:d3:7b:42:8b:5e:19:b2:0a:21:20:3e:b3:af:f7:47:95:
         bb:62:a6:99:f2:cc:46:e3:25:6f:70:c2:7a:bb:b0:99:fe:00:
         9b:8e:a8:46:5b:30:b0:fc:fb:93:1b:c1:33:dd:66:d3:1a:da:
         9b:d0:e2:17:6b:a1:55:08:da:86:63:c1:bf:06:16:1f:0f:59:
         13:e6:82:a8:30:a4:f6:cc:8e:b6:95:d5:c9:08:4f:3b:bf:fb:
         bd:70:64:b8:6b:da:d4:f2:d0:96:59:2d:e6:e3:af:b9:50:98:
         80:3f:b5:5f:21:3e:76:be:83:ee:ac:ea:d6:e8:8a:60:fe:5a:
         c8:e7:94:71:50:70:75:db:80:27:bd:92:ec:90:23:9d:4f:e5:
         f9:45:03:f7:bc:fc:ff:d1:b1:3c:16:53:b5:81:50:ea:f6:c7:
         37:6d:c9:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IkjnWI9Me81s0Q707efpjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZjhkNWIxYTFkMjI1NDEyODc2ODJiZGM2OTM2ZmYyYzUy
NWFiYmMwHhcNMjQwNTE3MjIwMDM1WhcNMjQwNTE4MjIwMDM1WjAzMTEwLwYDVQQD
EyhhOWI2ZTJiZjRmNjYwMGU2Y2RjMjc5ZjBlZjliYzk4NzNjZWFmZTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoloCOUyccD3rAk9/mPPKcBSowXX8
3R34NgZw1qX9NZPgU7IcHrADNdvM7g41BK/QX1nw83FowZh4fT/VtG034O/A1Dw3
TJMrMD5sPjGblSJQhnje3TzE9Z8vJ3c5caTn/4EYf160eK1cpJYUXREwQUOUTR9H
6+hlmRWAEp8ck2F78Bq7cYUnlHTaGZosVi97AnINRriqBO4ewyLHi4ekE1FiRS3v
m8rwhrvRhflgpqzYG17IZtnMAwRBqCRX1gZnS1mN95ly5scw+39QIoaYMztE7ux3
iFoh/Sno4Y5Qa5/5jSMSVoLtmlAPDh6PV1zxvvIuKHQoBGXOil5neflIsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKm24r9PZgDmzcJ58O+byYc86v4KMB8GA1UdIwQY
MBaAFM/41bGh0iVBKHaCvcaTb/LFJau8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvel9qVnNhSFNKVUVvZG9LOXhwTnY4c1VscTd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wY2EzMTAtM2RmZS00MTNkLThmNGYt
NWFmZTFjZTkyYzRjLzEvel9qVnNhSFNKVUVvZG9LOXhwTnY4c1VscTd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8wY2EzMTAtM2RmZS00MTNkLThmNGYtNWFmZTFjZTkyYzRj
LzEvel9qVnNhSFNKVUVvZG9LOXhwTnY4c1VscTd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARiIiyBjK
IrvJFRRopSml2uLgyGWcuqm0xnJkRw1Zj231F/PcOndZa+Vd4cLygHRuAafzPTaT
NHYZLmBQlG3DCZzvY1xCoCquehXBqWUBONOD/ceTPctQII7H5JzTe0KLXhmyCiEg
PrOv90eVu2KmmfLMRuMlb3DCeruwmf4Am46oRlswsPz7kxvBM91m0xram9DiF2uh
VQjahmPBvwYWHw9ZE+aCqDCk9syOtpXVyQhPO7/7vXBkuGva1PLQllkt5uOvuVCY
gD+1XyE+dr6D7qzq1uiKYP5ayOeUcVBwdduAJ72S7JAjnU/l+UUD97z8/9GxPBZT
tYFQ6vbHN23Jow==
-----END CERTIFICATE-----
Generated at Sat May 18 00:04:17 2024 by rpki-client on console-ams.rpki-client.org