Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
File:                     9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft (raw, json)
Hash identifier:          I76kQeymWPnV8hlHCwIJ0fNn4V3y0TAMnF0XhLLkk3k=
Subject key identifier:   E8:A7:3B:E1:3B:31:B9:8D:B6:7B:0C:75:14:DD:FE:83:6A:F4:34:63
Authority key identifier: F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76
Certificate issuer:       /CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76
Certificate serial:       018F460E5D847842C5EBB21FF65296B2CF4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
Manifest number:          1152
Signing time:             Sun 05 May 2024 00:01:37 +0000
Manifest this update:     Sun 05 May 2024 00:01:37 +0000
Manifest next update:     Mon 06 May 2024 00:01:37 +0000
Files and hashes:         1: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl (hash: nBpN7LY+0+nVoI79KA+elU1UyxT8XL0Hkkm7v3ZNHKo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:0e:5d:84:78:42:c5:eb:b2:1f:f6:52:96:b2:cf:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76
        Validity
            Not Before: May  5 00:01:37 2024 GMT
            Not After : May  6 00:01:37 2024 GMT
        Subject: CN=e8a73be13b31b98db67b0c7514ddfe836af43463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f4:72:7a:2a:de:1f:2c:d1:71:cc:c4:bc:b6:
                    2b:8c:6e:7d:92:bf:5b:b8:81:4f:29:35:0c:16:62:
                    3b:91:a8:2d:b1:3e:b4:d1:9d:54:30:0d:52:f4:44:
                    22:e8:ca:64:d0:d6:b1:bb:18:3e:f3:c2:99:e6:fc:
                    97:8b:5b:ac:2c:47:69:53:ff:b6:9d:8c:ff:62:51:
                    f0:dc:99:ed:2c:61:47:61:b8:e6:8c:7e:24:62:89:
                    cd:47:4b:41:a0:c3:9e:8b:e5:6f:a9:ac:b9:78:67:
                    ad:43:27:44:c5:a4:35:77:eb:76:15:7d:d2:06:01:
                    c8:c0:d1:ca:56:40:89:70:ae:34:d2:de:68:1f:5d:
                    33:17:1a:db:eb:81:d8:42:a1:eb:4a:f5:1e:82:79:
                    49:be:87:25:b2:5a:51:3d:df:60:3a:3e:08:26:d1:
                    29:0c:2b:30:a1:1b:ed:5a:32:8b:16:bd:10:12:a7:
                    70:3c:58:af:30:46:8b:b6:6f:2b:04:93:32:36:1e:
                    9d:9e:24:6d:d3:44:93:a5:74:18:81:28:d7:9e:73:
                    a9:26:16:df:9a:e8:ec:54:05:21:e6:40:bb:54:04:
                    7c:1b:51:c2:20:7e:ca:83:cc:14:6a:5e:5f:0e:79:
                    9b:6b:68:85:8d:65:b9:81:6e:91:ef:71:23:23:6e:
                    e7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A7:3B:E1:3B:31:B9:8D:B6:7B:0C:75:14:DD:FE:83:6A:F4:34:63
            X509v3 Authority Key Identifier:
                keyid:F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:8e:ea:75:d0:92:e4:b1:5b:a0:4b:6f:e2:7d:2a:1d:a8:e2:
         1d:42:6c:fc:c6:ba:68:0f:8a:d7:87:30:9d:86:7d:e9:9f:75:
         3a:cb:09:42:68:16:53:29:d6:24:ee:24:5c:05:40:dc:b2:52:
         aa:ee:48:c3:e5:e8:9d:b0:ae:28:36:cc:c4:76:06:df:64:0b:
         79:2e:f9:3b:66:dc:b7:1a:8c:c9:cd:97:f3:9a:07:63:82:48:
         c9:14:d9:27:e8:22:d1:da:21:c1:5e:9f:fe:0c:50:99:66:52:
         d5:1b:09:54:2c:1a:a4:d6:46:19:1a:45:db:12:aa:82:74:b8:
         91:7f:7a:05:74:98:f4:a5:55:e1:d0:58:34:25:3b:db:9e:12:
         68:49:d2:fd:2c:73:60:02:3a:6a:d5:d0:16:36:30:e3:c4:3c:
         01:36:51:af:b9:d8:df:ad:61:54:8a:bd:d5:82:f5:e8:78:c7:
         57:04:13:c9:cb:92:a4:df:cc:b1:f8:8a:5f:bd:68:77:24:d1:
         46:3c:20:2c:34:d5:79:cf:32:98:41:66:52:b2:65:17:87:5c:
         14:4b:3d:3d:cb:8b:ec:36:81:aa:78:ff:c6:a3:83:cc:5b:5e:
         16:f5:47:2a:cc:8f:0b:ea:dc:57:54:1a:18:0f:57:d6:a0:29:
         fe:2a:01:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9GDl2EeELF67If9lKWss9NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZGIxYjY5MWIzMGRiZTQ4ZTc4OGI3Y2NhNGFkMzFkY2Rj
ODVjNzYwHhcNMjQwNTA1MDAwMTM3WhcNMjQwNTA2MDAwMTM3WjAzMTEwLwYDVQQD
EyhlOGE3M2JlMTNiMzFiOThkYjY3YjBjNzUxNGRkZmU4MzZhZjQzNDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvRyeireHyzRcczEvLYrjG59kr9b
uIFPKTUMFmI7kagtsT600Z1UMA1S9EQi6Mpk0Naxuxg+88KZ5vyXi1usLEdpU/+2
nYz/YlHw3JntLGFHYbjmjH4kYonNR0tBoMOei+Vvqay5eGetQydExaQ1d+t2FX3S
BgHIwNHKVkCJcK400t5oH10zFxrb64HYQqHrSvUegnlJvoclslpRPd9gOj4IJtEp
DCswoRvtWjKLFr0QEqdwPFivMEaLtm8rBJMyNh6dniRt00STpXQYgSjXnnOpJhbf
mujsVAUh5kC7VAR8G1HCIH7Kg8wUal5fDnmba2iFjWW5gW6R73EjI27nTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOinO+E7MbmNtnsMdRTd/oNq9DRjMB8GA1UdIwQY
MBaAFPbbG2kbMNvkjniLfMpK0x3NyFx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXRzYmFSc3cyLVNPZUl0OHlrclRIYzNJWEhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lMzRmYTUtNGU4ZC00YjQxLWJiYjgt
ZTMxY2UxYjk2N2U5LzEvOXRzYmFSc3cyLVNPZUl0OHlrclRIYzNJWEhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9lMzRmYTUtNGU4ZC00YjQxLWJiYjgtZTMxY2UxYjk2N2U5
LzEvOXRzYmFSc3cyLVNPZUl0OHlrclRIYzNJWEhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmY7qddCS
5LFboEtv4n0qHajiHUJs/Ma6aA+K14cwnYZ96Z91OssJQmgWUynWJO4kXAVA3LJS
qu5Iw+XonbCuKDbMxHYG32QLeS75O2bctxqMyc2X85oHY4JIyRTZJ+gi0dohwV6f
/gxQmWZS1RsJVCwapNZGGRpF2xKqgnS4kX96BXSY9KVV4dBYNCU7254SaEnS/Sxz
YAI6atXQFjYw48Q8ATZRr7nY361hVIq91YL16HjHVwQTycuSpN/MsfiKX71odyTR
RjwgLDTVec8ymEFmUrJlF4dcFEs9PcuL7DaBqnj/xqODzFteFvVHKsyPC+rcV1Qa
GA9X1qAp/ioBsA==
-----END CERTIFICATE-----
Generated at Sun May 5 01:49:29 2024 by rpki-client on console-fra.rpki-client.org