Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
File:                     ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft (raw, json)
Hash identifier:          jKOeXA6OlNFg+acq/fwBDfVUgCkowOBFjs87wwoBmQw=
Subject key identifier:   E4:6F:84:86:AF:FC:F8:5A:14:75:C9:18:A4:39:99:1C:65:07:53:0B
Authority key identifier: 89:BA:F5:AF:F1:D7:AA:AA:52:EF:E1:48:E0:E2:34:03:11:D7:C2:94
Certificate issuer:       /CN=89baf5aff1d7aaaa52efe148e0e2340311d7c294
Certificate serial:       018F87499919848DFB4A21167805D3575B96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
Manifest number:          0B63
Signing time:             Fri 17 May 2024 16:01:38 +0000
Manifest this update:     Fri 17 May 2024 16:01:38 +0000
Manifest next update:     Sat 18 May 2024 16:01:38 +0000
Files and hashes:         1: ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl (hash: ALqsNCfn8z9OTCUp87r6jJB6gtpwM+opgKWQhZshTQA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:99:19:84:8d:fb:4a:21:16:78:05:d3:57:5b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89baf5aff1d7aaaa52efe148e0e2340311d7c294
        Validity
            Not Before: May 17 16:01:38 2024 GMT
            Not After : May 18 16:01:38 2024 GMT
        Subject: CN=e46f8486affcf85a1475c918a439991c6507530b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c0:a1:21:1d:30:44:40:da:af:de:e1:a5:8c:
                    dc:80:74:b7:7c:64:73:88:8f:b1:61:07:52:6c:ad:
                    68:57:69:47:75:94:4a:4f:12:b1:fe:b1:46:b1:b0:
                    d5:df:e3:69:c9:4c:4a:46:e6:a2:dd:1e:b0:43:c2:
                    1e:05:0a:00:cf:19:b5:3a:8a:1d:66:ef:66:65:05:
                    c1:80:ca:5a:e3:18:d0:dd:3f:d4:75:4c:91:9a:aa:
                    c0:46:35:1d:36:7d:aa:19:ce:2b:b8:c4:41:e4:6b:
                    77:11:05:42:85:b4:2f:13:18:8a:2c:92:4f:a3:50:
                    17:b4:8a:d3:93:aa:04:e8:34:59:59:71:af:ca:3a:
                    2d:b5:61:e7:1e:63:7f:6a:4b:fd:c5:af:a1:3e:a3:
                    a9:02:4b:c2:26:6f:75:73:ac:32:fe:d1:a6:bf:de:
                    02:41:fc:8e:40:2f:d8:55:d7:ef:ee:e6:a0:76:c0:
                    05:0b:db:9f:b9:ca:d9:ad:bc:3f:67:19:b1:72:00:
                    bd:be:81:05:c6:ca:a4:24:84:1a:f0:ca:19:42:f9:
                    61:3f:a8:36:8f:72:34:17:71:82:1f:0d:de:3a:d6:
                    94:db:3c:25:0a:7a:d1:cf:1b:b6:fc:a3:65:7c:f9:
                    11:99:2b:49:48:cd:24:cd:fb:b4:5d:51:c3:d8:df:
                    d8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6F:84:86:AF:FC:F8:5A:14:75:C9:18:A4:39:99:1C:65:07:53:0B
            X509v3 Authority Key Identifier:
                keyid:89:BA:F5:AF:F1:D7:AA:AA:52:EF:E1:48:E0:E2:34:03:11:D7:C2:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d5:6f:5f:c2:ff:10:34:52:d3:07:b7:01:cb:5c:d3:6f:88:
         3f:4a:15:bc:d9:fc:4e:32:aa:79:0d:07:ee:c1:71:9c:bb:9f:
         cb:50:2e:0a:f8:dc:a6:0f:4e:96:de:ca:ea:44:83:4f:a4:83:
         a5:50:eb:4f:a9:3b:48:bf:55:0b:03:ad:cd:5c:c3:f6:26:4b:
         20:3a:f5:5b:cf:57:d8:e9:b6:4b:ae:0c:2b:fb:03:09:9a:f5:
         66:e0:d9:74:dd:75:07:e8:4e:80:c8:70:f8:c9:2b:73:26:83:
         fa:1e:70:69:da:df:40:a2:01:7b:0f:4f:3d:51:1b:eb:86:7a:
         9e:d0:d9:a6:14:6b:0b:0d:c9:12:e3:48:30:58:34:9a:e5:6f:
         35:0b:94:3b:ff:d8:0e:b9:e2:66:b6:e3:b7:44:6d:28:d5:d2:
         60:97:f2:9c:08:4c:cd:fa:87:6b:41:39:f5:87:da:c7:00:95:
         ea:49:1e:08:ad:0a:44:b1:6d:a8:0f:95:96:31:7d:e3:64:96:
         d3:7f:6b:5c:42:fb:a6:2d:af:3c:7f:80:d1:c0:19:58:9e:68:
         2c:92:98:a4:ae:05:1c:e3:33:ba:f1:0f:13:46:97:43:18:9d:
         81:a2:11:b9:a8:cf:81:01:31:06:43:c5:72:09:7f:1e:1c:20:
         9a:c4:72:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSZkZhI37SiEWeAXTV1uWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YmFmNWFmZjFkN2FhYWE1MmVmZTE0OGUwZTIzNDAzMTFk
N2MyOTQwHhcNMjQwNTE3MTYwMTM4WhcNMjQwNTE4MTYwMTM4WjAzMTEwLwYDVQQD
EyhlNDZmODQ4NmFmZmNmODVhMTQ3NWM5MThhNDM5OTkxYzY1MDc1MzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsChIR0wREDar97hpYzcgHS3fGRz
iI+xYQdSbK1oV2lHdZRKTxKx/rFGsbDV3+NpyUxKRuai3R6wQ8IeBQoAzxm1Oood
Zu9mZQXBgMpa4xjQ3T/UdUyRmqrARjUdNn2qGc4ruMRB5Gt3EQVChbQvExiKLJJP
o1AXtIrTk6oE6DRZWXGvyjottWHnHmN/akv9xa+hPqOpAkvCJm91c6wy/tGmv94C
QfyOQC/YVdfv7uagdsAFC9ufucrZrbw/ZxmxcgC9voEFxsqkJIQa8MoZQvlhP6g2
j3I0F3GCHw3eOtaU2zwlCnrRzxu2/KNlfPkRmStJSM0kzfu0XVHD2N/YawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORvhIav/PhaFHXJGKQ5mRxlB1MLMB8GA1UdIwQY
MBaAFIm69a/x16qqUu/hSODiNAMR18KUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWJyMXJfSFhxcXBTNy1GSTRPSTBBeEhYd3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8wYzVhMmEtNmQ1Yi00NTg5LTgzYmMt
NDlhN2NmMTUzZWIwLzEvaWJyMXJfSFhxcXBTNy1GSTRPSTBBeEhYd3BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8wYzVhMmEtNmQ1Yi00NTg5LTgzYmMtNDlhN2NmMTUzZWIw
LzEvaWJyMXJfSFhxcXBTNy1GSTRPSTBBeEhYd3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI9VvX8L/
EDRS0we3Actc02+IP0oVvNn8TjKqeQ0H7sFxnLufy1AuCvjcpg9Olt7K6kSDT6SD
pVDrT6k7SL9VCwOtzVzD9iZLIDr1W89X2Om2S64MK/sDCZr1ZuDZdN11B+hOgMhw
+MkrcyaD+h5wadrfQKIBew9PPVEb64Z6ntDZphRrCw3JEuNIMFg0muVvNQuUO//Y
DrniZrbjt0RtKNXSYJfynAhMzfqHa0E59YfaxwCV6kkeCK0KRLFtqA+VljF942SW
039rXEL7pi2vPH+A0cAZWJ5oLJKYpK4FHOMzuvEPE0aXQxidgaIRuajPgQExBkPF
cgl/HhwgmsRyMA==
-----END CERTIFICATE-----
Generated at Fri May 17 18:17:57 2024 by rpki-client on console-ams.rpki-client.org