Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
File:                     NDez9zdtPvHNqLyWbxOXCFnPeW4.mft (raw, json)
Hash identifier:          KFLf3PT4EnYsX+m2mxEtsNY49T+zaVpTIO+ECqGQTKo=
Subject key identifier:   45:5B:FC:6A:93:48:57:35:10:D0:D2:ED:87:B6:02:BA:7C:93:C6:49
Authority key identifier: 34:37:B3:F7:37:6D:3E:F1:CD:A8:BC:96:6F:13:97:08:59:CF:79:6E
Certificate issuer:       /CN=3437b3f7376d3ef1cda8bc966f13970859cf796e
Certificate serial:       018F874887D83D301C1A82EC56E1383005F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
Manifest number:          0274
Signing time:             Fri 17 May 2024 16:00:28 +0000
Manifest this update:     Fri 17 May 2024 16:00:28 +0000
Manifest next update:     Sat 18 May 2024 16:00:28 +0000
Files and hashes:         1: NDez9zdtPvHNqLyWbxOXCFnPeW4.crl (hash: hKagAO5ZnKVprad4VIRdr/r2youDjKiUlhUXMzI1OiE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:87:d8:3d:30:1c:1a:82:ec:56:e1:38:30:05:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3437b3f7376d3ef1cda8bc966f13970859cf796e
        Validity
            Not Before: May 17 16:00:28 2024 GMT
            Not After : May 18 16:00:28 2024 GMT
        Subject: CN=455bfc6a9348573510d0d2ed87b602ba7c93c649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:90:ff:69:dd:2d:fc:99:40:d2:eb:db:2e:92:
                    dc:1b:1d:ba:ca:ef:49:97:4b:50:5a:51:2b:2f:cd:
                    71:ea:2e:ff:f6:54:6c:1b:19:eb:bc:3c:12:33:b1:
                    a6:6b:3b:78:c2:ec:a9:66:c5:77:39:e6:aa:f9:16:
                    b0:06:08:e6:40:44:c5:7d:23:c0:8b:bc:56:f4:2e:
                    d3:5d:3d:e5:33:52:6c:2d:a0:49:43:4a:51:ce:fb:
                    9f:99:93:76:ac:a7:84:a1:d7:a8:5e:14:82:b7:a5:
                    fb:2a:8a:b5:4d:67:39:34:ca:9e:2b:c7:d9:e5:64:
                    c6:1d:13:81:a8:4a:a6:5f:7a:88:f5:5f:67:d0:33:
                    ed:59:3a:1e:33:88:87:72:ee:f7:0d:6b:a8:03:05:
                    e5:16:57:35:5a:c1:ab:b0:2e:0b:0b:1a:ac:91:e8:
                    76:c8:b2:7b:00:19:83:54:72:e0:9e:10:1c:f1:4f:
                    28:eb:05:e4:60:11:7c:e8:2b:e1:2b:bd:19:3a:b3:
                    bc:8f:8b:e6:bc:1a:20:a5:19:bb:db:99:d4:63:d3:
                    5c:b9:fc:62:d4:16:a4:eb:e6:cb:4d:19:07:c3:6c:
                    fa:13:bf:ac:bf:e2:30:02:7e:97:19:74:3f:0d:78:
                    ff:38:34:a5:12:ed:ed:53:ce:04:2a:93:16:f2:85:
                    f5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5B:FC:6A:93:48:57:35:10:D0:D2:ED:87:B6:02:BA:7C:93:C6:49
            X509v3 Authority Key Identifier:
                keyid:34:37:B3:F7:37:6D:3E:F1:CD:A8:BC:96:6F:13:97:08:59:CF:79:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:b4:2e:e4:52:b2:54:5b:e5:2a:f3:b4:e7:5e:c4:7a:c0:0d:
         29:36:15:73:2d:6f:e9:21:63:8c:9b:20:9f:89:dd:86:42:a2:
         78:c3:64:d0:d5:df:cf:27:97:82:4e:8c:cc:36:15:62:89:b9:
         7c:d8:f6:59:0b:2f:ca:63:9e:e4:ac:50:1a:50:8e:57:4c:90:
         bf:ca:96:e2:23:52:34:67:8b:cc:27:b9:64:84:06:d6:71:a3:
         27:07:c1:0d:0b:4f:a9:12:b7:ae:7b:7b:8c:b4:c3:c7:91:ee:
         56:75:c5:92:74:8a:dc:22:02:9b:e1:e7:a6:0b:c5:3e:8b:8e:
         1b:f7:76:93:72:00:44:d5:c6:02:20:30:3a:16:be:cc:a8:ec:
         fb:b2:aa:0a:bd:14:2d:1f:63:9f:2e:21:c4:a8:f5:14:2b:93:
         94:3f:f9:ca:c7:9e:51:a5:fb:5d:55:72:77:6e:a3:2b:5a:01:
         ce:75:cc:e3:3c:3b:ed:fd:22:67:ea:40:4e:0b:10:49:99:23:
         3b:5b:87:78:70:db:73:d3:26:bb:14:06:e4:18:ab:e8:7e:44:
         13:8f:c4:9f:df:31:d8:1b:6b:2c:a6:11:80:f4:8c:8e:97:7e:
         7d:6d:00:dd:d2:ed:3d:f6:38:e6:fa:38:db:9b:77:cb:df:87:
         69:bc:79:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSIfYPTAcGoLsVuE4MAX0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MzdiM2Y3Mzc2ZDNlZjFjZGE4YmM5NjZmMTM5NzA4NTlj
Zjc5NmUwHhcNMjQwNTE3MTYwMDI4WhcNMjQwNTE4MTYwMDI4WjAzMTEwLwYDVQQD
Eyg0NTViZmM2YTkzNDg1NzM1MTBkMGQyZWQ4N2I2MDJiYTdjOTNjNjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZD/ad0t/JlA0uvbLpLcGx26yu9J
l0tQWlErL81x6i7/9lRsGxnrvDwSM7Gmazt4wuypZsV3Oeaq+RawBgjmQETFfSPA
i7xW9C7TXT3lM1JsLaBJQ0pRzvufmZN2rKeEodeoXhSCt6X7Koq1TWc5NMqeK8fZ
5WTGHROBqEqmX3qI9V9n0DPtWToeM4iHcu73DWuoAwXlFlc1WsGrsC4LCxqskeh2
yLJ7ABmDVHLgnhAc8U8o6wXkYBF86CvhK70ZOrO8j4vmvBogpRm725nUY9Ncufxi
1Bak6+bLTRkHw2z6E7+sv+IwAn6XGXQ/DXj/ODSlEu3tU84EKpMW8oX1bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVb/GqTSFc1ENDS7Ye2Arp8k8ZJMB8GA1UdIwQY
MBaAFDQ3s/c3bT7xzai8lm8TlwhZz3luMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkRlejl6ZHRQdkhOcUx5V2J4T1hDRm5QZVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS83MmNiMWYtYmQyYi00YzIyLWFhZWMt
YTYyMzg4ZWY1YjQ4LzEvTkRlejl6ZHRQdkhOcUx5V2J4T1hDRm5QZVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS83MmNiMWYtYmQyYi00YzIyLWFhZWMtYTYyMzg4ZWY1YjQ4
LzEvTkRlejl6ZHRQdkhOcUx5V2J4T1hDRm5QZVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbQu5FKy
VFvlKvO0517EesANKTYVcy1v6SFjjJsgn4ndhkKieMNk0NXfzyeXgk6MzDYVYom5
fNj2WQsvymOe5KxQGlCOV0yQv8qW4iNSNGeLzCe5ZIQG1nGjJwfBDQtPqRK3rnt7
jLTDx5HuVnXFknSK3CICm+HnpgvFPouOG/d2k3IARNXGAiAwOha+zKjs+7KqCr0U
LR9jny4hxKj1FCuTlD/5yseeUaX7XVVyd26jK1oBznXM4zw77f0iZ+pATgsQSZkj
O1uHeHDbc9MmuxQG5Bir6H5EE4/En98x2BtrLKYRgPSMjpd+fW0A3dLtPfY45vo4
25t3y9+Habx5tA==
-----END CERTIFICATE-----
Generated at Fri May 17 18:18:42 2024 by rpki-client on console-ams.rpki-client.org