Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
File:                     15WKlFA6cEIXSd7wXv5joxfRisI.mft (raw, json)
Hash identifier:          ydQaYqWuOoyOuHvpVWSXB5PQzzgNm0nwDPh0P3XFr8o=
Subject key identifier:   68:13:97:3E:05:7E:88:16:7E:72:02:E6:03:63:63:B9:C2:33:92:1C
Authority key identifier: D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
Certificate issuer:       /CN=d7958a94503a70421749def05efe63a317d18ac2
Certificate serial:       018F882461884EC9A0D352A8A0E2EA782A28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
Manifest number:          0287
Signing time:             Fri 17 May 2024 20:00:36 +0000
Manifest this update:     Fri 17 May 2024 20:00:36 +0000
Manifest next update:     Sat 18 May 2024 20:00:36 +0000
Files and hashes:         1: 15WKlFA6cEIXSd7wXv5joxfRisI.crl (hash: n9E5b/dFM873dC8Sic6x0H8Vu2P9xzMTKjwIVqvQAfs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:61:88:4e:c9:a0:d3:52:a8:a0:e2:ea:78:2a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7958a94503a70421749def05efe63a317d18ac2
        Validity
            Not Before: May 17 20:00:36 2024 GMT
            Not After : May 18 20:00:36 2024 GMT
        Subject: CN=6813973e057e88167e7202e6036363b9c233921c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:94:16:e2:f4:4d:8f:62:d3:9f:b5:38:96:7f:
                    91:fb:d1:62:1d:f3:b4:59:e1:0c:c9:e4:e9:0f:94:
                    3d:89:8c:25:f5:21:36:d7:5d:33:89:77:83:0d:7e:
                    d2:01:76:56:bd:81:3a:c5:2b:cb:8d:ac:34:a1:53:
                    f0:b8:61:12:ef:96:e7:a2:b0:39:ed:3b:5d:ba:ed:
                    b2:45:97:e8:aa:1b:a5:8b:61:dd:99:7f:47:be:0d:
                    74:1b:0e:a8:39:08:e6:3f:9a:19:22:32:cf:88:cc:
                    41:b1:3b:0b:7c:9b:9a:9e:6e:47:5e:05:d0:b5:73:
                    6c:04:14:68:e7:47:e5:69:4b:a3:d5:3e:db:ac:9c:
                    49:90:2e:62:00:9a:12:6e:db:48:56:4d:f7:14:41:
                    58:c8:a1:d4:35:07:d7:45:f7:f1:f0:aa:0f:3f:a8:
                    31:79:c8:13:41:f7:37:a3:9a:43:c9:7a:44:bf:73:
                    d6:18:aa:bf:e4:37:7f:e0:7e:6b:32:f3:ea:c6:9b:
                    89:71:94:dc:b8:95:76:c2:bb:1f:80:a0:cc:be:8e:
                    ae:fd:e5:7c:b5:1f:10:15:ed:22:b5:11:46:bd:f1:
                    fb:db:d6:8f:cd:28:d4:57:75:a6:72:a0:12:23:b6:
                    10:7d:ba:8d:76:3c:75:1f:37:f1:6f:33:94:28:ba:
                    a9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:13:97:3E:05:7E:88:16:7E:72:02:E6:03:63:63:B9:C2:33:92:1C
            X509v3 Authority Key Identifier:
                keyid:D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:9c:41:64:bf:60:b2:87:bd:fb:aa:ff:a1:8c:4b:72:8d:f1:
         f1:2a:5b:90:32:4a:84:84:2d:aa:4c:d0:80:df:9c:98:32:ad:
         45:db:95:74:10:33:60:cc:47:80:9a:d0:fc:97:96:0f:85:01:
         fe:f0:3d:c9:be:b3:13:13:e6:db:85:5c:b3:a2:97:f9:de:10:
         98:17:88:18:4d:e7:91:21:96:92:e2:b2:85:90:8d:ac:be:68:
         76:e7:78:0c:af:17:c1:35:dc:56:b6:ea:3e:5e:a4:a0:93:5d:
         6a:8e:0a:1f:c2:73:37:91:a8:95:58:33:23:93:2e:fd:ef:ef:
         98:13:13:cc:c8:d2:3c:d1:c2:d7:e6:b6:43:7d:f8:6a:b7:72:
         82:9c:e1:e6:0a:87:4a:fd:9b:3b:5b:e7:7c:b1:18:ec:82:1e:
         0a:70:f1:cd:35:b5:4f:54:1d:bd:52:af:53:8e:62:4e:19:db:
         2c:13:da:ad:d3:e5:06:53:31:50:1f:0c:cf:e5:59:72:2b:cc:
         2f:10:d3:58:11:9f:91:82:f1:ce:2b:58:d3:c2:3c:65:0b:d5:
         93:af:6e:ee:cd:1a:05:16:58:82:14:f2:6c:be:e3:27:3f:54:
         5e:7c:79:a8:1b:ad:d1:38:4b:80:d5:4a:3c:c7:48:0b:be:fe:
         3d:55:33:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJGGITsmg01KooOLqeCooMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OTU4YTk0NTAzYTcwNDIxNzQ5ZGVmMDVlZmU2M2EzMTdk
MThhYzIwHhcNMjQwNTE3MjAwMDM2WhcNMjQwNTE4MjAwMDM2WjAzMTEwLwYDVQQD
Eyg2ODEzOTczZTA1N2U4ODE2N2U3MjAyZTYwMzYzNjNiOWMyMzM5MjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85QW4vRNj2LTn7U4ln+R+9FiHfO0
WeEMyeTpD5Q9iYwl9SE2110ziXeDDX7SAXZWvYE6xSvLjaw0oVPwuGES75bnorA5
7Ttduu2yRZfoqhuli2HdmX9Hvg10Gw6oOQjmP5oZIjLPiMxBsTsLfJuanm5HXgXQ
tXNsBBRo50flaUuj1T7brJxJkC5iAJoSbttIVk33FEFYyKHUNQfXRffx8KoPP6gx
ecgTQfc3o5pDyXpEv3PWGKq/5Dd/4H5rMvPqxpuJcZTcuJV2wrsfgKDMvo6u/eV8
tR8QFe0itRFGvfH729aPzSjUV3WmcqASI7YQfbqNdjx1HzfxbzOUKLqpgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgTlz4FfogWfnIC5gNjY7nCM5IcMB8GA1UdIwQY
MBaAFNeVipRQOnBCF0ne8F7+Y6MX0YrCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTVXS2xGQTZjRUlYU2Q3d1h2NWpveGZSaXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9iNzdlNTUtOWZhMy00N2E4LTkxOWEt
YWQ0MDA0YWE3NmMzLzEvMTVXS2xGQTZjRUlYU2Q3d1h2NWpveGZSaXNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9iNzdlNTUtOWZhMy00N2E4LTkxOWEtYWQ0MDA0YWE3NmMz
LzEvMTVXS2xGQTZjRUlYU2Q3d1h2NWpveGZSaXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJxBZL9g
soe9+6r/oYxLco3x8SpbkDJKhIQtqkzQgN+cmDKtRduVdBAzYMxHgJrQ/JeWD4UB
/vA9yb6zExPm24Vcs6KX+d4QmBeIGE3nkSGWkuKyhZCNrL5odud4DK8XwTXcVrbq
Pl6koJNdao4KH8JzN5GolVgzI5Mu/e/vmBMTzMjSPNHC1+a2Q334ardygpzh5gqH
Sv2bO1vnfLEY7IIeCnDxzTW1T1QdvVKvU45iThnbLBPardPlBlMxUB8Mz+VZcivM
LxDTWBGfkYLxzitY08I8ZQvVk69u7s0aBRZYghTybL7jJz9UXnx5qBut0ThLgNVK
PMdIC77+PVUzQw==
-----END CERTIFICATE-----
Generated at Fri May 17 21:13:22 2024 by rpki-client on console-ams.rpki-client.org