Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft
File:                     8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft (raw, json)
Hash identifier:          9N8susO6yLnim4PzXffWqD8BXdV+k+/u+4o6yw+xYKY=
Subject key identifier:   C0:E5:22:47:9D:0E:F5:A0:AA:0F:4B:05:1C:4A:33:49:BC:1C:F1:46
Authority key identifier: F3:FC:4E:F2:32:AE:23:94:E8:88:54:4F:52:AB:08:B1:7A:FE:32:48
Certificate issuer:       /CN=f3fc4ef232ae2394e888544f52ab08b17afe3248
Certificate serial:       018F41C467FDD3B95009C044F32DC73283F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft
Manifest number:          1152
Signing time:             Sat 04 May 2024 04:02:21 +0000
Manifest this update:     Sat 04 May 2024 04:02:21 +0000
Manifest next update:     Sun 05 May 2024 04:02:21 +0000
Files and hashes:         1: 8_xO8jKuI5ToiFRPUqsIsXr-Mkg.crl (hash: 0sSEUEnud3l3oLyY+fyDvXzxqbSIarsUgiwBottCxZY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 04:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c4:67:fd:d3:b9:50:09:c0:44:f3:2d:c7:32:83:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3fc4ef232ae2394e888544f52ab08b17afe3248
        Validity
            Not Before: May  4 04:02:21 2024 GMT
            Not After : May  5 04:02:21 2024 GMT
        Subject: CN=c0e522479d0ef5a0aa0f4b051c4a3349bc1cf146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:96:70:36:a6:56:d4:7e:4e:81:11:cc:82:ce:
                    39:cb:e2:49:ef:72:61:3e:ba:ea:6c:b6:94:c2:40:
                    f2:af:25:e1:e6:8b:b6:a7:fe:66:ad:52:1a:2a:56:
                    6c:73:79:36:89:ea:1f:ef:a8:13:af:0d:16:76:9b:
                    56:5b:0d:d2:f7:94:c7:ca:74:16:ff:4a:ba:cc:a6:
                    05:af:80:44:02:9b:dc:20:a5:5f:f7:ad:77:50:df:
                    e0:49:ce:d9:1b:a6:5f:c1:41:f3:f1:9a:06:dc:37:
                    df:fc:82:48:7f:03:92:3f:84:dd:92:76:d3:65:df:
                    e7:51:17:43:22:4b:84:39:e8:13:eb:8a:31:62:40:
                    75:8e:66:ab:87:62:0c:ab:f5:dc:e1:81:48:85:4d:
                    1f:b6:be:57:61:20:86:d9:b1:ae:af:2e:f0:57:c9:
                    db:a2:2f:6a:c3:01:ed:dc:30:12:4a:86:b6:b3:31:
                    9a:a5:c9:9e:7d:4b:72:3a:ec:92:f7:1c:7d:25:46:
                    65:21:57:ba:59:4d:e8:90:f5:72:75:6d:1a:a2:4b:
                    64:d0:65:59:03:5a:6b:41:e1:e5:51:be:75:51:13:
                    48:9a:ed:68:b8:27:e0:4d:d7:b0:81:11:78:88:08:
                    8a:57:bf:1a:c8:7b:95:f9:a2:de:a5:46:a0:2f:dc:
                    6f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E5:22:47:9D:0E:F5:A0:AA:0F:4B:05:1C:4A:33:49:BC:1C:F1:46
            X509v3 Authority Key Identifier:
                keyid:F3:FC:4E:F2:32:AE:23:94:E8:88:54:4F:52:AB:08:B1:7A:FE:32:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:1c:25:ff:bb:ae:ba:22:e9:cd:7d:02:07:55:39:f5:cb:a5:
         fb:bd:45:5f:52:88:37:24:74:3c:30:b6:23:57:28:08:e2:43:
         d8:69:4d:56:ba:d5:b4:46:80:04:85:0c:57:33:c6:9e:7c:d4:
         1d:8a:76:fa:f6:bc:86:da:73:42:c8:10:a9:38:b6:2b:fe:13:
         3f:c9:dd:d5:d1:84:4a:9e:64:e0:26:c5:75:60:da:c6:c6:a9:
         14:d1:af:29:1e:92:33:99:bc:98:c8:23:db:a5:49:c6:a6:48:
         8f:0f:45:c3:de:03:28:ad:38:db:af:54:f8:78:4b:23:eb:4f:
         45:12:0f:cd:f9:74:e6:d4:11:85:fd:83:86:5b:74:07:1d:ae:
         b9:45:21:fa:ad:3a:e7:cb:52:20:d2:53:b5:60:3b:14:8f:b6:
         f2:a0:5e:f7:c5:b2:01:ca:32:46:60:f4:01:24:36:21:06:4f:
         06:81:a1:a9:b5:ce:a3:be:35:2c:7e:06:87:25:55:5a:40:52:
         8a:27:89:c0:be:ef:d8:1e:4d:0c:a2:e5:23:3f:cb:0d:ad:81:
         68:e4:38:b1:f3:23:19:ed:04:53:79:58:20:7a:98:62:00:5d:
         ff:b5:53:61:fe:57:fe:c2:66:0a:fb:f2:91:65:1f:e7:ca:a8:
         58:9a:15:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9BxGf907lQCcBE8y3HMoP4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZmM0ZWYyMzJhZTIzOTRlODg4NTQ0ZjUyYWIwOGIxN2Fm
ZTMyNDgwHhcNMjQwNTA0MDQwMjIxWhcNMjQwNTA1MDQwMjIxWjAzMTEwLwYDVQQD
EyhjMGU1MjI0NzlkMGVmNWEwYWEwZjRiMDUxYzRhMzM0OWJjMWNmMTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5ZwNqZW1H5OgRHMgs45y+JJ73Jh
PrrqbLaUwkDyryXh5ou2p/5mrVIaKlZsc3k2ieof76gTrw0WdptWWw3S95THynQW
/0q6zKYFr4BEApvcIKVf9613UN/gSc7ZG6ZfwUHz8ZoG3Dff/IJIfwOSP4TdknbT
Zd/nURdDIkuEOegT64oxYkB1jmarh2IMq/Xc4YFIhU0ftr5XYSCG2bGury7wV8nb
oi9qwwHt3DASSoa2szGapcmefUtyOuyS9xx9JUZlIVe6WU3okPVydW0aoktk0GVZ
A1prQeHlUb51URNImu1ouCfgTdewgRF4iAiKV78ayHuV+aLepUagL9xvkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDlIkedDvWgqg9LBRxKM0m8HPFGMB8GA1UdIwQY
MBaAFPP8TvIyriOU6IhUT1KrCLF6/jJIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOF94TzhqS3VJNVRvaUZSUFVxc0lzWHItTWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS85MzcxNDQtYjg2YS00MDhiLWJkZTEt
OTM1ZmIxYmVkMmQ4LzEvOF94TzhqS3VJNVRvaUZSUFVxc0lzWHItTWtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS85MzcxNDQtYjg2YS00MDhiLWJkZTEtOTM1ZmIxYmVkMmQ4
LzEvOF94TzhqS3VJNVRvaUZSUFVxc0lzWHItTWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxwl/7uu
uiLpzX0CB1U59cul+71FX1KINyR0PDC2I1coCOJD2GlNVrrVtEaABIUMVzPGnnzU
HYp2+va8htpzQsgQqTi2K/4TP8nd1dGESp5k4CbFdWDaxsapFNGvKR6SM5m8mMgj
26VJxqZIjw9Fw94DKK04269U+HhLI+tPRRIPzfl05tQRhf2Dhlt0Bx2uuUUh+q06
58tSINJTtWA7FI+28qBe98WyAcoyRmD0ASQ2IQZPBoGhqbXOo741LH4GhyVVWkBS
iieJwL7v2B5NDKLlIz/LDa2BaOQ4sfMjGe0EU3lYIHqYYgBd/7VTYf5X/sJmCvvy
kWUf58qoWJoVpA==
-----END CERTIFICATE-----
Generated at Sat May 4 09:22:29 2024 by rpki-client on console-ams.rpki-client.org