Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft
File:                     AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft (raw, json)
Hash identifier:          WVTWEgdHz2sZ0jnc1jTzoIiLgswXhCyZPmG9wsgJkqA=
Subject key identifier:   2F:1E:F7:72:C8:4E:44:79:0B:24:1D:1D:49:D8:66:51:C8:70:0C:75
Authority key identifier: 02:72:BD:3B:32:AE:CA:F2:6C:A8:ED:B3:C8:78:FE:57:95:F2:AB:6F
Certificate issuer:       /CN=0272bd3b32aecaf26ca8edb3c878fe5795f2ab6f
Certificate serial:       01901FDA60D07E6693D54798E30BFEF45D15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AnK9OzKuyvJsqO2zyHj-V5Xyq28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft
Manifest number:          0342
Signing time:             Sun 16 Jun 2024 07:02:03 +0000
Manifest this update:     Sun 16 Jun 2024 07:02:03 +0000
Manifest next update:     Mon 17 Jun 2024 07:02:03 +0000
Files and hashes:         1: AnK9OzKuyvJsqO2zyHj-V5Xyq28.crl (hash: GlebAqQCnmnGKwRXETiCdrXgQnpxSUeM/0OLxb+jJCE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AnK9OzKuyvJsqO2zyHj-V5Xyq28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:da:60:d0:7e:66:93:d5:47:98:e3:0b:fe:f4:5d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0272bd3b32aecaf26ca8edb3c878fe5795f2ab6f
        Validity
            Not Before: Jun 16 07:02:03 2024 GMT
            Not After : Jun 17 07:02:03 2024 GMT
        Subject: CN=2f1ef772c84e44790b241d1d49d86651c8700c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:39:21:b7:c2:7f:fe:0d:c4:2f:a7:63:c5:eb:
                    d3:cb:11:dd:a0:b9:6a:ef:1a:90:9c:42:8f:ef:25:
                    2b:1d:6b:3b:e3:f8:82:b3:50:0b:0b:3f:c9:80:03:
                    45:fc:cc:62:db:9e:57:c7:fd:a9:a0:54:11:86:9a:
                    ca:e5:bc:27:69:14:21:93:4b:a6:8e:11:79:2a:14:
                    84:95:9a:bc:9a:9e:e8:fa:92:5b:46:83:e6:fd:97:
                    c6:9a:cb:ca:87:eb:83:ad:48:87:69:aa:42:ea:80:
                    b1:91:ee:37:6c:83:4b:bb:d9:e6:ff:5d:13:e9:96:
                    fa:3c:3e:64:68:40:ec:1c:5c:eb:9d:20:be:fb:b3:
                    3a:13:fe:aa:f8:8d:5f:d2:5f:3a:95:69:00:f6:ab:
                    ae:58:8b:41:12:84:31:db:e9:da:1c:21:31:d9:97:
                    9f:84:bc:37:48:8b:15:67:40:3e:00:e3:91:80:63:
                    76:1b:90:70:71:93:50:3f:e3:d6:96:db:50:a6:2f:
                    3b:10:ff:42:2f:8c:8e:13:e5:9a:f5:b0:c3:8c:21:
                    80:e8:3d:3f:5a:a8:28:e2:bb:3c:a1:55:e2:b9:e6:
                    d9:4a:36:a7:ba:8f:04:70:7c:d1:f4:37:48:9e:c3:
                    24:16:f4:6c:ff:c8:7c:e1:9f:45:bd:5a:af:c4:cb:
                    ba:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1E:F7:72:C8:4E:44:79:0B:24:1D:1D:49:D8:66:51:C8:70:0C:75
            X509v3 Authority Key Identifier:
                keyid:02:72:BD:3B:32:AE:CA:F2:6C:A8:ED:B3:C8:78:FE:57:95:F2:AB:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AnK9OzKuyvJsqO2zyHj-V5Xyq28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:ca:ed:e5:98:4f:40:11:aa:3b:66:3b:ee:84:9a:09:88:69:
         cd:fb:e7:49:79:14:5d:15:70:cd:52:c8:4b:00:56:e4:10:20:
         04:d5:ad:7d:4f:6b:32:1e:f5:cf:6e:b3:70:29:b0:8d:26:f3:
         33:80:0d:03:9f:b4:d4:a2:1e:dd:b3:a7:8c:1c:b2:64:63:ff:
         1c:6d:2d:e7:1e:d1:86:05:42:af:3c:d3:32:a6:e5:72:18:14:
         a0:ae:96:4a:07:ae:ee:46:78:6b:b3:d5:81:a7:0e:0f:4a:a5:
         85:72:c5:71:e3:88:88:aa:16:b3:82:ed:b7:ba:e1:d6:b8:9d:
         4f:81:d8:24:24:3d:f8:4b:9f:2f:ca:45:af:02:2a:c3:6c:4e:
         78:5e:2f:a3:74:20:cb:f5:6e:08:96:c4:76:bd:56:05:2f:06:
         f3:be:79:7f:ef:0e:ce:12:e3:97:88:e5:bb:b8:a5:67:f0:2a:
         a9:56:96:d8:ef:6c:57:80:c6:fb:fb:9c:e9:c4:d8:18:15:6d:
         02:83:1c:54:f3:40:9d:73:59:e4:a8:55:47:75:79:da:fb:ac:
         9b:f5:b1:4c:df:e4:0a:21:ef:57:8b:0d:97:73:8e:00:9c:99:
         a2:99:6e:f8:6b:30:8c:4a:e3:c4:8e:94:07:83:00:6c:75:e0:
         84:73:6f:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAf2mDQfmaT1UeY4wv+9F0VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNzJiZDNiMzJhZWNhZjI2Y2E4ZWRiM2M4NzhmZTU3OTVm
MmFiNmYwHhcNMjQwNjE2MDcwMjAzWhcNMjQwNjE3MDcwMjAzWjAzMTEwLwYDVQQD
EygyZjFlZjc3MmM4NGU0NDc5MGIyNDFkMWQ0OWQ4NjY1MWM4NzAwYzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Dkht8J//g3EL6djxevTyxHdoLlq
7xqQnEKP7yUrHWs74/iCs1ALCz/JgANF/Mxi255Xx/2poFQRhprK5bwnaRQhk0um
jhF5KhSElZq8mp7o+pJbRoPm/ZfGmsvKh+uDrUiHaapC6oCxke43bINLu9nm/10T
6Zb6PD5kaEDsHFzrnSC++7M6E/6q+I1f0l86lWkA9quuWItBEoQx2+naHCEx2Zef
hLw3SIsVZ0A+AOORgGN2G5BwcZNQP+PWlttQpi87EP9CL4yOE+Wa9bDDjCGA6D0/
Wqgo4rs8oVXiuebZSjanuo8EcHzR9DdInsMkFvRs/8h84Z9FvVqvxMu6tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8e93LITkR5CyQdHUnYZlHIcAx1MB8GA1UdIwQY
MBaAFAJyvTsyrsrybKjts8h4/leV8qtvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW5LOU96S3V5dkpzcU8yenlIai1WNVh5cTI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9hZjJlNzUtZWNlZS00OGUxLThhZjYt
MTJkZWRlOWQwYzcxLzEvQW5LOU96S3V5dkpzcU8yenlIai1WNVh5cTI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9hZjJlNzUtZWNlZS00OGUxLThhZjYtMTJkZWRlOWQwYzcx
LzEvQW5LOU96S3V5dkpzcU8yenlIai1WNVh5cTI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzsrt5ZhP
QBGqO2Y77oSaCYhpzfvnSXkUXRVwzVLISwBW5BAgBNWtfU9rMh71z26zcCmwjSbz
M4ANA5+01KIe3bOnjByyZGP/HG0t5x7RhgVCrzzTMqblchgUoK6WSgeu7kZ4a7PV
gacOD0qlhXLFceOIiKoWs4Ltt7rh1ridT4HYJCQ9+EufL8pFrwIqw2xOeF4vo3Qg
y/VuCJbEdr1WBS8G8755f+8OzhLjl4jlu7ilZ/AqqVaW2O9sV4DG+/uc6cTYGBVt
AoMcVPNAnXNZ5KhVR3V52vusm/WxTN/kCiHvV4sNl3OOAJyZoplu+GswjErjxI6U
B4MAbHXghHNvvQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 08:10:33 2024 by rpki-client on console-fra.rpki-client.org