Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
File:                     7uWTl_XWr-28jZFmr_67KAAJH5Q.mft (raw, json)
Hash identifier:          PRaLTv9vubr73DNUwN4PbmcMpgoE5CclGVgFfJJRF08=
Subject key identifier:   A1:2F:44:38:E7:72:A8:A8:EA:79:A7:87:85:32:CD:F8:16:AA:F7:FC
Authority key identifier: EE:E5:93:97:F5:D6:AF:ED:BC:8D:91:66:AF:FE:BB:28:00:09:1F:94
Certificate issuer:       /CN=eee59397f5d6afedbc8d9166affebb2800091f94
Certificate serial:       018F3DE947DFCF24F35EEE7FBAEF4183DC66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
Manifest number:          0B80
Signing time:             Fri 03 May 2024 10:04:09 +0000
Manifest this update:     Fri 03 May 2024 10:04:09 +0000
Manifest next update:     Sat 04 May 2024 10:04:09 +0000
Files and hashes:         1: 7uWTl_XWr-28jZFmr_67KAAJH5Q.crl (hash: wd/99zvJjsi7EVbgA0d4e4MKUIqfcKXfla1GsYWCSkU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 10:04:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:e9:47:df:cf:24:f3:5e:ee:7f:ba:ef:41:83:dc:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee59397f5d6afedbc8d9166affebb2800091f94
        Validity
            Not Before: May  3 10:04:09 2024 GMT
            Not After : May  4 10:04:09 2024 GMT
        Subject: CN=a12f4438e772a8a8ea79a7878532cdf816aaf7fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d4:00:87:5e:36:c9:8a:85:cf:6d:5c:4f:33:
                    73:02:12:72:78:81:70:6a:b1:da:cc:65:0a:ed:52:
                    6f:d3:d1:f5:67:62:33:fe:63:af:03:26:ce:cd:08:
                    23:74:b7:62:14:fb:fc:f5:c5:6c:d5:11:27:58:a2:
                    ba:a0:0e:d4:3b:12:85:27:be:d2:29:75:d8:b7:4a:
                    1b:16:b8:fc:8a:e8:09:3e:77:41:6b:d4:cc:4e:f7:
                    b4:fd:3f:fe:f2:75:5f:fe:75:f4:93:35:f6:e2:41:
                    b3:3c:fd:91:4b:32:7a:1c:af:11:4f:17:b8:68:cb:
                    be:61:c7:c5:43:39:23:05:c8:e7:7b:99:a1:32:2b:
                    04:a5:82:5c:2b:ea:32:af:0c:12:27:91:5f:4c:88:
                    6f:91:d1:49:80:d0:3e:7e:03:c2:1a:32:06:e9:62:
                    b2:e2:ff:8f:be:cf:18:89:1f:cb:7e:6b:bd:e0:c2:
                    71:4c:11:ff:d2:ac:b3:be:1e:d2:cb:79:31:20:be:
                    45:12:6d:5c:05:a0:09:72:5c:82:4d:da:3a:61:bd:
                    3c:84:a1:a7:58:aa:cc:fd:77:2d:04:68:6c:8f:2d:
                    16:24:f5:82:ab:e3:a4:b0:c2:7d:6b:ca:fe:fd:32:
                    16:b6:e1:6e:e0:34:c5:a2:b4:ac:9c:3a:84:2e:fd:
                    46:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2F:44:38:E7:72:A8:A8:EA:79:A7:87:85:32:CD:F8:16:AA:F7:FC
            X509v3 Authority Key Identifier:
                keyid:EE:E5:93:97:F5:D6:AF:ED:BC:8D:91:66:AF:FE:BB:28:00:09:1F:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:1b:f1:c3:eb:cb:98:43:ec:90:66:aa:a7:ea:ee:6a:84:1c:
         fb:c4:65:19:6b:b9:0a:e2:e6:97:0a:53:b8:16:3f:ad:e3:d1:
         4f:88:20:11:22:85:58:46:11:b4:20:4b:b5:98:75:1b:d8:75:
         2f:be:b1:b7:44:32:21:cb:63:93:55:9c:d6:95:38:f8:de:a7:
         46:11:46:19:b7:d9:f6:66:b3:52:d7:40:40:25:67:b1:74:a9:
         59:e3:86:86:00:55:50:1d:6a:45:fb:a6:5b:99:12:06:6c:9a:
         39:c8:dd:6b:9a:01:13:42:65:7f:79:02:b4:83:18:10:3c:00:
         8c:d3:c2:cf:c4:2e:f0:6c:2d:b9:bf:66:7d:51:5d:31:cd:54:
         e7:5c:e5:76:9f:1f:a1:86:c1:ed:48:d3:4d:bb:f0:d1:31:a8:
         83:9b:95:b7:a0:ca:8d:6a:84:db:6f:a2:24:9f:01:56:13:0d:
         fe:0f:2c:2f:c9:b0:11:75:4d:e9:4b:35:6c:85:c4:48:5a:f8:
         4f:20:31:7c:73:ae:ef:eb:9b:5b:5b:ad:b0:ab:e7:30:2f:18:
         a3:b0:e4:68:9d:ae:eb:9e:fb:34:b2:af:98:c7:13:e5:0d:8e:
         7b:94:0b:10:3e:e9:0c:44:d8:d1:88:b3:9f:5b:ba:da:93:d0:
         e2:47:2e:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY896UffzyTzXu5/uu9Bg9xmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZTU5Mzk3ZjVkNmFmZWRiYzhkOTE2NmFmZmViYjI4MDAw
OTFmOTQwHhcNMjQwNTAzMTAwNDA5WhcNMjQwNTA0MTAwNDA5WjAzMTEwLwYDVQQD
EyhhMTJmNDQzOGU3NzJhOGE4ZWE3OWE3ODc4NTMyY2RmODE2YWFmN2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dQAh142yYqFz21cTzNzAhJyeIFw
arHazGUK7VJv09H1Z2Iz/mOvAybOzQgjdLdiFPv89cVs1REnWKK6oA7UOxKFJ77S
KXXYt0obFrj8iugJPndBa9TMTve0/T/+8nVf/nX0kzX24kGzPP2RSzJ6HK8RTxe4
aMu+YcfFQzkjBcjne5mhMisEpYJcK+oyrwwSJ5FfTIhvkdFJgNA+fgPCGjIG6WKy
4v+Pvs8YiR/Lfmu94MJxTBH/0qyzvh7Sy3kxIL5FEm1cBaAJclyCTdo6Yb08hKGn
WKrM/XctBGhsjy0WJPWCq+OksMJ9a8r+/TIWtuFu4DTForSsnDqELv1GDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEvRDjncqio6nmnh4UyzfgWqvf8MB8GA1UdIwQY
MBaAFO7lk5f11q/tvI2RZq/+uygACR+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3VXVGxfWFdyLTI4alpGbXJfNjdLQUFKSDVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8yNDg5NmQtZTkwZC00OTAzLWFlNmUt
ZTdkZjk0ZTAyMjM0LzEvN3VXVGxfWFdyLTI4alpGbXJfNjdLQUFKSDVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8yNDg5NmQtZTkwZC00OTAzLWFlNmUtZTdkZjk0ZTAyMjM0
LzEvN3VXVGxfWFdyLTI4alpGbXJfNjdLQUFKSDVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaxvxw+vL
mEPskGaqp+ruaoQc+8RlGWu5CuLmlwpTuBY/rePRT4ggESKFWEYRtCBLtZh1G9h1
L76xt0QyIctjk1Wc1pU4+N6nRhFGGbfZ9mazUtdAQCVnsXSpWeOGhgBVUB1qRfum
W5kSBmyaOcjda5oBE0Jlf3kCtIMYEDwAjNPCz8Qu8Gwtub9mfVFdMc1U51zldp8f
oYbB7UjTTbvw0TGog5uVt6DKjWqE22+iJJ8BVhMN/g8sL8mwEXVN6Us1bIXESFr4
TyAxfHOu7+ubW1utsKvnMC8Yo7DkaJ2u6577NLKvmMcT5Q2Oe5QLED7pDETY0Yiz
n1u62pPQ4kcuFw==
-----END CERTIFICATE-----
Generated at Fri May 3 18:39:26 2024 by rpki-client on console-fra.rpki-client.org