Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
File:                     Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft (raw, json)
Hash identifier:          8Wa5ANSwFr6GWXV0GmElqeM6yEIfqT2ZNkAnJeTfx2U=
Subject key identifier:   E5:61:89:AD:64:DB:37:89:BB:41:8A:68:AC:B6:72:13:BE:01:15:28
Authority key identifier: 1E:98:BB:48:B5:93:06:A7:30:C9:B9:BD:8D:77:34:67:CF:1C:54:E0
Certificate issuer:       /CN=1e98bb48b59306a730c9b9bd8d773467cf1c54e0
Certificate serial:       018F5326AA86B398F899AE2E2A653734BFC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
Manifest number:          0762
Signing time:             Tue 07 May 2024 13:03:13 +0000
Manifest this update:     Tue 07 May 2024 13:03:13 +0000
Manifest next update:     Wed 08 May 2024 13:03:13 +0000
Files and hashes:         1: Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl (hash: NCdHhVVedl/LF22aHy38LtGG4cRk/CcGAHhgMlIZ+tI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 13:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:26:aa:86:b3:98:f8:99:ae:2e:2a:65:37:34:bf:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e98bb48b59306a730c9b9bd8d773467cf1c54e0
        Validity
            Not Before: May  7 13:03:13 2024 GMT
            Not After : May  8 13:03:13 2024 GMT
        Subject: CN=e56189ad64db3789bb418a68acb67213be011528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:89:9c:f0:91:e8:e5:33:d1:cc:39:f4:26:19:
                    d9:b7:43:22:13:61:61:b3:50:75:c1:1a:73:13:c8:
                    ba:80:37:bc:dc:f3:6d:24:13:66:d0:2c:15:b7:e3:
                    bb:bd:a7:62:96:d7:ee:46:6d:88:e9:08:56:38:77:
                    33:61:64:d1:1d:d3:cd:e6:5f:6b:42:5e:d1:05:fa:
                    51:ac:c2:d4:da:36:22:71:22:df:45:4c:76:46:b8:
                    7d:db:1c:67:87:8c:84:37:5f:29:e8:eb:12:f3:69:
                    e5:cb:ed:d1:56:d4:c5:1c:bc:bb:8e:f5:ba:31:c5:
                    fd:4f:ff:1a:c5:d7:72:2c:ff:7b:1b:22:0f:98:3e:
                    0b:c6:38:b9:0d:a0:1e:f6:de:b5:ef:98:fb:cf:ce:
                    53:18:cb:56:68:b0:9c:4a:d0:69:d6:35:65:36:07:
                    6f:c1:4e:b9:29:b5:d2:0a:ba:2f:94:2a:91:eb:0a:
                    0b:f4:36:66:75:75:98:d8:2e:8d:68:8e:39:c9:ce:
                    cc:1f:38:9e:94:a0:1c:fc:1e:74:f0:29:b2:ea:db:
                    9d:12:e5:13:fd:88:c3:2f:d7:fd:cc:e2:89:63:c5:
                    7a:6f:20:1e:65:31:14:1a:9c:c9:30:08:79:46:ff:
                    47:b0:9a:d5:89:50:db:0f:74:22:ee:3b:a4:7b:dc:
                    2d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:61:89:AD:64:DB:37:89:BB:41:8A:68:AC:B6:72:13:BE:01:15:28
            X509v3 Authority Key Identifier:
                keyid:1E:98:BB:48:B5:93:06:A7:30:C9:B9:BD:8D:77:34:67:CF:1C:54:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:1d:6e:63:37:2b:a4:ef:ed:8f:28:32:58:86:d3:d2:8f:fe:
         23:d3:0c:97:4b:eb:c3:3c:5e:0e:0d:a2:d4:7e:76:df:e9:96:
         d0:42:77:47:ef:eb:a6:b5:ce:f2:b4:26:85:cb:cf:a3:49:47:
         93:47:be:58:a4:e9:88:03:0c:56:55:72:33:0f:76:c3:bd:ea:
         26:ca:1c:68:28:04:0f:31:eb:d9:79:f5:8b:d6:2f:b6:53:97:
         ab:fd:6f:fc:e2:ca:2f:89:66:74:c7:53:2d:f7:8d:8d:fb:50:
         2e:0e:f5:65:33:9d:41:6f:f0:a2:98:48:93:55:ae:2f:c6:59:
         ac:94:d0:51:53:3e:de:c2:e5:a9:65:1d:29:82:9d:83:ca:06:
         41:cb:83:8d:dc:91:89:d2:d4:43:98:e6:35:c2:b7:5c:2b:fa:
         32:3e:07:f8:71:9f:26:ce:65:4e:46:a0:62:a6:93:15:68:48:
         30:25:0b:1b:c4:e0:93:1f:01:12:f8:29:ff:d7:09:24:92:4b:
         bf:11:46:16:3c:97:e8:d6:0e:35:1a:54:a8:8b:59:21:35:ec:
         83:91:c7:35:69:31:03:df:71:f3:39:47:36:53:dc:23:52:ea:
         b3:96:e2:be:10:94:07:ac:92:c7:65:34:40:6c:23:27:0a:79:
         74:7f:07:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9TJqqGs5j4ma4uKmU3NL/FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOThiYjQ4YjU5MzA2YTczMGM5YjliZDhkNzczNDY3Y2Yx
YzU0ZTAwHhcNMjQwNTA3MTMwMzEzWhcNMjQwNTA4MTMwMzEzWjAzMTEwLwYDVQQD
EyhlNTYxODlhZDY0ZGIzNzg5YmI0MThhNjhhY2I2NzIxM2JlMDExNTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4mc8JHo5TPRzDn0JhnZt0MiE2Fh
s1B1wRpzE8i6gDe83PNtJBNm0CwVt+O7vadiltfuRm2I6QhWOHczYWTRHdPN5l9r
Ql7RBfpRrMLU2jYicSLfRUx2Rrh92xxnh4yEN18p6OsS82nly+3RVtTFHLy7jvW6
McX9T/8axddyLP97GyIPmD4Lxji5DaAe9t6175j7z85TGMtWaLCcStBp1jVlNgdv
wU65KbXSCrovlCqR6woL9DZmdXWY2C6NaI45yc7MHzielKAc/B508Cmy6tudEuUT
/YjDL9f9zOKJY8V6byAeZTEUGpzJMAh5Rv9HsJrViVDbD3Qi7juke9wt7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVhia1k2zeJu0GKaKy2chO+ARUoMB8GA1UdIwQY
MBaAFB6Yu0i1kwanMMm5vY13NGfPHFTgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHBpN1NMV1RCcWN3eWJtOWpYYzBaODhjVk9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81MTYxY2ItYmNkZC00MDk2LTg4Zjct
NWFlZDhkNmEzM2I3LzEvSHBpN1NMV1RCcWN3eWJtOWpYYzBaODhjVk9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC81MTYxY2ItYmNkZC00MDk2LTg4ZjctNWFlZDhkNmEzM2I3
LzEvSHBpN1NMV1RCcWN3eWJtOWpYYzBaODhjVk9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqh1uYzcr
pO/tjygyWIbT0o/+I9MMl0vrwzxeDg2i1H523+mW0EJ3R+/rprXO8rQmhcvPo0lH
k0e+WKTpiAMMVlVyMw92w73qJsocaCgEDzHr2Xn1i9YvtlOXq/1v/OLKL4lmdMdT
LfeNjftQLg71ZTOdQW/wophIk1WuL8ZZrJTQUVM+3sLlqWUdKYKdg8oGQcuDjdyR
idLUQ5jmNcK3XCv6Mj4H+HGfJs5lTkagYqaTFWhIMCULG8Tgkx8BEvgp/9cJJJJL
vxFGFjyX6NYONRpUqItZITXsg5HHNWkxA99x8zlHNlPcI1Lqs5bivhCUB6ySx2U0
QGwjJwp5dH8Hjw==
-----END CERTIFICATE-----
Generated at Tue May 7 18:55:07 2024 by rpki-client on console-fra.rpki-client.org