Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.mft
File:                     ndrXzlnL6NGaA0EfocbJug1CAqI.mft (raw, json)
Hash identifier:          icjEm8Y4d1mnVutKBh8OQK3zrlFkDcsBqEovR0sjYVI=
Subject key identifier:   CD:F6:62:31:7B:2B:49:88:B1:2E:8C:D8:07:29:80:ED:E6:D8:FA:55
Authority key identifier: 9D:DA:D7:CE:59:CB:E8:D1:9A:03:41:1F:A1:C6:C9:BA:0D:42:02:A2
Certificate issuer:       /CN=9ddad7ce59cbe8d19a03411fa1c6c9ba0d4202a2
Certificate serial:       018F8749085270BA6449D820D51DA113FB14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ndrXzlnL6NGaA0EfocbJug1CAqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.mft
Manifest number:          04E8
Signing time:             Fri 17 May 2024 16:01:01 +0000
Manifest this update:     Fri 17 May 2024 16:01:01 +0000
Manifest next update:     Sat 18 May 2024 16:01:01 +0000
Files and hashes:         1: ndrXzlnL6NGaA0EfocbJug1CAqI.crl (hash: V1q81lEFE1OYLjotHT2koKhfzIPsZXdxf7ydXzF/KEs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ndrXzlnL6NGaA0EfocbJug1CAqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:08:52:70:ba:64:49:d8:20:d5:1d:a1:13:fb:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ddad7ce59cbe8d19a03411fa1c6c9ba0d4202a2
        Validity
            Not Before: May 17 16:01:01 2024 GMT
            Not After : May 18 16:01:01 2024 GMT
        Subject: CN=cdf662317b2b4988b12e8cd8072980ede6d8fa55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:01:37:0d:02:79:cc:d7:3b:c4:6b:e0:77:84:
                    81:05:66:45:d6:9e:7a:8c:92:36:34:7b:26:84:b5:
                    a2:52:d6:9b:b5:77:38:8d:3f:54:22:d5:4a:5b:70:
                    99:6d:09:f4:16:fc:05:65:e9:8e:fc:28:04:d2:c9:
                    81:88:92:4f:e4:a5:99:50:0f:0c:4c:16:4b:7d:f0:
                    b4:c1:23:34:8c:98:9a:b9:34:c2:f8:64:f3:76:be:
                    bb:6d:e9:12:8d:8c:f4:c4:b1:1c:e0:ad:ad:23:09:
                    00:f5:04:d9:f7:0f:d5:4c:3a:0b:37:fb:9f:0e:ea:
                    8f:3f:7d:c9:23:62:76:33:0b:9e:8c:4c:4d:09:ed:
                    ce:e1:f7:14:d3:d6:29:69:09:fb:8d:35:5f:df:e8:
                    11:d4:e0:e0:e0:c5:3c:c5:7e:61:b2:65:ac:17:84:
                    c9:37:5b:ef:c7:22:94:81:64:8f:cc:b9:e4:dd:a7:
                    a5:7c:a9:f8:d0:c9:8a:81:57:76:5a:ed:8d:3b:a2:
                    47:49:d4:9d:a8:1a:05:d0:a3:90:24:e5:da:ba:ba:
                    dd:42:13:e9:c0:ea:85:f2:b2:23:32:f6:65:19:54:
                    a5:c9:d2:85:6d:22:a4:f1:70:13:0d:f1:15:83:99:
                    ab:f7:fc:22:2c:29:73:32:81:c9:72:99:d3:02:b7:
                    47:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F6:62:31:7B:2B:49:88:B1:2E:8C:D8:07:29:80:ED:E6:D8:FA:55
            X509v3 Authority Key Identifier:
                keyid:9D:DA:D7:CE:59:CB:E8:D1:9A:03:41:1F:A1:C6:C9:BA:0D:42:02:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndrXzlnL6NGaA0EfocbJug1CAqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:01:01:8a:5e:77:3d:b7:fa:c3:df:30:e8:b2:21:27:02:d1:
         d7:0f:71:95:de:08:89:60:01:84:61:53:1c:4a:84:67:6e:2d:
         9d:57:d3:12:39:87:7c:d9:36:b8:01:dc:22:c3:fc:6b:ea:5a:
         73:8c:36:b6:a4:9a:92:41:81:42:33:83:91:04:9f:61:85:43:
         44:bb:74:49:30:87:05:b8:0b:d5:fd:f1:22:93:57:55:a8:6a:
         29:c5:a9:0b:df:aa:39:31:d4:3b:c9:d3:34:66:10:fe:ef:6a:
         6b:f8:de:ba:df:60:7d:e6:7e:9d:2f:f4:9f:43:33:f1:1f:6e:
         f4:19:5c:ef:2c:d6:0b:20:c5:70:2e:e7:a2:84:3c:1c:cd:bd:
         e5:14:db:33:ea:3a:58:ca:10:28:fa:b9:44:6d:62:df:4c:f7:
         43:68:df:73:ab:83:44:4c:29:0b:da:c1:15:b8:27:2d:4d:26:
         cd:31:46:51:5a:6a:48:e5:6b:a4:11:41:43:80:8d:55:2c:55:
         d5:92:ac:07:d3:36:f8:db:fb:ab:63:c2:07:9e:09:8f:92:25:
         3c:57:41:be:07:ce:aa:a1:69:9a:83:49:05:a1:6b:fa:25:fd:
         72:0a:83:f8:4d:bc:dc:1a:b4:a2:13:93:e7:12:b8:04:58:86:
         9e:20:84:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSQhScLpkSdgg1R2hE/sUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZGFkN2NlNTljYmU4ZDE5YTAzNDExZmExYzZjOWJhMGQ0
MjAyYTIwHhcNMjQwNTE3MTYwMTAxWhcNMjQwNTE4MTYwMTAxWjAzMTEwLwYDVQQD
EyhjZGY2NjIzMTdiMmI0OTg4YjEyZThjZDgwNzI5ODBlZGU2ZDhmYTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgE3DQJ5zNc7xGvgd4SBBWZF1p56
jJI2NHsmhLWiUtabtXc4jT9UItVKW3CZbQn0FvwFZemO/CgE0smBiJJP5KWZUA8M
TBZLffC0wSM0jJiauTTC+GTzdr67bekSjYz0xLEc4K2tIwkA9QTZ9w/VTDoLN/uf
DuqPP33JI2J2MwuejExNCe3O4fcU09YpaQn7jTVf3+gR1ODg4MU8xX5hsmWsF4TJ
N1vvxyKUgWSPzLnk3aelfKn40MmKgVd2Wu2NO6JHSdSdqBoF0KOQJOXaurrdQhPp
wOqF8rIjMvZlGVSlydKFbSKk8XATDfEVg5mr9/wiLClzMoHJcpnTArdHSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM32YjF7K0mIsS6M2AcpgO3m2PpVMB8GA1UdIwQY
MBaAFJ3a185Zy+jRmgNBH6HGyboNQgKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmRyWHpsbkw2TkdhQTBFZm9jYkp1ZzFDQXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MDYzNWEtNjMwZC00ZjY0LWFjNDMt
Y2NhMzUyOGUyMGUyLzEvbmRyWHpsbkw2TkdhQTBFZm9jYkp1ZzFDQXFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MDYzNWEtNjMwZC00ZjY0LWFjNDMtY2NhMzUyOGUyMGUy
LzEvbmRyWHpsbkw2TkdhQTBFZm9jYkp1ZzFDQXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqgEBil53
Pbf6w98w6LIhJwLR1w9xld4IiWABhGFTHEqEZ24tnVfTEjmHfNk2uAHcIsP8a+pa
c4w2tqSakkGBQjODkQSfYYVDRLt0STCHBbgL1f3xIpNXVahqKcWpC9+qOTHUO8nT
NGYQ/u9qa/jeut9gfeZ+nS/0n0Mz8R9u9Blc7yzWCyDFcC7nooQ8HM295RTbM+o6
WMoQKPq5RG1i30z3Q2jfc6uDREwpC9rBFbgnLU0mzTFGUVpqSOVrpBFBQ4CNVSxV
1ZKsB9M2+Nv7q2PCB54Jj5IlPFdBvgfOqqFpmoNJBaFr+iX9cgqD+E283Bq0ohOT
5xK4BFiGniCEsg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:44:39 2024 by rpki-client on console-fra.rpki-client.org