Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
File:                     ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft (raw, json)
Hash identifier:          q5xcdxxP3YMl9FZCkOANRnpVvN0UKEOpFls9JHWUYcA=
Subject key identifier:   5B:DF:22:32:69:B0:83:D3:CD:5D:28:BC:DF:B8:ED:11:37:CE:00:2A
Authority key identifier: CE:D1:B9:3A:C3:DA:64:EB:37:68:5D:7E:AA:19:AA:B7:4C:23:7F:37
Certificate issuer:       /CN=ced1b93ac3da64eb37685d7eaa19aab74c237f37
Certificate serial:       018F874AF8031A02EA92608FC8CDEF8F8120
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
Manifest number:          0C39
Signing time:             Fri 17 May 2024 16:03:08 +0000
Manifest this update:     Fri 17 May 2024 16:03:08 +0000
Manifest next update:     Sat 18 May 2024 16:03:08 +0000
Files and hashes:         1: ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl (hash: hPZ5ympKanKaeYlh0ljrRhll2ZMPHQ08fjPHIUf1USU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:f8:03:1a:02:ea:92:60:8f:c8:cd:ef:8f:81:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ced1b93ac3da64eb37685d7eaa19aab74c237f37
        Validity
            Not Before: May 17 16:03:08 2024 GMT
            Not After : May 18 16:03:08 2024 GMT
        Subject: CN=5bdf223269b083d3cd5d28bcdfb8ed1137ce002a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:71:1f:7a:9e:69:2f:e3:3a:94:f2:92:b5:dd:
                    c3:1e:4f:e6:56:65:ba:c6:6f:2c:2e:cd:5e:20:ce:
                    15:1b:8a:b1:29:1a:a3:88:92:45:de:48:53:f6:24:
                    35:48:16:a5:2d:70:a8:a5:4d:40:c3:bc:b4:c3:b2:
                    18:a5:08:e6:5c:90:2e:d9:12:f3:8a:fc:09:b3:e0:
                    39:4a:04:1c:87:9e:d3:1e:c8:71:25:81:70:05:3d:
                    95:7a:9b:bf:33:12:6e:15:cb:d6:b0:ec:1e:e5:65:
                    39:c6:70:22:b8:23:28:c2:d2:16:58:e3:73:f4:1a:
                    29:5a:44:c1:e0:92:27:68:1f:a0:af:0f:d2:69:c9:
                    1c:92:55:af:ec:a3:d7:a9:18:43:90:79:19:d9:2b:
                    d1:21:60:0f:1f:e3:99:95:f5:cc:7c:c1:52:ea:ef:
                    d1:36:6d:09:dc:1f:06:68:9d:e7:f8:a9:10:28:98:
                    d1:54:10:36:01:ad:97:68:a6:17:9f:70:43:fb:fa:
                    50:98:50:44:97:b1:96:d1:4f:63:3c:e9:88:9f:eb:
                    e1:5d:a2:f0:ce:39:59:55:16:fb:99:d5:2e:a2:44:
                    e2:09:3e:d1:a8:ee:6e:b3:6b:a0:b5:65:06:51:54:
                    53:46:fe:83:53:6f:1e:16:b5:c3:19:27:1b:e4:35:
                    2f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DF:22:32:69:B0:83:D3:CD:5D:28:BC:DF:B8:ED:11:37:CE:00:2A
            X509v3 Authority Key Identifier:
                keyid:CE:D1:B9:3A:C3:DA:64:EB:37:68:5D:7E:AA:19:AA:B7:4C:23:7F:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:38:d4:a8:e2:df:6a:b5:8e:84:07:de:dc:04:b9:3e:62:05:
         7e:47:08:74:8e:2e:cc:38:22:c2:d5:4a:f6:de:18:f3:9c:57:
         3c:51:c5:34:87:99:9b:a6:6e:1f:6a:14:85:2a:84:84:c2:20:
         66:40:dd:62:e4:3a:ee:ea:08:c9:24:f3:94:81:e2:13:eb:35:
         8e:77:ea:4f:62:b8:81:68:09:b1:6f:7b:4b:7e:bd:1f:c4:e1:
         05:0d:40:6b:d6:3f:61:9b:c2:cb:56:f9:67:f7:bf:9d:9d:aa:
         52:d1:da:fe:c0:b1:e9:7a:9d:c6:fe:1c:f1:29:96:59:32:66:
         f1:cb:fb:3a:92:d8:b9:b9:75:be:8b:a2:47:d9:bb:37:28:00:
         7e:31:f2:32:43:1d:73:64:24:62:16:76:ee:f3:5d:6b:3e:f9:
         4a:63:15:5a:5a:a9:44:82:d3:bc:19:39:8f:8a:30:5c:31:60:
         08:a7:f6:26:96:03:27:e1:0f:6c:d0:46:9d:39:34:fa:cd:f9:
         2c:c7:3a:d8:6a:0e:1a:80:e6:0b:91:cd:36:c3:6d:e2:4c:2c:
         24:eb:2b:58:8a:ed:8a:b2:4b:ed:c3:f8:dc:65:72:c1:d2:7b:
         d9:48:9f:ae:6f:3e:fb:51:66:82:ec:41:2e:e8:1a:9b:f6:c3:
         bd:c5:39:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSvgDGgLqkmCPyM3vj4EgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZDFiOTNhYzNkYTY0ZWIzNzY4NWQ3ZWFhMTlhYWI3NGMy
MzdmMzcwHhcNMjQwNTE3MTYwMzA4WhcNMjQwNTE4MTYwMzA4WjAzMTEwLwYDVQQD
Eyg1YmRmMjIzMjY5YjA4M2QzY2Q1ZDI4YmNkZmI4ZWQxMTM3Y2UwMDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHEfep5pL+M6lPKStd3DHk/mVmW6
xm8sLs1eIM4VG4qxKRqjiJJF3khT9iQ1SBalLXCopU1Aw7y0w7IYpQjmXJAu2RLz
ivwJs+A5SgQch57THshxJYFwBT2Vepu/MxJuFcvWsOwe5WU5xnAiuCMowtIWWONz
9BopWkTB4JInaB+grw/SackcklWv7KPXqRhDkHkZ2SvRIWAPH+OZlfXMfMFS6u/R
Nm0J3B8GaJ3n+KkQKJjRVBA2Aa2XaKYXn3BD+/pQmFBEl7GW0U9jPOmIn+vhXaLw
zjlZVRb7mdUuokTiCT7RqO5us2ugtWUGUVRTRv6DU28eFrXDGScb5DUvVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvfIjJpsIPTzV0ovN+47RE3zgAqMB8GA1UdIwQY
MBaAFM7RuTrD2mTrN2hdfqoZqrdMI383MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenRHNU9zUGFaT3MzYUYxLXFobXF0MHdqZnpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jZWYzOTgtZDdhMi00MzlhLTk3ODEt
ODE2Y2I4NTNhZWRkLzEvenRHNU9zUGFaT3MzYUYxLXFobXF0MHdqZnpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9jZWYzOTgtZDdhMi00MzlhLTk3ODEtODE2Y2I4NTNhZWRk
LzEvenRHNU9zUGFaT3MzYUYxLXFobXF0MHdqZnpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABzjUqOLf
arWOhAfe3AS5PmIFfkcIdI4uzDgiwtVK9t4Y85xXPFHFNIeZm6ZuH2oUhSqEhMIg
ZkDdYuQ67uoIySTzlIHiE+s1jnfqT2K4gWgJsW97S369H8ThBQ1Aa9Y/YZvCy1b5
Z/e/nZ2qUtHa/sCx6Xqdxv4c8SmWWTJm8cv7OpLYubl1vouiR9m7NygAfjHyMkMd
c2QkYhZ27vNdaz75SmMVWlqpRILTvBk5j4owXDFgCKf2JpYDJ+EPbNBGnTk0+s35
LMc62GoOGoDmC5HNNsNt4kwsJOsrWIrtirJL7cP43GVywdJ72Uifrm8++1FmguxB
Lugam/bDvcU5yw==
-----END CERTIFICATE-----
Generated at Fri May 17 18:45:20 2024 by rpki-client on console-fra.rpki-client.org