Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.mft
File:                     FHVOhj0RfOYhDylUYajGqgQ8bIA.mft (raw, json)
Hash identifier:          RypQtC+J2iic8AUmDx7UofwHz4VNGSfLStZYHdGyKto=
Subject key identifier:   CC:0C:BB:E2:B3:49:83:F0:DD:BC:3C:93:E1:F2:04:98:A6:7B:37:D6
Authority key identifier: 14:75:4E:86:3D:11:7C:E6:21:0F:29:54:61:A8:C6:AA:04:3C:6C:80
Certificate issuer:       /CN=14754e863d117ce6210f295461a8c6aa043c6c80
Certificate serial:       018F441F7966939D99B17DFFCBB5A2E92EA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FHVOhj0RfOYhDylUYajGqgQ8bIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.mft
Manifest number:          1151
Signing time:             Sat 04 May 2024 15:01:04 +0000
Manifest this update:     Sat 04 May 2024 15:01:04 +0000
Manifest next update:     Sun 05 May 2024 15:01:04 +0000
Files and hashes:         1: FHVOhj0RfOYhDylUYajGqgQ8bIA.crl (hash: 8CDkBQPBe2o8P2rQAG1WUK1A9Zxf/E7Uvz5XHf0o76A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FHVOhj0RfOYhDylUYajGqgQ8bIA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:1f:79:66:93:9d:99:b1:7d:ff:cb:b5:a2:e9:2e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14754e863d117ce6210f295461a8c6aa043c6c80
        Validity
            Not Before: May  4 15:01:04 2024 GMT
            Not After : May  5 15:01:04 2024 GMT
        Subject: CN=cc0cbbe2b34983f0ddbc3c93e1f20498a67b37d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:70:28:05:74:1f:be:79:c6:b7:63:30:b3:a1:
                    f0:15:7b:f4:de:81:c6:09:81:57:3c:9b:55:68:0d:
                    df:19:c6:3a:ef:16:9e:8d:4f:0f:45:64:c1:49:15:
                    d9:00:1b:bd:35:4c:8e:eb:27:63:b0:1d:ba:f8:b4:
                    bc:ce:31:42:f3:78:ac:4a:48:2d:b1:e6:07:08:9b:
                    fb:b7:fd:96:fa:79:87:f1:45:a1:de:18:d5:20:9b:
                    2b:3e:07:8b:bb:42:04:50:45:50:2e:13:84:81:0c:
                    0b:96:65:5e:a8:8c:01:ea:de:30:3b:cd:fa:05:80:
                    23:5c:63:74:05:ce:62:87:2d:a8:32:fe:ee:83:0b:
                    e8:8c:43:cd:1d:b8:52:60:0a:63:74:9d:0d:b8:4e:
                    b2:1b:c0:e1:6b:57:b1:b2:ac:3f:eb:94:3f:00:fb:
                    a1:65:23:a6:9b:25:86:f0:86:d5:a5:c4:91:90:29:
                    a5:49:5b:2d:f4:a1:d8:c3:62:5d:ff:5d:1b:ea:7a:
                    e7:5b:24:f4:83:04:71:ab:26:f5:18:43:a3:92:f6:
                    11:52:99:f3:c1:00:38:68:1f:a6:2c:97:64:bc:6c:
                    7a:04:01:4e:61:91:0c:06:23:1d:63:4b:e6:29:2a:
                    e1:9b:d9:d7:9d:a7:c1:fa:4f:a7:d0:d0:18:cb:b6:
                    ec:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:0C:BB:E2:B3:49:83:F0:DD:BC:3C:93:E1:F2:04:98:A6:7B:37:D6
            X509v3 Authority Key Identifier:
                keyid:14:75:4E:86:3D:11:7C:E6:21:0F:29:54:61:A8:C6:AA:04:3C:6C:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHVOhj0RfOYhDylUYajGqgQ8bIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:cd:fb:87:2c:56:82:5b:d2:23:16:79:06:e6:9b:08:71:59:
         51:cb:0a:ac:b4:74:be:2f:cb:49:0b:41:6b:1b:24:03:86:07:
         53:fd:9e:cf:ce:6b:77:bb:70:7a:c0:69:9a:04:37:98:f5:34:
         4d:87:4d:c8:eb:67:89:16:44:98:f4:d6:e4:65:12:c7:15:fe:
         d4:cf:65:28:7b:94:36:90:a0:99:2c:65:29:01:23:97:bc:c7:
         00:05:49:a9:e9:a6:69:14:3a:04:07:de:6c:da:03:b5:bb:00:
         a9:25:09:81:25:f5:5c:9f:5a:a4:47:3f:b8:a7:95:00:63:02:
         d2:67:f2:fb:9c:91:a5:2b:12:76:48:56:87:4f:5c:61:24:00:
         ba:d7:52:d4:72:cc:69:fb:4b:15:65:6d:f9:f5:6f:a7:cb:47:
         ab:79:d7:82:b8:e2:90:7f:bf:54:28:3f:39:23:84:d0:d1:be:
         99:92:12:96:ef:31:8d:32:4c:10:3a:b4:89:2d:59:d4:be:32:
         25:7e:f0:22:6c:03:a2:88:ae:0c:28:e6:6f:ab:eb:1c:72:b3:
         b7:5a:31:f2:a4:73:19:ba:1a:7e:c0:cb:8b:0e:47:c3:1a:10:
         2b:a4:17:4e:57:9f:6e:b9:d7:e3:32:e7:6e:21:fd:91:6d:02:
         f7:7d:11:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9EH3lmk52ZsX3/y7Wi6S6oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NzU0ZTg2M2QxMTdjZTYyMTBmMjk1NDYxYThjNmFhMDQz
YzZjODAwHhcNMjQwNTA0MTUwMTA0WhcNMjQwNTA1MTUwMTA0WjAzMTEwLwYDVQQD
EyhjYzBjYmJlMmIzNDk4M2YwZGRiYzNjOTNlMWYyMDQ5OGE2N2IzN2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3AoBXQfvnnGt2Mws6HwFXv03oHG
CYFXPJtVaA3fGcY67xaejU8PRWTBSRXZABu9NUyO6ydjsB26+LS8zjFC83isSkgt
seYHCJv7t/2W+nmH8UWh3hjVIJsrPgeLu0IEUEVQLhOEgQwLlmVeqIwB6t4wO836
BYAjXGN0Bc5ihy2oMv7ugwvojEPNHbhSYApjdJ0NuE6yG8Dha1exsqw/65Q/APuh
ZSOmmyWG8IbVpcSRkCmlSVst9KHYw2Jd/10b6nrnWyT0gwRxqyb1GEOjkvYRUpnz
wQA4aB+mLJdkvGx6BAFOYZEMBiMdY0vmKSrhm9nXnafB+k+n0NAYy7bs/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwMu+KzSYPw3bw8k+HyBJimezfWMB8GA1UdIwQY
MBaAFBR1ToY9EXzmIQ8pVGGoxqoEPGyAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkhWT2hqMFJmT1loRHlsVVlhakdxZ1E4YklBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kOWMzYzAtMmVhZi00MzI2LThlZTIt
YTdkODBlNjAwODQ0LzEvRkhWT2hqMFJmT1loRHlsVVlhakdxZ1E4YklBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9kOWMzYzAtMmVhZi00MzI2LThlZTItYTdkODBlNjAwODQ0
LzEvRkhWT2hqMFJmT1loRHlsVVlhakdxZ1E4YklBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAc37hyxW
glvSIxZ5BuabCHFZUcsKrLR0vi/LSQtBaxskA4YHU/2ez85rd7twesBpmgQ3mPU0
TYdNyOtniRZEmPTW5GUSxxX+1M9lKHuUNpCgmSxlKQEjl7zHAAVJqemmaRQ6BAfe
bNoDtbsAqSUJgSX1XJ9apEc/uKeVAGMC0mfy+5yRpSsSdkhWh09cYSQAutdS1HLM
aftLFWVt+fVvp8tHq3nXgrjikH+/VCg/OSOE0NG+mZISlu8xjTJMEDq0iS1Z1L4y
JX7wImwDooiuDCjmb6vrHHKzt1ox8qRzGboafsDLiw5HwxoQK6QXTlefbrnX4zLn
biH9kW0C930R9w==
-----END CERTIFICATE-----
Generated at Sat May 4 18:45:48 2024 by rpki-client on console-fra.rpki-client.org