Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
File:                     VhxILbWscM1l8s5s5ffiW4929Gk.mft (raw, json)
Hash identifier:          Bri+fihJXtjQUvdU/aGPZGYqsmdztYIYs1ZDFexYUbE=
Subject key identifier:   C2:D7:07:32:CE:7C:B4:60:53:08:BD:EA:4E:B7:C0:63:69:4C:29:D2
Authority key identifier: 56:1C:48:2D:B5:AC:70:CD:65:F2:CE:6C:E5:F7:E2:5B:8F:76:F4:69
Certificate issuer:       /CN=561c482db5ac70cd65f2ce6ce5f7e25b8f76f469
Certificate serial:       018F874A8F44782306C9B1FDC16A521F1CEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
Manifest number:          054D
Signing time:             Fri 17 May 2024 16:02:41 +0000
Manifest this update:     Fri 17 May 2024 16:02:41 +0000
Manifest next update:     Sat 18 May 2024 16:02:41 +0000
Files and hashes:         1: VhxILbWscM1l8s5s5ffiW4929Gk.crl (hash: afvkHrDjwWSyaJ2T6ImlF+OqzcQzANKxdLUhnxq2jDU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:8f:44:78:23:06:c9:b1:fd:c1:6a:52:1f:1c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=561c482db5ac70cd65f2ce6ce5f7e25b8f76f469
        Validity
            Not Before: May 17 16:02:41 2024 GMT
            Not After : May 18 16:02:41 2024 GMT
        Subject: CN=c2d70732ce7cb4605308bdea4eb7c063694c29d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ab:9c:cd:cf:ed:87:ea:77:47:47:dc:eb:fd:
                    14:93:59:85:08:c8:ab:a3:01:b1:42:85:cd:f6:35:
                    26:f4:20:e5:f4:0c:e2:f7:3d:59:2d:4d:bd:fb:6c:
                    85:57:4b:d9:36:8f:76:24:76:4f:34:b9:62:c7:83:
                    8c:d9:77:15:e6:4e:f9:55:97:8a:87:e3:40:cf:65:
                    42:58:83:92:6f:d1:bf:6a:e5:54:6e:a5:d0:b9:ae:
                    df:97:c3:60:57:18:96:38:0b:26:13:9b:b4:e9:ac:
                    56:98:05:0b:c1:38:d6:1e:43:49:a0:8b:24:52:2e:
                    d3:e7:9e:d2:f3:82:fe:82:09:22:11:50:c7:c7:88:
                    04:c1:bd:7c:16:88:86:ea:a2:7a:ad:0c:09:50:07:
                    85:cf:75:38:f5:d6:c8:61:10:0a:7d:48:72:e0:f2:
                    f6:f4:c5:a9:56:9d:55:03:53:a5:53:80:d3:b2:cc:
                    96:92:ce:d5:d4:58:fa:21:62:4f:ff:76:e8:e5:a0:
                    2e:a9:2a:8d:5e:6a:8d:02:87:c6:ee:76:e4:45:13:
                    76:9c:44:92:94:0d:80:4c:ef:71:7e:33:1c:ce:3d:
                    60:d0:07:3a:07:51:e1:82:45:9f:a1:20:9c:a0:fc:
                    5b:94:2b:1a:9a:58:69:88:6f:c8:72:e7:3d:97:60:
                    26:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D7:07:32:CE:7C:B4:60:53:08:BD:EA:4E:B7:C0:63:69:4C:29:D2
            X509v3 Authority Key Identifier:
                keyid:56:1C:48:2D:B5:AC:70:CD:65:F2:CE:6C:E5:F7:E2:5B:8F:76:F4:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ef:48:3b:0f:f2:60:18:a4:7f:c5:1b:51:cb:6e:42:b1:85:
         a2:4f:11:6f:0d:9f:dd:8f:14:a6:3a:39:9b:e9:a6:fd:20:ae:
         2e:e7:bf:d7:f3:af:cd:11:3c:83:d7:ca:1a:ef:bd:1b:cf:4b:
         92:56:0a:a8:e3:44:b8:77:bd:93:a5:46:5f:28:ad:2f:7f:c4:
         a7:8d:5d:35:bf:e3:40:db:3f:33:9b:54:cb:09:a9:69:e4:72:
         6c:ff:3b:f7:3f:96:be:b1:4d:c1:56:42:0f:da:3a:22:58:3c:
         de:7c:75:66:e3:dd:bd:ba:4a:c3:69:6f:6c:6b:e1:6d:c9:66:
         c0:75:fd:e4:93:d2:88:48:6b:42:d8:81:ba:89:a9:21:40:0e:
         6c:11:41:55:eb:22:45:22:34:1a:94:aa:6d:d2:cc:35:1d:78:
         23:21:8c:32:a4:be:0e:9e:e8:17:6a:ae:db:36:3b:83:51:31:
         1e:8a:af:f2:10:c6:f5:0f:f9:43:76:a3:16:30:87:78:c9:d4:
         a6:d9:a0:71:79:78:d1:96:58:29:70:3d:9b:b9:c4:78:bd:c5:
         44:0c:eb:67:35:50:e5:1b:ea:27:5b:f2:d2:3b:58:cc:22:02:
         8d:c6:43:ab:10:95:5f:c6:d2:86:bb:56:ce:c0:cb:52:4c:5b:
         08:fe:16:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSo9EeCMGybH9wWpSHxzrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2MWM0ODJkYjVhYzcwY2Q2NWYyY2U2Y2U1ZjdlMjViOGY3
NmY0NjkwHhcNMjQwNTE3MTYwMjQxWhcNMjQwNTE4MTYwMjQxWjAzMTEwLwYDVQQD
EyhjMmQ3MDczMmNlN2NiNDYwNTMwOGJkZWE0ZWI3YzA2MzY5NGMyOWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhquczc/th+p3R0fc6/0Uk1mFCMir
owGxQoXN9jUm9CDl9Azi9z1ZLU29+2yFV0vZNo92JHZPNLlix4OM2XcV5k75VZeK
h+NAz2VCWIOSb9G/auVUbqXQua7fl8NgVxiWOAsmE5u06axWmAULwTjWHkNJoIsk
Ui7T557S84L+ggkiEVDHx4gEwb18FoiG6qJ6rQwJUAeFz3U49dbIYRAKfUhy4PL2
9MWpVp1VA1OlU4DTssyWks7V1Fj6IWJP/3bo5aAuqSqNXmqNAofG7nbkRRN2nESS
lA2ATO9xfjMczj1g0Ac6B1HhgkWfoSCcoPxblCsamlhpiG/Icuc9l2AmzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLXBzLOfLRgUwi96k63wGNpTCnSMB8GA1UdIwQY
MBaAFFYcSC21rHDNZfLObOX34luPdvRpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmh4SUxiV3NjTTFsOHM1czVmZmlXNDkyOUdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lZGFmOTktNmY5NC00ZTJjLTg2NTQt
MGRmYjg0NzE4ZWRmLzEvVmh4SUxiV3NjTTFsOHM1czVmZmlXNDkyOUdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9lZGFmOTktNmY5NC00ZTJjLTg2NTQtMGRmYjg0NzE4ZWRm
LzEvVmh4SUxiV3NjTTFsOHM1czVmZmlXNDkyOUdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASu9IOw/y
YBikf8UbUctuQrGFok8Rbw2f3Y8Upjo5m+mm/SCuLue/1/OvzRE8g9fKGu+9G89L
klYKqONEuHe9k6VGXyitL3/Ep41dNb/jQNs/M5tUywmpaeRybP879z+WvrFNwVZC
D9o6Ilg83nx1ZuPdvbpKw2lvbGvhbclmwHX95JPSiEhrQtiBuompIUAObBFBVesi
RSI0GpSqbdLMNR14IyGMMqS+Dp7oF2qu2zY7g1ExHoqv8hDG9Q/5Q3ajFjCHeMnU
ptmgcXl40ZZYKXA9m7nEeL3FRAzrZzVQ5RvqJ1vy0jtYzCICjcZDqxCVX8bShrtW
zsDLUkxbCP4WOA==
-----END CERTIFICATE-----
Generated at Sat May 18 00:03:50 2024 by rpki-client on console-fra.rpki-client.org