Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
File:                     YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft (raw, json)
Hash identifier:          AD0F4gTHSuIaMMNp8tA0m0cnafhyP4IGdMZuj4MbVgM=
Subject key identifier:   83:92:E4:D4:F9:85:D8:E9:95:2B:94:9A:7D:91:0D:50:97:64:A1:75
Authority key identifier: 60:07:AA:24:BB:35:3A:4F:A4:0B:34:30:D1:C2:92:66:CF:AC:26:89
Certificate issuer:       /CN=6007aa24bb353a4fa40b3430d1c29266cfac2689
Certificate serial:       018F874922BD30822332AD18BEF8D9961AC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
Manifest number:          053D
Signing time:             Fri 17 May 2024 16:01:08 +0000
Manifest this update:     Fri 17 May 2024 16:01:08 +0000
Manifest next update:     Sat 18 May 2024 16:01:08 +0000
Files and hashes:         1: YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl (hash: UofB8LM+zguavfBbp6JmdvEat2xXx3dMpJ4huCL+qQo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:22:bd:30:82:23:32:ad:18:be:f8:d9:96:1a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6007aa24bb353a4fa40b3430d1c29266cfac2689
        Validity
            Not Before: May 17 16:01:08 2024 GMT
            Not After : May 18 16:01:08 2024 GMT
        Subject: CN=8392e4d4f985d8e9952b949a7d910d509764a175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a0:de:25:dd:11:3e:7a:21:90:83:f9:d8:68:
                    be:20:35:f5:19:7d:80:d5:5e:4e:08:45:61:f9:fc:
                    1f:36:eb:9f:d5:f3:70:f6:62:90:41:c5:6e:60:f9:
                    cd:dc:67:47:79:c8:b6:8f:1c:90:e2:5a:d8:a5:ab:
                    7f:74:46:b0:f6:8d:23:4a:40:5b:99:9f:30:4e:6d:
                    06:2c:bf:5d:be:14:ae:5e:8a:3b:0e:e4:23:cb:aa:
                    f4:cd:72:02:ed:e0:dc:7e:5e:83:ca:e8:68:41:9b:
                    10:a0:c5:a4:01:f6:9b:ec:57:32:15:d1:97:fc:70:
                    e0:47:14:60:1b:06:29:12:e4:63:21:c3:bb:83:1b:
                    4d:db:26:4e:3d:04:da:9c:31:55:27:7d:c0:04:52:
                    69:8c:5a:ee:41:10:83:d3:30:bb:66:19:d4:14:fd:
                    7d:f9:8e:59:50:b2:ba:e7:3c:47:3c:95:c7:68:eb:
                    fe:e1:ab:7c:74:cb:a6:18:80:4b:f5:ee:40:f1:bf:
                    5b:f3:78:27:32:6c:26:92:26:28:a5:22:26:8b:bb:
                    66:9b:bd:de:db:d8:18:30:5b:bb:3c:c5:18:68:36:
                    38:b1:74:88:2a:d3:d6:bb:9c:66:8a:3f:0c:83:2d:
                    87:1a:66:1c:94:aa:cb:0e:21:08:3f:b9:ac:87:7e:
                    70:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:92:E4:D4:F9:85:D8:E9:95:2B:94:9A:7D:91:0D:50:97:64:A1:75
            X509v3 Authority Key Identifier:
                keyid:60:07:AA:24:BB:35:3A:4F:A4:0B:34:30:D1:C2:92:66:CF:AC:26:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:43:2c:6c:b9:f9:9a:42:bd:cb:a4:04:55:17:2c:df:50:b7:
         a8:e7:bf:f4:24:1a:01:3a:5c:65:a2:ae:50:35:2a:6a:63:bb:
         96:a3:70:1b:e6:ab:af:1b:8f:a7:6a:98:ba:93:55:82:31:7e:
         8c:e1:88:c7:36:ea:35:c9:57:ad:db:ee:bf:28:65:6f:5d:56:
         f0:54:df:a9:42:6a:f3:5f:e5:63:cd:7d:6d:dc:00:6c:c3:1e:
         d1:ed:d7:96:0f:a1:86:b6:ee:ba:d5:2f:f1:fc:26:7d:7a:8f:
         de:c7:01:b8:44:4f:a3:3a:30:25:81:51:29:a4:0a:09:37:3a:
         34:3b:bd:50:e3:2d:d6:64:57:bb:3a:5d:03:bb:c8:9f:0d:a4:
         24:3f:11:5a:0a:4a:c9:ad:43:c4:0d:e5:89:0d:88:df:ca:74:
         c0:46:2c:ee:a7:e6:0b:10:44:f4:2e:58:b1:1c:95:8f:7d:54:
         17:5c:c0:7b:82:2d:ee:8b:b0:5d:e6:65:da:db:8d:ec:d3:32:
         80:54:61:7a:04:f1:40:fd:0e:25:53:ee:7c:1d:24:ed:7f:6f:
         d7:3b:93:4f:2b:14:81:54:8e:1b:39:cd:57:2f:34:6d:77:a9:
         34:9f:00:9f:27:bf:52:34:1b:a9:b2:fd:0f:15:59:0e:84:56:
         9f:4f:6b:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSSK9MIIjMq0YvvjZlhrJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMDdhYTI0YmIzNTNhNGZhNDBiMzQzMGQxYzI5MjY2Y2Zh
YzI2ODkwHhcNMjQwNTE3MTYwMTA4WhcNMjQwNTE4MTYwMTA4WjAzMTEwLwYDVQQD
Eyg4MzkyZTRkNGY5ODVkOGU5OTUyYjk0OWE3ZDkxMGQ1MDk3NjRhMTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqDeJd0RPnohkIP52Gi+IDX1GX2A
1V5OCEVh+fwfNuuf1fNw9mKQQcVuYPnN3GdHeci2jxyQ4lrYpat/dEaw9o0jSkBb
mZ8wTm0GLL9dvhSuXoo7DuQjy6r0zXIC7eDcfl6DyuhoQZsQoMWkAfab7FcyFdGX
/HDgRxRgGwYpEuRjIcO7gxtN2yZOPQTanDFVJ33ABFJpjFruQRCD0zC7ZhnUFP19
+Y5ZULK65zxHPJXHaOv+4at8dMumGIBL9e5A8b9b83gnMmwmkiYopSImi7tmm73e
29gYMFu7PMUYaDY4sXSIKtPWu5xmij8Mgy2HGmYclKrLDiEIP7msh35wlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOS5NT5hdjplSuUmn2RDVCXZKF1MB8GA1UdIwQY
MBaAFGAHqiS7NTpPpAs0MNHCkmbPrCaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUFlcUpMczFPay1rQ3pRdzBjS1Nacy1zSm9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iOGU4NjMtZjJiNy00ZTg0LTgzNGIt
NWI0NTBlNDU0NTIzLzEvWUFlcUpMczFPay1rQ3pRdzBjS1Nacy1zSm9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iOGU4NjMtZjJiNy00ZTg0LTgzNGItNWI0NTBlNDU0NTIz
LzEvWUFlcUpMczFPay1rQ3pRdzBjS1Nacy1zSm9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApkMsbLn5
mkK9y6QEVRcs31C3qOe/9CQaATpcZaKuUDUqamO7lqNwG+arrxuPp2qYupNVgjF+
jOGIxzbqNclXrdvuvyhlb11W8FTfqUJq81/lY819bdwAbMMe0e3Xlg+hhrbuutUv
8fwmfXqP3scBuERPozowJYFRKaQKCTc6NDu9UOMt1mRXuzpdA7vInw2kJD8RWgpK
ya1DxA3liQ2I38p0wEYs7qfmCxBE9C5YsRyVj31UF1zAe4It7ouwXeZl2tuN7NMy
gFRhegTxQP0OJVPufB0k7X9v1zuTTysUgVSOGznNVy80bXepNJ8Anye/UjQbqbL9
DxVZDoRWn09rHg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:23:18 2024 by rpki-client on console-ams.rpki-client.org