Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/fc2941-b929-4d35-a33c-ec0c6c55b396/1/iJYJKGnErm7cu2IlXiBVC4WWzdw.mft
File:                     iJYJKGnErm7cu2IlXiBVC4WWzdw.mft (raw, json)
Hash identifier:          rR16UIeEpuucsX+8BpJfdwfwK9TrWXbT2oTDPGcJZZA=
Subject key identifier:   4E:03:D3:A3:26:43:01:B6:1D:8E:CE:CC:CF:BE:0C:6B:65:21:CC:5A
Authority key identifier: 88:96:09:28:69:C4:AE:6E:DC:BB:62:25:5E:20:55:0B:85:96:CD:DC
Certificate issuer:       /CN=8896092869c4ae6edcbb62255e20550b8596cddc
Certificate serial:       018F87B61FCB27559F199F95FADBAD93D861
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iJYJKGnErm7cu2IlXiBVC4WWzdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/fc2941-b929-4d35-a33c-ec0c6c55b396/1/iJYJKGnErm7cu2IlXiBVC4WWzdw.mft
Manifest number:          0481
Signing time:             Fri 17 May 2024 18:00:10 +0000
Manifest this update:     Fri 17 May 2024 18:00:10 +0000
Manifest next update:     Sat 18 May 2024 18:00:10 +0000
Files and hashes:         1: iJYJKGnErm7cu2IlXiBVC4WWzdw.crl (hash: 30odDQasQVMwq72g0otptSq5G/KsHJVkXgFIx3OhldM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/fc2941-b929-4d35-a33c-ec0c6c55b396/1/iJYJKGnErm7cu2IlXiBVC4WWzdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/fc2941-b929-4d35-a33c-ec0c6c55b396/1/iJYJKGnErm7cu2IlXiBVC4WWzdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iJYJKGnErm7cu2IlXiBVC4WWzdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:1f:cb:27:55:9f:19:9f:95:fa:db:ad:93:d8:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8896092869c4ae6edcbb62255e20550b8596cddc
        Validity
            Not Before: May 17 18:00:10 2024 GMT
            Not After : May 18 18:00:10 2024 GMT
        Subject: CN=4e03d3a3264301b61d8ececccfbe0c6b6521cc5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3b:74:a2:b2:a8:10:b8:d4:71:68:6f:e2:bd:
                    9a:af:02:d7:76:3d:f7:ba:37:8d:a5:46:71:87:1a:
                    ad:9e:12:cb:a1:b2:22:35:36:c9:6a:63:70:4e:50:
                    29:4c:f0:01:c5:e0:40:b5:3e:c6:0d:10:be:85:53:
                    15:83:66:17:87:42:ae:d9:a6:51:68:56:f7:b1:3c:
                    fc:23:78:e2:55:b3:38:e7:ae:c5:6a:89:20:93:0a:
                    98:cc:28:ac:66:28:e5:87:ff:eb:fc:4b:a8:a0:58:
                    14:3c:21:54:64:29:ef:aa:e0:a5:cf:b6:c7:9b:85:
                    b9:d7:29:63:6f:e8:f8:60:2e:07:58:ae:dd:b9:f4:
                    46:ec:18:93:1c:8e:91:b3:f0:2d:ee:9d:17:1a:45:
                    4f:74:6d:36:00:f2:9b:23:9c:77:10:41:f1:48:0d:
                    1e:41:46:62:28:3b:c6:9a:bd:c8:86:8e:d4:a7:4d:
                    85:e1:99:3e:24:ef:0c:f6:ef:db:f0:0d:26:9d:67:
                    a3:cf:b2:b3:d7:83:44:1c:cf:48:23:16:ec:d9:0f:
                    f0:2e:61:bf:38:33:15:0d:8a:e0:a3:d6:20:a4:23:
                    91:2c:2f:cb:58:dd:80:9c:66:1e:47:1a:88:a3:4a:
                    a8:04:30:2f:6d:72:53:90:e3:f8:87:9a:f5:7f:a7:
                    bd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:03:D3:A3:26:43:01:B6:1D:8E:CE:CC:CF:BE:0C:6B:65:21:CC:5A
            X509v3 Authority Key Identifier:
                keyid:88:96:09:28:69:C4:AE:6E:DC:BB:62:25:5E:20:55:0B:85:96:CD:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJYJKGnErm7cu2IlXiBVC4WWzdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/fc2941-b929-4d35-a33c-ec0c6c55b396/1/iJYJKGnErm7cu2IlXiBVC4WWzdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/fc2941-b929-4d35-a33c-ec0c6c55b396/1/iJYJKGnErm7cu2IlXiBVC4WWzdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:9d:37:f4:17:0b:ff:b2:ce:10:32:91:54:5f:c8:a2:5b:14:
         3e:6f:82:6b:12:e8:88:90:fd:ad:90:87:e6:c1:d9:ee:c0:87:
         61:2f:90:c9:2c:ed:67:a8:10:d2:c4:e8:37:3c:10:9d:a6:f3:
         3a:da:bb:36:8d:90:69:5d:00:20:f5:da:d6:03:aa:ef:4c:c5:
         b8:30:6a:d7:db:7d:5f:f5:d9:61:34:a1:f7:cd:c2:d1:a5:41:
         cb:20:e0:f4:35:be:2e:43:8c:0a:90:9b:7b:bc:ac:ca:73:1a:
         c9:91:17:7a:0b:73:e9:45:d0:5e:06:7c:9a:48:c9:ea:71:61:
         64:b1:20:5c:f0:1d:4b:2f:55:7e:28:92:e8:e2:76:58:45:b9:
         ae:92:a2:cb:51:34:b9:3b:d4:16:6e:f7:bb:22:e5:81:a7:26:
         11:94:63:05:12:32:cb:02:b7:40:04:25:f7:0d:77:e7:26:aa:
         f8:c6:26:a5:41:43:5f:f7:0a:57:77:c3:c7:b6:68:a9:b1:3f:
         f7:c8:06:ae:45:2d:54:8d:73:9c:80:77:3f:69:ce:d0:63:c5:
         58:73:ef:79:30:85:5e:43:60:7d:23:e1:57:39:8f:60:9b:e1:
         f9:a2:86:5e:30:db:f9:23:a9:1f:f6:3c:b5:87:c9:09:ac:8c:
         21:cd:35:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Hth/LJ1WfGZ+V+tutk9hhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4OTYwOTI4NjljNGFlNmVkY2JiNjIyNTVlMjA1NTBiODU5
NmNkZGMwHhcNMjQwNTE3MTgwMDEwWhcNMjQwNTE4MTgwMDEwWjAzMTEwLwYDVQQD
Eyg0ZTAzZDNhMzI2NDMwMWI2MWQ4ZWNlY2NjZmJlMGM2YjY1MjFjYzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTt0orKoELjUcWhv4r2arwLXdj33
ujeNpUZxhxqtnhLLobIiNTbJamNwTlApTPABxeBAtT7GDRC+hVMVg2YXh0Ku2aZR
aFb3sTz8I3jiVbM4567FaokgkwqYzCisZijlh//r/EuooFgUPCFUZCnvquClz7bH
m4W51yljb+j4YC4HWK7dufRG7BiTHI6Rs/At7p0XGkVPdG02APKbI5x3EEHxSA0e
QUZiKDvGmr3Iho7Up02F4Zk+JO8M9u/b8A0mnWejz7Kz14NEHM9IIxbs2Q/wLmG/
ODMVDYrgo9YgpCORLC/LWN2AnGYeRxqIo0qoBDAvbXJTkOP4h5r1f6e9vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4D06MmQwG2HY7OzM++DGtlIcxaMB8GA1UdIwQY
MBaAFIiWCShpxK5u3LtiJV4gVQuFls3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUpZSktHbkVybTdjdTJJbFhpQlZDNFdXemR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9mYzI5NDEtYjkyOS00ZDM1LWEzM2Mt
ZWMwYzZjNTViMzk2LzEvaUpZSktHbkVybTdjdTJJbFhpQlZDNFdXemR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9mYzI5NDEtYjkyOS00ZDM1LWEzM2MtZWMwYzZjNTViMzk2
LzEvaUpZSktHbkVybTdjdTJJbFhpQlZDNFdXemR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0J039BcL
/7LOEDKRVF/IolsUPm+CaxLoiJD9rZCH5sHZ7sCHYS+QySztZ6gQ0sToNzwQnabz
Otq7No2QaV0AIPXa1gOq70zFuDBq19t9X/XZYTSh983C0aVByyDg9DW+LkOMCpCb
e7ysynMayZEXegtz6UXQXgZ8mkjJ6nFhZLEgXPAdSy9VfiiS6OJ2WEW5rpKiy1E0
uTvUFm73uyLlgacmEZRjBRIyywK3QAQl9w135yaq+MYmpUFDX/cKV3fDx7ZoqbE/
98gGrkUtVI1znIB3P2nO0GPFWHPveTCFXkNgfSPhVzmPYJvh+aKGXjDb+SOpH/Y8
tYfJCayMIc014A==
-----END CERTIFICATE-----
Generated at Fri May 17 20:11:27 2024 by rpki-client on console-ams.rpki-client.org