Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/efa562-cd19-41af-bca4-6a988d5efeb2/1/CywQwJLMBxcVDfmG1eLE2Wo4oD0.mft
File:                     CywQwJLMBxcVDfmG1eLE2Wo4oD0.mft (raw, json)
Hash identifier:          pvLaHYgCFaraQCEOASekI0oXQfeF0gYXTJvIqYtPYjg=
Subject key identifier:   EF:39:43:38:86:66:B6:23:04:BD:77:51:29:56:4A:8A:18:14:1B:99
Authority key identifier: 0B:2C:10:C0:92:CC:07:17:15:0D:F9:86:D5:E2:C4:D9:6A:38:A0:3D
Certificate issuer:       /CN=0b2c10c092cc0717150df986d5e2c4d96a38a03d
Certificate serial:       018F87ED8A97AFAC3AC7CF53966615AE675D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CywQwJLMBxcVDfmG1eLE2Wo4oD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/efa562-cd19-41af-bca4-6a988d5efeb2/1/CywQwJLMBxcVDfmG1eLE2Wo4oD0.mft
Manifest number:          035B
Signing time:             Fri 17 May 2024 19:00:42 +0000
Manifest this update:     Fri 17 May 2024 19:00:42 +0000
Manifest next update:     Sat 18 May 2024 19:00:42 +0000
Files and hashes:         1: CywQwJLMBxcVDfmG1eLE2Wo4oD0.crl (hash: iobCZHiQGDKFpX4CsCpsLk8gAtytil3nTAjNFtSUpxw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/efa562-cd19-41af-bca4-6a988d5efeb2/1/CywQwJLMBxcVDfmG1eLE2Wo4oD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/efa562-cd19-41af-bca4-6a988d5efeb2/1/CywQwJLMBxcVDfmG1eLE2Wo4oD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CywQwJLMBxcVDfmG1eLE2Wo4oD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:8a:97:af:ac:3a:c7:cf:53:96:66:15:ae:67:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b2c10c092cc0717150df986d5e2c4d96a38a03d
        Validity
            Not Before: May 17 19:00:42 2024 GMT
            Not After : May 18 19:00:42 2024 GMT
        Subject: CN=ef3943388666b62304bd775129564a8a18141b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a5:a4:8a:53:cb:53:44:c3:6d:25:1c:71:95:
                    29:12:3e:a9:fc:a4:48:cb:d3:17:46:c0:a2:9c:81:
                    be:0f:81:9b:d6:3a:86:9b:bf:3f:35:8b:8d:fe:ef:
                    47:29:2b:26:d1:a2:13:16:0d:34:b7:5b:68:cc:51:
                    06:ec:33:52:35:77:07:53:5d:87:97:91:5b:79:08:
                    e1:c0:bc:f3:92:c5:7c:c8:67:72:1a:e0:01:4e:7a:
                    d5:5d:e7:02:e8:cc:36:13:5b:25:ec:6c:70:91:d5:
                    82:da:16:c9:66:b1:bd:ad:ee:b1:40:8b:61:76:91:
                    3f:53:5e:29:2f:bb:cd:10:9f:6e:d0:10:09:94:48:
                    94:60:1b:98:5a:e4:6b:1b:c1:8e:10:af:75:6a:43:
                    df:3f:33:7d:30:2e:e4:2a:ab:66:d9:d5:8b:d0:31:
                    9a:57:cd:66:cd:b3:68:b8:e9:a2:c3:1e:45:ca:74:
                    d0:bb:13:03:da:17:3e:a1:4c:01:72:a9:c6:34:23:
                    d4:5f:7b:cd:6a:50:c1:7e:88:95:77:74:97:32:73:
                    ba:76:0c:63:8f:55:9b:61:0c:39:6b:8c:a8:e8:94:
                    5b:2d:6e:42:9a:fe:48:96:35:c7:89:91:0d:0b:1b:
                    03:94:a2:84:77:d9:5d:f7:e2:cd:6a:b9:a2:a9:d1:
                    8a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:39:43:38:86:66:B6:23:04:BD:77:51:29:56:4A:8A:18:14:1B:99
            X509v3 Authority Key Identifier:
                keyid:0B:2C:10:C0:92:CC:07:17:15:0D:F9:86:D5:E2:C4:D9:6A:38:A0:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CywQwJLMBxcVDfmG1eLE2Wo4oD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/efa562-cd19-41af-bca4-6a988d5efeb2/1/CywQwJLMBxcVDfmG1eLE2Wo4oD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/efa562-cd19-41af-bca4-6a988d5efeb2/1/CywQwJLMBxcVDfmG1eLE2Wo4oD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:09:08:73:98:40:1d:a3:05:b4:dc:72:04:af:67:4e:26:64:
         8c:a0:10:07:32:7a:80:1a:64:40:91:a9:ad:d1:20:03:80:7a:
         62:9e:bd:b9:31:f3:14:98:cd:c0:2d:05:5d:dc:80:52:f8:5c:
         73:7f:52:9a:2a:b8:6e:55:58:25:d3:ba:ff:41:46:22:a3:96:
         df:99:78:f6:f7:18:ae:b1:74:b9:e0:00:60:75:e2:6c:25:49:
         b8:01:8d:54:ef:58:a4:4f:d3:94:d9:8c:9f:17:1d:2f:3c:26:
         ae:9f:5d:c6:c8:45:9a:c6:7f:f7:fe:01:bc:3c:35:f0:d5:7a:
         16:58:c3:62:39:a7:e8:d4:54:63:e7:33:13:21:30:7d:10:39:
         74:42:95:74:bc:90:43:ef:f2:c7:0f:c5:4b:8c:df:bb:c6:c4:
         94:af:ff:03:06:9b:5f:18:84:89:32:2a:23:00:b7:26:71:ef:
         05:ec:09:8f:ad:f2:6e:95:c1:78:87:9b:1d:2e:03:5b:b9:cc:
         c9:31:01:b5:96:fd:4b:2c:0b:4d:51:1e:24:32:55:48:87:62:
         15:4a:42:53:8a:81:3b:da:09:a2:2e:be:81:83:5b:58:81:97:
         7a:61:0e:86:fb:3a:34:6f:d0:47:fe:8b:b5:b4:01:3b:e2:a8:
         14:fc:07:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7YqXr6w6x89TlmYVrmddMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMmMxMGMwOTJjYzA3MTcxNTBkZjk4NmQ1ZTJjNGQ5NmEz
OGEwM2QwHhcNMjQwNTE3MTkwMDQyWhcNMjQwNTE4MTkwMDQyWjAzMTEwLwYDVQQD
EyhlZjM5NDMzODg2NjZiNjIzMDRiZDc3NTEyOTU2NGE4YTE4MTQxYjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46WkilPLU0TDbSUccZUpEj6p/KRI
y9MXRsCinIG+D4Gb1jqGm78/NYuN/u9HKSsm0aITFg00t1tozFEG7DNSNXcHU12H
l5FbeQjhwLzzksV8yGdyGuABTnrVXecC6Mw2E1sl7GxwkdWC2hbJZrG9re6xQIth
dpE/U14pL7vNEJ9u0BAJlEiUYBuYWuRrG8GOEK91akPfPzN9MC7kKqtm2dWL0DGa
V81mzbNouOmiwx5FynTQuxMD2hc+oUwBcqnGNCPUX3vNalDBfoiVd3SXMnO6dgxj
j1WbYQw5a4yo6JRbLW5Cmv5IljXHiZENCxsDlKKEd9ld9+LNarmiqdGKswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO85QziGZrYjBL13USlWSooYFBuZMB8GA1UdIwQY
MBaAFAssEMCSzAcXFQ35htXixNlqOKA9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3l3UXdKTE1CeGNWRGZtRzFlTEUyV280b0QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lZmE1NjItY2QxOS00MWFmLWJjYTQt
NmE5ODhkNWVmZWIyLzEvQ3l3UXdKTE1CeGNWRGZtRzFlTEUyV280b0QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9lZmE1NjItY2QxOS00MWFmLWJjYTQtNmE5ODhkNWVmZWIy
LzEvQ3l3UXdKTE1CeGNWRGZtRzFlTEUyV280b0QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewkIc5hA
HaMFtNxyBK9nTiZkjKAQBzJ6gBpkQJGprdEgA4B6Yp69uTHzFJjNwC0FXdyAUvhc
c39Smiq4blVYJdO6/0FGIqOW35l49vcYrrF0ueAAYHXibCVJuAGNVO9YpE/TlNmM
nxcdLzwmrp9dxshFmsZ/9/4BvDw18NV6FljDYjmn6NRUY+czEyEwfRA5dEKVdLyQ
Q+/yxw/FS4zfu8bElK//AwabXxiEiTIqIwC3JnHvBewJj63ybpXBeIebHS4DW7nM
yTEBtZb9SywLTVEeJDJVSIdiFUpCU4qBO9oJoi6+gYNbWIGXemEOhvs6NG/QR/6L
tbQBO+KoFPwHpw==
-----END CERTIFICATE-----
Generated at Fri May 17 20:11:31 2024 by rpki-client on console-ams.rpki-client.org