Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
File:                     Fwpcah2MIGUdVj4_ELujqD344L0.mft (raw, json)
Hash identifier:          ZZo7uXULsQQOZmz7SlbziQwqq2PeREh5R084VPPikDI=
Subject key identifier:   B4:3D:09:D4:65:1C:13:78:CA:95:C6:1F:47:C6:1E:F7:66:70:69:48
Authority key identifier: 17:0A:5C:6A:1D:8C:20:65:1D:56:3E:3F:10:BB:A3:A8:3D:F8:E0:BD
Certificate issuer:       /CN=170a5c6a1d8c20651d563e3f10bba3a83df8e0bd
Certificate serial:       01906D1B037104D1213D4057131B82889FA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
Manifest number:          11EA
Signing time:             Mon 01 Jul 2024 07:03:25 +0000
Manifest this update:     Mon 01 Jul 2024 07:03:25 +0000
Manifest next update:     Tue 02 Jul 2024 07:03:25 +0000
Files and hashes:         1: Fwpcah2MIGUdVj4_ELujqD344L0.crl (hash: SflnklsoK4T/2StAsKvypydCoXd8aobUWdkTyILqQLQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 07:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6d:1b:03:71:04:d1:21:3d:40:57:13:1b:82:88:9f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=170a5c6a1d8c20651d563e3f10bba3a83df8e0bd
        Validity
            Not Before: Jul  1 07:03:25 2024 GMT
            Not After : Jul  2 07:03:25 2024 GMT
        Subject: CN=b43d09d4651c1378ca95c61f47c61ef766706948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f0:9e:4f:b2:d1:99:d0:f8:00:34:0d:5e:43:
                    49:00:c6:67:9e:ee:f4:c4:cc:57:06:6c:d8:8c:18:
                    e6:c8:fc:e5:b4:aa:cb:39:28:cc:fc:1e:b2:6a:30:
                    1b:7c:47:ff:c0:84:43:3f:05:1b:41:c4:6d:a5:bb:
                    cb:03:21:2a:aa:f2:eb:4e:c7:2b:07:b0:ad:b6:2c:
                    92:d5:ac:8e:b9:83:7d:6c:81:c3:5a:76:56:33:26:
                    99:b2:4b:79:53:62:f2:be:43:e1:c3:12:c6:c6:59:
                    ac:9f:57:cd:e9:c4:24:32:6c:2a:b9:8c:24:dd:87:
                    e5:e0:6d:bb:81:a7:7f:e1:a4:41:4a:4d:3f:e0:0b:
                    45:b2:3b:a0:dd:2b:81:cd:c4:d1:d1:3e:64:38:e8:
                    2f:99:fc:b2:e8:51:4b:0e:d2:9f:47:75:bd:90:8a:
                    b8:d7:0a:9e:d0:91:03:0e:05:02:d4:39:33:76:ff:
                    fb:0a:44:93:bc:29:ec:c1:df:fe:d6:95:21:e4:e0:
                    0d:ba:65:90:91:aa:a8:2d:05:bc:b0:00:fc:cc:f2:
                    c8:85:7d:07:62:1c:cb:e9:37:ef:12:82:a5:51:12:
                    6d:8a:0a:e7:0b:4d:08:ff:8e:9c:4e:f1:71:5a:11:
                    22:1d:55:94:93:c8:39:4e:48:19:d9:6a:7f:28:6f:
                    08:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3D:09:D4:65:1C:13:78:CA:95:C6:1F:47:C6:1E:F7:66:70:69:48
            X509v3 Authority Key Identifier:
                keyid:17:0A:5C:6A:1D:8C:20:65:1D:56:3E:3F:10:BB:A3:A8:3D:F8:E0:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:95:a1:8d:36:63:50:5e:79:5f:29:88:6e:25:60:4a:65:f3:
         5c:2a:8f:94:32:30:71:bd:33:4e:ec:81:77:dc:d1:be:46:82:
         af:8b:d6:8b:fb:a8:ee:cb:49:a9:0b:92:51:d8:39:c7:9c:86:
         85:68:67:80:61:e4:a4:6c:14:0e:f6:eb:c6:a5:b3:b1:55:9a:
         54:92:47:2d:17:40:ab:e9:93:b8:d1:99:0a:27:1f:52:19:0a:
         6c:48:e7:7b:31:cd:1c:2d:32:0c:bf:24:22:b2:00:66:b2:99:
         2e:eb:e3:ea:95:0c:44:62:f7:18:18:04:62:ce:26:13:0a:a5:
         cc:3a:f1:53:92:bc:b6:ee:13:f0:c8:9a:83:22:b4:54:2e:2e:
         75:3b:69:53:6c:9a:c8:f2:4f:f6:94:04:ba:0e:cd:d8:36:75:
         ce:80:9e:9b:f7:f1:3f:7a:34:7b:dc:1f:1e:78:65:01:54:5a:
         e0:d8:2c:ec:99:44:02:93:aa:df:ce:12:e0:12:21:02:02:52:
         bb:3a:f2:f3:b0:7d:15:74:6e:55:70:29:f7:2b:2f:ec:24:b0:
         62:4d:03:c0:fa:66:e9:ec:81:ac:9e:6a:7d:89:ef:74:95:be:
         9a:54:c8:3e:d5:45:4f:f4:00:ca:33:ab:23:89:a4:47:67:6a:
         50:74:fb:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBtGwNxBNEhPUBXExuCiJ+pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MGE1YzZhMWQ4YzIwNjUxZDU2M2UzZjEwYmJhM2E4M2Rm
OGUwYmQwHhcNMjQwNzAxMDcwMzI1WhcNMjQwNzAyMDcwMzI1WjAzMTEwLwYDVQQD
EyhiNDNkMDlkNDY1MWMxMzc4Y2E5NWM2MWY0N2M2MWVmNzY2NzA2OTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PCeT7LRmdD4ADQNXkNJAMZnnu70
xMxXBmzYjBjmyPzltKrLOSjM/B6yajAbfEf/wIRDPwUbQcRtpbvLAyEqqvLrTscr
B7CttiyS1ayOuYN9bIHDWnZWMyaZskt5U2LyvkPhwxLGxlmsn1fN6cQkMmwquYwk
3Yfl4G27gad/4aRBSk0/4AtFsjug3SuBzcTR0T5kOOgvmfyy6FFLDtKfR3W9kIq4
1wqe0JEDDgUC1Dkzdv/7CkSTvCnswd/+1pUh5OANumWQkaqoLQW8sAD8zPLIhX0H
YhzL6TfvEoKlURJtigrnC00I/46cTvFxWhEiHVWUk8g5TkgZ2Wp/KG8I9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQ9CdRlHBN4ypXGH0fGHvdmcGlIMB8GA1UdIwQY
MBaAFBcKXGodjCBlHVY+PxC7o6g9+OC9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRndwY2FoMk1JR1VkVmo0X0VMdWpxRDM0NEwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84YjE0ZGEtODMxMS00MmIyLWE2NTEt
MDk2ZjZjZTllZDZjLzEvRndwY2FoMk1JR1VkVmo0X0VMdWpxRDM0NEwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84YjE0ZGEtODMxMS00MmIyLWE2NTEtMDk2ZjZjZTllZDZj
LzEvRndwY2FoMk1JR1VkVmo0X0VMdWpxRDM0NEwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfpWhjTZj
UF55XymIbiVgSmXzXCqPlDIwcb0zTuyBd9zRvkaCr4vWi/uo7stJqQuSUdg5x5yG
hWhngGHkpGwUDvbrxqWzsVWaVJJHLRdAq+mTuNGZCicfUhkKbEjnezHNHC0yDL8k
IrIAZrKZLuvj6pUMRGL3GBgEYs4mEwqlzDrxU5K8tu4T8MiagyK0VC4udTtpU2ya
yPJP9pQEug7N2DZ1zoCem/fxP3o0e9wfHnhlAVRa4Ngs7JlEApOq384S4BIhAgJS
uzry87B9FXRuVXAp9ysv7CSwYk0DwPpm6eyBrJ5qfYnvdJW+mlTIPtVFT/QAyjOr
I4mkR2dqUHT7xg==
-----END CERTIFICATE-----
Generated at Mon Jul 1 16:01:11 2024 by rpki-client on console-fra.rpki-client.org