Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
File:                     DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft (raw, json)
Hash identifier:          zxbbtIBzGCzTyKM38gFtNpaGujQiTeksegxSIUjDBmk=
Subject key identifier:   64:92:7D:44:33:98:60:3A:CA:4B:B3:70:48:67:F6:F4:4F:42:97:C8
Authority key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
Certificate issuer:       /CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Certificate serial:       018F343F294271BB5FD696F5B3CF1C9597C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
Manifest number:          114A
Signing time:             Wed 01 May 2024 13:01:45 +0000
Manifest this update:     Wed 01 May 2024 13:01:45 +0000
Manifest next update:     Thu 02 May 2024 13:01:45 +0000
Files and hashes:         1: DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl (hash: vO163IsNhI1PPM9JPe6J7pGxeIQloKtjE2jFZMCQq1w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 13:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:34:3f:29:42:71:bb:5f:d6:96:f5:b3:cf:1c:95:97:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
        Validity
            Not Before: May  1 13:01:45 2024 GMT
            Not After : May  2 13:01:45 2024 GMT
        Subject: CN=64927d443398603aca4bb3704867f6f44f4297c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:0d:f1:22:db:74:69:2c:9e:68:bb:b0:00:de:
                    50:de:8b:13:72:e1:33:19:10:66:0e:7e:66:c2:b8:
                    bc:58:5c:e6:8f:6f:7d:d9:63:f6:56:38:8b:92:a5:
                    91:b9:5c:08:13:a3:81:d5:20:d8:1b:26:22:bf:8f:
                    26:4f:08:33:4a:d9:92:da:85:7d:cd:75:7a:7c:17:
                    30:72:1f:60:02:25:f2:5e:0f:9a:6d:6b:84:e1:df:
                    7e:05:2e:71:42:31:5a:98:1b:32:f4:1e:46:83:0e:
                    ad:d3:47:c9:8b:2d:53:0e:f4:0f:ec:f0:09:4a:f7:
                    c9:0d:0a:20:d0:24:77:9d:09:31:f5:00:06:d3:3e:
                    41:16:ed:79:13:e2:93:b4:b9:e5:56:86:b9:98:13:
                    01:7e:f9:37:bc:29:7f:73:d6:fc:13:04:28:2a:28:
                    83:34:0b:bb:53:21:c5:c4:fd:00:ba:be:36:34:00:
                    1f:77:eb:69:06:d7:53:ce:be:ed:2a:9d:93:e9:23:
                    a8:dc:a2:fe:db:33:ab:f8:22:be:f0:80:b6:cd:c6:
                    08:b4:80:1d:8f:7a:a6:20:83:86:bb:9b:0e:9e:48:
                    04:cd:d4:0f:ce:79:26:69:98:2d:24:0f:3e:a8:0d:
                    47:80:53:f2:59:91:16:6f:f0:89:18:f3:1a:e2:16:
                    28:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:92:7D:44:33:98:60:3A:CA:4B:B3:70:48:67:F6:F4:4F:42:97:C8
            X509v3 Authority Key Identifier:
                keyid:0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:96:c7:c3:36:15:67:22:a6:b2:3d:0e:58:53:e5:f8:f7:29:
         be:25:2d:53:35:5e:f7:63:08:45:30:f0:14:ad:b6:46:83:6c:
         e9:1d:e1:ef:16:b5:52:a3:da:93:1b:e5:04:a7:78:62:8c:3e:
         55:43:0c:28:57:84:83:9a:6e:89:40:15:3c:25:64:59:d2:30:
         53:ed:d6:03:61:20:d2:60:f5:f4:03:43:f9:15:d9:f6:5d:61:
         4d:b8:23:fa:74:06:b2:f1:f4:c0:28:1b:55:42:48:51:82:8d:
         7f:0a:73:b1:52:8b:70:4d:38:4b:7c:6d:88:6e:8b:bb:30:71:
         07:3c:76:38:b1:a1:d2:39:27:48:c9:38:d4:1a:ce:d2:c2:76:
         37:81:fa:22:eb:6f:d3:3b:15:5e:e2:4c:2c:63:83:67:57:96:
         61:7d:30:ed:82:ee:86:e3:e2:c6:12:1c:b1:34:a1:92:fc:70:
         ac:68:bb:dd:4e:c3:fa:c6:2c:86:63:91:a6:e0:29:c9:68:08:
         d4:60:2a:ad:e6:6e:df:7d:0c:cd:71:32:75:82:06:37:f8:fa:
         ba:75:ad:95:2f:c6:f7:c3:34:b3:e9:2e:d8:c1:48:f8:7b:6e:
         89:45:ab:f4:5d:5b:40:aa:11:b2:c8:8b:76:c9:2b:68:a0:1b:
         a5:2b:e2:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY80PylCcbtf1pb1s88clZfHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYjQ5MTIyZDllOWJiYWZhNTc3ZjY0NDdmMjFiOGJlYzc2
YzA1ZjAwHhcNMjQwNTAxMTMwMTQ1WhcNMjQwNTAyMTMwMTQ1WjAzMTEwLwYDVQQD
Eyg2NDkyN2Q0NDMzOTg2MDNhY2E0YmIzNzA0ODY3ZjZmNDRmNDI5N2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8A3xItt0aSyeaLuwAN5Q3osTcuEz
GRBmDn5mwri8WFzmj2992WP2VjiLkqWRuVwIE6OB1SDYGyYiv48mTwgzStmS2oV9
zXV6fBcwch9gAiXyXg+abWuE4d9+BS5xQjFamBsy9B5Ggw6t00fJiy1TDvQP7PAJ
SvfJDQog0CR3nQkx9QAG0z5BFu15E+KTtLnlVoa5mBMBfvk3vCl/c9b8EwQoKiiD
NAu7UyHFxP0Aur42NAAfd+tpBtdTzr7tKp2T6SOo3KL+2zOr+CK+8IC2zcYItIAd
j3qmIIOGu5sOnkgEzdQPznkmaZgtJA8+qA1HgFPyWZEWb/CJGPMa4hYo/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSSfUQzmGA6ykuzcEhn9vRPQpfIMB8GA1UdIwQY
MBaAFA20kSLZ6buvpXf2RH8huL7HbAXwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC81ZGU3ZmItOTQ4OC00ZTg0LTgzY2Et
MTQ2MDBkNTc4MDhhLzEvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC81ZGU3ZmItOTQ4OC00ZTg0LTgzY2EtMTQ2MDBkNTc4MDhh
LzEvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxpbHwzYV
ZyKmsj0OWFPl+PcpviUtUzVe92MIRTDwFK22RoNs6R3h7xa1UqPakxvlBKd4Yow+
VUMMKFeEg5puiUAVPCVkWdIwU+3WA2Eg0mD19AND+RXZ9l1hTbgj+nQGsvH0wCgb
VUJIUYKNfwpzsVKLcE04S3xtiG6LuzBxBzx2OLGh0jknSMk41BrO0sJ2N4H6Iutv
0zsVXuJMLGODZ1eWYX0w7YLuhuPixhIcsTShkvxwrGi73U7D+sYshmORpuApyWgI
1GAqreZu330MzXEydYIGN/j6unWtlS/G98M0s+ku2MFI+HtuiUWr9F1bQKoRssiL
dskraKAbpSvi4g==
-----END CERTIFICATE-----
Generated at Wed May 1 23:40:16 2024 by rpki-client on console-fra.rpki-client.org