Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/43f654-92ba-4d30-9ed0-2da1253ce993/1/4GY0WcQJMEey4XhSP1umP3X8TxY.mft
File:                     4GY0WcQJMEey4XhSP1umP3X8TxY.mft (raw, json)
Hash identifier:          69uYfbmwwyp0zkFsiyVu1t4zYQj9+OC4WzjvjwswhV8=
Subject key identifier:   18:35:41:76:B0:05:AE:D3:6E:F0:5D:2B:40:6E:B3:3F:9A:7E:C5:D6
Authority key identifier: E0:66:34:59:C4:09:30:47:B2:E1:78:52:3F:5B:A6:3F:75:FC:4F:16
Certificate issuer:       /CN=e0663459c4093047b2e178523f5ba63f75fc4f16
Certificate serial:       018F3BFA855DE4CFDEC393D29E20CC3DAC56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4GY0WcQJMEey4XhSP1umP3X8TxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/43f654-92ba-4d30-9ed0-2da1253ce993/1/4GY0WcQJMEey4XhSP1umP3X8TxY.mft
Manifest number:          03D6
Signing time:             Fri 03 May 2024 01:03:44 +0000
Manifest this update:     Fri 03 May 2024 01:03:44 +0000
Manifest next update:     Sat 04 May 2024 01:03:44 +0000
Files and hashes:         1: 4GY0WcQJMEey4XhSP1umP3X8TxY.crl (hash: /gGayLBHIxkOvVbdeNvesTYJLo03fkYtbvYYqhEt+dY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/43f654-92ba-4d30-9ed0-2da1253ce993/1/4GY0WcQJMEey4XhSP1umP3X8TxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/43f654-92ba-4d30-9ed0-2da1253ce993/1/4GY0WcQJMEey4XhSP1umP3X8TxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4GY0WcQJMEey4XhSP1umP3X8TxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:fa:85:5d:e4:cf:de:c3:93:d2:9e:20:cc:3d:ac:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0663459c4093047b2e178523f5ba63f75fc4f16
        Validity
            Not Before: May  3 01:03:44 2024 GMT
            Not After : May  4 01:03:44 2024 GMT
        Subject: CN=18354176b005aed36ef05d2b406eb33f9a7ec5d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:92:29:7b:64:c2:e7:b6:04:a7:68:bd:33:c7:
                    60:77:92:2f:95:03:8f:df:2c:34:b6:5a:6f:41:30:
                    26:6e:30:07:77:f6:6a:31:28:71:a0:d8:1b:4a:b2:
                    d3:e0:8a:14:b2:8f:b1:a4:66:ca:d2:e9:46:d7:73:
                    8e:51:ca:6c:f6:76:1d:bf:1a:3a:84:4b:78:5e:32:
                    af:fd:a6:b9:01:68:cf:34:f3:ca:a2:af:d6:45:50:
                    92:cd:0c:c4:cb:ae:b0:f1:56:ae:27:27:63:46:cf:
                    5c:3e:76:63:5b:ab:7d:5b:a0:37:6c:4e:3c:df:71:
                    ac:6a:2d:85:f2:14:1a:17:8a:a9:26:bb:c7:1a:40:
                    66:1e:04:c0:5e:9a:e5:e9:05:f1:04:3d:f5:ab:d7:
                    44:22:05:a1:8a:81:1c:57:e6:60:67:dd:97:58:3c:
                    91:97:93:2d:ee:1d:ae:d3:64:c2:8a:1d:3a:66:6f:
                    57:2e:e5:3e:4c:f7:af:ba:b3:31:0f:95:fc:fe:ca:
                    82:ac:9e:bd:2e:c1:d5:73:a1:eb:bb:69:32:16:74:
                    ad:f9:21:78:8b:61:f6:33:81:bb:92:e6:fe:22:c3:
                    6f:e1:b4:0a:cb:e3:6c:a4:86:f1:b1:be:2d:f0:92:
                    b0:d0:32:be:e0:f0:3f:c8:05:aa:e0:f9:0e:03:47:
                    ba:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:35:41:76:B0:05:AE:D3:6E:F0:5D:2B:40:6E:B3:3F:9A:7E:C5:D6
            X509v3 Authority Key Identifier:
                keyid:E0:66:34:59:C4:09:30:47:B2:E1:78:52:3F:5B:A6:3F:75:FC:4F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GY0WcQJMEey4XhSP1umP3X8TxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/43f654-92ba-4d30-9ed0-2da1253ce993/1/4GY0WcQJMEey4XhSP1umP3X8TxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/43f654-92ba-4d30-9ed0-2da1253ce993/1/4GY0WcQJMEey4XhSP1umP3X8TxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:5d:da:aa:d8:04:03:a3:77:95:bf:50:58:f1:14:2c:59:d4:
         3a:a5:19:8a:b0:2b:df:2c:9e:2a:31:3a:2d:25:2f:4b:0e:31:
         cb:15:30:7e:98:db:31:c0:1c:c0:d9:cc:fc:b2:c5:51:e4:fc:
         62:37:6c:c6:06:a8:b8:dc:68:f4:ae:31:68:0a:b7:e3:7c:97:
         95:b1:e3:fa:f7:27:c9:3c:d0:f4:4a:e2:ed:a1:1d:de:d4:17:
         e7:1a:fc:94:77:b4:d4:2e:56:28:c3:8c:72:13:a6:56:b1:a7:
         58:f7:57:76:df:2d:36:d2:56:b0:ce:a9:81:0f:13:3a:43:34:
         c3:bf:82:29:8a:ef:9a:80:53:26:f3:11:62:91:44:5e:aa:1c:
         34:29:b5:1f:55:6e:bb:e9:73:45:62:2f:cc:c8:e6:f4:c3:28:
         3b:4c:a3:c6:fc:45:6f:f1:17:50:35:07:d3:87:b5:e5:08:fa:
         94:64:55:e9:0a:48:c8:f3:11:85:19:0f:41:65:01:3f:56:82:
         b6:fc:9e:bf:97:eb:be:20:89:c1:f5:39:27:b7:b8:57:74:bc:
         b1:34:28:55:e0:ce:c3:c9:53:89:7e:05:29:66:49:b9:2a:cb:
         7a:9b:50:cd:f0:cf:5e:aa:36:a2:a7:e7:89:0c:96:92:97:1f:
         14:7c:9a:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY87+oVd5M/ew5PSniDMPaxWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjYzNDU5YzQwOTMwNDdiMmUxNzg1MjNmNWJhNjNmNzVm
YzRmMTYwHhcNMjQwNTAzMDEwMzQ0WhcNMjQwNTA0MDEwMzQ0WjAzMTEwLwYDVQQD
EygxODM1NDE3NmIwMDVhZWQzNmVmMDVkMmI0MDZlYjMzZjlhN2VjNWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJIpe2TC57YEp2i9M8dgd5IvlQOP
3yw0tlpvQTAmbjAHd/ZqMShxoNgbSrLT4IoUso+xpGbK0ulG13OOUcps9nYdvxo6
hEt4XjKv/aa5AWjPNPPKoq/WRVCSzQzEy66w8VauJydjRs9cPnZjW6t9W6A3bE48
33Gsai2F8hQaF4qpJrvHGkBmHgTAXprl6QXxBD31q9dEIgWhioEcV+ZgZ92XWDyR
l5Mt7h2u02TCih06Zm9XLuU+TPevurMxD5X8/sqCrJ69LsHVc6Hru2kyFnSt+SF4
i2H2M4G7kub+IsNv4bQKy+NspIbxsb4t8JKw0DK+4PA/yAWq4PkOA0e6WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBg1QXawBa7TbvBdK0Busz+afsXWMB8GA1UdIwQY
MBaAFOBmNFnECTBHsuF4Uj9bpj91/E8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdZMFdjUUpNRWV5NFhoU1AxdW1QM1g4VHhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi80M2Y2NTQtOTJiYS00ZDMwLTllZDAt
MmRhMTI1M2NlOTkzLzEvNEdZMFdjUUpNRWV5NFhoU1AxdW1QM1g4VHhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi80M2Y2NTQtOTJiYS00ZDMwLTllZDAtMmRhMTI1M2NlOTkz
LzEvNEdZMFdjUUpNRWV5NFhoU1AxdW1QM1g4VHhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmF3aqtgE
A6N3lb9QWPEULFnUOqUZirAr3yyeKjE6LSUvSw4xyxUwfpjbMcAcwNnM/LLFUeT8
YjdsxgaouNxo9K4xaAq343yXlbHj+vcnyTzQ9Eri7aEd3tQX5xr8lHe01C5WKMOM
chOmVrGnWPdXdt8tNtJWsM6pgQ8TOkM0w7+CKYrvmoBTJvMRYpFEXqocNCm1H1Vu
u+lzRWIvzMjm9MMoO0yjxvxFb/EXUDUH04e15Qj6lGRV6QpIyPMRhRkPQWUBP1aC
tvyev5frviCJwfU5J7e4V3S8sTQoVeDOw8lTiX4FKWZJuSrLeptQzfDPXqo2oqfn
iQyWkpcfFHya0g==
-----END CERTIFICATE-----
Generated at Fri May 3 07:44:43 2024 by rpki-client on console-fra.rpki-client.org