Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
File:                     CPyq-NF90aZXlfcUsmfxvOIZOLk.mft (raw, json)
Hash identifier:          lJvteq++atOg14xWkJDb8CagB0OK2RVc0+QBTQKxACA=
Subject key identifier:   BA:B6:AC:F4:CE:1D:6A:CB:DA:47:79:41:2F:E2:7E:ED:14:6A:8B:6C
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Certificate issuer:       /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial:       018F4CB5582DE87C87C85EC545FABF27871C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
Manifest number:          0868
Signing time:             Mon 06 May 2024 07:01:43 +0000
Manifest this update:     Mon 06 May 2024 07:01:43 +0000
Manifest next update:     Tue 07 May 2024 07:01:43 +0000
Files and hashes:         1: CPyq-NF90aZXlfcUsmfxvOIZOLk.crl (hash: v3D6Tk7a+eTEOgJgiaml52Bpa8Jfg+IWVoq4/JxqVEY=)
                          2: n-hw2weD8_MjFy2w8rWcisk3XQ4.roa (hash: /Yo+6nIGI6a3nbWVKF/ZE25AAl/roO/LkDfMn98Een4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:b5:58:2d:e8:7c:87:c8:5e:c5:45:fa:bf:27:87:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
        Validity
            Not Before: May  6 07:01:43 2024 GMT
            Not After : May  7 07:01:43 2024 GMT
        Subject: CN=bab6acf4ce1d6acbda4779412fe27eed146a8b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:19:4f:6e:b8:6a:67:32:b7:c1:b9:1b:48:43:
                    12:61:80:4d:40:22:35:e8:0b:23:e8:48:eb:ed:c1:
                    da:88:62:bb:9d:df:52:49:95:bc:54:92:9a:ef:03:
                    55:cb:29:2f:bc:35:b7:16:d6:15:03:47:65:53:d7:
                    72:21:5d:c1:59:08:9f:55:a3:1e:11:14:0f:ea:74:
                    40:4e:72:52:c4:6f:6e:1e:d0:cf:6f:bf:2f:3a:1e:
                    79:cf:a2:fd:24:50:53:8f:3d:64:e5:f2:49:ab:3f:
                    bd:00:60:f6:71:e0:e5:e4:4b:12:cf:49:29:d7:70:
                    a4:1d:b1:d6:8f:ff:87:85:8e:c0:d5:90:93:93:fe:
                    66:9e:38:74:30:81:6c:c0:0f:a3:2a:75:e3:19:b1:
                    c0:28:e7:31:dc:1c:df:e8:a3:47:53:f9:ea:a0:38:
                    b2:c1:07:40:9f:ec:49:bf:bf:34:80:37:4b:84:1e:
                    69:99:08:26:85:a2:cb:e0:23:ca:91:9f:10:cb:11:
                    e3:2b:bd:79:99:75:88:1c:05:b1:ab:13:24:84:7a:
                    83:bc:9a:cd:4d:08:7b:ac:49:8b:4d:93:36:77:43:
                    4e:29:d9:e6:6d:b5:2f:af:5a:b7:ad:e4:bc:a1:b7:
                    78:58:1e:a9:50:05:9e:b5:30:25:8e:63:6d:b3:a9:
                    05:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B6:AC:F4:CE:1D:6A:CB:DA:47:79:41:2F:E2:7E:ED:14:6A:8B:6C
            X509v3 Authority Key Identifier:
                keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:c9:23:57:5a:68:f9:04:e4:a3:80:fd:dd:91:96:41:8d:52:
         19:f0:05:28:1c:b2:8c:4a:ec:23:9f:dd:7e:25:d3:a5:32:7e:
         02:e2:a9:d2:59:0d:ef:47:26:ed:ea:4a:b6:d9:30:b3:81:1f:
         b7:24:ea:27:72:f7:96:77:9a:7b:d7:6b:b9:39:bd:ae:5e:68:
         06:9c:8d:8b:c1:a8:5e:bb:8c:be:b4:fe:ee:d1:23:b7:7d:81:
         07:24:1d:bf:85:77:15:33:d4:9e:38:9d:cc:5b:f0:9c:2b:3e:
         54:98:3e:e0:96:0e:c7:02:1c:f3:fd:bd:48:97:b1:f1:df:28:
         c5:1b:eb:e1:b5:69:54:9a:36:8f:b8:79:0c:65:d3:3d:68:51:
         f0:83:7f:00:6d:37:80:71:89:fa:d7:00:68:13:0c:fd:be:d7:
         2d:81:d8:e9:50:4b:0a:05:a9:2f:2e:9d:41:06:74:82:d3:d3:
         11:ee:99:9a:36:73:67:1f:6f:45:0b:68:64:b1:0b:01:de:46:
         a7:f3:08:27:df:1e:a2:fb:4c:0f:47:99:fd:80:34:85:00:24:
         8a:1b:56:e2:47:06:2b:ad:ec:b8:6e:f3:98:0a:3c:17:e6:cd:
         79:56:ff:0f:37:ff:5f:a2:dc:7b:60:c2:d1:c1:2c:d3:e0:8e:
         ef:0b:08:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9MtVgt6HyHyF7FRfq/J4ccMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZmNhYWY4ZDE3ZGQxYTY1Nzk1ZjcxNGIyNjdmMWJjZTIx
OTM4YjkwHhcNMjQwNTA2MDcwMTQzWhcNMjQwNTA3MDcwMTQzWjAzMTEwLwYDVQQD
EyhiYWI2YWNmNGNlMWQ2YWNiZGE0Nzc5NDEyZmUyN2VlZDE0NmE4YjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RlPbrhqZzK3wbkbSEMSYYBNQCI1
6Asj6Ejr7cHaiGK7nd9SSZW8VJKa7wNVyykvvDW3FtYVA0dlU9dyIV3BWQifVaMe
ERQP6nRATnJSxG9uHtDPb78vOh55z6L9JFBTjz1k5fJJqz+9AGD2ceDl5EsSz0kp
13CkHbHWj/+HhY7A1ZCTk/5mnjh0MIFswA+jKnXjGbHAKOcx3Bzf6KNHU/nqoDiy
wQdAn+xJv780gDdLhB5pmQgmhaLL4CPKkZ8QyxHjK715mXWIHAWxqxMkhHqDvJrN
TQh7rEmLTZM2d0NOKdnmbbUvr1q3reS8obd4WB6pUAWetTAljmNts6kFHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLq2rPTOHWrL2kd5QS/ifu0UaotsMB8GA1UdIwQY
MBaAFAj8qvjRfdGmV5X3FLJn8bziGTi5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wNjgwYWUtMjJmOS00M2JlLTkwYTgt
NzdlZWVhZjcxZDA4LzEvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8wNjgwYWUtMjJmOS00M2JlLTkwYTgtNzdlZWVhZjcxZDA4
LzEvQ1B5cS1ORjkwYVpYbGZjVXNtZnh2T0laT0xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOskjV1po
+QTko4D93ZGWQY1SGfAFKByyjErsI5/dfiXTpTJ+AuKp0lkN70cm7epKttkws4Ef
tyTqJ3L3lneae9druTm9rl5oBpyNi8GoXruMvrT+7tEjt32BByQdv4V3FTPUnjid
zFvwnCs+VJg+4JYOxwIc8/29SJex8d8oxRvr4bVpVJo2j7h5DGXTPWhR8IN/AG03
gHGJ+tcAaBMM/b7XLYHY6VBLCgWpLy6dQQZ0gtPTEe6ZmjZzZx9vRQtoZLELAd5G
p/MIJ98eovtMD0eZ/YA0hQAkihtW4kcGK63suG7zmAo8F+bNeVb/Dzf/X6Lce2DC
0cEs0+CO7wsIPg==
-----END CERTIFICATE-----
Generated at Mon May 6 11:20:05 2024 by rpki-client on console-ams.rpki-client.org