Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/913c3e-1b69-4629-aed5-dc1e34e8da03/1/7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.mft
File:                     7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.mft (raw, json)
Hash identifier:          M5tCBPh2+gUhIbXJIGPGjOW7DwnFt1MzYueh4yu1M0I=
Subject key identifier:   03:E4:F1:5C:D3:40:3F:31:92:F8:FE:48:F6:54:5A:BD:5C:41:54:3E
Authority key identifier: ED:FE:09:C9:CE:50:43:66:64:54:11:55:AC:FE:6D:5A:03:98:65:BA
Certificate issuer:       /CN=edfe09c9ce50436664541155acfe6d5a039865ba
Certificate serial:       018F3B53CBD8A682BAA47F3DB70385AF7346
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/913c3e-1b69-4629-aed5-dc1e34e8da03/1/7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.mft
Manifest number:          05C1
Signing time:             Thu 02 May 2024 22:01:38 +0000
Manifest this update:     Thu 02 May 2024 22:01:38 +0000
Manifest next update:     Fri 03 May 2024 22:01:38 +0000
Files and hashes:         1: 7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.crl (hash: /ouAXUUiEzr/GEWX8Vp2YVBEwd/zGtEjDSWVrT2rLkM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/913c3e-1b69-4629-aed5-dc1e34e8da03/1/7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/913c3e-1b69-4629-aed5-dc1e34e8da03/1/7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:53:cb:d8:a6:82:ba:a4:7f:3d:b7:03:85:af:73:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edfe09c9ce50436664541155acfe6d5a039865ba
        Validity
            Not Before: May  2 22:01:38 2024 GMT
            Not After : May  3 22:01:38 2024 GMT
        Subject: CN=03e4f15cd3403f3192f8fe48f6545abd5c41543e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8d:35:1d:59:46:44:a1:81:9b:b2:39:5c:a1:
                    e0:36:a0:84:ea:8c:5f:59:cc:fd:94:da:fb:02:8a:
                    db:90:72:58:2d:14:fb:aa:67:43:1f:37:c9:d2:64:
                    30:2e:fc:d2:c3:8f:f2:f9:1f:9c:71:aa:93:0e:57:
                    43:b0:b8:7b:87:5a:01:d0:51:15:38:fa:ba:2b:f5:
                    43:a0:d9:0d:a8:6d:87:05:a0:d2:8b:41:53:a8:49:
                    75:21:1a:d3:20:b7:d7:cc:9a:09:d9:2d:b3:ae:71:
                    ca:44:b0:2f:18:ae:9b:dd:f9:81:4a:b7:9a:73:0b:
                    e5:b4:59:0e:f4:cf:ed:7b:3d:64:0d:cc:ae:ce:0c:
                    7c:21:26:e1:c8:ee:97:a6:42:c1:00:7f:0e:a9:d4:
                    03:b6:d7:b6:1b:23:e2:0b:da:5a:eb:c3:7a:91:1c:
                    78:ca:17:09:e9:2e:e1:a4:63:77:34:ac:d0:78:df:
                    a4:e4:88:a8:ea:d1:18:f7:35:f3:71:a4:b9:72:a8:
                    5f:3c:69:37:88:07:9a:67:c8:ad:d1:43:53:af:2a:
                    0a:22:e4:07:fe:07:16:40:00:7b:e1:86:b3:7a:5b:
                    20:0e:50:45:ae:71:ea:95:01:f1:5e:5f:81:cc:a1:
                    6f:fc:01:c3:2c:87:42:cc:9c:13:86:91:74:8b:bb:
                    db:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E4:F1:5C:D3:40:3F:31:92:F8:FE:48:F6:54:5A:BD:5C:41:54:3E
            X509v3 Authority Key Identifier:
                keyid:ED:FE:09:C9:CE:50:43:66:64:54:11:55:AC:FE:6D:5A:03:98:65:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/913c3e-1b69-4629-aed5-dc1e34e8da03/1/7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/913c3e-1b69-4629-aed5-dc1e34e8da03/1/7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:d1:9d:9a:9f:71:55:3a:fa:24:1e:cc:1e:36:5a:fc:f7:f2:
         86:99:8d:ae:76:d0:85:05:3d:12:a0:37:ac:b4:5d:f4:bc:f7:
         f6:57:f0:fa:f6:e5:86:11:f0:a8:be:ca:a8:22:6c:00:e4:e6:
         74:84:f7:e8:72:9f:90:e5:9c:cf:06:c6:bc:88:0e:c7:21:3f:
         06:ca:1d:63:73:16:2f:08:37:08:97:76:c1:c8:fc:97:36:14:
         05:b6:df:99:82:4a:6f:8b:e4:bf:5f:c3:5b:d3:ca:89:48:41:
         64:97:aa:ee:e6:00:b4:77:19:c6:b1:b9:a9:da:47:9e:91:c1:
         86:1a:32:f1:2f:a9:7f:7a:e0:a3:e6:86:64:cc:af:c4:71:a3:
         33:d0:7d:60:fa:99:f2:ce:83:92:05:54:81:2e:e7:84:ee:05:
         71:6c:b7:30:f5:ce:c5:2d:f5:41:34:c7:ca:b0:0b:5c:8d:c2:
         35:74:9f:0b:2b:bd:c0:37:ec:45:bf:1a:49:46:e7:f5:9f:9b:
         8f:15:4b:f9:4f:24:67:7e:47:2a:51:bd:04:5a:8f:de:25:ba:
         72:cb:fe:c4:eb:bd:89:be:4e:f0:da:ae:c0:38:89:a2:79:8b:
         56:21:f0:0e:fa:47:63:13:b4:52:46:7c:c5:82:b1:0e:e7:f6:
         31:03:87:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY87U8vYpoK6pH89twOFr3NGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZmUwOWM5Y2U1MDQzNjY2NDU0MTE1NWFjZmU2ZDVhMDM5
ODY1YmEwHhcNMjQwNTAyMjIwMTM4WhcNMjQwNTAzMjIwMTM4WjAzMTEwLwYDVQQD
EygwM2U0ZjE1Y2QzNDAzZjMxOTJmOGZlNDhmNjU0NWFiZDVjNDE1NDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY01HVlGRKGBm7I5XKHgNqCE6oxf
Wcz9lNr7AorbkHJYLRT7qmdDHzfJ0mQwLvzSw4/y+R+ccaqTDldDsLh7h1oB0FEV
OPq6K/VDoNkNqG2HBaDSi0FTqEl1IRrTILfXzJoJ2S2zrnHKRLAvGK6b3fmBSrea
cwvltFkO9M/tez1kDcyuzgx8ISbhyO6XpkLBAH8OqdQDtte2GyPiC9pa68N6kRx4
yhcJ6S7hpGN3NKzQeN+k5Iio6tEY9zXzcaS5cqhfPGk3iAeaZ8it0UNTryoKIuQH
/gcWQAB74YazelsgDlBFrnHqlQHxXl+BzKFv/AHDLIdCzJwThpF0i7vbywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPk8VzTQD8xkvj+SPZUWr1cQVQ+MB8GA1UdIwQY
MBaAFO3+CcnOUENmZFQRVaz+bVoDmGW6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2Y0SnljNVFRMlprVkJGVnJQNXRXZ09ZWmJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85MTNjM2UtMWI2OS00NjI5LWFlZDUt
ZGMxZTM0ZThkYTAzLzEvN2Y0SnljNVFRMlprVkJGVnJQNXRXZ09ZWmJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85MTNjM2UtMWI2OS00NjI5LWFlZDUtZGMxZTM0ZThkYTAz
LzEvN2Y0SnljNVFRMlprVkJGVnJQNXRXZ09ZWmJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9Gdmp9x
VTr6JB7MHjZa/PfyhpmNrnbQhQU9EqA3rLRd9Lz39lfw+vblhhHwqL7KqCJsAOTm
dIT36HKfkOWczwbGvIgOxyE/BsodY3MWLwg3CJd2wcj8lzYUBbbfmYJKb4vkv1/D
W9PKiUhBZJeq7uYAtHcZxrG5qdpHnpHBhhoy8S+pf3rgo+aGZMyvxHGjM9B9YPqZ
8s6DkgVUgS7nhO4FcWy3MPXOxS31QTTHyrALXI3CNXSfCyu9wDfsRb8aSUbn9Z+b
jxVL+U8kZ35HKlG9BFqP3iW6csv+xOu9ib5O8NquwDiJonmLViHwDvpHYxO0UkZ8
xYKxDuf2MQOHtw==
-----END CERTIFICATE-----
Generated at Fri May 3 03:11:42 2024 by rpki-client on console-fra.rpki-client.org