Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft
File:                     Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft (raw, json)
Hash identifier:          tlLSH9JVGWF96zxl1DnpSfnTFOUfql9IibNbY475Do4=
Subject key identifier:   26:0A:55:10:4C:91:6F:1D:F9:DA:88:6E:2D:6C:3B:3E:04:13:8D:B5
Authority key identifier: 1A:BE:5E:EC:B2:3A:F5:69:AA:70:1A:7A:B1:6C:F7:AC:1F:90:F9:60
Certificate issuer:       /CN=1abe5eecb23af569aa701a7ab16cf7ac1f90f960
Certificate serial:       018F44FB47033E6421B0894F5175266C7C8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft
Manifest number:          1153
Signing time:             Sat 04 May 2024 19:01:09 +0000
Manifest this update:     Sat 04 May 2024 19:01:09 +0000
Manifest next update:     Sun 05 May 2024 19:01:09 +0000
Files and hashes:         1: Gr5e7LI69WmqcBp6sWz3rB-Q-WA.crl (hash: QGp6r43O4zMEpQxlTMV/J++8Am+KIvRGER9SD2NxuH8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:fb:47:03:3e:64:21:b0:89:4f:51:75:26:6c:7c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1abe5eecb23af569aa701a7ab16cf7ac1f90f960
        Validity
            Not Before: May  4 19:01:09 2024 GMT
            Not After : May  5 19:01:09 2024 GMT
        Subject: CN=260a55104c916f1df9da886e2d6c3b3e04138db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f9:d5:4b:66:e2:e0:6d:12:fb:6b:e2:bc:3c:
                    fe:67:b1:46:2c:a4:1d:73:a0:83:f9:26:68:fb:bf:
                    9a:d7:45:5b:c9:b2:01:52:a1:5f:1a:d7:9e:5e:fb:
                    23:b5:e1:db:67:88:8b:d0:15:01:0a:2b:2a:cb:a7:
                    84:54:aa:de:ae:45:62:b3:83:62:12:ef:7d:51:93:
                    3e:93:5a:9a:19:c7:2f:41:17:1f:c1:6d:06:1f:41:
                    ad:f2:a5:0c:8d:6c:49:59:cd:a9:7d:b8:11:ce:2a:
                    60:c2:3f:4f:e1:2d:f2:46:ec:be:94:4a:ab:94:2d:
                    38:ce:d3:39:f2:cd:1c:d8:79:6d:83:2a:72:2b:00:
                    91:92:3d:fc:8f:3b:68:f6:38:3f:95:ea:26:24:48:
                    0d:52:b8:fb:5c:4a:8d:60:3c:55:7b:ac:3a:09:32:
                    39:78:19:8d:0e:1f:d5:18:88:19:06:4f:85:69:f7:
                    ed:ca:ac:8a:cb:c7:d8:80:df:76:52:4e:56:91:86:
                    b5:60:38:92:b7:8c:41:65:76:e6:ab:fd:51:ba:9f:
                    b4:39:e6:00:bf:fc:c8:ec:0f:1d:0c:ee:9e:fe:dc:
                    8f:1c:be:f0:32:a8:57:a6:c2:00:7a:d8:f7:e7:5f:
                    fc:e2:26:1e:84:bc:b5:2d:ee:84:b2:47:70:d5:cd:
                    7a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:0A:55:10:4C:91:6F:1D:F9:DA:88:6E:2D:6C:3B:3E:04:13:8D:B5
            X509v3 Authority Key Identifier:
                keyid:1A:BE:5E:EC:B2:3A:F5:69:AA:70:1A:7A:B1:6C:F7:AC:1F:90:F9:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:d2:8f:40:38:5b:db:6e:f5:7a:e0:e8:57:d4:30:f2:6b:f6:
         22:0f:b8:81:09:57:8b:a5:a3:c8:4b:c5:61:63:73:3a:f0:7d:
         03:8b:35:68:bb:9e:67:07:ff:e2:6e:86:8d:a1:62:0a:b4:0e:
         56:37:c8:e5:47:0e:5d:81:3d:4a:04:3d:21:53:6a:e5:de:93:
         39:a2:8d:f3:b8:77:d0:47:98:f7:f3:86:fb:d4:c6:4e:0c:8d:
         94:65:90:e8:6c:23:d8:b2:28:3e:11:54:4b:f1:6d:49:04:fe:
         a4:39:ba:6e:91:d7:bd:eb:d5:9f:f2:32:c2:21:5c:e6:1f:bf:
         67:fe:82:69:69:85:25:45:b9:9a:c3:75:e4:bd:97:9d:f6:c2:
         02:46:75:28:76:07:90:55:9c:6d:af:01:4b:9e:e3:35:cf:b8:
         fd:91:f4:00:cc:0d:7e:78:3b:37:0c:4a:34:3a:d5:89:57:47:
         16:9e:a4:c4:77:dc:be:e0:1b:49:05:e4:96:95:b5:a8:11:3a:
         07:b6:0c:a9:05:00:cd:c2:9e:4d:7b:46:56:17:d6:75:71:b0:
         44:1a:b2:97:a8:46:32:e9:24:4a:eb:7d:a2:f2:13:d7:34:0c:
         f8:0c:a1:67:a3:f4:cd:5d:27:94:d0:07:2e:55:23:17:8a:8a:
         d6:10:bc:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9E+0cDPmQhsIlPUXUmbHyPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYmU1ZWVjYjIzYWY1NjlhYTcwMWE3YWIxNmNmN2FjMWY5
MGY5NjAwHhcNMjQwNTA0MTkwMTA5WhcNMjQwNTA1MTkwMTA5WjAzMTEwLwYDVQQD
EygyNjBhNTUxMDRjOTE2ZjFkZjlkYTg4NmUyZDZjM2IzZTA0MTM4ZGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufnVS2bi4G0S+2vivDz+Z7FGLKQd
c6CD+SZo+7+a10VbybIBUqFfGteeXvsjteHbZ4iL0BUBCisqy6eEVKrerkVis4Ni
Eu99UZM+k1qaGccvQRcfwW0GH0Gt8qUMjWxJWc2pfbgRzipgwj9P4S3yRuy+lEqr
lC04ztM58s0c2HltgypyKwCRkj38jzto9jg/leomJEgNUrj7XEqNYDxVe6w6CTI5
eBmNDh/VGIgZBk+FafftyqyKy8fYgN92Uk5WkYa1YDiSt4xBZXbmq/1Rup+0OeYA
v/zI7A8dDO6e/tyPHL7wMqhXpsIAetj351/84iYehLy1Le6Eskdw1c16FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYKVRBMkW8d+dqIbi1sOz4EE421MB8GA1UdIwQY
MBaAFBq+XuyyOvVpqnAaerFs96wfkPlgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3I1ZTdMSTY5V21xY0JwNnNXejNyQi1RLVdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9iZWMzMzUtNWVlMC00YzRkLWJkYTct
N2U2ZDEyYzM3MzZmLzEvR3I1ZTdMSTY5V21xY0JwNnNXejNyQi1RLVdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9iZWMzMzUtNWVlMC00YzRkLWJkYTctN2U2ZDEyYzM3MzZm
LzEvR3I1ZTdMSTY5V21xY0JwNnNXejNyQi1RLVdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9KPQDhb
2271euDoV9Qw8mv2Ig+4gQlXi6WjyEvFYWNzOvB9A4s1aLueZwf/4m6GjaFiCrQO
VjfI5UcOXYE9SgQ9IVNq5d6TOaKN87h30EeY9/OG+9TGTgyNlGWQ6Gwj2LIoPhFU
S/FtSQT+pDm6bpHXvevVn/IywiFc5h+/Z/6CaWmFJUW5msN15L2XnfbCAkZ1KHYH
kFWcba8BS57jNc+4/ZH0AMwNfng7NwxKNDrViVdHFp6kxHfcvuAbSQXklpW1qBE6
B7YMqQUAzcKeTXtGVhfWdXGwRBqyl6hGMukkSut9ovIT1zQM+AyhZ6P0zV0nlNAH
LlUjF4qK1hC8sw==
-----END CERTIFICATE-----
Generated at Sat May 4 22:59:34 2024 by rpki-client on console-ams.rpki-client.org