Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
File:                     IIsiFwCygfgj4yKjIiGoZ-WweaY.mft (raw, json)
Hash identifier:          2w93e8WbKcfWae1KVxFK8WbJUjF1dZ9yXrgMd7VSYVI=
Subject key identifier:   68:05:C9:8C:0D:C2:24:B7:7B:2B:EA:0B:61:9C:BC:FD:69:44:F5:E1
Authority key identifier: 20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
Certificate issuer:       /CN=208b221700b281f823e322a32221a867e5b079a6
Certificate serial:       018F3BF9E2E6C118CE740407B03BE7379BD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
Manifest number:          114D
Signing time:             Fri 03 May 2024 01:03:03 +0000
Manifest this update:     Fri 03 May 2024 01:03:03 +0000
Manifest next update:     Sat 04 May 2024 01:03:03 +0000
Files and hashes:         1: IIsiFwCygfgj4yKjIiGoZ-WweaY.crl (hash: t1DS8eSVVlHMSp27FGqrF/mkGLOogfjug8pkm2tU72g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f9:e2:e6:c1:18:ce:74:04:07:b0:3b:e7:37:9b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208b221700b281f823e322a32221a867e5b079a6
        Validity
            Not Before: May  3 01:03:03 2024 GMT
            Not After : May  4 01:03:03 2024 GMT
        Subject: CN=6805c98c0dc224b77b2bea0b619cbcfd6944f5e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:20:28:a7:1c:1d:1f:21:0b:07:a6:b6:32:32:
                    6d:10:36:76:3d:4d:94:e8:54:ce:f4:12:07:c5:e3:
                    4b:5f:5c:88:b6:26:cd:eb:05:e6:57:a6:e9:39:82:
                    42:85:d1:b1:92:fc:51:a3:f2:58:8c:2d:37:c7:9c:
                    70:be:c6:0d:a6:da:da:d6:5f:1c:48:5b:0f:1b:bb:
                    2f:ea:34:c3:55:ab:51:4b:15:7f:4e:dd:4e:1e:33:
                    f1:ba:e7:ef:47:c5:45:9a:91:04:1b:ee:04:03:f0:
                    1a:1a:33:fb:41:d7:51:f7:fd:2e:3f:5b:c2:1c:45:
                    a7:dc:1a:cc:90:ac:3b:09:92:3f:f8:16:ce:4d:f5:
                    72:4e:fe:f0:da:c1:8d:60:aa:86:82:d3:46:00:11:
                    c7:0a:a5:9f:5c:16:43:36:f1:da:01:6b:a8:69:27:
                    89:38:7c:e7:a0:93:5d:0c:42:3d:33:fe:55:ae:50:
                    70:22:50:18:4b:e1:ef:ee:36:03:5a:7c:c7:14:9c:
                    4d:32:8a:bd:f2:d1:9d:d1:f9:57:82:22:c3:79:d9:
                    cb:9e:e1:01:3a:8b:ba:10:78:7b:ac:b3:e5:70:fd:
                    d0:57:d0:fb:f7:7a:cb:a8:12:c1:a4:84:72:7c:db:
                    ef:5f:48:0a:29:dc:9d:89:e3:7f:a7:c2:7e:dd:ab:
                    bc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:05:C9:8C:0D:C2:24:B7:7B:2B:EA:0B:61:9C:BC:FD:69:44:F5:E1
            X509v3 Authority Key Identifier:
                keyid:20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:b4:45:ac:d3:fe:d5:67:6a:14:74:c5:f9:03:45:dc:75:59:
         49:9c:c0:dc:e7:c9:be:d6:a1:94:f5:09:8f:ae:89:34:60:dd:
         8d:26:fb:58:76:57:6e:da:f0:67:fd:9f:92:01:1a:cf:fe:cf:
         68:a6:d3:d6:28:79:12:78:cf:b1:9e:e2:20:9e:d0:81:71:b5:
         9f:2b:1d:5c:a1:38:05:4f:fd:21:f8:8e:64:f2:87:9a:c5:6a:
         73:1e:49:09:4f:d8:ad:f2:81:eb:12:6d:d2:4b:cd:77:c6:6e:
         1e:43:a2:35:6e:53:9a:88:4f:f7:fd:01:3c:e0:8e:24:9e:c7:
         98:39:97:04:90:7e:41:4b:21:d5:b5:3c:c5:4c:fc:cc:78:ad:
         ef:90:c6:3f:d8:1b:dd:4c:9c:91:0e:dc:23:c7:a6:d2:89:41:
         d1:f1:41:2d:11:4c:2c:32:c2:67:f8:5e:43:e9:21:40:74:8f:
         86:ac:37:23:71:1b:7c:56:e7:2a:c1:4a:6a:68:f9:15:48:2d:
         d0:0d:e1:74:ef:ac:a3:7d:3a:5e:af:a5:38:6e:eb:e4:60:6a:
         27:5b:b3:ff:ab:7a:2c:a5:2d:89:36:3e:60:de:a0:84:10:f2:
         68:c4:09:8a:eb:ab:f7:b5:9d:9e:d2:5c:5d:5c:cf:75:4e:0e:
         a5:cd:4f:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY87+eLmwRjOdAQHsDvnN5vQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOGIyMjE3MDBiMjgxZjgyM2UzMjJhMzIyMjFhODY3ZTVi
MDc5YTYwHhcNMjQwNTAzMDEwMzAzWhcNMjQwNTA0MDEwMzAzWjAzMTEwLwYDVQQD
Eyg2ODA1Yzk4YzBkYzIyNGI3N2IyYmVhMGI2MTljYmNmZDY5NDRmNWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSAopxwdHyELB6a2MjJtEDZ2PU2U
6FTO9BIHxeNLX1yItibN6wXmV6bpOYJChdGxkvxRo/JYjC03x5xwvsYNptra1l8c
SFsPG7sv6jTDVatRSxV/Tt1OHjPxuufvR8VFmpEEG+4EA/AaGjP7QddR9/0uP1vC
HEWn3BrMkKw7CZI/+BbOTfVyTv7w2sGNYKqGgtNGABHHCqWfXBZDNvHaAWuoaSeJ
OHznoJNdDEI9M/5VrlBwIlAYS+Hv7jYDWnzHFJxNMoq98tGd0flXgiLDednLnuEB
Oou6EHh7rLPlcP3QV9D793rLqBLBpIRyfNvvX0gKKdydieN/p8J+3au8WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgFyYwNwiS3eyvqC2GcvP1pRPXhMB8GA1UdIwQY
MBaAFCCLIhcAsoH4I+MioyIhqGflsHmmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80ODAzNTUtZGQ2ZS00MGVjLWJjZjYt
OWIyYTlmNDZhNDgzLzEvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi80ODAzNTUtZGQ2ZS00MGVjLWJjZjYtOWIyYTlmNDZhNDgz
LzEvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLRFrNP+
1WdqFHTF+QNF3HVZSZzA3OfJvtahlPUJj66JNGDdjSb7WHZXbtrwZ/2fkgEaz/7P
aKbT1ih5EnjPsZ7iIJ7QgXG1nysdXKE4BU/9IfiOZPKHmsVqcx5JCU/YrfKB6xJt
0kvNd8ZuHkOiNW5TmohP9/0BPOCOJJ7HmDmXBJB+QUsh1bU8xUz8zHit75DGP9gb
3UyckQ7cI8em0olB0fFBLRFMLDLCZ/heQ+khQHSPhqw3I3EbfFbnKsFKamj5FUgt
0A3hdO+so306Xq+lOG7r5GBqJ1uz/6t6LKUtiTY+YN6ghBDyaMQJiuur97WdntJc
XVzPdU4Opc1PkA==
-----END CERTIFICATE-----
Generated at Fri May 3 09:16:08 2024 by rpki-client on console-ams.rpki-client.org