Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
File:                     jXFsWj-FNOaifTBNiDC8AxGaTF0.mft (raw, json)
Hash identifier:          EZ9AAcWvSR/1DEUWwXHFMXEycYxXQxxO4QEoULcCEJc=
Subject key identifier:   3C:EF:46:BD:69:61:3E:B5:52:8F:90:66:59:76:EF:24:86:C8:B1:70
Authority key identifier: 8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D
Certificate issuer:       /CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d
Certificate serial:       018F87483B721FBEA47BAB961C9C1888897C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:00:08 +0000
Manifest this update:     Fri 17 May 2024 16:00:08 +0000
Manifest next update:     Sat 18 May 2024 16:00:08 +0000
Files and hashes:         1: jXFsWj-FNOaifTBNiDC8AxGaTF0.crl (hash: wxFUOf1ORYeocdajicD/3efzULn9SX8L07Hjpn7Qa3M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:3b:72:1f:be:a4:7b:ab:96:1c:9c:18:88:89:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d
        Validity
            Not Before: May 17 16:00:08 2024 GMT
            Not After : May 18 16:00:08 2024 GMT
        Subject: CN=3cef46bd69613eb5528f90665976ef2486c8b170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5c:3c:e1:d4:f6:a5:55:75:4c:e8:f2:c0:cb:
                    7b:a8:92:55:28:a5:26:fd:3b:b2:1f:ca:24:f6:44:
                    dc:03:a1:ec:9f:20:17:1d:7e:a4:ed:38:ba:ee:e4:
                    89:80:15:de:43:b5:f3:67:aa:09:8f:f4:b5:41:00:
                    78:12:ec:9a:6a:40:3c:ff:3e:14:1c:c7:57:df:f4:
                    23:e2:fc:3a:ca:9d:cb:4b:51:3a:bb:11:6c:b3:43:
                    41:71:b3:e7:94:7f:e3:29:5b:d5:f4:4b:15:3f:63:
                    3b:2b:10:d0:9c:4f:2e:c0:c2:3b:bd:3d:62:ca:23:
                    2f:63:fa:8f:15:6c:44:f6:72:85:d4:ef:a0:8e:6f:
                    af:3c:aa:80:9d:d4:20:96:62:98:ed:c4:a1:a6:32:
                    a5:d7:93:0b:cd:08:41:f2:69:b8:86:04:4b:2f:82:
                    75:48:b7:18:6f:55:b7:0d:92:dd:21:95:ab:f6:95:
                    14:2b:21:4b:d1:40:f0:a8:e1:27:e4:1b:56:5f:5c:
                    79:2a:e5:45:88:88:91:64:1c:27:2e:b3:da:eb:ff:
                    7b:78:b9:7b:63:69:c3:b5:ca:46:d4:f3:65:d6:2b:
                    ea:61:dc:c3:4e:c2:c7:14:c5:37:7b:16:b6:49:1d:
                    66:e2:16:53:e6:b6:80:b0:64:6e:f9:26:f7:cf:d1:
                    bb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:EF:46:BD:69:61:3E:B5:52:8F:90:66:59:76:EF:24:86:C8:B1:70
            X509v3 Authority Key Identifier:
                keyid:8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:60:db:96:ec:54:61:f0:ae:c8:52:ff:52:aa:a5:38:6a:c3:
         10:63:30:6c:40:35:3c:29:ca:aa:9a:ce:7a:45:78:f5:96:3b:
         b5:7e:a2:2e:b5:4f:2f:32:d3:e6:64:12:a2:2c:58:ff:23:ab:
         4b:1a:f2:54:2f:d8:83:5f:24:69:90:48:00:a9:3a:dc:46:ab:
         e1:ae:bf:d1:fd:46:00:ba:45:de:28:2d:33:d9:51:39:e2:c5:
         99:9c:c6:ea:f6:4f:cb:63:d3:39:89:ae:bd:a8:bf:8d:b7:e4:
         80:45:38:e5:4b:49:f5:56:e2:c4:1f:2c:5a:9f:4f:fc:bd:74:
         1f:72:99:6d:27:47:dc:53:af:77:f4:bb:30:9c:0b:15:09:3f:
         ee:dd:05:5d:c4:53:51:70:8a:de:b4:bc:4e:d9:a8:15:61:ab:
         eb:17:2d:52:b4:7b:98:c3:bd:d0:56:8b:51:43:49:8c:ea:36:
         dd:9c:4e:41:8c:f5:97:82:5a:f0:99:a2:17:6b:9c:60:99:b9:
         1b:b4:88:77:ed:bc:09:4b:0f:63:c3:1a:0c:71:ce:2d:e2:a7:
         2a:89:b5:bb:fc:29:f5:b0:5c:96:3c:6f:3f:50:73:de:fb:8b:
         10:b6:f2:f4:d0:e4:d7:01:5f:8c:e5:19:64:c1:1b:37:7d:78:
         16:fb:ea:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSDtyH76ke6uWHJwYiIl8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNzE2YzVhM2Y4NTM0ZTZhMjdkMzA0ZDg4MzBiYzAzMTE5
YTRjNWQwHhcNMjQwNTE3MTYwMDA4WhcNMjQwNTE4MTYwMDA4WjAzMTEwLwYDVQQD
EygzY2VmNDZiZDY5NjEzZWI1NTI4ZjkwNjY1OTc2ZWYyNDg2YzhiMTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVw84dT2pVV1TOjywMt7qJJVKKUm
/TuyH8ok9kTcA6HsnyAXHX6k7Ti67uSJgBXeQ7XzZ6oJj/S1QQB4EuyaakA8/z4U
HMdX3/Qj4vw6yp3LS1E6uxFss0NBcbPnlH/jKVvV9EsVP2M7KxDQnE8uwMI7vT1i
yiMvY/qPFWxE9nKF1O+gjm+vPKqAndQglmKY7cShpjKl15MLzQhB8mm4hgRLL4J1
SLcYb1W3DZLdIZWr9pUUKyFL0UDwqOEn5BtWX1x5KuVFiIiRZBwnLrPa6/97eLl7
Y2nDtcpG1PNl1ivqYdzDTsLHFMU3exa2SR1m4hZT5raAsGRu+Sb3z9G7mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzvRr1pYT61Uo+QZll27ySGyLFwMB8GA1UdIwQY
MBaAFI1xbFo/hTTmon0wTYgwvAMRmkxdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalhGc1dqLUZOT2FpZlRCTmlEQzhBeEdhVEYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82N2M0ZTgtOWM2ZC00MDgzLTliOTct
MjEwZTM4ZGEwYjRlLzEvalhGc1dqLUZOT2FpZlRCTmlEQzhBeEdhVEYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82N2M0ZTgtOWM2ZC00MDgzLTliOTctMjEwZTM4ZGEwYjRl
LzEvalhGc1dqLUZOT2FpZlRCTmlEQzhBeEdhVEYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimDbluxU
YfCuyFL/UqqlOGrDEGMwbEA1PCnKqprOekV49ZY7tX6iLrVPLzLT5mQSoixY/yOr
SxryVC/Yg18kaZBIAKk63Ear4a6/0f1GALpF3igtM9lROeLFmZzG6vZPy2PTOYmu
vai/jbfkgEU45UtJ9VbixB8sWp9P/L10H3KZbSdH3FOvd/S7MJwLFQk/7t0FXcRT
UXCK3rS8TtmoFWGr6xctUrR7mMO90FaLUUNJjOo23ZxOQYz1l4Ja8JmiF2ucYJm5
G7SId+28CUsPY8MaDHHOLeKnKom1u/wp9bBcljxvP1Bz3vuLELby9NDk1wFfjOUZ
ZMEbN314FvvqcQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:43:40 2024 by rpki-client on console-ams.rpki-client.org