Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
File:                     7rkpOOqM96P2CZym1uPlonuJfPA.mft (raw, json)
Hash identifier:          bnRZAx9majyEsP1Rb9har4OZk3UUT4ZPbYRGhnQlNP8=
Subject key identifier:   C7:91:62:E4:8E:01:25:FE:9B:C2:56:34:14:6E:C0:7A:D2:9C:F8:7E
Authority key identifier: EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
Certificate issuer:       /CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
Certificate serial:       018F87ED665FDF97D31FCEE38438423B298D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
Manifest number:          0157
Signing time:             Fri 17 May 2024 19:00:33 +0000
Manifest this update:     Fri 17 May 2024 19:00:33 +0000
Manifest next update:     Sat 18 May 2024 19:00:33 +0000
Files and hashes:         1: 7rkpOOqM96P2CZym1uPlonuJfPA.crl (hash: EykJVpAoJoqKr+GJ6/O+o9V+xjrOjBYvgxH2QrCWJJ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:66:5f:df:97:d3:1f:ce:e3:84:38:42:3b:29:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
        Validity
            Not Before: May 17 19:00:33 2024 GMT
            Not After : May 18 19:00:33 2024 GMT
        Subject: CN=c79162e48e0125fe9bc25634146ec07ad29cf87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:70:05:3d:0f:ea:fb:c6:4c:7d:d4:b8:d7:5d:
                    63:c1:2c:45:3c:74:84:3b:a4:6d:bc:31:3f:fc:c6:
                    e2:63:02:ca:23:e0:00:0b:87:9c:fd:b3:99:25:78:
                    2b:45:16:4b:d1:b2:a9:2c:53:38:3b:ad:5e:13:48:
                    23:33:0e:50:57:fc:b1:0d:fd:ab:02:50:b4:58:02:
                    7a:15:30:cb:d2:0a:bb:88:06:b5:bc:58:46:eb:be:
                    7f:09:77:89:33:e6:3c:0f:a1:90:0e:83:7a:b2:97:
                    67:3c:a2:50:1d:3e:7b:dc:d9:d0:09:22:52:04:b8:
                    65:5a:88:3f:f0:c3:3a:53:cc:28:20:1c:70:59:1b:
                    c7:89:e7:16:02:b6:d1:ba:19:af:ff:6a:50:3f:db:
                    b3:08:f9:04:41:bd:89:63:af:6e:c0:14:6e:ff:6e:
                    30:49:ec:9f:c2:38:de:68:99:b2:eb:a0:bb:13:ca:
                    72:2f:0a:19:7e:3b:33:4d:11:12:11:76:94:eb:8c:
                    eb:dc:81:ec:8a:23:8a:59:fc:be:84:74:ab:ec:28:
                    0d:99:d1:c6:0b:50:92:dc:69:c8:7f:5f:1a:fe:bf:
                    6d:7d:16:44:68:0a:eb:49:4a:60:55:b1:59:df:11:
                    a2:31:a6:32:2a:9f:57:03:eb:c1:87:b8:c9:7a:af:
                    7b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:91:62:E4:8E:01:25:FE:9B:C2:56:34:14:6E:C0:7A:D2:9C:F8:7E
            X509v3 Authority Key Identifier:
                keyid:EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:2b:a9:13:21:be:3b:97:3c:fb:b0:01:d6:10:d7:80:2a:04:
         61:16:af:f5:f9:fb:19:8e:cc:fa:93:85:9f:c9:e7:e7:ad:8c:
         75:15:51:6b:b1:e6:1d:66:cb:ac:f9:88:a9:a7:ce:2e:b7:d1:
         f0:19:90:74:fa:f5:9b:cc:05:c7:f1:45:9a:81:5c:26:9d:bb:
         0f:1a:5b:ec:31:1a:24:e7:1c:3f:c7:18:a5:b3:14:63:36:45:
         bf:45:e5:44:21:43:b5:19:14:55:90:30:4d:db:82:90:bd:66:
         4f:6f:00:b3:50:72:0c:6f:69:c5:dd:0a:10:3a:cf:ed:48:df:
         2d:3e:3d:6d:82:1a:ce:ee:0b:bd:b4:54:7e:1a:8b:cc:91:1b:
         e7:61:9e:fa:84:1e:b2:07:7e:c9:db:31:10:02:f5:bd:b0:cc:
         3e:be:72:dd:4c:84:38:8c:29:4c:37:2b:c7:ab:65:d3:ed:d2:
         7f:06:47:a6:a6:be:6b:61:d0:ab:eb:cc:28:c0:04:c9:00:49:
         13:8d:af:b0:a5:8f:5c:8e:ff:d9:13:c5:a9:8c:05:bd:dc:23:
         87:1d:c7:44:ed:aa:e8:f2:ef:fb:28:e2:8d:b2:75:72:60:5b:
         0b:f1:64:22:39:0d:51:38:34:89:4d:0d:06:ea:73:da:93:1f:
         bb:ea:43:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7WZf35fTH87jhDhCOymNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYjkyOTM4ZWE4Y2Y3YTNmNjA5OWNhNmQ2ZTNlNWEyN2I4
OTdjZjAwHhcNMjQwNTE3MTkwMDMzWhcNMjQwNTE4MTkwMDMzWjAzMTEwLwYDVQQD
EyhjNzkxNjJlNDhlMDEyNWZlOWJjMjU2MzQxNDZlYzA3YWQyOWNmODdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHAFPQ/q+8ZMfdS4111jwSxFPHSE
O6RtvDE//MbiYwLKI+AAC4ec/bOZJXgrRRZL0bKpLFM4O61eE0gjMw5QV/yxDf2r
AlC0WAJ6FTDL0gq7iAa1vFhG675/CXeJM+Y8D6GQDoN6spdnPKJQHT573NnQCSJS
BLhlWog/8MM6U8woIBxwWRvHiecWArbRuhmv/2pQP9uzCPkEQb2JY69uwBRu/24w
SeyfwjjeaJmy66C7E8pyLwoZfjszTRESEXaU64zr3IHsiiOKWfy+hHSr7CgNmdHG
C1CS3GnIf18a/r9tfRZEaArrSUpgVbFZ3xGiMaYyKp9XA+vBh7jJeq97yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeRYuSOASX+m8JWNBRuwHrSnPh+MB8GA1UdIwQY
MBaAFO65KTjqjPej9gmcptbj5aJ7iXzwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3JrcE9PcU05NlAyQ1p5bTF1UGxvbnVKZlBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi80MWE4MzEtZDAyZC00M2RmLTlkNTgt
MGJmMDI4MmE2ZDY3LzEvN3JrcE9PcU05NlAyQ1p5bTF1UGxvbnVKZlBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi80MWE4MzEtZDAyZC00M2RmLTlkNTgtMGJmMDI4MmE2ZDY3
LzEvN3JrcE9PcU05NlAyQ1p5bTF1UGxvbnVKZlBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgCupEyG+
O5c8+7AB1hDXgCoEYRav9fn7GY7M+pOFn8nn562MdRVRa7HmHWbLrPmIqafOLrfR
8BmQdPr1m8wFx/FFmoFcJp27Dxpb7DEaJOccP8cYpbMUYzZFv0XlRCFDtRkUVZAw
TduCkL1mT28As1ByDG9pxd0KEDrP7UjfLT49bYIazu4LvbRUfhqLzJEb52Ge+oQe
sgd+ydsxEAL1vbDMPr5y3UyEOIwpTDcrx6tl0+3SfwZHpqa+a2HQq+vMKMAEyQBJ
E42vsKWPXI7/2RPFqYwFvdwjhx3HRO2q6PLv+yjijbJ1cmBbC/FkIjkNUTg0iU0N
Bupz2pMfu+pDtw==
-----END CERTIFICATE-----
Generated at Fri May 17 20:12:10 2024 by rpki-client on console-ams.rpki-client.org