Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/ff073a-1538-414e-b942-446543bb8c2c/1/Eo1CeicOGMw_lf3OuAG6V63ihbU.mft
File:                     Eo1CeicOGMw_lf3OuAG6V63ihbU.mft (raw, json)
Hash identifier:          BBj8DjAyptMZJEHvfljYD2idzBz3/karEJpwwXJRMPE=
Subject key identifier:   67:1E:5A:FE:60:F4:34:88:62:DC:6E:5C:E7:E8:51:A8:2E:AC:93:99
Authority key identifier: 12:8D:42:7A:27:0E:18:CC:3F:95:FD:CE:B8:01:BA:57:AD:E2:85:B5
Certificate issuer:       /CN=128d427a270e18cc3f95fdceb801ba57ade285b5
Certificate serial:       018F53C9DA12B2F2A2BCD93F52049D248073
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eo1CeicOGMw_lf3OuAG6V63ihbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/ff073a-1538-414e-b942-446543bb8c2c/1/Eo1CeicOGMw_lf3OuAG6V63ihbU.mft
Manifest number:          05EA
Signing time:             Tue 07 May 2024 16:01:28 +0000
Manifest this update:     Tue 07 May 2024 16:01:28 +0000
Manifest next update:     Wed 08 May 2024 16:01:28 +0000
Files and hashes:         1: Eo1CeicOGMw_lf3OuAG6V63ihbU.crl (hash: WDeuR7llFVw+ZYnh3u85YbueG7u3jvKwG6ZffScqAy0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/ff073a-1538-414e-b942-446543bb8c2c/1/Eo1CeicOGMw_lf3OuAG6V63ihbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/ff073a-1538-414e-b942-446543bb8c2c/1/Eo1CeicOGMw_lf3OuAG6V63ihbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eo1CeicOGMw_lf3OuAG6V63ihbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:c9:da:12:b2:f2:a2:bc:d9:3f:52:04:9d:24:80:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128d427a270e18cc3f95fdceb801ba57ade285b5
        Validity
            Not Before: May  7 16:01:28 2024 GMT
            Not After : May  8 16:01:28 2024 GMT
        Subject: CN=671e5afe60f4348862dc6e5ce7e851a82eac9399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cb:76:56:55:7f:0f:9d:0b:00:20:26:2f:ba:
                    98:12:56:e2:2c:65:0e:a2:9b:3c:ac:df:92:5e:21:
                    3d:a0:48:1d:17:66:b6:95:73:49:16:bd:88:08:5e:
                    6a:9e:b8:c5:b3:cc:d9:2e:e8:62:75:7f:9c:c1:9e:
                    75:5a:bf:2a:31:d6:3a:eb:b3:fa:8a:b1:45:59:b5:
                    ae:b0:f0:6a:10:c7:88:73:d5:c4:0f:54:94:11:b2:
                    eb:2a:d7:0e:c9:0a:38:ef:4c:fc:93:35:85:bf:cd:
                    60:cb:cb:b9:07:b5:c1:1e:e4:07:5c:73:1d:2d:01:
                    57:23:67:c3:63:af:93:11:8b:a4:9c:29:aa:5e:f6:
                    93:9f:1f:35:8a:9c:9b:4e:22:19:6b:78:8e:04:43:
                    9f:6f:40:33:e4:74:97:1f:7e:55:17:4b:d3:a8:75:
                    bc:9f:ed:07:c2:66:0f:3d:96:ec:a8:68:62:df:70:
                    79:1f:32:f3:9d:f1:6b:ba:6d:e2:d4:34:e0:6d:63:
                    1e:e8:6b:11:38:6b:ee:2c:78:b5:7e:eb:71:64:48:
                    f0:40:dd:32:c2:b1:ba:12:db:92:72:32:62:2d:db:
                    f7:fa:7f:0f:06:00:d9:47:d3:26:71:3b:d7:39:39:
                    3f:64:49:b6:45:50:db:69:e3:4a:30:d5:90:cd:43:
                    5f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1E:5A:FE:60:F4:34:88:62:DC:6E:5C:E7:E8:51:A8:2E:AC:93:99
            X509v3 Authority Key Identifier:
                keyid:12:8D:42:7A:27:0E:18:CC:3F:95:FD:CE:B8:01:BA:57:AD:E2:85:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo1CeicOGMw_lf3OuAG6V63ihbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ff073a-1538-414e-b942-446543bb8c2c/1/Eo1CeicOGMw_lf3OuAG6V63ihbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ff073a-1538-414e-b942-446543bb8c2c/1/Eo1CeicOGMw_lf3OuAG6V63ihbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:fe:ff:b6:97:65:ce:1a:6e:6c:c1:63:13:1f:80:d6:5d:54:
         26:87:67:16:cf:5e:4f:4a:bc:f5:f8:bf:6d:bc:e4:eb:0a:cb:
         52:2c:07:ff:eb:8d:98:c3:d4:93:0e:23:85:c4:14:ce:6e:44:
         f2:09:77:94:3b:9d:6c:1b:67:ab:88:70:2d:f3:d9:09:c4:9c:
         84:c6:6a:04:63:bc:f2:02:18:b0:db:d9:0d:ec:42:87:80:fe:
         3d:d0:f7:50:e7:87:75:8a:ce:2d:00:94:79:04:c8:05:38:0d:
         7d:d5:f8:22:34:32:87:4f:54:4c:50:77:98:d3:8e:02:43:ca:
         21:08:bf:6e:32:3c:d4:64:61:85:68:c9:24:37:ed:fc:33:18:
         25:82:3f:3e:c9:c2:38:10:cb:7b:7c:be:eb:9f:d8:5b:40:5e:
         a0:05:46:c0:75:c4:ae:e4:ae:79:9d:86:1e:54:54:fc:d0:d1:
         a0:af:f7:e9:0d:b4:a2:c1:5d:25:04:fa:1a:37:9b:4c:1c:cc:
         32:90:e7:6e:2e:13:21:19:46:09:89:00:97:e3:72:31:1e:06:
         a1:67:eb:17:4c:1d:a8:0a:3e:b9:45:15:de:39:32:f4:ca:62:
         a2:b2:b0:22:7f:71:0f:a5:2e:f1:b4:e9:77:9e:a4:7d:0d:94:
         58:a1:0b:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9TydoSsvKivNk/UgSdJIBzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyOGQ0MjdhMjcwZTE4Y2MzZjk1ZmRjZWI4MDFiYTU3YWRl
Mjg1YjUwHhcNMjQwNTA3MTYwMTI4WhcNMjQwNTA4MTYwMTI4WjAzMTEwLwYDVQQD
Eyg2NzFlNWFmZTYwZjQzNDg4NjJkYzZlNWNlN2U4NTFhODJlYWM5Mzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuct2VlV/D50LACAmL7qYElbiLGUO
ops8rN+SXiE9oEgdF2a2lXNJFr2ICF5qnrjFs8zZLuhidX+cwZ51Wr8qMdY667P6
irFFWbWusPBqEMeIc9XED1SUEbLrKtcOyQo470z8kzWFv81gy8u5B7XBHuQHXHMd
LQFXI2fDY6+TEYuknCmqXvaTnx81ipybTiIZa3iOBEOfb0Az5HSXH35VF0vTqHW8
n+0HwmYPPZbsqGhi33B5HzLznfFrum3i1DTgbWMe6GsROGvuLHi1futxZEjwQN0y
wrG6EtuScjJiLdv3+n8PBgDZR9MmcTvXOTk/ZEm2RVDbaeNKMNWQzUNftwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGceWv5g9DSIYtxuXOfoUagurJOZMB8GA1UdIwQY
MBaAFBKNQnonDhjMP5X9zrgBulet4oW1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW8xQ2VpY09HTXdfbGYzT3VBRzZWNjNpaGJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mZjA3M2EtMTUzOC00MTRlLWI5NDIt
NDQ2NTQzYmI4YzJjLzEvRW8xQ2VpY09HTXdfbGYzT3VBRzZWNjNpaGJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9mZjA3M2EtMTUzOC00MTRlLWI5NDItNDQ2NTQzYmI4YzJj
LzEvRW8xQ2VpY09HTXdfbGYzT3VBRzZWNjNpaGJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/7/tpdl
zhpubMFjEx+A1l1UJodnFs9eT0q89fi/bbzk6wrLUiwH/+uNmMPUkw4jhcQUzm5E
8gl3lDudbBtnq4hwLfPZCcSchMZqBGO88gIYsNvZDexCh4D+PdD3UOeHdYrOLQCU
eQTIBTgNfdX4IjQyh09UTFB3mNOOAkPKIQi/bjI81GRhhWjJJDft/DMYJYI/PsnC
OBDLe3y+65/YW0BeoAVGwHXEruSueZ2GHlRU/NDRoK/36Q20osFdJQT6GjebTBzM
MpDnbi4TIRlGCYkAl+NyMR4GoWfrF0wdqAo+uUUV3jky9MpiorKwIn9xD6Uu8bTp
d56kfQ2UWKELKA==
-----END CERTIFICATE-----
Generated at Tue May 7 20:23:07 2024 by rpki-client on console-ams.rpki-client.org