Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
File:                     4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft (raw, json)
Hash identifier:          UT1BIzJqDTjFYQSbnWQl03ZXvGnVXljcAOoKmjp3lo4=
Subject key identifier:   58:B0:FA:28:A3:66:00:AC:6E:E5:4E:05:1D:48:8D:AA:53:D0:A0:3C
Authority key identifier: E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
Certificate issuer:       /CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Certificate serial:       018F3E5451F758E3751D15DCED06A79705BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
Manifest number:          0837
Signing time:             Fri 03 May 2024 12:01:04 +0000
Manifest this update:     Fri 03 May 2024 12:01:04 +0000
Manifest next update:     Sat 04 May 2024 12:01:04 +0000
Files and hashes:         1: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl (hash: Qvv7Tk9ktqe7w5/EEPy8deFygjh76Zo8JfaAHPdRTl0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3e:54:51:f7:58:e3:75:1d:15:dc:ed:06:a7:97:05:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
        Validity
            Not Before: May  3 12:01:04 2024 GMT
            Not After : May  4 12:01:04 2024 GMT
        Subject: CN=58b0fa28a36600ac6ee54e051d488daa53d0a03c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a0:69:ec:dc:d8:15:aa:5d:cd:7a:b1:06:e7:
                    0f:7f:ba:68:86:04:03:d4:31:01:f1:17:f8:0b:bb:
                    99:ba:89:55:2d:a9:9a:3e:17:d3:4c:e8:c8:28:19:
                    5a:ef:c7:2c:7f:46:23:60:5a:91:e6:c7:10:37:89:
                    ef:bf:17:f0:5c:b3:43:94:a4:be:cc:0c:f1:e5:67:
                    01:32:df:29:dc:92:33:17:e1:60:fa:e4:e7:e2:c8:
                    c5:56:ba:48:00:39:63:67:ee:8f:e5:6c:f9:5c:8e:
                    fe:a7:3d:d3:0c:e0:48:32:7e:53:38:65:b9:2c:ca:
                    d6:f4:ca:cf:3b:17:7a:61:cc:a3:ea:70:3f:98:e9:
                    a0:21:87:f0:76:3d:39:21:17:56:3e:7c:cd:2b:e6:
                    71:ea:05:2a:28:00:ce:f2:2a:18:53:57:9d:ba:ea:
                    85:a0:9f:b4:9a:62:a6:c5:37:05:99:24:7f:10:53:
                    5d:6f:76:7a:29:55:1f:e7:35:59:fc:b9:2d:77:23:
                    ce:d8:05:a2:4c:cc:49:2a:04:32:50:eb:e5:aa:8f:
                    8a:93:b1:f6:05:11:25:86:b6:99:e1:a1:83:53:43:
                    f9:4f:4a:66:9d:d1:f5:0a:f2:09:5e:4d:23:f2:0e:
                    ca:cf:09:3b:fe:70:97:e1:57:27:a8:9d:72:04:cd:
                    b9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B0:FA:28:A3:66:00:AC:6E:E5:4E:05:1D:48:8D:AA:53:D0:A0:3C
            X509v3 Authority Key Identifier:
                keyid:E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:46:b7:24:80:18:f9:96:c0:b6:5d:34:4a:79:51:05:e0:05:
         2e:03:d5:cf:6e:f6:8c:d5:4a:37:cf:c2:25:91:b2:73:ae:d7:
         0f:c5:36:92:52:b7:b3:62:6c:8f:38:9c:94:c4:0a:e5:dd:e3:
         b1:0f:90:83:4c:d5:34:a6:dd:0c:4e:52:5e:68:f6:11:78:76:
         4c:c0:2d:ab:51:fd:fd:b7:dc:2e:3d:08:46:2a:55:b6:2e:17:
         c8:1a:2d:12:af:5f:2e:13:3d:95:06:b7:0b:ac:14:1d:80:cc:
         a0:95:11:36:b4:1c:42:02:73:08:08:18:06:4c:c9:10:92:82:
         73:e5:0b:f2:70:42:9f:f8:e6:35:22:7d:32:48:f5:3d:40:a3:
         72:e2:c7:85:66:b0:96:09:21:00:0f:a5:73:6b:4c:0b:8b:6b:
         c7:4c:1b:90:54:b4:12:17:e5:45:1c:fa:66:8c:4e:62:76:4e:
         94:47:c2:53:f0:c8:68:c2:4d:d1:f7:b7:3f:b1:14:b3:d0:60:
         8c:3d:51:f6:36:b3:4a:d9:9f:18:e6:fb:a3:74:da:e0:58:e8:
         cf:e4:4f:0d:24:76:61:9e:3d:cb:ef:f0:2e:09:12:e7:96:52:
         8c:b4:18:b4:d1:cb:61:82:6a:18:03:67:9c:f8:3f:d8:d5:24:
         97:8d:47:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8+VFH3WON1HRXc7QanlwW9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMmI3YjMwN2I4Yzk2ZTZjNzdiNWI4YTc4M2ZmNTVlMzc5
MDc2MzYwHhcNMjQwNTAzMTIwMTA0WhcNMjQwNTA0MTIwMTA0WjAzMTEwLwYDVQQD
Eyg1OGIwZmEyOGEzNjYwMGFjNmVlNTRlMDUxZDQ4OGRhYTUzZDBhMDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqBp7NzYFapdzXqxBucPf7pohgQD
1DEB8Rf4C7uZuolVLamaPhfTTOjIKBla78csf0YjYFqR5scQN4nvvxfwXLNDlKS+
zAzx5WcBMt8p3JIzF+Fg+uTn4sjFVrpIADljZ+6P5Wz5XI7+pz3TDOBIMn5TOGW5
LMrW9MrPOxd6Ycyj6nA/mOmgIYfwdj05IRdWPnzNK+Zx6gUqKADO8ioYU1eduuqF
oJ+0mmKmxTcFmSR/EFNdb3Z6KVUf5zVZ/LktdyPO2AWiTMxJKgQyUOvlqo+Kk7H2
BRElhraZ4aGDU0P5T0pmndH1CvIJXk0j8g7Kzwk7/nCX4VcnqJ1yBM25JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFiw+iijZgCsbuVOBR1IjapT0KA8MB8GA1UdIwQY
MBaAFOArezB7jJbmx3tbing/9V43kHY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEN0N01IdU1sdWJIZTF1S2VEXzFYamVRZGpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9iNTE4OTAtMjJmMC00NmY3LTk0Zjkt
MjIwZGRiZTJjMDlmLzEvNEN0N01IdU1sdWJIZTF1S2VEXzFYamVRZGpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9iNTE4OTAtMjJmMC00NmY3LTk0ZjktMjIwZGRiZTJjMDlm
LzEvNEN0N01IdU1sdWJIZTF1S2VEXzFYamVRZGpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABka3JIAY
+ZbAtl00SnlRBeAFLgPVz272jNVKN8/CJZGyc67XD8U2klK3s2JsjziclMQK5d3j
sQ+Qg0zVNKbdDE5SXmj2EXh2TMAtq1H9/bfcLj0IRipVti4XyBotEq9fLhM9lQa3
C6wUHYDMoJURNrQcQgJzCAgYBkzJEJKCc+UL8nBCn/jmNSJ9Mkj1PUCjcuLHhWaw
lgkhAA+lc2tMC4trx0wbkFS0EhflRRz6ZoxOYnZOlEfCU/DIaMJN0fe3P7EUs9Bg
jD1R9jazStmfGOb7o3Ta4Fjoz+RPDSR2YZ49y+/wLgkS55ZSjLQYtNHLYYJqGANn
nPg/2NUkl41HZg==
-----END CERTIFICATE-----
Generated at Fri May 3 18:54:44 2024 by rpki-client on console-ams.rpki-client.org