Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
File:                     uXhT3Vdz8qawcYefW567Dm9Ofao.mft (raw, json)
Hash identifier:          l8whcFleaLznj85Vfia1eM3ngngnjeJABe4ZgLAbLnI=
Subject key identifier:   F3:A4:79:80:D7:2F:EA:5C:32:C7:39:67:C9:53:68:45:8B:7C:4F:B5
Authority key identifier: B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA
Certificate issuer:       /CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
Certificate serial:       018F87B618990715F5432D2CE02CD03511EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
Manifest number:          110A
Signing time:             Fri 17 May 2024 18:00:09 +0000
Manifest this update:     Fri 17 May 2024 18:00:09 +0000
Manifest next update:     Sat 18 May 2024 18:00:09 +0000
Files and hashes:         1: uXhT3Vdz8qawcYefW567Dm9Ofao.crl (hash: cJVU0DCcq+ePJmbpsJXF+bbeSKW680aBvAS+TT6+Ygc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:18:99:07:15:f5:43:2d:2c:e0:2c:d0:35:11:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
        Validity
            Not Before: May 17 18:00:09 2024 GMT
            Not After : May 18 18:00:09 2024 GMT
        Subject: CN=f3a47980d72fea5c32c73967c95368458b7c4fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:91:0d:5e:ed:21:a0:1a:69:35:b6:43:a2:0d:
                    00:6d:07:a9:51:17:18:eb:cf:c8:f0:6e:02:8c:e6:
                    7f:1a:4c:f9:4d:78:0c:72:29:b9:71:8a:f5:3e:f6:
                    da:c9:3a:de:5c:ba:a1:d8:80:79:f6:e8:a3:27:e1:
                    47:03:76:de:ac:5c:6a:ba:b9:13:92:4d:ad:dd:cc:
                    3d:24:06:3b:6f:6a:cd:b2:8b:54:f2:ab:80:4f:bd:
                    84:8e:08:d7:6e:75:02:b0:32:7b:c6:99:c1:0a:c5:
                    9f:23:3a:c2:2c:53:d1:ce:1c:60:f3:d5:6d:62:a4:
                    2a:0e:f1:87:14:c1:3c:c8:1d:b6:a4:35:51:5e:42:
                    32:46:3a:27:31:b8:3e:ff:a5:84:51:2b:61:c6:33:
                    dc:88:7f:31:5e:dc:54:bc:df:22:1f:fa:9f:7a:f4:
                    01:a8:00:3e:58:b7:4a:71:b3:7c:53:a4:fb:38:74:
                    17:66:39:5f:7e:c1:64:4c:3e:30:e9:9b:d7:b7:6e:
                    32:f5:7c:cb:77:93:fa:e2:e1:36:89:35:c2:28:d9:
                    c7:45:17:7e:ca:0f:dd:5d:1e:b8:4f:8c:4a:f2:9f:
                    9f:82:59:1f:82:b4:55:a0:ae:f3:b6:cf:26:1e:e5:
                    eb:5c:c9:81:3a:fb:b7:1b:1b:55:cd:b2:71:d9:3a:
                    4f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A4:79:80:D7:2F:EA:5C:32:C7:39:67:C9:53:68:45:8B:7C:4F:B5
            X509v3 Authority Key Identifier:
                keyid:B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f3:75:c3:84:15:31:7c:10:17:5d:c5:70:cb:2d:46:07:5f:
         ac:14:23:6b:20:fd:a1:44:9d:5e:2c:cc:60:2d:45:a8:ab:a1:
         ac:91:54:62:98:ff:68:33:d1:a3:0d:99:08:78:ca:e8:88:9a:
         00:5d:a8:ea:28:66:d4:22:dd:6e:13:f3:a7:13:b8:30:32:32:
         d0:47:ee:28:0a:be:9e:e3:27:7d:e5:94:cf:e7:9c:8a:cc:46:
         f5:1f:40:1b:b4:21:17:94:85:46:f1:6f:6c:2c:2a:2d:96:52:
         08:b1:aa:76:3d:63:a4:5f:bc:de:43:b2:61:0b:7b:86:87:d3:
         f8:c7:9d:b9:60:15:41:00:7d:1f:6c:ca:16:ca:c0:a0:fb:36:
         17:82:c0:74:48:40:2f:a3:2e:b7:e2:02:0e:92:c6:fa:61:63:
         66:c4:2c:36:50:70:2e:c4:88:07:b9:9c:ac:b6:c2:25:1c:33:
         62:ee:3a:24:f6:af:05:b5:1b:31:b7:a0:c8:39:24:64:c9:26:
         e9:2c:de:93:e3:8e:aa:33:47:3e:25:25:9a:2c:76:3f:e8:58:
         c1:8b:aa:0f:9f:bd:3c:4e:14:22:a4:c9:76:d0:6f:c4:08:b1:
         df:42:46:d6:53:a3:dd:f3:2d:b7:8d:ca:8c:c1:bb:c1:22:d0:
         33:7a:0e:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HthiZBxX1Qy0s4CzQNRHuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5Nzg1M2RkNTc3M2YyYTZiMDcxODc5ZjViOWViYjBlNmY0
ZTdkYWEwHhcNMjQwNTE3MTgwMDA5WhcNMjQwNTE4MTgwMDA5WjAzMTEwLwYDVQQD
EyhmM2E0Nzk4MGQ3MmZlYTVjMzJjNzM5NjdjOTUzNjg0NThiN2M0ZmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppENXu0hoBppNbZDog0AbQepURcY
68/I8G4CjOZ/Gkz5TXgMcim5cYr1PvbayTreXLqh2IB59uijJ+FHA3berFxqurkT
kk2t3cw9JAY7b2rNsotU8quAT72EjgjXbnUCsDJ7xpnBCsWfIzrCLFPRzhxg89Vt
YqQqDvGHFME8yB22pDVRXkIyRjonMbg+/6WEUSthxjPciH8xXtxUvN8iH/qfevQB
qAA+WLdKcbN8U6T7OHQXZjlffsFkTD4w6ZvXt24y9XzLd5P64uE2iTXCKNnHRRd+
yg/dXR64T4xK8p+fglkfgrRVoK7zts8mHuXrXMmBOvu3GxtVzbJx2TpPowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOkeYDXL+pcMsc5Z8lTaEWLfE+1MB8GA1UdIwQY
MBaAFLl4U91Xc/KmsHGHn1ueuw5vTn2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVhoVDNWZHo4cWF3Y1llZlc1NjdEbTlPZmFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iOTNiNjYtYWYzNS00OWQxLWJkNzgt
N2ZmODQ0M2Q5YzIxLzEvdVhoVDNWZHo4cWF3Y1llZlc1NjdEbTlPZmFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9iOTNiNjYtYWYzNS00OWQxLWJkNzgtN2ZmODQ0M2Q5YzIx
LzEvdVhoVDNWZHo4cWF3Y1llZlc1NjdEbTlPZmFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/N1w4QV
MXwQF13FcMstRgdfrBQjayD9oUSdXizMYC1FqKuhrJFUYpj/aDPRow2ZCHjK6Iia
AF2o6ihm1CLdbhPzpxO4MDIy0EfuKAq+nuMnfeWUz+ecisxG9R9AG7QhF5SFRvFv
bCwqLZZSCLGqdj1jpF+83kOyYQt7hofT+MeduWAVQQB9H2zKFsrAoPs2F4LAdEhA
L6Mut+ICDpLG+mFjZsQsNlBwLsSIB7mcrLbCJRwzYu46JPavBbUbMbegyDkkZMkm
6Szek+OOqjNHPiUlmix2P+hYwYuqD5+9PE4UIqTJdtBvxAix30JG1lOj3fMtt43K
jMG7wSLQM3oOKg==
-----END CERTIFICATE-----
Generated at Fri May 17 20:18:50 2024 by rpki-client on console-fra.rpki-client.org