Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
File:                     0YIiY6hwfHbz2ztr5xIiacgnrlU.mft (raw, json)
Hash identifier:          /WjfcJZFxQ6MKrPGh0sKFBOamRgpAw72RDySh1ZPA9Q=
Subject key identifier:   CF:AC:5E:EA:24:66:6C:C8:E8:B1:4E:FF:A5:65:3E:48:27:D0:5B:A1
Authority key identifier: D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
Certificate issuer:       /CN=d1822263a8707c76f3db3b6be7122269c827ae55
Certificate serial:       018F4D5A868765BD49E726C00363D5AE9EEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
Manifest number:          06DE
Signing time:             Mon 06 May 2024 10:02:09 +0000
Manifest this update:     Mon 06 May 2024 10:02:09 +0000
Manifest next update:     Tue 07 May 2024 10:02:09 +0000
Files and hashes:         1: 0YIiY6hwfHbz2ztr5xIiacgnrlU.crl (hash: 26zyWecl2l55Nhcj5ipRH/2ltaAwDH7IxA0Oefsrvuw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 10:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:5a:86:87:65:bd:49:e7:26:c0:03:63:d5:ae:9e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1822263a8707c76f3db3b6be7122269c827ae55
        Validity
            Not Before: May  6 10:02:09 2024 GMT
            Not After : May  7 10:02:09 2024 GMT
        Subject: CN=cfac5eea24666cc8e8b14effa5653e4827d05ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7b:4e:48:e9:fb:16:2e:fc:c4:64:ca:86:16:
                    8a:58:ab:82:de:4b:f2:0b:90:25:a7:8c:f3:90:2b:
                    95:3e:20:6b:ae:54:cf:39:d9:ab:1e:c6:1e:78:0d:
                    f7:7f:60:86:91:70:d1:45:4d:0b:67:74:9e:ef:53:
                    22:18:38:95:23:b1:0c:90:59:e5:43:93:17:95:51:
                    69:65:21:f0:6a:fd:b4:cc:5e:2e:64:ea:e4:e0:0d:
                    d6:bb:d1:32:20:12:74:9f:7f:cd:ba:78:86:ce:1f:
                    3d:38:21:0b:57:a9:28:e6:50:02:17:57:50:07:61:
                    95:bc:74:33:5f:93:49:e5:3b:c7:af:2f:95:75:1d:
                    57:5b:62:db:6a:c5:df:73:b4:cb:a9:11:52:73:7e:
                    30:ba:da:ac:b7:9a:62:8e:9d:a2:59:04:50:a4:ca:
                    80:98:7e:c6:65:43:fd:00:c8:b7:b0:88:a5:68:ae:
                    2a:4a:4e:8a:07:3b:c2:fc:01:f9:ba:a2:ea:b7:ed:
                    02:2c:d2:89:61:dd:72:45:34:53:cc:67:b5:2f:19:
                    f6:0a:90:8c:20:9c:44:22:2c:9e:6d:11:58:0e:09:
                    74:f4:94:fe:c4:d4:31:e7:22:58:75:97:6a:b8:de:
                    ee:34:31:b5:3a:04:41:36:b9:2c:e5:f3:14:af:39:
                    6e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:AC:5E:EA:24:66:6C:C8:E8:B1:4E:FF:A5:65:3E:48:27:D0:5B:A1
            X509v3 Authority Key Identifier:
                keyid:D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:1c:8f:fe:93:62:d3:80:ec:31:cd:37:08:22:56:68:1f:e6:
         0c:f4:63:c7:10:8e:a0:18:88:21:a5:41:b7:14:56:85:45:e1:
         bb:4f:07:da:f5:ee:a1:09:37:42:12:ab:e7:e7:3d:52:a9:63:
         c9:06:cf:56:fc:12:69:8d:a9:97:7f:d4:dd:cf:43:e3:2a:ff:
         83:cb:54:74:d2:a3:6a:cf:0d:ae:95:ab:7c:99:13:6b:2e:a0:
         87:5e:3c:e7:a1:2f:5a:02:f9:6b:d7:2a:93:61:a1:06:0c:58:
         50:0a:de:ef:a8:0d:ca:69:98:65:d2:ad:18:07:e7:03:ca:5d:
         79:62:46:f5:90:7b:94:94:cf:32:fc:09:fc:54:30:6c:00:5d:
         2b:ad:8d:2c:9e:48:49:ce:5d:d3:ec:f9:a8:3a:9d:e3:98:8e:
         47:1e:69:3f:4d:46:22:43:bf:de:c8:a5:ed:6f:dd:61:5e:49:
         58:a1:6b:49:bf:22:43:47:96:68:e6:95:43:b4:a5:18:c6:da:
         68:d2:7c:d1:77:4c:f5:c2:3f:29:c4:23:16:e1:6f:53:34:72:
         77:6d:f6:a8:8d:b9:32:76:25:1a:53:d0:e1:c2:76:d0:c8:c1:
         29:0e:24:d2:7c:83:ad:79:b8:58:46:eb:42:11:34:1b:54:46:
         74:d3:85:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9NWoaHZb1J5ybAA2PVrp7uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxODIyMjYzYTg3MDdjNzZmM2RiM2I2YmU3MTIyMjY5Yzgy
N2FlNTUwHhcNMjQwNTA2MTAwMjA5WhcNMjQwNTA3MTAwMjA5WjAzMTEwLwYDVQQD
EyhjZmFjNWVlYTI0NjY2Y2M4ZThiMTRlZmZhNTY1M2U0ODI3ZDA1YmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHtOSOn7Fi78xGTKhhaKWKuC3kvy
C5Alp4zzkCuVPiBrrlTPOdmrHsYeeA33f2CGkXDRRU0LZ3Se71MiGDiVI7EMkFnl
Q5MXlVFpZSHwav20zF4uZOrk4A3Wu9EyIBJ0n3/NuniGzh89OCELV6ko5lACF1dQ
B2GVvHQzX5NJ5TvHry+VdR1XW2LbasXfc7TLqRFSc34wutqst5pijp2iWQRQpMqA
mH7GZUP9AMi3sIilaK4qSk6KBzvC/AH5uqLqt+0CLNKJYd1yRTRTzGe1Lxn2CpCM
IJxEIiyebRFYDgl09JT+xNQx5yJYdZdquN7uNDG1OgRBNrks5fMUrzlu9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+sXuokZmzI6LFO/6VlPkgn0FuhMB8GA1UdIwQY
MBaAFNGCImOocHx289s7a+cSImnIJ65VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFlJaVk2aHdmSGJ6Mnp0cjV4SWlhY2ducmxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xNWYyNDctODI2Yi00M2E4LWE0MjIt
NGE3OTA0MTA2ZTNiLzEvMFlJaVk2aHdmSGJ6Mnp0cjV4SWlhY2ducmxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xNWYyNDctODI2Yi00M2E4LWE0MjItNGE3OTA0MTA2ZTNi
LzEvMFlJaVk2aHdmSGJ6Mnp0cjV4SWlhY2ducmxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchyP/pNi
04DsMc03CCJWaB/mDPRjxxCOoBiIIaVBtxRWhUXhu08H2vXuoQk3QhKr5+c9Uqlj
yQbPVvwSaY2pl3/U3c9D4yr/g8tUdNKjas8NrpWrfJkTay6gh14856EvWgL5a9cq
k2GhBgxYUAre76gNymmYZdKtGAfnA8pdeWJG9ZB7lJTPMvwJ/FQwbABdK62NLJ5I
Sc5d0+z5qDqd45iORx5pP01GIkO/3sil7W/dYV5JWKFrSb8iQ0eWaOaVQ7SlGMba
aNJ80XdM9cI/KcQjFuFvUzRyd232qI25MnYlGlPQ4cJ20MjBKQ4k0nyDrXm4WEbr
QhE0G1RGdNOFJg==
-----END CERTIFICATE-----
Generated at Mon May 6 19:00:52 2024 by rpki-client on console-fra.rpki-client.org