Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/a52b92-cf7a-4f84-9449-16697018a193/1/wLvyQZaLZbBZpMrf4jNEmVKWMTI.mft
File:                     wLvyQZaLZbBZpMrf4jNEmVKWMTI.mft (raw, json)
Hash identifier:          rYjkNA0nsni5CUwym9ybCXKunnds6FGYagVsw9n+S84=
Subject key identifier:   32:EF:9E:EE:3F:56:78:09:3F:89:CA:43:E8:7B:EC:30:A6:9E:20:EF
Authority key identifier: C0:BB:F2:41:96:8B:65:B0:59:A4:CA:DF:E2:33:44:99:52:96:31:32
Certificate issuer:       /CN=c0bbf241968b65b059a4cadfe233449952963132
Certificate serial:       018F8749C7D383910E378750534637D4CB97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wLvyQZaLZbBZpMrf4jNEmVKWMTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/a52b92-cf7a-4f84-9449-16697018a193/1/wLvyQZaLZbBZpMrf4jNEmVKWMTI.mft
Manifest number:          0159
Signing time:             Fri 17 May 2024 16:01:50 +0000
Manifest this update:     Fri 17 May 2024 16:01:50 +0000
Manifest next update:     Sat 18 May 2024 16:01:50 +0000
Files and hashes:         1: wLvyQZaLZbBZpMrf4jNEmVKWMTI.crl (hash: AMi+GdOfaSwrHisB4dw6Ak2ywGhiOK9XQOK9E0GVEog=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/a52b92-cf7a-4f84-9449-16697018a193/1/wLvyQZaLZbBZpMrf4jNEmVKWMTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/a52b92-cf7a-4f84-9449-16697018a193/1/wLvyQZaLZbBZpMrf4jNEmVKWMTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wLvyQZaLZbBZpMrf4jNEmVKWMTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:c7:d3:83:91:0e:37:87:50:53:46:37:d4:cb:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0bbf241968b65b059a4cadfe233449952963132
        Validity
            Not Before: May 17 16:01:50 2024 GMT
            Not After : May 18 16:01:50 2024 GMT
        Subject: CN=32ef9eee3f5678093f89ca43e87bec30a69e20ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:68:3b:db:ee:92:af:84:5b:68:9a:3c:03:37:
                    3b:73:74:c6:8b:8a:2a:ff:38:b1:2c:83:30:6d:77:
                    c9:30:57:72:44:1e:f9:7e:53:0d:a0:d7:a9:d2:f1:
                    37:a7:84:c2:7c:d5:da:69:34:53:c1:07:33:fa:ac:
                    67:51:d1:de:f3:69:b8:b8:e4:54:04:c1:4b:b0:78:
                    88:c9:1b:36:b7:a5:c2:a7:4e:f8:82:e8:ec:9f:c8:
                    ff:98:b2:a4:e4:29:02:85:8f:33:92:7e:e9:40:64:
                    cb:7c:b1:c8:b2:ab:2d:56:8b:65:3d:82:a9:56:97:
                    dc:41:1d:bc:2c:eb:e1:63:2d:5e:24:91:4c:4c:56:
                    39:5e:41:34:88:ca:13:bf:d5:5e:e2:58:af:4b:fe:
                    d3:ff:5a:f4:35:1d:49:91:15:cd:2b:62:0a:58:de:
                    b1:72:4f:38:fd:30:24:18:ae:8c:39:df:63:ec:57:
                    46:07:94:d0:e2:fa:c8:53:63:4f:4b:67:7f:20:4e:
                    25:88:16:e4:e1:f5:f2:d3:53:8f:1c:d1:83:00:1c:
                    6f:20:d2:7c:ae:31:eb:1b:45:94:68:ff:18:4d:b2:
                    96:eb:22:95:c9:74:29:12:4f:95:3f:ea:32:c5:5b:
                    34:0b:e9:30:ff:3f:12:09:ae:9f:dc:4b:66:c4:9d:
                    36:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:EF:9E:EE:3F:56:78:09:3F:89:CA:43:E8:7B:EC:30:A6:9E:20:EF
            X509v3 Authority Key Identifier:
                keyid:C0:BB:F2:41:96:8B:65:B0:59:A4:CA:DF:E2:33:44:99:52:96:31:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLvyQZaLZbBZpMrf4jNEmVKWMTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a52b92-cf7a-4f84-9449-16697018a193/1/wLvyQZaLZbBZpMrf4jNEmVKWMTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a52b92-cf7a-4f84-9449-16697018a193/1/wLvyQZaLZbBZpMrf4jNEmVKWMTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:a6:77:12:a5:6f:de:13:9a:0b:93:01:84:4b:02:92:79:d7:
         82:58:62:61:3c:2b:e6:b7:5c:c8:46:24:a6:fc:43:75:ea:4e:
         ba:b8:76:65:7a:38:57:34:a9:a0:89:17:6d:08:28:4b:fe:e0:
         c3:d0:24:f8:fe:9c:e6:c2:b2:40:75:f7:44:c0:5a:65:91:20:
         74:1e:91:bb:96:4b:9c:d0:6c:8c:a4:4c:1b:cc:ec:f4:42:de:
         d9:c9:14:ec:10:c0:41:06:13:09:0a:51:74:7f:88:68:83:c5:
         f1:75:91:26:47:fb:ab:07:24:a9:1b:1b:04:0a:a4:a9:af:99:
         10:b4:c2:e1:f3:0e:17:3e:89:12:a9:14:9e:15:0b:fa:1f:87:
         6c:c2:d3:c9:27:13:a3:63:51:42:0e:53:36:1a:d8:07:ea:0e:
         33:69:c9:d0:a5:ba:7b:9a:38:9e:31:90:f7:07:ea:10:9d:5c:
         e9:5c:3a:75:8b:de:2f:d6:c6:95:2d:d3:dd:0f:cf:c6:a1:e8:
         02:95:ff:76:67:94:7b:f6:8c:e6:56:23:6b:53:0f:86:22:1a:
         fa:7e:06:c2:83:20:ab:e3:ba:3d:5d:7b:c1:7a:db:a3:e1:42:
         9d:1c:01:4a:61:cf:c8:64:4f:72:f3:95:11:ca:d0:70:93:a1:
         8b:11:3c:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HScfTg5EON4dQU0Y31MuXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwYmJmMjQxOTY4YjY1YjA1OWE0Y2FkZmUyMzM0NDk5NTI5
NjMxMzIwHhcNMjQwNTE3MTYwMTUwWhcNMjQwNTE4MTYwMTUwWjAzMTEwLwYDVQQD
EygzMmVmOWVlZTNmNTY3ODA5M2Y4OWNhNDNlODdiZWMzMGE2OWUyMGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmg72+6Sr4RbaJo8Azc7c3TGi4oq
/zixLIMwbXfJMFdyRB75flMNoNep0vE3p4TCfNXaaTRTwQcz+qxnUdHe82m4uORU
BMFLsHiIyRs2t6XCp074gujsn8j/mLKk5CkChY8zkn7pQGTLfLHIsqstVotlPYKp
VpfcQR28LOvhYy1eJJFMTFY5XkE0iMoTv9Ve4livS/7T/1r0NR1JkRXNK2IKWN6x
ck84/TAkGK6MOd9j7FdGB5TQ4vrIU2NPS2d/IE4liBbk4fXy01OPHNGDABxvINJ8
rjHrG0WUaP8YTbKW6yKVyXQpEk+VP+oyxVs0C+kw/z8SCa6f3EtmxJ02JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLvnu4/VngJP4nKQ+h77DCmniDvMB8GA1UdIwQY
MBaAFMC78kGWi2WwWaTK3+IzRJlSljEyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0x2eVFaYUxaYkJacE1yZjRqTkVtVktXTVRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9hNTJiOTItY2Y3YS00Zjg0LTk0NDkt
MTY2OTcwMThhMTkzLzEvd0x2eVFaYUxaYkJacE1yZjRqTkVtVktXTVRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9hNTJiOTItY2Y3YS00Zjg0LTk0NDktMTY2OTcwMThhMTkz
LzEvd0x2eVFaYUxaYkJacE1yZjRqTkVtVktXTVRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu6Z3EqVv
3hOaC5MBhEsCknnXglhiYTwr5rdcyEYkpvxDdepOurh2ZXo4VzSpoIkXbQgoS/7g
w9Ak+P6c5sKyQHX3RMBaZZEgdB6Ru5ZLnNBsjKRMG8zs9ELe2ckU7BDAQQYTCQpR
dH+IaIPF8XWRJkf7qwckqRsbBAqkqa+ZELTC4fMOFz6JEqkUnhUL+h+HbMLTyScT
o2NRQg5TNhrYB+oOM2nJ0KW6e5o4njGQ9wfqEJ1c6Vw6dYveL9bGlS3T3Q/PxqHo
ApX/dmeUe/aM5lYja1MPhiIa+n4GwoMgq+O6PV17wXrbo+FCnRwBSmHPyGRPcvOV
EcrQcJOhixE84A==
-----END CERTIFICATE-----
Generated at Fri May 17 19:10:48 2024 by rpki-client on console-fra.rpki-client.org