Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
File:                     U-r4Oizdyf0L4onM-vMrMjMEz04.mft (raw, json)
Hash identifier:          Mkndhqb2yWxMR9H2e4iz8RDe2oJGYYEYoO/WCx54wtY=
Subject key identifier:   75:F2:8D:BD:2A:9F:73:75:B6:FA:CB:C9:DF:E2:F4:81:A2:40:6C:B3
Authority key identifier: 53:EA:F8:3A:2C:DD:C9:FD:0B:E2:89:CC:FA:F3:2B:32:33:04:CF:4E
Certificate issuer:       /CN=53eaf83a2cddc9fd0be289ccfaf32b323304cf4e
Certificate serial:       018F87EDB2EBF48A2D8B75F30337A85704F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
Manifest number:          0846
Signing time:             Fri 17 May 2024 19:00:52 +0000
Manifest this update:     Fri 17 May 2024 19:00:52 +0000
Manifest next update:     Sat 18 May 2024 19:00:52 +0000
Files and hashes:         1: U-r4Oizdyf0L4onM-vMrMjMEz04.crl (hash: jaeq6LeYqhZtxEaQvaEdtA2zxIT2EY8ikMdiFdXQ+Qo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:b2:eb:f4:8a:2d:8b:75:f3:03:37:a8:57:04:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53eaf83a2cddc9fd0be289ccfaf32b323304cf4e
        Validity
            Not Before: May 17 19:00:52 2024 GMT
            Not After : May 18 19:00:52 2024 GMT
        Subject: CN=75f28dbd2a9f7375b6facbc9dfe2f481a2406cb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b8:d3:c1:6f:2d:3d:e4:99:0f:6b:ca:7a:c3:
                    b8:71:ce:06:18:4c:99:07:bc:b5:71:e8:31:e4:85:
                    25:fd:37:d5:6e:24:e3:24:6b:3d:f5:22:56:e8:a5:
                    02:83:41:e5:69:e4:0f:71:08:4d:28:79:e2:d7:72:
                    6d:16:d6:43:09:b7:75:6f:80:0d:c2:22:fc:62:cb:
                    31:84:77:1d:03:14:d5:78:3f:67:2b:e2:d8:f2:dd:
                    c7:c4:3c:21:a8:ce:b8:9e:ba:08:08:4b:43:4f:b6:
                    d5:ba:47:0b:b8:32:45:47:5c:b4:10:cc:0c:11:05:
                    1a:5c:a5:47:80:81:af:b7:49:ba:91:ea:12:3f:1f:
                    70:57:8c:96:cb:1a:63:43:cb:9a:5c:3d:e8:c3:00:
                    4e:35:a7:31:40:49:e6:bf:a6:88:ed:13:74:99:9d:
                    08:5c:5a:f2:58:fa:44:1d:57:22:11:9a:9f:e3:1c:
                    93:61:4d:ba:71:c0:6f:44:88:f8:aa:6a:e3:f5:2a:
                    ee:d9:f8:2a:77:fd:0c:83:e6:84:28:eb:d8:7e:cf:
                    94:1b:d8:c4:69:e4:88:23:ff:44:1e:e2:4d:37:a5:
                    b1:55:97:42:0a:c6:e2:85:34:a9:ed:23:05:c0:d2:
                    5f:2a:d7:07:5c:b6:79:c3:36:ea:7f:a6:d5:b5:0c:
                    34:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F2:8D:BD:2A:9F:73:75:B6:FA:CB:C9:DF:E2:F4:81:A2:40:6C:B3
            X509v3 Authority Key Identifier:
                keyid:53:EA:F8:3A:2C:DD:C9:FD:0B:E2:89:CC:FA:F3:2B:32:33:04:CF:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:0b:a8:5c:d8:e7:ef:e6:63:db:d7:12:48:88:97:ee:a3:a3:
         63:88:64:54:c9:9b:f0:d8:aa:71:e0:cc:ab:38:7b:b4:96:3e:
         cb:c0:9d:68:08:13:e7:26:1c:8d:18:39:b8:c1:93:9f:9a:95:
         81:d9:e5:bf:04:7c:33:7b:ef:3d:cd:f9:28:ae:5e:6f:c5:d2:
         3f:01:a1:d0:65:7d:f4:9a:d1:5b:24:f6:4b:d3:ca:52:5a:ee:
         67:72:0a:0f:27:b1:8c:19:76:5c:ac:ba:e5:d2:9d:da:e5:d1:
         20:dd:e8:73:49:d1:7d:3c:0a:e2:62:63:60:95:15:a7:87:61:
         53:cf:fc:32:2f:b7:57:71:73:b1:a2:20:66:75:ee:12:c3:e3:
         5a:80:d0:e7:4b:9c:66:b5:c9:f8:a8:7b:0b:2f:64:a9:03:43:
         bb:07:9e:48:8d:fa:1d:16:35:ca:c8:bd:8a:dc:c5:e4:24:40:
         34:16:dd:f6:57:dc:92:48:a2:7e:a6:83:17:0c:a2:92:e6:80:
         bf:a6:30:49:00:d8:2c:b9:96:23:f6:ff:f2:9d:3d:06:a0:e8:
         b6:ba:71:0e:cb:32:93:f8:e8:2a:af:2c:ee:42:a0:0c:b7:65:
         bf:af:3e:4b:1c:60:fd:93:d3:b6:a3:2a:42:74:98:6b:cd:6b:
         89:d2:50:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7bLr9Ioti3XzAzeoVwTzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZWFmODNhMmNkZGM5ZmQwYmUyODljY2ZhZjMyYjMyMzMw
NGNmNGUwHhcNMjQwNTE3MTkwMDUyWhcNMjQwNTE4MTkwMDUyWjAzMTEwLwYDVQQD
Eyg3NWYyOGRiZDJhOWY3Mzc1YjZmYWNiYzlkZmUyZjQ4MWEyNDA2Y2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrjTwW8tPeSZD2vKesO4cc4GGEyZ
B7y1cegx5IUl/TfVbiTjJGs99SJW6KUCg0HlaeQPcQhNKHni13JtFtZDCbd1b4AN
wiL8YssxhHcdAxTVeD9nK+LY8t3HxDwhqM64nroICEtDT7bVukcLuDJFR1y0EMwM
EQUaXKVHgIGvt0m6keoSPx9wV4yWyxpjQ8uaXD3owwBONacxQEnmv6aI7RN0mZ0I
XFryWPpEHVciEZqf4xyTYU26ccBvRIj4qmrj9Sru2fgqd/0Mg+aEKOvYfs+UG9jE
aeSII/9EHuJNN6WxVZdCCsbihTSp7SMFwNJfKtcHXLZ5wzbqf6bVtQw0OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXyjb0qn3N1tvrLyd/i9IGiQGyzMB8GA1UdIwQY
MBaAFFPq+Dos3cn9C+KJzPrzKzIzBM9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVS1yNE9pemR5ZjBMNG9uTS12TXJNak1FejA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yYzMwMzgtOWM0NS00M2U4LWI2OWYt
Yjg0Y2ZmMTg4ZjU1LzEvVS1yNE9pemR5ZjBMNG9uTS12TXJNak1FejA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yYzMwMzgtOWM0NS00M2U4LWI2OWYtYjg0Y2ZmMTg4ZjU1
LzEvVS1yNE9pemR5ZjBMNG9uTS12TXJNak1FejA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHguoXNjn
7+Zj29cSSIiX7qOjY4hkVMmb8NiqceDMqzh7tJY+y8CdaAgT5yYcjRg5uMGTn5qV
gdnlvwR8M3vvPc35KK5eb8XSPwGh0GV99JrRWyT2S9PKUlruZ3IKDyexjBl2XKy6
5dKd2uXRIN3oc0nRfTwK4mJjYJUVp4dhU8/8Mi+3V3FzsaIgZnXuEsPjWoDQ50uc
ZrXJ+Kh7Cy9kqQNDuweeSI36HRY1ysi9itzF5CRANBbd9lfckkiifqaDFwyikuaA
v6YwSQDYLLmWI/b/8p09BqDotrpxDssyk/joKq8s7kKgDLdlv68+Sxxg/ZPTtqMq
QnSYa81ridJQMQ==
-----END CERTIFICATE-----
Generated at Fri May 17 20:19:10 2024 by rpki-client on console-fra.rpki-client.org