Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/119fe2-a991-40e4-a75a-f4c0871d9dcc/1/xZk4ibc0AY23UJRb-0Vn_a2GxJg.mft
File:                     xZk4ibc0AY23UJRb-0Vn_a2GxJg.mft (raw, json)
Hash identifier:          IZ5Mbnz/JvZgsX3p/6mfmtN/HHvo4v9upDc+vb2H0is=
Subject key identifier:   7F:72:C7:86:DD:3D:47:EB:92:D0:13:B5:D1:14:88:5F:5E:A8:99:6A
Authority key identifier: C5:99:38:89:B7:34:01:8D:B7:50:94:5B:FB:45:67:FD:AD:86:C4:98
Certificate issuer:       /CN=c5993889b734018db750945bfb4567fdad86c498
Certificate serial:       018F8749C447F4C3211B1C92A31BB588CA7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xZk4ibc0AY23UJRb-0Vn_a2GxJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/119fe2-a991-40e4-a75a-f4c0871d9dcc/1/xZk4ibc0AY23UJRb-0Vn_a2GxJg.mft
Manifest number:          0D34
Signing time:             Fri 17 May 2024 16:01:49 +0000
Manifest this update:     Fri 17 May 2024 16:01:49 +0000
Manifest next update:     Sat 18 May 2024 16:01:49 +0000
Files and hashes:         1: xZk4ibc0AY23UJRb-0Vn_a2GxJg.crl (hash: E9ZbpzptVPzNbDhtt8M6WIc7m79d/i6xkllNdXV+XkM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/119fe2-a991-40e4-a75a-f4c0871d9dcc/1/xZk4ibc0AY23UJRb-0Vn_a2GxJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/119fe2-a991-40e4-a75a-f4c0871d9dcc/1/xZk4ibc0AY23UJRb-0Vn_a2GxJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xZk4ibc0AY23UJRb-0Vn_a2GxJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:c4:47:f4:c3:21:1b:1c:92:a3:1b:b5:88:ca:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5993889b734018db750945bfb4567fdad86c498
        Validity
            Not Before: May 17 16:01:49 2024 GMT
            Not After : May 18 16:01:49 2024 GMT
        Subject: CN=7f72c786dd3d47eb92d013b5d114885f5ea8996a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:75:23:b4:1a:11:c6:e8:5d:5a:75:db:64:9f:
                    e5:9f:7e:50:cb:8f:b7:be:fa:43:9b:2e:f5:ac:7e:
                    35:83:aa:97:ad:45:4a:e4:a0:6d:2e:b2:bf:b2:09:
                    0a:11:17:33:ee:89:43:6a:f2:df:29:23:b0:5a:80:
                    3e:9e:39:09:cf:3c:23:f7:2b:7b:a9:60:db:c2:d7:
                    02:36:56:77:40:e7:ae:af:8f:de:e9:2a:8c:e3:c9:
                    68:90:84:71:3d:2f:f5:4d:7f:3c:db:30:e9:71:50:
                    49:a2:20:69:30:a0:4d:f6:a0:0f:7f:f6:76:51:0a:
                    bf:5b:3f:96:62:37:64:90:e7:4c:91:81:66:02:ac:
                    cf:3a:ca:74:a0:fd:29:3a:94:92:d0:66:e2:4b:a1:
                    ab:3e:79:60:9e:d3:1a:4e:0a:09:65:08:40:42:f3:
                    06:77:0e:09:24:61:79:8c:f3:6a:30:af:48:3c:b5:
                    38:90:4c:80:72:18:84:d9:0f:3e:da:94:f9:88:90:
                    6d:18:b3:40:54:82:4d:c3:2d:58:1d:04:a2:53:f8:
                    7d:24:0a:54:72:e9:9a:5f:10:b9:11:48:44:8d:ac:
                    72:93:c8:6f:67:a3:6d:fb:ca:50:54:dc:7e:7f:e6:
                    14:1b:e6:b0:a4:aa:be:4b:03:35:c9:27:ad:31:9a:
                    b4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:72:C7:86:DD:3D:47:EB:92:D0:13:B5:D1:14:88:5F:5E:A8:99:6A
            X509v3 Authority Key Identifier:
                keyid:C5:99:38:89:B7:34:01:8D:B7:50:94:5B:FB:45:67:FD:AD:86:C4:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZk4ibc0AY23UJRb-0Vn_a2GxJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/119fe2-a991-40e4-a75a-f4c0871d9dcc/1/xZk4ibc0AY23UJRb-0Vn_a2GxJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/119fe2-a991-40e4-a75a-f4c0871d9dcc/1/xZk4ibc0AY23UJRb-0Vn_a2GxJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:06:a9:9f:d5:d2:c2:9d:31:2f:9a:9e:f4:16:b6:84:02:3f:
         da:f4:b3:a1:62:3d:89:76:59:40:34:df:8e:fd:3f:a7:83:f3:
         dd:a7:91:35:57:26:0e:5a:e2:80:7d:cc:50:26:cb:1d:c2:8f:
         df:1b:2d:0d:d7:5e:b8:14:fa:6b:8a:1b:17:33:de:27:4a:29:
         27:65:98:a3:9d:be:b4:6e:33:9d:a4:f2:62:84:96:a2:88:04:
         1b:ee:b6:b2:dc:de:29:06:d2:69:f7:a7:5f:61:40:f7:b0:d0:
         bd:93:37:03:83:29:94:43:38:19:07:95:23:ea:fa:0a:92:d2:
         63:55:63:85:d0:1c:4f:de:f4:0f:a1:df:ec:f6:5d:4e:ed:fb:
         6a:b5:4b:c4:a8:b5:0c:cd:30:70:b1:f0:69:65:99:5d:2a:71:
         98:6c:5e:88:78:35:44:e8:50:21:09:6c:7b:a5:63:47:ee:fe:
         fa:e1:35:b6:56:a0:71:86:bd:12:bf:86:60:38:5f:c8:3e:a8:
         53:41:27:dc:62:72:d1:32:1e:56:5c:f5:55:92:44:c0:48:bd:
         cc:4f:d6:90:09:cb:33:60:f2:b6:b0:63:62:51:48:2b:90:fe:
         b3:04:79:53:38:ce:23:3f:a3:7e:31:a5:c6:f4:39:4c:c7:3a:
         f0:1d:e8:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HScRH9MMhGxySoxu1iMp/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1OTkzODg5YjczNDAxOGRiNzUwOTQ1YmZiNDU2N2ZkYWQ4
NmM0OTgwHhcNMjQwNTE3MTYwMTQ5WhcNMjQwNTE4MTYwMTQ5WjAzMTEwLwYDVQQD
Eyg3ZjcyYzc4NmRkM2Q0N2ViOTJkMDEzYjVkMTE0ODg1ZjVlYTg5OTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3UjtBoRxuhdWnXbZJ/ln35Qy4+3
vvpDmy71rH41g6qXrUVK5KBtLrK/sgkKERcz7olDavLfKSOwWoA+njkJzzwj9yt7
qWDbwtcCNlZ3QOeur4/e6SqM48lokIRxPS/1TX882zDpcVBJoiBpMKBN9qAPf/Z2
UQq/Wz+WYjdkkOdMkYFmAqzPOsp0oP0pOpSS0GbiS6GrPnlgntMaTgoJZQhAQvMG
dw4JJGF5jPNqMK9IPLU4kEyAchiE2Q8+2pT5iJBtGLNAVIJNwy1YHQSiU/h9JApU
cumaXxC5EUhEjaxyk8hvZ6Nt+8pQVNx+f+YUG+awpKq+SwM1ySetMZq0AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9yx4bdPUfrktATtdEUiF9eqJlqMB8GA1UdIwQY
MBaAFMWZOIm3NAGNt1CUW/tFZ/2thsSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFprNGliYzBBWTIzVUpSYi0wVm5fYTJHeEpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8xMTlmZTItYTk5MS00MGU0LWE3NWEt
ZjRjMDg3MWQ5ZGNjLzEveFprNGliYzBBWTIzVUpSYi0wVm5fYTJHeEpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8xMTlmZTItYTk5MS00MGU0LWE3NWEtZjRjMDg3MWQ5ZGNj
LzEveFprNGliYzBBWTIzVUpSYi0wVm5fYTJHeEpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwapn9XS
wp0xL5qe9Ba2hAI/2vSzoWI9iXZZQDTfjv0/p4Pz3aeRNVcmDlrigH3MUCbLHcKP
3xstDddeuBT6a4obFzPeJ0opJ2WYo52+tG4znaTyYoSWoogEG+62stzeKQbSafen
X2FA97DQvZM3A4MplEM4GQeVI+r6CpLSY1VjhdAcT970D6Hf7PZdTu37arVLxKi1
DM0wcLHwaWWZXSpxmGxeiHg1ROhQIQlse6VjR+7++uE1tlagcYa9Er+GYDhfyD6o
U0En3GJy0TIeVlz1VZJEwEi9zE/WkAnLM2DytrBjYlFIK5D+swR5UzjOIz+jfjGl
xvQ5TMc68B3o8w==
-----END CERTIFICATE-----
Generated at Fri May 17 19:12:06 2024 by rpki-client on console-fra.rpki-client.org