Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
File:                     0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft (raw, json)
Hash identifier:          qMOZfLLP6yrxDAWYSTtfU90RQ8nmi1Gv1jVNOZXSF4g=
Subject key identifier:   00:76:CF:64:EC:5D:97:D9:7D:07:C8:E2:95:6E:33:B9:2B:C8:00:33
Authority key identifier: D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
Certificate issuer:       /CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Certificate serial:       018F4B6DA7D5F654E2EF8FDB8727931869CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
Manifest number:          0E14
Signing time:             Mon 06 May 2024 01:03:48 +0000
Manifest this update:     Mon 06 May 2024 01:03:48 +0000
Manifest next update:     Tue 07 May 2024 01:03:48 +0000
Files and hashes:         1: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl (hash: Upkal7aZ1PLBDz1Fobd/vLryoqfwiUt9N22xFACcFsA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6d:a7:d5:f6:54:e2:ef:8f:db:87:27:93:18:69:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
        Validity
            Not Before: May  6 01:03:48 2024 GMT
            Not After : May  7 01:03:48 2024 GMT
        Subject: CN=0076cf64ec5d97d97d07c8e2956e33b92bc80033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0f:4b:37:d4:d7:94:e9:46:4e:ec:cf:c2:5e:
                    aa:30:ba:a3:0a:88:18:09:22:82:f9:82:90:7f:7c:
                    07:a1:28:54:e7:d1:67:98:11:6f:f6:fe:9e:5a:fb:
                    24:27:14:c9:62:e8:8c:d8:90:17:38:65:f2:9e:65:
                    88:50:9e:3e:df:de:06:f4:43:96:5a:16:4e:d2:7f:
                    d1:28:e6:e6:45:96:10:46:fb:0f:f4:26:40:d2:84:
                    94:1b:dd:07:34:0d:fe:c6:67:04:0f:0e:b4:3c:9e:
                    20:40:04:40:e8:54:39:86:0b:c3:d1:d1:96:ec:29:
                    dd:64:a2:55:7a:76:87:05:33:9a:f1:f4:81:4e:ff:
                    38:c2:0c:36:fe:2c:7b:ff:71:e7:c7:ff:41:87:36:
                    da:b2:fb:2a:5c:ce:e3:54:07:d1:f4:02:7c:e4:c3:
                    34:fa:b3:de:b9:94:5f:9c:33:64:2a:3f:86:ad:e8:
                    b5:eb:62:69:5c:a0:76:a1:a0:2d:71:ff:97:9e:5a:
                    2f:5c:43:0f:74:81:12:cf:54:d4:3a:cf:15:14:04:
                    02:a0:61:19:d9:2f:8a:03:50:2e:31:e8:87:1a:80:
                    8e:a7:8f:8b:a1:47:5a:91:c0:2b:de:97:45:8d:0a:
                    bd:06:e1:dd:8e:77:bd:8e:aa:bc:14:da:59:13:39:
                    07:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:76:CF:64:EC:5D:97:D9:7D:07:C8:E2:95:6E:33:B9:2B:C8:00:33
            X509v3 Authority Key Identifier:
                keyid:D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a9:88:13:37:8a:93:f5:3c:8d:40:49:b8:da:02:14:e6:6e:
         9c:e7:a2:fd:d6:76:d7:12:24:37:f4:06:8a:8b:a4:f4:9c:f1:
         15:c9:cc:8b:1a:aa:d0:25:ba:7a:9e:a2:e7:e6:35:b9:2e:1d:
         38:fa:ad:a1:33:11:56:2f:d5:c5:6b:54:d8:59:09:3f:b1:a8:
         e4:75:2d:d1:ac:bd:b7:d6:12:5d:c9:c2:ef:a6:d1:04:30:ce:
         cc:77:9c:a1:f3:6b:21:d0:c1:1c:e1:bc:48:c9:e0:97:79:c9:
         39:2a:5c:1e:73:c3:bc:96:1c:47:e0:e2:ce:13:a6:ab:8f:13:
         7d:4b:ab:17:49:32:3d:57:18:f8:46:5e:c4:5b:fa:6f:68:af:
         c7:7a:43:73:aa:88:13:94:22:fe:68:e6:b3:9f:4d:4d:61:64:
         78:4a:ef:c5:69:50:4f:24:82:50:c8:8f:fb:bb:76:27:f8:10:
         c9:7a:b7:26:ae:f4:26:c4:fe:0e:74:a7:62:02:95:2d:b3:d8:
         a9:6b:5f:df:6b:25:2c:ac:a0:a8:43:52:5b:f2:a1:a0:22:b4:
         3a:1e:ec:12:f8:ea:85:f2:f0:65:16:ea:b2:f6:84:bf:40:e9:
         aa:67:4e:2d:37:e6:64:43:18:2e:e1:cc:2f:94:27:1e:ee:e1:
         54:b8:f2:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9LbafV9lTi74/bhyeTGGnOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMmYyOWZjMDdlZDRiNTIxOGNkMTI3ZGEyYWM1N2ZhMDYz
NDUyZDkwHhcNMjQwNTA2MDEwMzQ4WhcNMjQwNTA3MDEwMzQ4WjAzMTEwLwYDVQQD
EygwMDc2Y2Y2NGVjNWQ5N2Q5N2QwN2M4ZTI5NTZlMzNiOTJiYzgwMDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ9LN9TXlOlGTuzPwl6qMLqjCogY
CSKC+YKQf3wHoShU59FnmBFv9v6eWvskJxTJYuiM2JAXOGXynmWIUJ4+394G9EOW
WhZO0n/RKObmRZYQRvsP9CZA0oSUG90HNA3+xmcEDw60PJ4gQARA6FQ5hgvD0dGW
7CndZKJVenaHBTOa8fSBTv84wgw2/ix7/3Hnx/9BhzbasvsqXM7jVAfR9AJ85MM0
+rPeuZRfnDNkKj+Grei162JpXKB2oaAtcf+XnlovXEMPdIESz1TUOs8VFAQCoGEZ
2S+KA1AuMeiHGoCOp4+LoUdakcAr3pdFjQq9BuHdjne9jqq8FNpZEzkHKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAB2z2TsXZfZfQfI4pVuM7kryAAzMB8GA1UdIwQY
MBaAFNEvKfwH7UtSGM0SfaKsV/oGNFLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFM4cF9BZnRTMUlZelJKOW9xeFgtZ1kwVXRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jOTQ1YjktNGJlZi00NzEzLWE4OGEt
ZTBkODIxZTQ1ZmZjLzEvMFM4cF9BZnRTMUlZelJKOW9xeFgtZ1kwVXRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9jOTQ1YjktNGJlZi00NzEzLWE4OGEtZTBkODIxZTQ1ZmZj
LzEvMFM4cF9BZnRTMUlZelJKOW9xeFgtZ1kwVXRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKmIEzeK
k/U8jUBJuNoCFOZunOei/dZ21xIkN/QGiouk9JzxFcnMixqq0CW6ep6i5+Y1uS4d
OPqtoTMRVi/VxWtU2FkJP7Go5HUt0ay9t9YSXcnC76bRBDDOzHecofNrIdDBHOG8
SMngl3nJOSpcHnPDvJYcR+DizhOmq48TfUurF0kyPVcY+EZexFv6b2ivx3pDc6qI
E5Qi/mjms59NTWFkeErvxWlQTySCUMiP+7t2J/gQyXq3Jq70JsT+DnSnYgKVLbPY
qWtf32slLKygqENSW/KhoCK0Oh7sEvjqhfLwZRbqsvaEv0DpqmdOLTfmZEMYLuHM
L5QnHu7hVLjyLQ==
-----END CERTIFICATE-----
Generated at Mon May 6 02:23:48 2024 by rpki-client on console-fra.rpki-client.org