Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
File:                     2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft (raw, json)
Hash identifier:          4tdhijIXEazbsO4ffTuDDYMl65DyiLvwqUuJmS78qmE=
Subject key identifier:   C8:0B:E9:A6:21:4A:FD:C3:87:64:A6:17:EF:61:EA:B9:AA:F5:1E:3C
Authority key identifier: DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
Certificate issuer:       /CN=dab1c03088ebfe553812b31547c03c90a25d8771
Certificate serial:       018F41C448494FF34644EC1ED2369EECDE1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
Manifest number:          114F
Signing time:             Sat 04 May 2024 04:02:13 +0000
Manifest this update:     Sat 04 May 2024 04:02:13 +0000
Manifest next update:     Sun 05 May 2024 04:02:13 +0000
Files and hashes:         1: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl (hash: yB1BiAMk8dPoCasy0vN555gDgFIwPuwt9YtW4rZJa6g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c4:48:49:4f:f3:46:44:ec:1e:d2:36:9e:ec:de:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab1c03088ebfe553812b31547c03c90a25d8771
        Validity
            Not Before: May  4 04:02:13 2024 GMT
            Not After : May  5 04:02:13 2024 GMT
        Subject: CN=c80be9a6214afdc38764a617ef61eab9aaf51e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:85:75:ab:4f:4a:86:cb:96:e1:78:7a:07:c2:
                    cc:28:a8:a0:42:45:34:4d:d7:d8:05:17:bc:56:5f:
                    89:ea:aa:72:fa:bb:eb:37:98:fa:3e:db:ff:7f:80:
                    35:83:b0:f8:e6:bf:0c:e6:8f:74:70:a0:c4:13:d5:
                    3a:d5:f1:b1:71:a3:d0:d5:12:e0:26:46:59:aa:56:
                    61:d4:7d:12:69:34:03:8d:68:5b:81:e8:a6:68:82:
                    3e:1d:f9:ca:7c:75:be:93:79:d4:7c:17:5c:74:c0:
                    66:1d:f3:07:a6:85:cc:06:98:ec:f1:d4:67:ca:9f:
                    f7:f2:9a:50:36:c6:3f:51:11:80:e4:e6:4a:ac:f7:
                    0d:ae:d2:12:9a:21:66:39:f1:00:e9:a0:45:15:53:
                    8e:98:3b:6c:24:b0:a6:10:fb:97:b8:a6:ce:2e:7f:
                    0a:53:de:20:1d:56:d1:74:e4:f3:4f:a8:90:92:12:
                    90:31:8d:c5:81:16:30:cf:fb:74:8a:d9:06:41:30:
                    cb:47:f8:c7:d2:26:1f:4d:41:44:fd:f6:59:0a:3e:
                    8d:ed:42:85:f7:a4:72:9c:56:6e:76:84:2b:4a:34:
                    53:a7:db:9e:e7:16:20:4d:93:ac:b6:db:b5:a7:cd:
                    7f:e5:97:fa:d4:15:6b:d8:ae:76:23:ff:52:20:47:
                    23:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:0B:E9:A6:21:4A:FD:C3:87:64:A6:17:EF:61:EA:B9:AA:F5:1E:3C
            X509v3 Authority Key Identifier:
                keyid:DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:98:b4:65:bb:c6:5c:8f:ba:b8:96:9a:2d:73:47:41:37:57:
         15:d6:27:76:0c:dd:4f:96:af:82:7c:d3:e5:d8:9a:d3:4f:43:
         dc:78:39:8e:39:57:fb:24:cd:d0:f0:45:fa:8b:d0:a2:e1:8e:
         36:9d:59:70:11:35:d7:5c:22:2d:33:3c:d4:57:c5:9b:79:1e:
         50:04:9d:15:e3:33:5a:3e:89:72:6f:4e:f7:43:2e:00:1b:bb:
         f9:0f:3a:18:a7:40:2e:48:9f:39:9d:32:47:b1:8a:ba:cf:8a:
         64:46:4b:fa:0a:ad:af:e0:e9:dd:9e:e4:08:c4:9d:74:1d:3a:
         7c:4e:b4:27:22:d3:4a:a9:98:c1:39:f1:4a:52:72:e0:9d:ee:
         6f:d2:4c:8f:83:f2:ff:4e:e8:57:b0:7f:3d:8d:79:5b:c1:7d:
         33:c0:fd:a0:91:dd:56:28:cf:36:2a:53:18:ad:a4:c3:c5:19:
         5f:85:f8:5b:85:76:57:1a:65:5e:be:5f:b9:27:ff:a2:77:5e:
         01:a6:73:9e:84:69:d4:c5:7d:7b:28:fc:69:fb:60:d4:22:ca:
         d2:13:35:5d:f9:3c:3f:7b:1f:5c:01:14:af:25:d3:4c:cd:b4:
         51:52:d7:2e:42:05:4f:62:0c:f8:2a:05:97:8d:95:af:2d:36:
         f4:b3:a6:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9BxEhJT/NGROwe0jae7N4eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYjFjMDMwODhlYmZlNTUzODEyYjMxNTQ3YzAzYzkwYTI1
ZDg3NzEwHhcNMjQwNTA0MDQwMjEzWhcNMjQwNTA1MDQwMjEzWjAzMTEwLwYDVQQD
EyhjODBiZTlhNjIxNGFmZGMzODc2NGE2MTdlZjYxZWFiOWFhZjUxZTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoV1q09KhsuW4Xh6B8LMKKigQkU0
TdfYBRe8Vl+J6qpy+rvrN5j6Ptv/f4A1g7D45r8M5o90cKDEE9U61fGxcaPQ1RLg
JkZZqlZh1H0SaTQDjWhbgeimaII+HfnKfHW+k3nUfBdcdMBmHfMHpoXMBpjs8dRn
yp/38ppQNsY/URGA5OZKrPcNrtISmiFmOfEA6aBFFVOOmDtsJLCmEPuXuKbOLn8K
U94gHVbRdOTzT6iQkhKQMY3FgRYwz/t0itkGQTDLR/jH0iYfTUFE/fZZCj6N7UKF
96RynFZudoQrSjRTp9ue5xYgTZOsttu1p81/5Zf61BVr2K52I/9SIEcjoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgL6aYhSv3Dh2SmF+9h6rmq9R48MB8GA1UdIwQY
MBaAFNqxwDCI6/5VOBKzFUfAPJCiXYdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnJIQU1JanJfbFU0RXJNVlI4QThrS0pkaDNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zNmMyYWEtMmUyNC00NGZiLTllMGEt
YjcyMzk4MDcwODIzLzEvMnJIQU1JanJfbFU0RXJNVlI4QThrS0pkaDNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zNmMyYWEtMmUyNC00NGZiLTllMGEtYjcyMzk4MDcwODIz
LzEvMnJIQU1JanJfbFU0RXJNVlI4QThrS0pkaDNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZi0ZbvG
XI+6uJaaLXNHQTdXFdYndgzdT5avgnzT5dia009D3Hg5jjlX+yTN0PBF+ovQouGO
Np1ZcBE111wiLTM81FfFm3keUASdFeMzWj6Jcm9O90MuABu7+Q86GKdALkifOZ0y
R7GKus+KZEZL+gqtr+Dp3Z7kCMSddB06fE60JyLTSqmYwTnxSlJy4J3ub9JMj4Py
/07oV7B/PY15W8F9M8D9oJHdVijPNipTGK2kw8UZX4X4W4V2VxplXr5fuSf/onde
AaZznoRp1MV9eyj8aftg1CLK0hM1Xfk8P3sfXAEUryXTTM20UVLXLkIFT2IM+CoF
l42Vry029LOmng==
-----END CERTIFICATE-----
Generated at Sat May 4 04:57:35 2024 by rpki-client on console-fra.rpki-client.org