Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
File:                     14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft (raw, json)
Hash identifier:          zzGBeldEGowxeXsqjw2qMfXmiQaiICS4TYgJiEysy0E=
Subject key identifier:   8C:A1:64:6B:80:C5:39:CD:B6:6A:7E:AC:98:0D:55:BD:C9:D6:0E:3F
Authority key identifier: D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
Certificate issuer:       /CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Certificate serial:       018F8711447FC881799C55B86484D0CC8216
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
Manifest number:          4E
Signing time:             Fri 17 May 2024 15:00:06 +0000
Manifest this update:     Fri 17 May 2024 15:00:06 +0000
Manifest next update:     Sat 18 May 2024 15:00:06 +0000
Files and hashes:         1: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl (hash: gAn6XcsPNl7oZyYTQ9oH47hxYd6wfPkhZLlCUZhjCPI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 15:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:11:44:7f:c8:81:79:9c:55:b8:64:84:d0:cc:82:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d788851981cfb3c15624b6e97f60a3d991d6d969
        Validity
            Not Before: May 17 15:00:06 2024 GMT
            Not After : May 18 15:00:06 2024 GMT
        Subject: CN=8ca1646b80c539cdb66a7eac980d55bdc9d60e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7f:a9:b7:4c:74:66:90:79:16:f2:71:63:d4:
                    de:ac:95:57:41:8d:7d:11:4c:66:eb:c1:25:7a:ee:
                    7e:a3:11:72:ab:80:30:79:3b:8d:e8:7d:5b:36:97:
                    61:46:70:59:8b:ad:8f:52:98:73:a9:b9:04:78:fb:
                    62:24:7e:3c:29:4a:f4:57:4c:c7:47:a1:7d:29:c8:
                    fd:42:33:aa:45:5b:58:79:32:e0:67:ec:d9:b1:09:
                    9e:bb:ab:50:f9:7e:9e:83:c3:54:fd:ce:4a:15:36:
                    88:b6:43:be:c4:65:dc:5f:f1:04:9f:e3:6b:30:29:
                    15:aa:31:92:46:ed:60:c3:44:d5:4b:eb:8e:5e:ca:
                    97:a1:f0:3d:89:5b:7b:40:64:87:f8:0d:25:1a:94:
                    4f:16:ab:d7:52:ba:16:3f:64:f3:99:46:29:4f:89:
                    94:29:7e:bf:0e:2d:ab:09:f3:ad:f1:00:51:df:c0:
                    0e:09:fa:3f:7f:a6:fe:f6:77:0b:4d:b2:ea:19:1d:
                    dc:19:a3:98:ee:b0:a3:b9:e0:0e:c2:66:01:78:5e:
                    49:58:80:9f:fa:6a:c3:d4:6b:38:01:cb:09:bf:88:
                    d3:75:2c:47:53:56:be:eb:51:0a:58:e1:27:d8:f7:
                    5c:fc:f0:9f:8b:67:ff:7d:92:10:3f:02:6c:a8:39:
                    81:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A1:64:6B:80:C5:39:CD:B6:6A:7E:AC:98:0D:55:BD:C9:D6:0E:3F
            X509v3 Authority Key Identifier:
                keyid:D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:00:a6:09:8d:18:1d:ea:09:9e:ea:0f:f0:4c:47:51:ea:40:
         14:0b:14:9e:be:10:20:82:3a:52:2e:af:2a:5d:87:bb:8a:c1:
         ed:10:16:5e:0c:f7:4d:ef:ed:09:e0:16:fa:d3:61:d3:8d:6d:
         27:36:f9:6f:93:e6:43:8e:f9:62:e9:e0:c6:60:ca:f1:93:f1:
         63:ab:95:d3:b1:52:c9:e2:f7:9e:fd:13:50:9f:53:df:35:6c:
         8b:7f:ac:3f:e4:8d:be:e8:25:5d:55:07:5d:25:ef:8e:a5:1d:
         02:01:8e:eb:e2:ef:92:ec:62:db:10:4f:2f:8c:c6:05:ab:15:
         99:9e:dc:72:a2:c5:da:4f:0d:97:02:9c:2b:fc:7b:1a:41:1e:
         c7:3d:f6:81:0d:29:74:c9:d6:b5:d5:78:eb:4e:6b:78:1d:20:
         c2:b7:25:fa:a0:55:26:10:5b:25:55:4a:f4:47:47:b7:8a:85:
         60:4d:ec:9f:66:af:1e:c2:4a:6f:6d:72:3f:05:6a:26:12:1e:
         e2:5e:ab:9f:65:6f:58:7e:7a:61:f0:7a:42:0a:43:a8:d0:65:
         6b:a2:28:2d:a0:26:5e:99:75:34:10:eb:bd:c2:86:02:88:85:
         09:14:2d:28:35:ff:1c:c4:2c:d0:9f:df:ea:3c:7d:1a:78:7a:
         39:66:37:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HEUR/yIF5nFW4ZITQzIIWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ODg4NTE5ODFjZmIzYzE1NjI0YjZlOTdmNjBhM2Q5OTFk
NmQ5NjkwHhcNMjQwNTE3MTUwMDA2WhcNMjQwNTE4MTUwMDA2WjAzMTEwLwYDVQQD
Eyg4Y2ExNjQ2YjgwYzUzOWNkYjY2YTdlYWM5ODBkNTViZGM5ZDYwZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH+pt0x0ZpB5FvJxY9TerJVXQY19
EUxm68Eleu5+oxFyq4AweTuN6H1bNpdhRnBZi62PUphzqbkEePtiJH48KUr0V0zH
R6F9Kcj9QjOqRVtYeTLgZ+zZsQmeu6tQ+X6eg8NU/c5KFTaItkO+xGXcX/EEn+Nr
MCkVqjGSRu1gw0TVS+uOXsqXofA9iVt7QGSH+A0lGpRPFqvXUroWP2TzmUYpT4mU
KX6/Di2rCfOt8QBR38AOCfo/f6b+9ncLTbLqGR3cGaOY7rCjueAOwmYBeF5JWICf
+mrD1Gs4AcsJv4jTdSxHU1a+61EKWOEn2Pdc/PCfi2f/fZIQPwJsqDmBIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyhZGuAxTnNtmp+rJgNVb3J1g4/MB8GA1UdIwQY
MBaAFNeIhRmBz7PBViS26X9go9mR1tlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTRpRkdZSFBzOEZXSkxicGYyQ2oyWkhXMldrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wZTIzMTEtZjlhMS00ODk2LTlkOTgt
ZDA4MDA0NDkzZDE0LzEvMTRpRkdZSFBzOEZXSkxicGYyQ2oyWkhXMldrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8wZTIzMTEtZjlhMS00ODk2LTlkOTgtZDA4MDA0NDkzZDE0
LzEvMTRpRkdZSFBzOEZXSkxicGYyQ2oyWkhXMldrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwCmCY0Y
HeoJnuoP8ExHUepAFAsUnr4QIII6Ui6vKl2Hu4rB7RAWXgz3Te/tCeAW+tNh041t
Jzb5b5PmQ475YungxmDK8ZPxY6uV07FSyeL3nv0TUJ9T3zVsi3+sP+SNvuglXVUH
XSXvjqUdAgGO6+Lvkuxi2xBPL4zGBasVmZ7ccqLF2k8NlwKcK/x7GkEexz32gQ0p
dMnWtdV4605reB0gwrcl+qBVJhBbJVVK9EdHt4qFYE3sn2avHsJKb21yPwVqJhIe
4l6rn2VvWH56YfB6QgpDqNBla6IoLaAmXpl1NBDrvcKGAoiFCRQtKDX/HMQs0J/f
6jx9Gnh6OWY3qA==
-----END CERTIFICATE-----
Generated at Fri May 17 18:50:21 2024 by rpki-client on console-ams.rpki-client.org