Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
File:                     C7M4e-bSDUos4TzAkuh_d3uLmVY.mft (raw, json)
Hash identifier:          9n7XsUgcL/qAPRDGk5Q0JaqLgvaoVQEcXUmR29qEvjY=
Subject key identifier:   95:81:7A:A3:4E:2B:7C:9B:AB:13:BC:AF:49:86:6A:DB:F0:05:AA:4D
Authority key identifier: 0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
Certificate issuer:       /CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
Certificate serial:       018F5091C17F68D292F35180F085EB680C77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
Manifest number:          0C30
Signing time:             Tue 07 May 2024 01:01:20 +0000
Manifest this update:     Tue 07 May 2024 01:01:20 +0000
Manifest next update:     Wed 08 May 2024 01:01:20 +0000
Files and hashes:         1: C7M4e-bSDUos4TzAkuh_d3uLmVY.crl (hash: W7mj0js39UQbToQJ8zY7FCrmERvTlMIl52mTf6/KYQ4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:50:91:c1:7f:68:d2:92:f3:51:80:f0:85:eb:68:0c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
        Validity
            Not Before: May  7 01:01:20 2024 GMT
            Not After : May  8 01:01:20 2024 GMT
        Subject: CN=95817aa34e2b7c9bab13bcaf49866adbf005aa4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0b:e1:fe:ab:a1:ec:52:94:36:bd:78:e0:c1:
                    9d:9c:f1:3b:d0:c5:c4:ec:04:33:95:78:ce:6d:ab:
                    41:f7:66:79:d1:98:20:ec:8c:fc:2d:94:0d:47:dc:
                    bb:06:58:90:45:1e:7f:50:d1:7e:04:59:be:3d:bb:
                    85:d7:fb:b3:de:d1:1b:d8:4e:ed:df:1f:9b:00:b9:
                    6f:1d:6a:3a:14:00:cb:4e:6c:f4:b5:e9:73:fa:6d:
                    91:5e:a0:3a:81:43:47:39:06:a7:30:24:b5:77:14:
                    af:dc:c5:6d:a4:f9:9f:d6:92:88:91:2c:ce:c9:6c:
                    6d:c2:3c:f9:5c:3f:ce:f0:61:81:21:97:e8:ed:ee:
                    a4:21:fa:a3:de:0c:55:a9:04:a7:8d:2b:09:88:01:
                    1d:80:67:0b:2b:4f:d9:a3:0a:6c:f1:d3:02:47:f2:
                    dd:59:64:eb:4c:82:68:88:59:f9:92:09:a0:8e:1a:
                    28:e9:58:66:1a:aa:d6:de:f2:34:58:92:56:b9:f2:
                    bb:0d:a0:77:54:48:7e:51:b3:fd:8e:32:cc:cd:53:
                    db:bc:b7:fa:a6:4a:75:61:ad:6a:2d:b3:f3:29:24:
                    36:94:77:62:f3:10:f0:e8:38:95:8c:4c:b4:20:bc:
                    45:ac:57:e9:a5:d3:31:be:7c:92:28:49:3f:87:3f:
                    1d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:81:7A:A3:4E:2B:7C:9B:AB:13:BC:AF:49:86:6A:DB:F0:05:AA:4D
            X509v3 Authority Key Identifier:
                keyid:0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:32:32:91:52:51:ba:1c:50:fe:cc:23:ad:56:bf:e0:81:bd:
         a2:d6:83:46:49:f7:a0:52:e6:03:0e:17:fb:81:e0:12:58:a8:
         6c:23:21:68:bd:27:f2:0d:bc:4b:59:1e:20:c6:bb:b6:fc:24:
         8b:00:2b:8c:f3:52:7b:62:33:a9:8e:2a:fc:b0:54:3f:86:74:
         4b:a5:64:db:5e:74:0c:88:d2:1d:d5:f4:2f:d0:e5:e7:ee:b3:
         64:ac:15:1b:67:0e:02:17:74:23:2f:56:e9:a4:95:c8:91:59:
         5d:ee:fa:34:ad:aa:85:a9:c5:a9:7b:42:ef:89:c0:ec:0f:06:
         46:4a:38:84:2c:01:4c:5a:00:60:c7:c0:81:59:9b:d1:b3:e7:
         f2:5c:71:cc:02:00:b3:87:e3:cd:99:51:54:88:b8:87:19:16:
         24:03:f8:c4:bb:c1:4f:da:e1:36:8c:11:ab:3b:c6:60:19:3d:
         08:cd:4f:3f:fa:4e:5c:0b:16:8e:81:8b:2c:c9:a3:82:fc:4b:
         cf:e3:cd:e0:6f:cd:9c:48:bb:f1:df:e3:7c:4a:24:4f:cb:d4:
         2a:03:9e:aa:c2:48:fc:7e:1b:ae:42:10:e0:14:7e:af:44:6e:
         a1:79:14:aa:61:b7:a7:81:e0:a4:5c:29:ee:df:a3:65:19:79:
         31:23:78:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9QkcF/aNKS81GA8IXraAx3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYjMzODdiZTZkMjBkNGEyY2UxM2NjMDkyZTg3Zjc3N2I4
Yjk5NTYwHhcNMjQwNTA3MDEwMTIwWhcNMjQwNTA4MDEwMTIwWjAzMTEwLwYDVQQD
Eyg5NTgxN2FhMzRlMmI3YzliYWIxM2JjYWY0OTg2NmFkYmYwMDVhYTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgvh/quh7FKUNr144MGdnPE70MXE
7AQzlXjObatB92Z50Zgg7Iz8LZQNR9y7BliQRR5/UNF+BFm+PbuF1/uz3tEb2E7t
3x+bALlvHWo6FADLTmz0telz+m2RXqA6gUNHOQanMCS1dxSv3MVtpPmf1pKIkSzO
yWxtwjz5XD/O8GGBIZfo7e6kIfqj3gxVqQSnjSsJiAEdgGcLK0/Zowps8dMCR/Ld
WWTrTIJoiFn5kgmgjhoo6VhmGqrW3vI0WJJWufK7DaB3VEh+UbP9jjLMzVPbvLf6
pkp1Ya1qLbPzKSQ2lHdi8xDw6DiVjEy0ILxFrFfppdMxvnySKEk/hz8d7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWBeqNOK3ybqxO8r0mGatvwBapNMB8GA1UdIwQY
MBaAFAuzOHvm0g1KLOE8wJLof3d7i5lWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzdNNGUtYlNEVW9zNFR6QWt1aF9kM3VMbVZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lYzFlZjQtNjFmZS00MGI3LWEwMjgt
NDQwNGQ3ZWU3MTIyLzEvQzdNNGUtYlNEVW9zNFR6QWt1aF9kM3VMbVZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9lYzFlZjQtNjFmZS00MGI3LWEwMjgtNDQwNGQ3ZWU3MTIy
LzEvQzdNNGUtYlNEVW9zNFR6QWt1aF9kM3VMbVZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjIykVJR
uhxQ/swjrVa/4IG9otaDRkn3oFLmAw4X+4HgEliobCMhaL0n8g28S1keIMa7tvwk
iwArjPNSe2IzqY4q/LBUP4Z0S6Vk2150DIjSHdX0L9Dl5+6zZKwVG2cOAhd0Iy9W
6aSVyJFZXe76NK2qhanFqXtC74nA7A8GRko4hCwBTFoAYMfAgVmb0bPn8lxxzAIA
s4fjzZlRVIi4hxkWJAP4xLvBT9rhNowRqzvGYBk9CM1PP/pOXAsWjoGLLMmjgvxL
z+PN4G/NnEi78d/jfEokT8vUKgOeqsJI/H4brkIQ4BR+r0RuoXkUqmG3p4HgpFwp
7t+jZRl5MSN4rw==
-----END CERTIFICATE-----
Generated at Tue May 7 02:20:08 2024 by rpki-client on console-ams.rpki-client.org