Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
File:                     dQrGfFd2g13wkZmDEJYOg8I9ncY.mft (raw, json)
Hash identifier:          y9X7OVu4BBhM4AdACNaFzyw5jUn3pNxUIIXmJdV3u1s=
Subject key identifier:   80:B3:F3:1C:D1:12:55:F7:F9:0F:F7:43:3D:C1:D9:48:D0:6B:7A:7E
Authority key identifier: 75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
Certificate issuer:       /CN=750ac67c5776835df091998310960e83c23d9dc6
Certificate serial:       018F87B639A0FC2220F7CD9A65362CAE685F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
Manifest number:          0563
Signing time:             Fri 17 May 2024 18:00:17 +0000
Manifest this update:     Fri 17 May 2024 18:00:17 +0000
Manifest next update:     Sat 18 May 2024 18:00:17 +0000
Files and hashes:         1: dQrGfFd2g13wkZmDEJYOg8I9ncY.crl (hash: i+CyKAC5DXpf/cD0Z4wtwft4hejuwKTvPx0vXCYL7Bo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:39:a0:fc:22:20:f7:cd:9a:65:36:2c:ae:68:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750ac67c5776835df091998310960e83c23d9dc6
        Validity
            Not Before: May 17 18:00:17 2024 GMT
            Not After : May 18 18:00:17 2024 GMT
        Subject: CN=80b3f31cd11255f7f90ff7433dc1d948d06b7a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9e:2c:ea:e9:e4:56:5d:87:1b:41:90:51:78:
                    ef:b9:3e:93:07:0b:5c:8f:15:74:bd:c1:7b:93:0a:
                    89:7c:ec:e3:24:0e:68:96:7c:3d:d4:23:bd:3e:3a:
                    d3:83:a5:45:26:7b:79:b9:8c:aa:19:ca:35:3f:74:
                    87:4e:b6:cb:fd:7c:cf:32:61:8e:e1:9f:df:8b:6d:
                    90:37:6c:f0:95:48:08:33:2b:49:33:38:80:5d:5e:
                    4c:8d:2f:ba:34:37:97:b7:10:81:16:a7:11:08:a0:
                    1e:b9:25:f2:6c:46:8e:d0:ee:29:6c:9f:38:99:9b:
                    80:c9:07:aa:78:e2:f7:d6:21:70:3a:fe:65:80:f8:
                    bc:8a:93:7c:3a:8b:bb:0f:13:25:06:5b:c7:69:84:
                    02:1f:88:a9:0d:84:02:5d:af:01:6d:f0:5e:55:a2:
                    63:16:18:34:10:b6:7e:8a:2f:b6:4c:1b:fe:bd:87:
                    bf:58:37:54:50:06:01:89:b5:ff:d2:ec:92:14:46:
                    10:85:62:dd:9b:8f:f0:ac:d6:64:33:17:dd:58:bb:
                    ce:c8:e3:ff:7a:d5:fb:88:39:c6:fe:dd:39:fe:63:
                    12:f2:f2:7b:7a:f2:bb:18:41:e6:89:7f:39:36:51:
                    8c:58:6c:77:c7:b2:36:40:d0:7c:ba:f8:dc:61:e4:
                    cb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B3:F3:1C:D1:12:55:F7:F9:0F:F7:43:3D:C1:D9:48:D0:6B:7A:7E
            X509v3 Authority Key Identifier:
                keyid:75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:c2:20:92:e5:7d:48:03:c6:e4:db:6e:f9:07:1b:be:0f:6f:
         98:48:7b:14:81:94:fd:9c:d5:fb:d5:4e:4e:1d:7a:9d:78:f6:
         82:0f:d6:50:0b:65:06:94:00:ff:08:88:d4:29:3c:03:c7:9e:
         4f:32:b1:9e:4f:2d:cd:20:58:e3:13:9d:63:68:85:d4:cc:d9:
         ef:5b:0c:99:df:86:e6:23:bf:21:3f:3d:76:62:bd:cb:1d:ef:
         a2:76:76:97:74:29:98:31:67:8d:d6:8c:f6:9d:c5:68:09:58:
         61:2e:15:78:ab:29:e6:64:1b:cc:c1:ac:07:8e:8a:5a:a9:bd:
         fd:c9:dc:20:79:ff:e4:48:16:02:26:49:cf:c1:f5:c8:e4:31:
         1b:3c:4b:63:7d:0a:91:03:63:b6:c9:06:e8:34:c5:ed:fa:a7:
         d4:aa:fb:ea:ac:6d:98:0e:1a:ca:97:3a:1b:5d:d2:9d:b0:95:
         a1:5c:19:8a:88:13:ad:e0:57:7a:cb:4e:e0:8c:fb:f7:01:f0:
         f4:81:ee:d4:f5:86:b3:5c:87:ac:20:26:3e:57:fe:92:51:c5:
         e6:71:d3:06:e1:82:60:ef:18:32:ec:6a:58:07:4d:b5:6e:54:
         98:87:63:7b:b3:79:dc:98:95:77:7d:77:48:48:dc:8f:34:2c:
         63:50:5e:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Htjmg/CIg982aZTYsrmhfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MGFjNjdjNTc3NjgzNWRmMDkxOTk4MzEwOTYwZTgzYzIz
ZDlkYzYwHhcNMjQwNTE3MTgwMDE3WhcNMjQwNTE4MTgwMDE3WjAzMTEwLwYDVQQD
Eyg4MGIzZjMxY2QxMTI1NWY3ZjkwZmY3NDMzZGMxZDk0OGQwNmI3YTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp4s6unkVl2HG0GQUXjvuT6TBwtc
jxV0vcF7kwqJfOzjJA5olnw91CO9PjrTg6VFJnt5uYyqGco1P3SHTrbL/XzPMmGO
4Z/fi22QN2zwlUgIMytJMziAXV5MjS+6NDeXtxCBFqcRCKAeuSXybEaO0O4pbJ84
mZuAyQeqeOL31iFwOv5lgPi8ipN8Oou7DxMlBlvHaYQCH4ipDYQCXa8BbfBeVaJj
Fhg0ELZ+ii+2TBv+vYe/WDdUUAYBibX/0uySFEYQhWLdm4/wrNZkMxfdWLvOyOP/
etX7iDnG/t05/mMS8vJ7evK7GEHmiX85NlGMWGx3x7I2QNB8uvjcYeTLbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICz8xzRElX3+Q/3Qz3B2UjQa3p+MB8GA1UdIwQY
MBaAFHUKxnxXdoNd8JGZgxCWDoPCPZ3GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFyR2ZGZDJnMTN3a1ptREVKWU9nOEk5bmNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83Mjc3OGItYzA3Zi00OWJiLTllMWQt
MWYwYjAzNTQ0ODEwLzEvZFFyR2ZGZDJnMTN3a1ptREVKWU9nOEk5bmNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS83Mjc3OGItYzA3Zi00OWJiLTllMWQtMWYwYjAzNTQ0ODEw
LzEvZFFyR2ZGZDJnMTN3a1ptREVKWU9nOEk5bmNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcIgkuV9
SAPG5Ntu+Qcbvg9vmEh7FIGU/ZzV+9VOTh16nXj2gg/WUAtlBpQA/wiI1Ck8A8ee
TzKxnk8tzSBY4xOdY2iF1MzZ71sMmd+G5iO/IT89dmK9yx3vonZ2l3QpmDFnjdaM
9p3FaAlYYS4VeKsp5mQbzMGsB46KWqm9/cncIHn/5EgWAiZJz8H1yOQxGzxLY30K
kQNjtskG6DTF7fqn1Kr76qxtmA4aypc6G13SnbCVoVwZiogTreBXestO4Iz79wHw
9IHu1PWGs1yHrCAmPlf+klHF5nHTBuGCYO8YMuxqWAdNtW5UmIdje7N53JiVd313
SEjcjzQsY1BeCg==
-----END CERTIFICATE-----