Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
File:                     8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft (raw, json)
Hash identifier:          rT/hOFqSoDtnzPMc9q49D/AQ78Rn08Y0lCZvFqRxbu8=
Subject key identifier:   C5:EA:74:DA:49:AF:5D:02:87:3A:7D:EE:39:A3:CD:EE:66:63:93:B5
Authority key identifier: F1:2B:38:1E:00:D6:16:21:AC:C4:5C:F1:8A:3E:70:59:7D:5B:91:86
Certificate issuer:       /CN=f12b381e00d61621acc45cf18a3e70597d5b9186
Certificate serial:       018F3DE93D33E38A4E77252398FE001C87E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
Manifest number:          0DF2
Signing time:             Fri 03 May 2024 10:04:06 +0000
Manifest this update:     Fri 03 May 2024 10:04:06 +0000
Manifest next update:     Sat 04 May 2024 10:04:06 +0000
Files and hashes:         1: 8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl (hash: S3/k4/EaaIDxbgTuKX3iKffkpaZKkMqOkNZW/pGVRH8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 10:04:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:e9:3d:33:e3:8a:4e:77:25:23:98:fe:00:1c:87:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f12b381e00d61621acc45cf18a3e70597d5b9186
        Validity
            Not Before: May  3 10:04:06 2024 GMT
            Not After : May  4 10:04:06 2024 GMT
        Subject: CN=c5ea74da49af5d02873a7dee39a3cdee666393b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:91:39:79:3b:31:4b:bd:0e:3a:d0:88:86:e7:
                    1a:cf:33:a1:f2:1c:21:50:94:15:18:83:c3:cb:1b:
                    d6:05:a4:bb:bb:b4:5e:04:18:27:c0:fb:84:28:ce:
                    fd:1c:5e:bd:ba:d8:56:69:2e:24:18:66:57:d4:31:
                    45:34:bf:d0:ba:fa:8e:60:24:42:6e:df:aa:b7:02:
                    77:95:40:4a:14:b7:50:03:2b:da:b4:0d:a6:88:20:
                    61:62:dc:6f:77:b5:33:6c:74:79:8d:1e:14:42:4b:
                    16:26:5f:d2:a9:14:c8:a2:e7:60:0b:29:6e:ba:32:
                    81:8e:a8:11:66:5d:e9:0b:94:55:2e:f1:57:c7:15:
                    15:f0:0c:86:42:98:16:65:87:41:9c:18:cc:62:c6:
                    8d:02:d9:c9:10:c6:18:4c:d5:bf:44:dd:61:e3:8a:
                    7c:ad:27:85:43:f7:d4:86:53:a0:8a:e4:cf:14:7f:
                    f8:95:93:56:af:bf:2e:05:d3:95:72:7a:11:c7:d2:
                    80:4c:ea:13:ed:4d:32:48:4a:68:d7:f6:10:e5:ad:
                    21:4b:3e:41:96:75:33:05:4e:70:af:b5:f1:24:7f:
                    12:62:bc:2e:07:7e:c4:6b:92:1d:83:55:39:a6:35:
                    50:ae:47:9e:b1:84:0b:ba:8f:64:11:cc:12:96:ed:
                    eb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EA:74:DA:49:AF:5D:02:87:3A:7D:EE:39:A3:CD:EE:66:63:93:B5
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:1E:00:D6:16:21:AC:C4:5C:F1:8A:3E:70:59:7D:5B:91:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:1b:0d:a2:05:7c:1d:3e:c6:95:c5:45:7c:13:b9:15:14:d5:
         60:a9:9e:7b:ff:85:33:92:be:66:4a:06:be:4d:b3:58:9d:5a:
         ed:73:5b:0e:8b:d3:2f:f1:bd:64:63:19:23:fc:b0:62:d1:f5:
         32:dc:8c:fe:15:f3:eb:7f:dd:ca:36:f6:bf:84:0e:6c:b3:b6:
         c1:87:a6:40:06:ad:06:a2:d3:b7:b6:62:77:dc:44:e9:96:c2:
         a7:55:90:71:85:88:f3:e9:55:f3:60:0b:a0:a1:47:bd:4c:61:
         27:c1:90:78:95:4e:9b:f4:01:80:7b:4e:1a:76:52:64:dc:db:
         a6:9e:6c:ec:0c:e6:10:69:76:b7:04:b4:56:61:db:a0:b6:78:
         e2:a4:3a:cf:81:70:4c:36:d9:6c:44:06:79:0b:97:05:ff:4b:
         a4:ac:0b:41:3d:74:f7:e3:da:ae:65:a6:50:c5:d1:a5:cf:ac:
         db:33:6d:03:fd:1d:16:ef:7a:3e:2c:94:63:21:95:59:8d:48:
         2c:94:9f:89:76:f1:9e:3b:f4:5f:4b:1d:1c:06:87:fe:37:4b:
         fc:39:2b:21:2c:b0:1d:9e:0d:9a:1f:ee:33:79:84:64:af:52:
         9a:d0:9e:7a:df:cd:f0:41:14:24:91:e7:99:88:54:07:d2:f8:
         91:05:21:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY896T0z44pOdyUjmP4AHIfiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMmIzODFlMDBkNjE2MjFhY2M0NWNmMThhM2U3MDU5N2Q1
YjkxODYwHhcNMjQwNTAzMTAwNDA2WhcNMjQwNTA0MTAwNDA2WjAzMTEwLwYDVQQD
EyhjNWVhNzRkYTQ5YWY1ZDAyODczYTdkZWUzOWEzY2RlZTY2NjM5M2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5E5eTsxS70OOtCIhucazzOh8hwh
UJQVGIPDyxvWBaS7u7ReBBgnwPuEKM79HF69uthWaS4kGGZX1DFFNL/QuvqOYCRC
bt+qtwJ3lUBKFLdQAyvatA2miCBhYtxvd7UzbHR5jR4UQksWJl/SqRTIoudgCylu
ujKBjqgRZl3pC5RVLvFXxxUV8AyGQpgWZYdBnBjMYsaNAtnJEMYYTNW/RN1h44p8
rSeFQ/fUhlOgiuTPFH/4lZNWr78uBdOVcnoRx9KATOoT7U0ySEpo1/YQ5a0hSz5B
lnUzBU5wr7XxJH8SYrwuB37Ea5Idg1U5pjVQrkeesYQLuo9kEcwSlu3rTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXqdNpJr10Chzp97jmjze5mY5O1MB8GA1UdIwQY
MBaAFPErOB4A1hYhrMRc8Yo+cFl9W5GGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFNzNEhnRFdGaUdzeEZ6eGlqNXdXWDFia1lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84YjJjOWYtMTVjZS00MzRlLWJlOTMt
NWQ0MzZjZWY2MDhmLzEvOFNzNEhnRFdGaUdzeEZ6eGlqNXdXWDFia1lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84YjJjOWYtMTVjZS00MzRlLWJlOTMtNWQ0MzZjZWY2MDhm
LzEvOFNzNEhnRFdGaUdzeEZ6eGlqNXdXWDFia1lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhsNogV8
HT7GlcVFfBO5FRTVYKmee/+FM5K+ZkoGvk2zWJ1a7XNbDovTL/G9ZGMZI/ywYtH1
MtyM/hXz63/dyjb2v4QObLO2wYemQAatBqLTt7Zid9xE6ZbCp1WQcYWI8+lV82AL
oKFHvUxhJ8GQeJVOm/QBgHtOGnZSZNzbpp5s7AzmEGl2twS0VmHboLZ44qQ6z4Fw
TDbZbEQGeQuXBf9LpKwLQT109+ParmWmUMXRpc+s2zNtA/0dFu96PiyUYyGVWY1I
LJSfiXbxnjv0X0sdHAaH/jdL/DkrISywHZ4Nmh/uM3mEZK9SmtCeet/N8EEUJJHn
mYhUB9L4kQUhwA==
-----END CERTIFICATE-----
Generated at Fri May 3 16:44:33 2024 by rpki-client on console-fra.rpki-client.org