Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft
File:                     69xd5v5ftQVVoFyXxbDdR369C_U.mft (raw, json)
Hash identifier:          W01F4YvFHMwOR7cHvgBNd9R50M1PEWaqqoM9yNL+7v8=
Subject key identifier:   CB:BD:17:87:C1:0E:DD:6F:5B:60:79:E3:8F:54:F2:6B:30:DD:23:C0
Authority key identifier: EB:DC:5D:E6:FE:5F:B5:05:55:A0:5C:97:C5:B0:DD:47:7E:BD:0B:F5
Certificate issuer:       /CN=ebdc5de6fe5fb50555a05c97c5b0dd477ebd0bf5
Certificate serial:       018F34410C0BEC0E48874320FEE13FC797A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/69xd5v5ftQVVoFyXxbDdR369C_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft
Manifest number:          1148
Signing time:             Wed 01 May 2024 13:03:49 +0000
Manifest this update:     Wed 01 May 2024 13:03:49 +0000
Manifest next update:     Thu 02 May 2024 13:03:49 +0000
Files and hashes:         1: 69xd5v5ftQVVoFyXxbDdR369C_U.crl (hash: WR2y5DSwaukquKyIGAQCPqSQowP1Sc9bKoiI6K5sfEs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/69xd5v5ftQVVoFyXxbDdR369C_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 13:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:34:41:0c:0b:ec:0e:48:87:43:20:fe:e1:3f:c7:97:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebdc5de6fe5fb50555a05c97c5b0dd477ebd0bf5
        Validity
            Not Before: May  1 13:03:49 2024 GMT
            Not After : May  2 13:03:49 2024 GMT
        Subject: CN=cbbd1787c10edd6f5b6079e38f54f26b30dd23c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:01:0f:eb:b9:1e:a6:e4:63:0f:de:d2:d0:d5:
                    e6:c1:a0:9c:f6:40:34:4f:d4:a2:76:52:58:64:83:
                    81:7b:f5:c6:02:64:51:cc:d6:d0:3d:bb:2a:cf:a8:
                    67:86:ac:4a:d1:a8:96:ae:4e:5c:f9:a1:1b:33:9e:
                    d5:0d:7b:c2:79:57:9e:58:9f:63:34:2f:05:08:53:
                    ae:ab:73:9e:66:52:0f:fc:fe:b6:16:43:69:93:1f:
                    8b:73:86:fb:3d:4b:37:c8:ef:4e:4c:65:00:2d:91:
                    7b:85:a7:86:a4:ce:a3:3b:7d:72:a8:29:45:70:24:
                    82:52:ca:78:9e:b4:c8:79:7c:86:2a:1c:c1:cf:71:
                    6c:36:5e:4c:7b:65:eb:21:b2:4e:40:73:5d:e7:78:
                    be:5f:ed:0f:aa:31:e7:48:4d:d2:c8:76:54:3c:47:
                    ed:87:e7:c2:3c:49:69:5a:e3:14:58:79:61:3c:4f:
                    76:4f:b7:48:dc:9d:76:b5:88:9f:fa:32:3a:eb:aa:
                    7e:c7:5b:f3:eb:23:e2:4e:16:78:76:84:ca:76:ed:
                    79:dc:01:47:bf:d4:93:be:ca:b3:a2:f2:cd:36:c5:
                    bc:1a:62:26:11:ae:68:c4:34:73:f3:e7:a2:24:b9:
                    46:c2:26:32:19:97:92:c5:c6:81:ec:c6:5a:ec:08:
                    c6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BD:17:87:C1:0E:DD:6F:5B:60:79:E3:8F:54:F2:6B:30:DD:23:C0
            X509v3 Authority Key Identifier:
                keyid:EB:DC:5D:E6:FE:5F:B5:05:55:A0:5C:97:C5:B0:DD:47:7E:BD:0B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69xd5v5ftQVVoFyXxbDdR369C_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:9a:f4:7b:32:d5:59:4d:94:51:55:3c:a4:f2:ff:c0:00:92:
         03:62:a0:62:d7:2e:21:63:30:30:e6:f4:ec:2b:b5:9c:d5:c6:
         66:6e:e4:b4:84:bf:dd:27:54:a2:01:a8:94:19:2b:ce:d5:23:
         81:27:e2:06:44:f9:71:6a:a6:db:50:f2:7c:9c:98:68:e2:0c:
         0d:6d:9a:de:35:e0:23:fd:9c:4b:36:d1:93:31:69:01:a9:73:
         16:63:9f:e4:ab:9c:dc:a8:84:01:26:f4:36:f4:00:91:9f:62:
         91:ff:b1:2d:f9:0a:e7:bd:45:57:09:a7:33:84:58:60:ca:f9:
         0e:af:2a:2c:13:c7:ff:98:94:db:2b:86:26:e7:85:b8:a9:23:
         9b:66:62:07:43:84:41:4b:bd:53:23:51:49:fe:a5:54:9b:7e:
         30:6d:51:ed:77:a7:6e:ba:31:76:87:15:fc:e8:55:5c:89:12:
         2a:3e:31:fa:26:43:80:d4:23:87:32:9c:b4:33:d9:d8:2e:0c:
         2a:a4:54:e4:1b:73:fa:3e:0e:3b:2b:05:f7:b8:fd:b1:04:5b:
         c4:e3:17:55:6b:c3:6a:45:6a:e0:47:c9:61:64:77:75:d6:8f:
         1c:ef:be:75:b9:85:7a:bd:61:db:4d:b2:e0:91:03:82:fa:36:
         cd:d6:98:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY80QQwL7A5Ih0Mg/uE/x5eoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZGM1ZGU2ZmU1ZmI1MDU1NWEwNWM5N2M1YjBkZDQ3N2Vi
ZDBiZjUwHhcNMjQwNTAxMTMwMzQ5WhcNMjQwNTAyMTMwMzQ5WjAzMTEwLwYDVQQD
EyhjYmJkMTc4N2MxMGVkZDZmNWI2MDc5ZTM4ZjU0ZjI2YjMwZGQyM2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAEP67kepuRjD97S0NXmwaCc9kA0
T9SidlJYZIOBe/XGAmRRzNbQPbsqz6hnhqxK0aiWrk5c+aEbM57VDXvCeVeeWJ9j
NC8FCFOuq3OeZlIP/P62FkNpkx+Lc4b7PUs3yO9OTGUALZF7haeGpM6jO31yqClF
cCSCUsp4nrTIeXyGKhzBz3FsNl5Me2XrIbJOQHNd53i+X+0PqjHnSE3SyHZUPEft
h+fCPElpWuMUWHlhPE92T7dI3J12tYif+jI666p+x1vz6yPiThZ4doTKdu153AFH
v9STvsqzovLNNsW8GmImEa5oxDRz8+eiJLlGwiYyGZeSxcaB7MZa7AjGDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMu9F4fBDt1vW2B5449U8msw3SPAMB8GA1UdIwQY
MBaAFOvcXeb+X7UFVaBcl8Ww3Ud+vQv1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjl4ZDV2NWZ0UVZWb0Z5WHhiRGRSMzY5Q19VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9lNGE2NjgtZmJkNi00NTUzLWFlOWYt
MGJiYjIzODFiYTg4LzEvNjl4ZDV2NWZ0UVZWb0Z5WHhiRGRSMzY5Q19VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9lNGE2NjgtZmJkNi00NTUzLWFlOWYtMGJiYjIzODFiYTg4
LzEvNjl4ZDV2NWZ0UVZWb0Z5WHhiRGRSMzY5Q19VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnpr0ezLV
WU2UUVU8pPL/wACSA2KgYtcuIWMwMOb07Cu1nNXGZm7ktIS/3SdUogGolBkrztUj
gSfiBkT5cWqm21DyfJyYaOIMDW2a3jXgI/2cSzbRkzFpAalzFmOf5Kuc3KiEASb0
NvQAkZ9ikf+xLfkK571FVwmnM4RYYMr5Dq8qLBPH/5iU2yuGJueFuKkjm2ZiB0OE
QUu9UyNRSf6lVJt+MG1R7XenbroxdocV/OhVXIkSKj4x+iZDgNQjhzKctDPZ2C4M
KqRU5Btz+j4OOysF97j9sQRbxOMXVWvDakVq4EfJYWR3ddaPHO++dbmFer1h202y
4JEDgvo2zdaYAA==
-----END CERTIFICATE-----
Generated at Wed May 1 17:04:03 2024 by rpki-client on console-ams.rpki-client.org