Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.mft
File:                     CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.mft (raw, json)
Hash identifier:          pip9jhM9HfEBb+hqqygavn1nTdM7kos0FdqHovNu5I0=
Subject key identifier:   2A:B6:47:DB:88:CC:B5:8F:8A:CA:78:C5:79:2D:D5:D3:0A:38:67:82
Authority key identifier: 09:63:49:1C:D6:75:70:B0:78:3B:40:01:61:C0:AD:CA:A0:02:F0:DB
Certificate issuer:       /CN=0963491cd67570b0783b400161c0adcaa002f0db
Certificate serial:       018F871155EDB6C9D294CDD3D1F7E2B5028C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.mft
Manifest number:          4C
Signing time:             Fri 17 May 2024 15:00:11 +0000
Manifest this update:     Fri 17 May 2024 15:00:11 +0000
Manifest next update:     Sat 18 May 2024 15:00:11 +0000
Files and hashes:         1: CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.crl (hash: Z0gDNHzhXD+xoXAW9a2XK1sFBgyUtqX4EFRWKBEwLDM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 15:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:11:55:ed:b6:c9:d2:94:cd:d3:d1:f7:e2:b5:02:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0963491cd67570b0783b400161c0adcaa002f0db
        Validity
            Not Before: May 17 15:00:11 2024 GMT
            Not After : May 18 15:00:11 2024 GMT
        Subject: CN=2ab647db88ccb58f8aca78c5792dd5d30a386782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1a:4f:40:4b:bc:f2:be:f6:50:f7:d1:f8:6e:
                    99:bf:4a:11:a3:7e:03:43:51:6f:85:51:59:3b:3b:
                    d1:48:35:44:6b:e8:95:59:f7:16:ba:6e:50:b0:15:
                    cd:ac:ad:53:52:9b:be:9f:78:43:45:3d:cf:00:4e:
                    16:0d:23:c5:10:a2:13:2a:ca:bc:5a:ad:0c:c9:ab:
                    57:32:98:26:73:2b:25:39:44:63:cb:44:58:75:e3:
                    4f:39:fb:8f:92:5d:79:f0:ee:27:0c:0b:4d:9f:99:
                    93:ae:8f:aa:cb:42:39:b6:91:d7:5a:88:f1:57:c4:
                    83:b8:6a:a8:2e:d9:2a:64:23:0b:fa:6e:0b:72:a0:
                    72:2a:79:67:f3:51:da:14:45:46:63:7a:b4:4b:a0:
                    c1:87:8b:b3:c3:61:23:8d:06:87:4c:2c:40:db:2e:
                    28:92:a0:d9:6d:ed:da:0a:88:b2:01:a2:70:44:bf:
                    d8:e5:5d:b2:03:8f:b4:dd:36:83:f0:53:2b:3e:2b:
                    cf:22:64:ef:64:b3:17:1c:51:e5:25:2c:36:a2:dd:
                    64:b4:6a:17:81:91:1b:68:6a:99:b6:bf:89:c7:c3:
                    b8:9f:84:1a:e1:77:5a:4b:9b:67:c3:d7:1a:4c:ef:
                    75:e4:be:15:3c:f2:0a:13:80:49:01:b0:59:5c:36:
                    85:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B6:47:DB:88:CC:B5:8F:8A:CA:78:C5:79:2D:D5:D3:0A:38:67:82
            X509v3 Authority Key Identifier:
                keyid:09:63:49:1C:D6:75:70:B0:78:3B:40:01:61:C0:AD:CA:A0:02:F0:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:e3:b0:1f:77:92:5a:a7:1a:01:f6:49:95:40:45:8a:1d:ce:
         7d:25:14:5e:2d:c6:55:64:1b:d6:1d:65:f7:bc:4b:5f:52:7e:
         f9:62:cd:f4:91:63:e4:2e:d5:66:84:68:4a:66:4c:90:a9:49:
         7e:92:47:77:e6:58:ec:53:70:ea:18:b8:44:61:6f:8b:ed:bd:
         73:10:b8:3d:6d:e2:c1:8e:7b:ea:68:4c:ca:13:36:5f:c1:3c:
         69:5b:80:03:21:e7:10:a1:2e:d4:d6:ac:2c:b1:58:86:5f:17:
         53:85:92:5b:4a:8d:00:85:61:62:85:c4:76:6c:8e:e6:f6:28:
         a5:39:1d:87:f5:ee:b0:df:f7:4f:9b:2a:f5:9a:1c:85:f6:51:
         b1:66:4c:84:55:a9:06:75:58:9c:44:35:6a:71:f3:c4:d8:eb:
         9c:9e:33:c1:55:32:a9:51:22:a7:ea:61:57:47:34:37:ce:cc:
         c6:18:a2:8e:a9:f0:cb:73:06:f5:51:09:5e:34:19:31:fc:2b:
         9b:cd:3e:7f:dd:73:d3:03:fa:d2:8d:96:ca:e1:06:91:09:e8:
         ae:08:76:ef:8a:38:03:b7:16:ff:dd:94:be:db:90:51:d8:9b:
         a6:52:3b:cf:8c:d3:47:07:5b:db:ab:57:aa:f7:8c:a5:a3:03:
         62:13:33:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HEVXttsnSlM3T0ffitQKMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NjM0OTFjZDY3NTcwYjA3ODNiNDAwMTYxYzBhZGNhYTAw
MmYwZGIwHhcNMjQwNTE3MTUwMDExWhcNMjQwNTE4MTUwMDExWjAzMTEwLwYDVQQD
EygyYWI2NDdkYjg4Y2NiNThmOGFjYTc4YzU3OTJkZDVkMzBhMzg2NzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RpPQEu88r72UPfR+G6Zv0oRo34D
Q1FvhVFZOzvRSDVEa+iVWfcWum5QsBXNrK1TUpu+n3hDRT3PAE4WDSPFEKITKsq8
Wq0MyatXMpgmcyslOURjy0RYdeNPOfuPkl158O4nDAtNn5mTro+qy0I5tpHXWojx
V8SDuGqoLtkqZCML+m4LcqByKnln81HaFEVGY3q0S6DBh4uzw2EjjQaHTCxA2y4o
kqDZbe3aCoiyAaJwRL/Y5V2yA4+03TaD8FMrPivPImTvZLMXHFHlJSw2ot1ktGoX
gZEbaGqZtr+Jx8O4n4Qa4XdaS5tnw9caTO915L4VPPIKE4BJAbBZXDaFmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCq2R9uIzLWPisp4xXkt1dMKOGeCMB8GA1UdIwQY
MBaAFAljSRzWdXCweDtAAWHArcqgAvDbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1dOSkhOWjFjTEI0TzBBQlljQ3R5cUFDOE5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8yYTU3NmQtZDNhZi00NjRjLThkYTkt
YzkzMTY5YTA4ODgzLzEvQ1dOSkhOWjFjTEI0TzBBQlljQ3R5cUFDOE5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8yYTU3NmQtZDNhZi00NjRjLThkYTktYzkzMTY5YTA4ODgz
LzEvQ1dOSkhOWjFjTEI0TzBBQlljQ3R5cUFDOE5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+OwH3eS
WqcaAfZJlUBFih3OfSUUXi3GVWQb1h1l97xLX1J++WLN9JFj5C7VZoRoSmZMkKlJ
fpJHd+ZY7FNw6hi4RGFvi+29cxC4PW3iwY576mhMyhM2X8E8aVuAAyHnEKEu1Nas
LLFYhl8XU4WSW0qNAIVhYoXEdmyO5vYopTkdh/XusN/3T5sq9ZochfZRsWZMhFWp
BnVYnEQ1anHzxNjrnJ4zwVUyqVEip+phV0c0N87Mxhiijqnwy3MG9VEJXjQZMfwr
m80+f91z0wP60o2WyuEGkQnorgh274o4A7cW/92UvtuQUdibplI7z4zTRwdb26tX
qveMpaMDYhMzDg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:53:19 2024 by rpki-client on console-ams.rpki-client.org