Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e2e60b-3c3b-4bb7-90f0-6732cf5e9bcb/1/5xNA73FJiU-wvdoJe89dAWyIGqQ.mft
File:                     5xNA73FJiU-wvdoJe89dAWyIGqQ.mft (raw, json)
Hash identifier:          Go1nmcKR7gXtKED9bWXvBJeqeToscw8DUNTx508gCb4=
Subject key identifier:   8F:B7:DB:75:B6:DD:B9:86:8F:AC:4E:84:EC:1A:BE:F8:12:11:C8:6E
Authority key identifier: E7:13:40:EF:71:49:89:4F:B0:BD:DA:09:7B:CF:5D:01:6C:88:1A:A4
Certificate issuer:       /CN=e71340ef7149894fb0bdda097bcf5d016c881aa4
Certificate serial:       018F874881AF15E7A238AA3BCC96062D0F80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5xNA73FJiU-wvdoJe89dAWyIGqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e2e60b-3c3b-4bb7-90f0-6732cf5e9bcb/1/5xNA73FJiU-wvdoJe89dAWyIGqQ.mft
Manifest number:          0251
Signing time:             Fri 17 May 2024 16:00:26 +0000
Manifest this update:     Fri 17 May 2024 16:00:26 +0000
Manifest next update:     Sat 18 May 2024 16:00:26 +0000
Files and hashes:         1: 5xNA73FJiU-wvdoJe89dAWyIGqQ.crl (hash: q2qZJUMFXxr9MQyetMTSuzmlsG27rL/JBkS+MTEk7YA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e2e60b-3c3b-4bb7-90f0-6732cf5e9bcb/1/5xNA73FJiU-wvdoJe89dAWyIGqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e2e60b-3c3b-4bb7-90f0-6732cf5e9bcb/1/5xNA73FJiU-wvdoJe89dAWyIGqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5xNA73FJiU-wvdoJe89dAWyIGqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:81:af:15:e7:a2:38:aa:3b:cc:96:06:2d:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e71340ef7149894fb0bdda097bcf5d016c881aa4
        Validity
            Not Before: May 17 16:00:26 2024 GMT
            Not After : May 18 16:00:26 2024 GMT
        Subject: CN=8fb7db75b6ddb9868fac4e84ec1abef81211c86e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:66:3f:19:37:d4:f7:f2:75:35:ed:f2:66:25:
                    9a:76:a2:9a:74:79:d5:79:46:92:3a:4e:5d:2b:0e:
                    ee:ef:9a:0c:ba:61:32:a4:39:25:e2:f3:52:da:ac:
                    e4:c2:0f:41:dd:c9:1e:54:c9:5c:70:82:5c:13:ff:
                    95:d2:96:ee:d9:ea:da:9d:4e:d1:89:22:8f:1b:bf:
                    0e:df:86:6b:a0:cd:6f:60:45:f9:a7:23:f9:3e:43:
                    a9:13:76:c1:62:31:56:79:f0:0e:c3:d4:7c:ac:23:
                    5c:33:7e:cc:bc:2e:1e:3c:ba:ad:df:35:73:d3:0e:
                    8f:d7:0a:fa:d9:fa:67:7f:85:04:54:c9:1c:38:e8:
                    ae:4b:9d:b4:0d:21:f7:12:b9:0f:f6:1d:6c:be:47:
                    93:aa:d2:42:b4:d3:ad:fd:ff:5c:87:1d:c7:cd:fa:
                    c1:e1:7a:49:47:29:f8:6e:73:2a:c6:be:8f:e9:4b:
                    95:9b:77:ce:94:be:48:28:e7:b2:58:be:98:09:9f:
                    23:21:c9:bb:55:63:51:3c:b2:78:0a:f9:80:48:b1:
                    6c:63:32:97:e6:90:c6:5e:55:96:bd:c7:b1:ad:6d:
                    fa:67:30:25:13:a8:67:bf:4d:71:60:41:fd:f2:56:
                    05:23:34:96:55:d7:5c:39:53:81:d4:ee:cc:91:79:
                    54:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B7:DB:75:B6:DD:B9:86:8F:AC:4E:84:EC:1A:BE:F8:12:11:C8:6E
            X509v3 Authority Key Identifier:
                keyid:E7:13:40:EF:71:49:89:4F:B0:BD:DA:09:7B:CF:5D:01:6C:88:1A:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xNA73FJiU-wvdoJe89dAWyIGqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e2e60b-3c3b-4bb7-90f0-6732cf5e9bcb/1/5xNA73FJiU-wvdoJe89dAWyIGqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e2e60b-3c3b-4bb7-90f0-6732cf5e9bcb/1/5xNA73FJiU-wvdoJe89dAWyIGqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:0c:29:66:2b:01:86:e0:b5:10:3d:c7:75:c1:65:0d:11:2b:
         ee:b4:53:64:97:76:c3:b9:a9:4e:4c:c5:50:fc:cb:b0:a9:d9:
         b7:cb:ab:9a:44:52:86:35:ad:a6:05:b1:2b:8c:e7:46:83:d9:
         c3:c2:7b:48:e0:ea:09:bd:d5:30:3d:dc:0a:ae:e4:50:9a:89:
         1a:c3:1d:6b:d9:fc:ad:09:f3:23:eb:7b:78:b2:5d:ab:85:66:
         60:26:ba:fd:e7:69:8e:76:e2:d5:ba:d8:62:a0:bf:61:a2:d7:
         3e:a8:6b:49:22:ee:d5:fc:54:1b:f7:d4:77:5c:f7:56:07:98:
         bd:18:6b:9a:61:a8:67:19:3f:31:88:19:d9:35:3e:d1:e7:12:
         07:60:3a:74:82:de:4a:03:f1:33:ee:19:fc:1d:fb:2b:64:e0:
         a8:f9:69:8b:ea:ec:ab:2a:09:35:b6:b7:57:47:c1:a7:e0:4e:
         80:b3:76:21:32:31:e9:d8:b6:f0:6e:58:ac:48:a3:ed:9b:4a:
         16:d3:5d:47:33:55:d4:95:6c:ca:2a:90:42:db:db:1d:03:42:
         49:4b:16:46:be:5e:34:8a:f1:28:15:04:d2:a7:35:14:67:a6:
         c5:ce:f5:53:4d:0e:7c:a4:37:aa:5b:02:7c:fd:fc:ca:6a:9a:
         42:8f:89:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSIGvFeeiOKo7zJYGLQ+AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MTM0MGVmNzE0OTg5NGZiMGJkZGEwOTdiY2Y1ZDAxNmM4
ODFhYTQwHhcNMjQwNTE3MTYwMDI2WhcNMjQwNTE4MTYwMDI2WjAzMTEwLwYDVQQD
Eyg4ZmI3ZGI3NWI2ZGRiOTg2OGZhYzRlODRlYzFhYmVmODEyMTFjODZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmY/GTfU9/J1Ne3yZiWadqKadHnV
eUaSOk5dKw7u75oMumEypDkl4vNS2qzkwg9B3ckeVMlccIJcE/+V0pbu2eranU7R
iSKPG78O34ZroM1vYEX5pyP5PkOpE3bBYjFWefAOw9R8rCNcM37MvC4ePLqt3zVz
0w6P1wr62fpnf4UEVMkcOOiuS520DSH3ErkP9h1svkeTqtJCtNOt/f9chx3HzfrB
4XpJRyn4bnMqxr6P6UuVm3fOlL5IKOeyWL6YCZ8jIcm7VWNRPLJ4CvmASLFsYzKX
5pDGXlWWvcexrW36ZzAlE6hnv01xYEH98lYFIzSWVddcOVOB1O7MkXlUxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+323W23bmGj6xOhOwavvgSEchuMB8GA1UdIwQY
MBaAFOcTQO9xSYlPsL3aCXvPXQFsiBqkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXhOQTczRkppVS13dmRvSmU4OWRBV3lJR3FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMmU2MGItM2MzYi00YmI3LTkwZjAt
NjczMmNmNWU5YmNiLzEvNXhOQTczRkppVS13dmRvSmU4OWRBV3lJR3FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lMmU2MGItM2MzYi00YmI3LTkwZjAtNjczMmNmNWU5YmNi
LzEvNXhOQTczRkppVS13dmRvSmU4OWRBV3lJR3FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeAwpZisB
huC1ED3HdcFlDREr7rRTZJd2w7mpTkzFUPzLsKnZt8urmkRShjWtpgWxK4znRoPZ
w8J7SODqCb3VMD3cCq7kUJqJGsMda9n8rQnzI+t7eLJdq4VmYCa6/edpjnbi1brY
YqC/YaLXPqhrSSLu1fxUG/fUd1z3VgeYvRhrmmGoZxk/MYgZ2TU+0ecSB2A6dILe
SgPxM+4Z/B37K2TgqPlpi+rsqyoJNba3V0fBp+BOgLN2ITIx6di28G5YrEij7ZtK
FtNdRzNV1JVsyiqQQtvbHQNCSUsWRr5eNIrxKBUE0qc1FGemxc71U00OfKQ3qlsC
fP38ymqaQo+JnA==
-----END CERTIFICATE-----
Generated at Sat May 18 02:47:53 2024 by rpki-client on console-fra.rpki-client.org