Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
File:                     jXIJqeqB_vMrGFNMHRHtoymZcO8.mft (raw, json)
Hash identifier:          Z//UlR+/WW+R+iRnCKwqOiWJlqT0nhTK9p4XChwJ2Is=
Subject key identifier:   6C:3A:B5:AF:F6:C0:27:0E:E6:F9:DB:D9:76:78:C9:41:5A:7A:ED:26
Authority key identifier: 8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF
Certificate issuer:       /CN=8d7209a9ea81fef32b18534c1d11eda3299970ef
Certificate serial:       018F94CEABB721A42A14E1C00B13E0BB0653
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
Manifest number:          0727
Signing time:             Mon 20 May 2024 07:02:03 +0000
Manifest this update:     Mon 20 May 2024 07:02:03 +0000
Manifest next update:     Tue 21 May 2024 07:02:03 +0000
Files and hashes:         1: jXIJqeqB_vMrGFNMHRHtoymZcO8.crl (hash: 1xHKKFmf66GiBnBsepPpE+/SLiB30TrlScgfqsGsYBo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 07:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:94:ce:ab:b7:21:a4:2a:14:e1:c0:0b:13:e0:bb:06:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d7209a9ea81fef32b18534c1d11eda3299970ef
        Validity
            Not Before: May 20 07:02:03 2024 GMT
            Not After : May 21 07:02:03 2024 GMT
        Subject: CN=6c3ab5aff6c0270ee6f9dbd97678c9415a7aed26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bf:f3:12:a5:d7:2c:ea:d2:93:a0:fe:26:d2:
                    02:b9:f1:59:46:cb:3e:eb:8b:29:b3:86:24:eb:ee:
                    53:28:c7:51:c3:81:d0:55:8d:77:f2:77:b9:5a:97:
                    79:5b:fa:64:62:90:4c:b0:ba:14:6e:75:fe:ab:ab:
                    a6:9a:20:ec:72:1d:67:00:9a:37:6e:3a:a8:20:95:
                    ae:7c:29:30:22:69:48:7e:ea:3b:b3:0d:e5:b7:8f:
                    35:3b:0f:6b:5a:e7:70:a1:86:c8:04:26:80:c1:3b:
                    fc:3b:94:1d:c5:d6:10:72:1b:69:32:a7:05:45:c5:
                    43:a4:02:39:68:58:0d:3e:ed:51:6b:1d:f0:aa:16:
                    48:53:4b:14:06:fd:bb:01:99:30:bb:b5:47:e8:88:
                    2b:cc:ce:26:49:0d:21:f4:89:d0:95:1b:34:9a:3f:
                    8b:2e:13:ca:13:7a:3e:53:53:7e:bb:24:00:50:fe:
                    14:d8:de:06:b9:ec:3d:99:8e:2f:c1:18:56:f9:32:
                    ab:81:8b:b0:24:98:19:cf:d4:b2:b4:8b:20:b2:50:
                    10:59:ad:87:86:64:39:f3:a3:c7:59:36:f4:b8:d9:
                    23:66:f1:4e:5b:ca:b1:ec:bd:60:0f:43:f5:51:f8:
                    07:25:2b:2f:ad:c7:ec:10:35:7f:39:a0:03:c4:58:
                    47:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:3A:B5:AF:F6:C0:27:0E:E6:F9:DB:D9:76:78:C9:41:5A:7A:ED:26
            X509v3 Authority Key Identifier:
                keyid:8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:27:fa:4d:30:31:db:50:c2:02:b0:27:91:c9:41:bb:93:21:
         eb:17:50:a0:f6:b9:9c:07:b3:47:75:55:df:f8:37:1a:2f:33:
         eb:1e:2b:14:b8:ff:c9:a2:7a:cc:ee:b9:9f:db:30:75:16:28:
         ec:da:38:b8:49:0a:fd:98:95:6a:40:41:f2:4c:50:f3:90:07:
         09:d8:fc:8c:ab:dc:2b:d1:5d:cc:72:8c:72:75:61:7b:b1:d0:
         09:28:68:64:72:28:99:88:32:2b:e6:54:e2:69:94:46:40:ac:
         72:dc:f6:63:7f:70:59:fb:8d:b6:82:b9:3a:77:01:e3:8b:ea:
         02:73:f7:64:b2:b0:94:aa:63:e4:29:f4:5d:88:0e:69:7e:6e:
         1a:98:f0:b3:60:8e:8d:6e:c9:75:b4:2c:df:51:7d:e7:2a:2d:
         f8:a9:8e:9b:cc:f1:2c:bc:68:8a:ec:cc:0f:d1:30:62:06:1c:
         4e:b6:e3:3a:9e:5c:8b:29:16:34:0b:55:68:5c:75:bf:4c:e2:
         33:ed:eb:e8:ed:1f:b4:eb:68:3e:de:ee:8d:b5:07:5a:8e:a4:
         42:97:90:3a:16:2b:a7:66:bc:4f:d0:ed:06:d0:6b:89:8d:d0:
         8f:0c:ed:65:45:1e:a3:8c:29:86:18:61:43:32:00:a1:8c:69:
         65:a1:a6:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Uzqu3IaQqFOHACxPguwZTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNzIwOWE5ZWE4MWZlZjMyYjE4NTM0YzFkMTFlZGEzMjk5
OTcwZWYwHhcNMjQwNTIwMDcwMjAzWhcNMjQwNTIxMDcwMjAzWjAzMTEwLwYDVQQD
Eyg2YzNhYjVhZmY2YzAyNzBlZTZmOWRiZDk3Njc4Yzk0MTVhN2FlZDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr/zEqXXLOrSk6D+JtICufFZRss+
64sps4Yk6+5TKMdRw4HQVY138ne5Wpd5W/pkYpBMsLoUbnX+q6ummiDsch1nAJo3
bjqoIJWufCkwImlIfuo7sw3lt481Ow9rWudwoYbIBCaAwTv8O5QdxdYQchtpMqcF
RcVDpAI5aFgNPu1Rax3wqhZIU0sUBv27AZkwu7VH6IgrzM4mSQ0h9InQlRs0mj+L
LhPKE3o+U1N+uyQAUP4U2N4Guew9mY4vwRhW+TKrgYuwJJgZz9SytIsgslAQWa2H
hmQ586PHWTb0uNkjZvFOW8qx7L1gD0P1UfgHJSsvrcfsEDV/OaADxFhHxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGw6ta/2wCcO5vnb2XZ4yUFaeu0mMB8GA1UdIwQY
MBaAFI1yCanqgf7zKxhTTB0R7aMpmXDvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalhJSnFlcUJfdk1yR0ZOTUhSSHRveW1aY084LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84YzFlN2QtZWZhMy00ODkxLWFlZmYt
ZDliMTM1MzY2N2FhLzEvalhJSnFlcUJfdk1yR0ZOTUhSSHRveW1aY084Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC84YzFlN2QtZWZhMy00ODkxLWFlZmYtZDliMTM1MzY2N2Fh
LzEvalhJSnFlcUJfdk1yR0ZOTUhSSHRveW1aY084LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSf6TTAx
21DCArAnkclBu5Mh6xdQoPa5nAezR3VV3/g3Gi8z6x4rFLj/yaJ6zO65n9swdRYo
7No4uEkK/ZiVakBB8kxQ85AHCdj8jKvcK9FdzHKMcnVhe7HQCShoZHIomYgyK+ZU
4mmURkCsctz2Y39wWfuNtoK5OncB44vqAnP3ZLKwlKpj5Cn0XYgOaX5uGpjws2CO
jW7JdbQs31F95yot+KmOm8zxLLxoiuzMD9EwYgYcTrbjOp5ciykWNAtVaFx1v0zi
M+3r6O0ftOtoPt7ujbUHWo6kQpeQOhYrp2a8T9DtBtBriY3QjwztZUUeo4wphhhh
QzIAoYxpZaGmJA==
-----END CERTIFICATE-----
Generated at Mon May 20 13:25:38 2024 by rpki-client on console-ams.rpki-client.org