Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/179470-33fc-47fc-8c95-c4ce71e0e86b/1/fMYbSrn0CoVFkpbama8w3IuAudc.mft
File:                     fMYbSrn0CoVFkpbama8w3IuAudc.mft (raw, json)
Hash identifier:          UKQdYdpow+0puUznaZWYLSqDD32W/KQh+ClhR3njaUo=
Subject key identifier:   DB:61:22:D7:9B:C7:8B:2F:2C:23:39:5F:99:1C:37:05:CD:73:31:47
Authority key identifier: 7C:C6:1B:4A:B9:F4:0A:85:45:92:96:DA:99:AF:30:DC:8B:80:B9:D7
Certificate issuer:       /CN=7cc61b4ab9f40a85459296da99af30dc8b80b9d7
Certificate serial:       018F885AE35E75FBC922866BC4CF4DE781E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fMYbSrn0CoVFkpbama8w3IuAudc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/179470-33fc-47fc-8c95-c4ce71e0e86b/1/fMYbSrn0CoVFkpbama8w3IuAudc.mft
Manifest number:          B2
Signing time:             Fri 17 May 2024 21:00:08 +0000
Manifest this update:     Fri 17 May 2024 21:00:08 +0000
Manifest next update:     Sat 18 May 2024 21:00:08 +0000
Files and hashes:         1: fMYbSrn0CoVFkpbama8w3IuAudc.crl (hash: Bc/YaTw51YOAdxiILUbKU+bouNx3C6Chdr04lgNnGGk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/179470-33fc-47fc-8c95-c4ce71e0e86b/1/fMYbSrn0CoVFkpbama8w3IuAudc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/179470-33fc-47fc-8c95-c4ce71e0e86b/1/fMYbSrn0CoVFkpbama8w3IuAudc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fMYbSrn0CoVFkpbama8w3IuAudc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:e3:5e:75:fb:c9:22:86:6b:c4:cf:4d:e7:81:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cc61b4ab9f40a85459296da99af30dc8b80b9d7
        Validity
            Not Before: May 17 21:00:08 2024 GMT
            Not After : May 18 21:00:08 2024 GMT
        Subject: CN=db6122d79bc78b2f2c23395f991c3705cd733147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:99:b1:f9:23:21:59:91:ea:32:91:1a:0d:64:
                    f3:63:37:0b:29:19:9b:cd:fe:c9:06:66:ba:44:f3:
                    82:3d:d5:e5:08:c9:6b:42:f1:82:8c:7b:61:9d:d7:
                    a1:e5:38:ba:6e:8e:74:87:cc:c6:c7:c7:18:b4:dc:
                    e4:4b:8c:56:59:9e:27:ca:98:40:06:df:86:9a:ab:
                    72:e2:45:78:a8:9f:46:86:0f:40:71:a6:67:e9:e2:
                    02:d1:d0:fd:35:df:fe:f6:ad:78:6f:21:01:fb:49:
                    33:ac:9e:bd:0d:33:17:e1:be:c0:d5:d7:b9:88:08:
                    e9:40:45:a7:ee:37:22:be:95:ff:5c:e3:8d:ef:ec:
                    4c:bf:81:9a:83:fc:f2:a5:b8:d1:b2:e4:cc:bc:af:
                    82:fa:7e:0b:97:c8:5f:c3:bf:30:c3:9b:ec:1c:9a:
                    ca:0f:31:01:93:4c:ab:1c:98:88:c7:cb:f3:67:5d:
                    a1:4d:10:2e:5e:8e:a0:01:bb:fe:ba:27:f9:81:e1:
                    a4:98:15:c0:28:ce:e2:2d:52:15:8d:8d:5b:ef:48:
                    4b:5c:44:ac:5f:be:46:ba:96:69:59:a3:42:0a:36:
                    3f:03:ee:4d:17:4a:0c:79:0a:a9:f3:06:4c:4f:50:
                    94:2c:2a:8e:9a:9c:1c:83:c1:94:8a:bd:50:de:5c:
                    27:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:61:22:D7:9B:C7:8B:2F:2C:23:39:5F:99:1C:37:05:CD:73:31:47
            X509v3 Authority Key Identifier:
                keyid:7C:C6:1B:4A:B9:F4:0A:85:45:92:96:DA:99:AF:30:DC:8B:80:B9:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fMYbSrn0CoVFkpbama8w3IuAudc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/179470-33fc-47fc-8c95-c4ce71e0e86b/1/fMYbSrn0CoVFkpbama8w3IuAudc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/179470-33fc-47fc-8c95-c4ce71e0e86b/1/fMYbSrn0CoVFkpbama8w3IuAudc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:9a:dc:d3:fd:03:4f:22:fc:64:aa:38:85:4f:0c:44:28:22:
         e4:10:38:a7:7b:1c:18:95:e7:73:d7:e8:fc:5c:bb:6c:97:4b:
         67:46:d7:df:1d:48:9d:a8:ca:84:a2:76:d3:5d:34:6d:8f:ee:
         1d:3d:90:1d:92:e6:a9:ae:77:2e:14:8b:46:69:04:4b:0c:93:
         87:7d:67:b9:dd:61:2a:c9:b1:e1:53:1f:8a:68:31:98:7a:c4:
         25:47:22:e9:b6:35:b1:c0:d8:3c:52:c2:05:c0:65:a1:da:b8:
         cd:f7:c7:75:e4:46:fb:85:83:56:97:fe:26:48:2a:02:5c:36:
         6b:76:2c:b2:7e:ec:4c:c8:40:d1:97:3d:fa:e7:a3:a2:61:59:
         df:75:03:9b:e6:0c:e4:f1:52:41:77:26:1e:d1:8a:63:59:8d:
         d2:a8:64:e0:6d:f2:06:4b:28:3c:5c:cb:7c:a6:15:69:34:a0:
         91:85:9b:bd:d7:5a:a9:14:4f:6d:8b:df:01:5f:a4:01:7e:6a:
         ef:b1:41:d4:06:6b:e6:61:38:46:24:47:46:a8:24:f5:e9:3d:
         01:7d:9b:22:c3:66:49:05:13:37:93:aa:c0:9a:cf:ad:06:c1:
         af:ca:27:f4:f6:86:76:bb:50:58:62:50:7f:8e:32:cb:5f:0d:
         b5:3e:41:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IWuNedfvJIoZrxM9N54HgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYzYxYjRhYjlmNDBhODU0NTkyOTZkYTk5YWYzMGRjOGI4
MGI5ZDcwHhcNMjQwNTE3MjEwMDA4WhcNMjQwNTE4MjEwMDA4WjAzMTEwLwYDVQQD
EyhkYjYxMjJkNzliYzc4YjJmMmMyMzM5NWY5OTFjMzcwNWNkNzMzMTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJmx+SMhWZHqMpEaDWTzYzcLKRmb
zf7JBma6RPOCPdXlCMlrQvGCjHthndeh5Ti6bo50h8zGx8cYtNzkS4xWWZ4nyphA
Bt+Gmqty4kV4qJ9Ghg9AcaZn6eIC0dD9Nd/+9q14byEB+0kzrJ69DTMX4b7A1de5
iAjpQEWn7jcivpX/XOON7+xMv4Gag/zypbjRsuTMvK+C+n4Ll8hfw78ww5vsHJrK
DzEBk0yrHJiIx8vzZ12hTRAuXo6gAbv+uif5geGkmBXAKM7iLVIVjY1b70hLXESs
X75GupZpWaNCCjY/A+5NF0oMeQqp8wZMT1CULCqOmpwcg8GUir1Q3lwn2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNthItebx4svLCM5X5kcNwXNczFHMB8GA1UdIwQY
MBaAFHzGG0q59AqFRZKW2pmvMNyLgLnXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk1ZYlNybjBDb1ZGa3BiYW1hOHczSXVBdWRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8xNzk0NzAtMzNmYy00N2ZjLThjOTUt
YzRjZTcxZTBlODZiLzEvZk1ZYlNybjBDb1ZGa3BiYW1hOHczSXVBdWRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8xNzk0NzAtMzNmYy00N2ZjLThjOTUtYzRjZTcxZTBlODZi
LzEvZk1ZYlNybjBDb1ZGa3BiYW1hOHczSXVBdWRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUprc0/0D
TyL8ZKo4hU8MRCgi5BA4p3scGJXnc9fo/Fy7bJdLZ0bX3x1InajKhKJ20100bY/u
HT2QHZLmqa53LhSLRmkESwyTh31nud1hKsmx4VMfimgxmHrEJUci6bY1scDYPFLC
BcBlodq4zffHdeRG+4WDVpf+JkgqAlw2a3Yssn7sTMhA0Zc9+uejomFZ33UDm+YM
5PFSQXcmHtGKY1mN0qhk4G3yBksoPFzLfKYVaTSgkYWbvddaqRRPbYvfAV+kAX5q
77FB1AZr5mE4RiRHRqgk9ek9AX2bIsNmSQUTN5OqwJrPrQbBr8on9PaGdrtQWGJQ
f44yy18NtT5B2A==
-----END CERTIFICATE-----
Generated at Fri May 17 22:07:37 2024 by rpki-client on console-ams.rpki-client.org