Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/8f6128-139d-4416-b506-26677f8a5055/1/ooinzLTItWvoPCxXZZ3A2W6VZig.mft
File:                     ooinzLTItWvoPCxXZZ3A2W6VZig.mft (raw, json)
Hash identifier:          ifTlauFLtO+o8z1AfJWXYH1pur1XrFEzFgy2Hdnxogs=
Subject key identifier:   C7:8C:D9:57:82:7D:13:26:43:55:15:A7:40:8A:A0:BE:47:43:02:80
Authority key identifier: A2:88:A7:CC:B4:C8:B5:6B:E8:3C:2C:57:65:9D:C0:D9:6E:95:66:28
Certificate issuer:       /CN=a288a7ccb4c8b56be83c2c57659dc0d96e956628
Certificate serial:       018F874940A9014DFE004E91E2E3335A3D99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ooinzLTItWvoPCxXZZ3A2W6VZig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/8f6128-139d-4416-b506-26677f8a5055/1/ooinzLTItWvoPCxXZZ3A2W6VZig.mft
Manifest number:          043F
Signing time:             Fri 17 May 2024 16:01:15 +0000
Manifest this update:     Fri 17 May 2024 16:01:15 +0000
Manifest next update:     Sat 18 May 2024 16:01:15 +0000
Files and hashes:         1: ooinzLTItWvoPCxXZZ3A2W6VZig.crl (hash: /EbGq2NfVW03lIqnLxPv4UdjzlVLUhY3g0vFPxoF630=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/8f6128-139d-4416-b506-26677f8a5055/1/ooinzLTItWvoPCxXZZ3A2W6VZig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/8f6128-139d-4416-b506-26677f8a5055/1/ooinzLTItWvoPCxXZZ3A2W6VZig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ooinzLTItWvoPCxXZZ3A2W6VZig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:40:a9:01:4d:fe:00:4e:91:e2:e3:33:5a:3d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a288a7ccb4c8b56be83c2c57659dc0d96e956628
        Validity
            Not Before: May 17 16:01:15 2024 GMT
            Not After : May 18 16:01:15 2024 GMT
        Subject: CN=c78cd957827d1326435515a7408aa0be47430280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4b:d1:ff:46:14:57:e5:87:ec:f9:13:5d:a3:
                    32:a1:89:f9:a8:1e:50:80:33:89:35:58:74:16:2a:
                    ee:42:e0:92:4d:da:7f:4a:ad:3d:b3:da:0e:2d:ea:
                    d2:57:04:5e:55:eb:7a:09:0a:88:bb:16:23:e9:c8:
                    70:06:b0:8e:96:f2:a2:40:9b:f7:e7:eb:b5:38:36:
                    5a:7c:73:c0:c5:17:65:97:2a:4a:43:b8:ef:01:5b:
                    6f:26:6c:d4:c9:8e:f8:e7:41:55:e4:1b:07:8c:98:
                    10:e7:18:9e:a7:ff:99:5f:cb:bc:62:aa:ff:b3:0d:
                    97:38:03:a4:b1:b3:3d:2f:59:31:68:6b:c3:3f:9c:
                    51:3a:5e:86:0c:48:ce:cf:54:e9:29:7a:3a:2e:61:
                    db:3e:08:2e:fb:da:24:2b:c9:42:70:34:4e:c6:5e:
                    32:fa:f6:94:53:26:9e:0c:0b:d7:0b:d4:26:01:83:
                    6b:9d:f3:dc:8e:b9:b7:49:dd:0c:3c:80:13:22:d0:
                    99:87:9a:5e:7f:cd:7e:7f:20:f7:7e:d4:15:e4:53:
                    40:1b:a9:53:e7:8c:e8:a8:92:8a:29:29:51:81:c9:
                    f7:2f:74:e6:a2:e6:2f:06:6f:de:33:28:5c:e0:e5:
                    f4:38:c6:da:49:ee:9d:34:88:4b:10:c4:3b:03:65:
                    4d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8C:D9:57:82:7D:13:26:43:55:15:A7:40:8A:A0:BE:47:43:02:80
            X509v3 Authority Key Identifier:
                keyid:A2:88:A7:CC:B4:C8:B5:6B:E8:3C:2C:57:65:9D:C0:D9:6E:95:66:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ooinzLTItWvoPCxXZZ3A2W6VZig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f6128-139d-4416-b506-26677f8a5055/1/ooinzLTItWvoPCxXZZ3A2W6VZig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f6128-139d-4416-b506-26677f8a5055/1/ooinzLTItWvoPCxXZZ3A2W6VZig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:fb:88:9b:6c:eb:f0:cc:11:10:0a:cd:c1:be:ac:27:bb:f8:
         ba:db:0b:ba:0d:90:bb:a7:16:aa:0b:66:94:38:7a:86:09:83:
         49:a2:79:76:e7:d0:d1:98:0f:b1:94:1a:f2:ba:37:c9:e2:98:
         b8:6f:3a:b6:33:82:a1:75:1e:cd:6c:77:e6:84:b6:82:c6:15:
         a3:6f:9d:d1:06:41:a4:67:21:78:e2:3b:46:6d:f9:57:69:30:
         36:68:87:b8:85:f9:11:34:6a:ca:fb:99:5a:f0:61:20:d7:59:
         eb:45:1e:8d:fa:53:cd:12:f6:b4:a3:c3:b4:a5:3f:96:e4:b6:
         31:c9:27:af:cb:10:a2:3e:b3:01:9e:e5:8b:c8:90:f6:5a:80:
         e8:14:53:7e:82:c8:fe:58:2c:9f:7a:06:34:08:b5:59:7d:57:
         e3:56:a2:79:0c:ab:0b:0e:a6:1a:b7:1c:eb:24:c9:e9:a8:7b:
         c4:e4:0c:78:46:b9:c8:9a:68:75:bf:bf:92:c6:46:b4:e2:02:
         08:82:ae:0f:58:a3:75:eb:78:a8:3d:f3:af:fa:5c:2c:b2:73:
         ef:50:bc:1a:80:6b:9c:2a:b7:db:00:6e:d9:dc:d2:d0:9c:b5:
         5b:d1:d2:a6:54:63:f6:c7:a1:15:fb:53:b7:14:d6:0b:f7:9c:
         f3:16:b5:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSUCpAU3+AE6R4uMzWj2ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyODhhN2NjYjRjOGI1NmJlODNjMmM1NzY1OWRjMGQ5NmU5
NTY2MjgwHhcNMjQwNTE3MTYwMTE1WhcNMjQwNTE4MTYwMTE1WjAzMTEwLwYDVQQD
EyhjNzhjZDk1NzgyN2QxMzI2NDM1NTE1YTc0MDhhYTBiZTQ3NDMwMjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEvR/0YUV+WH7PkTXaMyoYn5qB5Q
gDOJNVh0FiruQuCSTdp/Sq09s9oOLerSVwReVet6CQqIuxYj6chwBrCOlvKiQJv3
5+u1ODZafHPAxRdllypKQ7jvAVtvJmzUyY7450FV5BsHjJgQ5xiep/+ZX8u8Yqr/
sw2XOAOksbM9L1kxaGvDP5xROl6GDEjOz1TpKXo6LmHbPggu+9okK8lCcDROxl4y
+vaUUyaeDAvXC9QmAYNrnfPcjrm3Sd0MPIATItCZh5pef81+fyD3ftQV5FNAG6lT
54zoqJKKKSlRgcn3L3TmouYvBm/eMyhc4OX0OMbaSe6dNIhLEMQ7A2VNKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeM2VeCfRMmQ1UVp0CKoL5HQwKAMB8GA1UdIwQY
MBaAFKKIp8y0yLVr6DwsV2WdwNlulWYoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb29pbnpMVEl0V3ZvUEN4WFpaM0EyVzZWWmlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy84ZjYxMjgtMTM5ZC00NDE2LWI1MDYt
MjY2NzdmOGE1MDU1LzEvb29pbnpMVEl0V3ZvUEN4WFpaM0EyVzZWWmlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy84ZjYxMjgtMTM5ZC00NDE2LWI1MDYtMjY2NzdmOGE1MDU1
LzEvb29pbnpMVEl0V3ZvUEN4WFpaM0EyVzZWWmlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/uIm2zr
8MwREArNwb6sJ7v4utsLug2Qu6cWqgtmlDh6hgmDSaJ5dufQ0ZgPsZQa8ro3yeKY
uG86tjOCoXUezWx35oS2gsYVo2+d0QZBpGcheOI7Rm35V2kwNmiHuIX5ETRqyvuZ
WvBhINdZ60UejfpTzRL2tKPDtKU/luS2Mcknr8sQoj6zAZ7li8iQ9lqA6BRTfoLI
/lgsn3oGNAi1WX1X41aieQyrCw6mGrcc6yTJ6ah7xOQMeEa5yJpodb+/ksZGtOIC
CIKuD1ijdet4qD3zr/pcLLJz71C8GoBrnCq32wBu2dzS0Jy1W9HSplRj9sehFftT
txTWC/ec8xa1iA==
-----END CERTIFICATE-----
Generated at Fri May 17 19:21:18 2024 by rpki-client on console-fra.rpki-client.org