Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
File:                     UnksdxTtV0Vtc1XkoEubqL7VfkI.mft (raw, json)
Hash identifier:          gPEpgt88VktHrWPFmnGGohBTugF6oExnyO83VfGn2Qc=
Subject key identifier:   A7:14:D0:F1:34:EF:B7:2C:9C:38:7F:6A:28:42:79:79:19:95:DE:8F
Authority key identifier: 52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42
Certificate issuer:       /CN=52792c7714ed57456d7355e4a04b9ba8bed57e42
Certificate serial:       018F87B68896BE4A0696359A08E89F22DE4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
Manifest number:          0226
Signing time:             Fri 17 May 2024 18:00:37 +0000
Manifest this update:     Fri 17 May 2024 18:00:37 +0000
Manifest next update:     Sat 18 May 2024 18:00:37 +0000
Files and hashes:         1: UnksdxTtV0Vtc1XkoEubqL7VfkI.crl (hash: hLkvC6SD3tc1FXWTbFYQK7+Qg2T2XbAVCVWBz6EGkGg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:88:96:be:4a:06:96:35:9a:08:e8:9f:22:de:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52792c7714ed57456d7355e4a04b9ba8bed57e42
        Validity
            Not Before: May 17 18:00:37 2024 GMT
            Not After : May 18 18:00:37 2024 GMT
        Subject: CN=a714d0f134efb72c9c387f6a284279791995de8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:65:2d:e0:28:bb:88:0d:ed:49:a7:0c:15:1b:
                    65:5f:1c:40:1b:05:b7:30:73:91:42:7c:26:7b:6f:
                    af:c9:3a:14:4e:b5:b6:20:e1:bb:61:6c:34:53:34:
                    13:b3:84:48:b7:fa:b9:56:b8:23:73:67:9b:2c:a1:
                    c7:b5:ab:cc:00:1b:7d:18:9b:58:fd:c2:e1:0b:62:
                    32:fa:1c:43:4a:7b:7c:35:47:07:89:cc:55:6c:4b:
                    41:7a:e3:1c:56:41:c8:16:6f:e0:7f:41:03:46:2a:
                    59:bb:a0:16:c0:b8:7e:20:9d:d3:d1:39:0b:c7:66:
                    e6:62:3c:a7:8f:6f:bf:68:df:7d:0f:f3:b7:f2:aa:
                    a4:3f:f4:66:69:d6:c9:64:75:e5:c7:9c:06:2d:11:
                    0d:2d:61:4d:fa:2a:01:3e:79:1e:b1:ef:7b:6f:63:
                    76:4b:79:db:3d:17:4a:87:e9:c4:98:1f:06:5f:d5:
                    9f:d5:27:54:62:29:f6:0a:2c:f4:a2:ca:7e:9e:d9:
                    20:2b:ab:4c:e7:71:70:f5:f7:68:af:c7:e3:91:68:
                    f3:00:74:71:d4:8e:e6:29:cb:8c:3e:a5:59:22:fb:
                    3a:1a:31:58:70:f2:48:8d:55:cb:e2:fa:8e:1f:0f:
                    2c:30:ed:a0:98:31:f1:a1:7a:da:ad:8b:3e:0a:80:
                    58:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:14:D0:F1:34:EF:B7:2C:9C:38:7F:6A:28:42:79:79:19:95:DE:8F
            X509v3 Authority Key Identifier:
                keyid:52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:d4:ee:9e:cc:9c:fd:ba:1a:6c:90:41:16:16:82:59:e7:af:
         42:8d:fd:53:74:39:39:69:2a:aa:19:5a:00:02:06:19:b3:9d:
         de:0f:ad:e0:6d:ab:50:fc:75:96:e8:6f:4e:27:12:72:71:4c:
         1d:7c:23:31:50:95:21:dd:08:09:6f:38:20:f3:2c:e3:92:89:
         72:b9:1d:8d:d4:11:2e:f7:ab:c6:1e:d9:c0:53:75:16:0b:53:
         f4:7a:70:79:92:08:95:77:28:cd:4c:4d:7b:33:8c:5e:aa:ce:
         d8:ba:6b:b3:1c:c1:4f:b5:1a:77:6e:5d:0a:10:79:f2:4a:c2:
         c4:6d:db:f7:18:f9:b1:58:51:86:3e:45:ba:f7:c8:e1:d6:bc:
         54:ea:ab:c5:63:7a:cf:ee:a2:1f:7e:32:b2:7a:bd:16:42:26:
         be:ce:6a:4d:9c:53:33:5f:79:e1:5f:bf:8a:df:cb:83:c1:1b:
         f6:de:28:a6:e5:7f:45:50:1f:bd:72:8e:4f:6e:2a:72:02:48:
         40:86:6b:2e:04:2e:08:1b:f8:61:34:36:a0:66:c6:6c:ad:fb:
         2b:5f:ab:8b:95:be:ed:7e:dc:18:14:d6:f3:61:98:0f:f9:fa:
         9f:0d:62:31:cb:40:a5:75:e5:81:c2:b8:d7:48:4e:be:de:5c:
         f7:54:7a:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtoiWvkoGljWaCOifIt5LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNzkyYzc3MTRlZDU3NDU2ZDczNTVlNGEwNGI5YmE4YmVk
NTdlNDIwHhcNMjQwNTE3MTgwMDM3WhcNMjQwNTE4MTgwMDM3WjAzMTEwLwYDVQQD
EyhhNzE0ZDBmMTM0ZWZiNzJjOWMzODdmNmEyODQyNzk3OTE5OTVkZThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2Ut4Ci7iA3tSacMFRtlXxxAGwW3
MHORQnwme2+vyToUTrW2IOG7YWw0UzQTs4RIt/q5Vrgjc2ebLKHHtavMABt9GJtY
/cLhC2Iy+hxDSnt8NUcHicxVbEtBeuMcVkHIFm/gf0EDRipZu6AWwLh+IJ3T0TkL
x2bmYjynj2+/aN99D/O38qqkP/RmadbJZHXlx5wGLRENLWFN+ioBPnkese97b2N2
S3nbPRdKh+nEmB8GX9Wf1SdUYin2Ciz0osp+ntkgK6tM53Fw9fdor8fjkWjzAHRx
1I7mKcuMPqVZIvs6GjFYcPJIjVXL4vqOHw8sMO2gmDHxoXrarYs+CoBYZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcU0PE077csnDh/aihCeXkZld6PMB8GA1UdIwQY
MBaAFFJ5LHcU7VdFbXNV5KBLm6i+1X5CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW5rc2R4VHRWMFZ0YzFYa29FdWJxTDdWZmtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jZGE4YjMtODFlYi00Y2Y0LWI0Yzct
N2JkZTJmZDc2MzgyLzEvVW5rc2R4VHRWMFZ0YzFYa29FdWJxTDdWZmtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9jZGE4YjMtODFlYi00Y2Y0LWI0YzctN2JkZTJmZDc2Mzgy
LzEvVW5rc2R4VHRWMFZ0YzFYa29FdWJxTDdWZmtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdTunsyc
/boabJBBFhaCWeevQo39U3Q5OWkqqhlaAAIGGbOd3g+t4G2rUPx1luhvTicScnFM
HXwjMVCVId0ICW84IPMs45KJcrkdjdQRLverxh7ZwFN1FgtT9HpweZIIlXcozUxN
ezOMXqrO2LprsxzBT7Uad25dChB58krCxG3b9xj5sVhRhj5FuvfI4da8VOqrxWN6
z+6iH34ysnq9FkImvs5qTZxTM1954V+/it/Lg8Eb9t4opuV/RVAfvXKOT24qcgJI
QIZrLgQuCBv4YTQ2oGbGbK37K1+ri5W+7X7cGBTW82GYD/n6nw1iMctApXXlgcK4
10hOvt5c91R6Hg==
-----END CERTIFICATE-----
Generated at Fri May 17 20:14:40 2024 by rpki-client on console-ams.rpki-client.org