Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
File:                     Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft (raw, json)
Hash identifier:          jrH5xrd533NBGBVh/xNy9y69eZ4sdBNF/nQ2OF7ViRY=
Subject key identifier:   74:93:B3:FC:BD:9F:2C:A3:1D:96:19:AC:61:A3:50:42:CE:3B:1A:33
Authority key identifier: 09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D
Certificate issuer:       /CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
Certificate serial:       01901D4602B092EDD70E7C4893BAF5CC43A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 19:00:45 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:45 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:45 +0000
Files and hashes:         1: Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl (hash: E3o2tdyfbQgEgvZba9Qy8avZSSokM+KbqW/AyINGZmM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:02:b0:92:ed:d7:0e:7c:48:93:ba:f5:cc:43:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d
        Validity
            Not Before: Jun 15 19:00:45 2024 GMT
            Not After : Jun 16 19:00:45 2024 GMT
        Subject: CN=7493b3fcbd9f2ca31d9619ac61a35042ce3b1a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f2:f1:4b:4a:e1:ff:47:5c:95:4e:e7:e7:dc:
                    31:1c:73:6c:97:5d:de:58:bf:92:18:e3:30:2a:9c:
                    47:a3:e2:29:13:db:91:fa:75:26:7e:ad:d4:18:64:
                    25:e9:84:8b:ea:81:80:be:4c:fc:cd:01:ff:1b:8d:
                    e5:3c:4b:77:5a:95:9f:e9:e9:66:54:9f:fe:d9:5b:
                    13:b4:05:f6:5c:0b:c2:0a:7f:a1:e0:47:5e:ae:fd:
                    c9:0e:7a:82:57:0f:5b:96:50:82:ee:2f:4c:fe:a0:
                    45:8e:c6:0f:9f:14:d0:bf:ff:94:9c:ad:24:59:2b:
                    05:a4:ab:ad:40:64:82:7b:5f:c9:13:dc:ae:2f:be:
                    b6:da:95:4a:7d:f7:e9:9d:35:a6:a6:d2:4b:9f:b4:
                    93:4f:db:6e:11:47:ab:4c:89:69:f6:82:7b:de:ee:
                    c7:a7:a6:f0:57:e6:92:2e:4b:25:7b:28:89:85:07:
                    8b:e8:0c:c6:b8:0e:02:0e:b2:df:2a:c5:1c:5f:7d:
                    a4:ec:2e:a9:77:91:11:4b:75:91:7c:d6:16:60:94:
                    ee:30:a6:cf:38:14:6b:d2:df:f0:92:89:a3:c5:a4:
                    27:08:2d:da:11:0a:ac:6e:1d:56:0f:ff:6b:9c:47:
                    03:f3:8b:83:26:ff:39:d7:b7:a7:1b:75:5a:bc:d0:
                    e6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:93:B3:FC:BD:9F:2C:A3:1D:96:19:AC:61:A3:50:42:CE:3B:1A:33
            X509v3 Authority Key Identifier:
                keyid:09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c3:31:81:b1:8f:f4:d6:1a:b7:9f:4c:d8:7b:5a:aa:18:09:
         6b:6a:37:76:36:60:59:a5:3f:84:81:79:aa:3c:7c:79:db:10:
         d0:b0:e7:1a:56:52:ee:cd:c8:71:53:17:78:66:47:e0:4a:78:
         ca:11:4c:ed:16:6d:fb:c9:1d:f4:c0:c2:72:29:3b:5e:20:b8:
         4a:43:04:84:5d:4a:4f:cf:64:18:b9:e2:66:a9:d6:2c:ee:00:
         45:d4:4a:91:c6:47:96:80:e2:16:9b:7d:33:5d:28:16:2e:7b:
         bb:f8:7f:5d:5e:9c:c8:42:f8:9b:fb:53:62:aa:0b:13:30:00:
         97:f7:8e:2a:ab:82:3b:e6:ef:79:ea:9f:46:8b:2e:9d:56:8e:
         cb:c7:3f:f1:98:e5:ae:c5:76:d8:8f:54:68:82:3c:1d:06:1d:
         13:ca:41:37:44:ee:c2:7c:bf:1c:f5:a2:86:17:2a:dd:45:57:
         8b:bc:1d:5e:33:78:6d:78:4a:f6:ab:a6:63:0b:c3:e3:60:14:
         43:5b:79:13:3d:51:b0:9d:ca:ed:4b:80:0f:46:8d:5a:5a:c6:
         12:22:f4:0c:84:d7:61:81:bc:5b:04:13:c3:26:29:3c:cd:c9:
         aa:1f:98:ff:b8:da:72:d9:78:04:9a:c7:cd:ad:47:b3:55:ed:
         60:23:2f:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdRgKwku3XDnxIk7r1zEOkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZmQ4YTM1YjUwYjZiNjVhMTBjMDQzOTczOTk2ZTk2YjBm
NWFkNWQwHhcNMjQwNjE1MTkwMDQ1WhcNMjQwNjE2MTkwMDQ1WjAzMTEwLwYDVQQD
Eyg3NDkzYjNmY2JkOWYyY2EzMWQ5NjE5YWM2MWEzNTA0MmNlM2IxYTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fLxS0rh/0dclU7n59wxHHNsl13e
WL+SGOMwKpxHo+IpE9uR+nUmfq3UGGQl6YSL6oGAvkz8zQH/G43lPEt3WpWf6elm
VJ/+2VsTtAX2XAvCCn+h4Ederv3JDnqCVw9bllCC7i9M/qBFjsYPnxTQv/+UnK0k
WSsFpKutQGSCe1/JE9yuL7622pVKfffpnTWmptJLn7STT9tuEUerTIlp9oJ73u7H
p6bwV+aSLksleyiJhQeL6AzGuA4CDrLfKsUcX32k7C6pd5ERS3WRfNYWYJTuMKbP
OBRr0t/wkomjxaQnCC3aEQqsbh1WD/9rnEcD84uDJv8517enG3VavNDmbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSTs/y9nyyjHZYZrGGjUELOOxozMB8GA1UdIwQY
MBaAFAn9ijW1C2tloQwEOXOZbpaw9a1dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2YyS05iVUxhMldoREFRNWM1bHVsckQxclYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lMTRkOTEtZWYwZi00ZWRjLWFmZTUt
NmE5ZmJjNWRjNmM4LzEvQ2YyS05iVUxhMldoREFRNWM1bHVsckQxclYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9lMTRkOTEtZWYwZi00ZWRjLWFmZTUtNmE5ZmJjNWRjNmM4
LzEvQ2YyS05iVUxhMldoREFRNWM1bHVsckQxclYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcMxgbGP
9NYat59M2HtaqhgJa2o3djZgWaU/hIF5qjx8edsQ0LDnGlZS7s3IcVMXeGZH4Ep4
yhFM7RZt+8kd9MDCcik7XiC4SkMEhF1KT89kGLniZqnWLO4ARdRKkcZHloDiFpt9
M10oFi57u/h/XV6cyEL4m/tTYqoLEzAAl/eOKquCO+bveeqfRosunVaOy8c/8Zjl
rsV22I9UaII8HQYdE8pBN0Tuwny/HPWihhcq3UVXi7wdXjN4bXhK9qumYwvD42AU
Q1t5Ez1RsJ3K7UuAD0aNWlrGEiL0DITXYYG8WwQTwyYpPM3Jqh+Y/7jactl4BJrH
za1Hs1XtYCMvBQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:34:21 2024 by rpki-client on console-ams.rpki-client.org