Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
File:                     aweCDo1ADzwl3dC-G0bFTpVZYKE.mft (raw, json)
Hash identifier:          ENr0pI1NlptUjA5HgLzati0la3zRzqBBkI3QOGrMbYs=
Subject key identifier:   4C:DB:A4:47:3B:3E:3C:43:A0:52:A6:25:5D:55:98:B2:38:3A:90:32
Authority key identifier: 6B:07:82:0E:8D:40:0F:3C:25:DD:D0:BE:1B:46:C5:4E:95:59:60:A1
Certificate issuer:       /CN=6b07820e8d400f3c25ddd0be1b46c54e955960a1
Certificate serial:       0190418971606DDD4A5B342143477DABBA26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
Manifest number:          08F2
Signing time:             Sat 22 Jun 2024 20:00:44 +0000
Manifest this update:     Sat 22 Jun 2024 20:00:44 +0000
Manifest next update:     Sun 23 Jun 2024 20:00:44 +0000
Files and hashes:         1: aweCDo1ADzwl3dC-G0bFTpVZYKE.crl (hash: GXB7X+e8Rgr7mai65Dp+cDSy8at7noXkKqUWOzUioBo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:89:71:60:6d:dd:4a:5b:34:21:43:47:7d:ab:ba:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b07820e8d400f3c25ddd0be1b46c54e955960a1
        Validity
            Not Before: Jun 22 20:00:44 2024 GMT
            Not After : Jun 23 20:00:44 2024 GMT
        Subject: CN=4cdba4473b3e3c43a052a6255d5598b2383a9032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:62:03:a8:30:dd:5e:26:12:ea:fc:6e:75:34:
                    41:08:43:f0:2d:85:a1:45:f5:db:d2:13:d4:e5:59:
                    66:75:d8:b2:81:f9:e1:e6:e3:a0:c0:33:d3:66:10:
                    be:6d:e8:a2:a1:8f:ca:b3:9a:c8:0a:db:31:de:52:
                    24:03:60:59:79:d5:64:17:55:cf:71:d5:a5:01:78:
                    a2:3f:94:4b:66:7c:dc:a0:27:a4:a7:35:7c:55:a8:
                    5d:59:f0:67:9e:a3:26:c4:92:8f:70:58:62:ed:55:
                    d7:9b:0e:cb:c8:73:37:87:9d:07:bb:95:ab:aa:85:
                    c0:90:22:dd:98:05:d3:09:ff:b0:5d:91:90:c6:67:
                    f0:31:24:28:e7:84:36:8e:ee:4b:9e:63:f1:75:68:
                    55:5a:9e:26:0c:53:2f:ff:1d:dc:e3:38:e7:3f:e7:
                    3a:4c:55:b5:ce:bf:f5:13:fb:3a:be:f5:75:6e:61:
                    67:b5:d3:cf:8d:61:41:7c:6e:65:24:7e:96:b0:4f:
                    cb:e2:0a:99:e1:b7:52:a5:25:0e:9b:57:d3:3a:73:
                    67:1f:ed:b6:1d:d5:bf:43:9f:90:6c:ee:4a:98:d5:
                    9b:16:79:c5:e5:65:6d:44:37:c9:60:11:fb:f3:74:
                    a4:c8:37:c9:e8:6f:c9:a5:b8:90:81:6c:0d:dc:34:
                    8c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:DB:A4:47:3B:3E:3C:43:A0:52:A6:25:5D:55:98:B2:38:3A:90:32
            X509v3 Authority Key Identifier:
                keyid:6B:07:82:0E:8D:40:0F:3C:25:DD:D0:BE:1B:46:C5:4E:95:59:60:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:09:f5:ad:e5:0e:99:29:37:46:f5:48:c5:14:82:db:3e:d8:
         c3:e5:2d:f3:10:46:14:3b:c1:dc:e2:76:4b:96:33:dd:e6:bc:
         e9:54:ea:28:65:e6:2b:65:0f:e8:94:88:31:00:2e:78:d4:e1:
         08:a6:95:91:42:27:5e:a8:e8:dd:c4:c7:d4:8f:a5:32:9a:d2:
         8f:99:c6:ff:64:55:9c:77:98:fd:f0:4b:ed:3f:b7:b4:33:7f:
         44:de:ea:04:ab:df:0d:f6:02:fa:f8:51:c0:45:ad:01:29:9b:
         b5:a2:68:91:ce:95:b0:35:ec:b5:4d:51:bc:75:9c:ce:03:85:
         8e:d0:4d:80:fe:ce:15:dc:82:9f:c8:1b:19:b5:c3:f8:35:02:
         ee:bd:fd:42:d3:a5:cc:98:04:13:d9:21:ab:eb:8c:88:07:1f:
         fb:2e:7f:7f:cb:df:54:90:41:6a:47:11:6d:e7:c5:bb:a7:ca:
         f6:c1:dd:aa:21:56:0f:96:6d:07:ee:3c:4d:36:8d:64:93:44:
         27:5e:7e:eb:0e:62:49:c3:53:de:d8:26:56:05:16:70:24:34:
         8b:1e:3f:5a:62:a2:64:b1:56:f1:31:bb:5c:46:20:66:68:33:
         66:47:57:8f:c9:01:2e:22:af:71:93:4f:d9:89:e8:cc:42:c8:
         95:94:a7:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBBiXFgbd1KWzQhQ0d9q7omMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMDc4MjBlOGQ0MDBmM2MyNWRkZDBiZTFiNDZjNTRlOTU1
OTYwYTEwHhcNMjQwNjIyMjAwMDQ0WhcNMjQwNjIzMjAwMDQ0WjAzMTEwLwYDVQQD
Eyg0Y2RiYTQ0NzNiM2UzYzQzYTA1MmE2MjU1ZDU1OThiMjM4M2E5MDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWIDqDDdXiYS6vxudTRBCEPwLYWh
RfXb0hPU5Vlmddiygfnh5uOgwDPTZhC+beiioY/Ks5rICtsx3lIkA2BZedVkF1XP
cdWlAXiiP5RLZnzcoCekpzV8VahdWfBnnqMmxJKPcFhi7VXXmw7LyHM3h50Hu5Wr
qoXAkCLdmAXTCf+wXZGQxmfwMSQo54Q2ju5LnmPxdWhVWp4mDFMv/x3c4zjnP+c6
TFW1zr/1E/s6vvV1bmFntdPPjWFBfG5lJH6WsE/L4gqZ4bdSpSUOm1fTOnNnH+22
HdW/Q5+QbO5KmNWbFnnF5WVtRDfJYBH783SkyDfJ6G/JpbiQgWwN3DSMXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzbpEc7PjxDoFKmJV1VmLI4OpAyMB8GA1UdIwQY
MBaAFGsHgg6NQA88Jd3QvhtGxU6VWWChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXdlQ0RvMUFEendsM2RDLUcwYkZUcFZaWUtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9iZmM2YjEtMDJhZi00Y2IxLWEwNmQt
NGQ0OTMwODJkYTFjLzEvYXdlQ0RvMUFEendsM2RDLUcwYkZUcFZaWUtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9iZmM2YjEtMDJhZi00Y2IxLWEwNmQtNGQ0OTMwODJkYTFj
LzEvYXdlQ0RvMUFEendsM2RDLUcwYkZUcFZaWUtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgn1reUO
mSk3RvVIxRSC2z7Yw+Ut8xBGFDvB3OJ2S5Yz3ea86VTqKGXmK2UP6JSIMQAueNTh
CKaVkUInXqjo3cTH1I+lMprSj5nG/2RVnHeY/fBL7T+3tDN/RN7qBKvfDfYC+vhR
wEWtASmbtaJokc6VsDXstU1RvHWczgOFjtBNgP7OFdyCn8gbGbXD+DUC7r39QtOl
zJgEE9khq+uMiAcf+y5/f8vfVJBBakcRbefFu6fK9sHdqiFWD5ZtB+48TTaNZJNE
J15+6w5iScNT3tgmVgUWcCQ0ix4/WmKiZLFW8TG7XEYgZmgzZkdXj8kBLiKvcZNP
2YnozELIlZSnaA==
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:06:19 2024 by rpki-client on console-ams.rpki-client.org