Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft
File:                     XZOOJrKYSy-hYarAewS9uFCq3RY.mft (raw, json)
Hash identifier:          u69GY14u4EWPEHm3HTWN5CMtELKfVhj2+YoUviV5Bz0=
Subject key identifier:   12:C0:CD:3B:C1:E1:7C:23:68:2A:4A:CF:67:7E:3E:57:02:EB:DB:24
Authority key identifier: 5D:93:8E:26:B2:98:4B:2F:A1:61:AA:C0:7B:04:BD:B8:50:AA:DD:16
Certificate issuer:       /CN=5d938e26b2984b2fa161aac07b04bdb850aadd16
Certificate serial:       01901EC671D360D71A6AEFDF40D416156114
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XZOOJrKYSy-hYarAewS9uFCq3RY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft
Manifest number:          05AC
Signing time:             Sun 16 Jun 2024 02:00:39 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:39 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:39 +0000
Files and hashes:         1: XZOOJrKYSy-hYarAewS9uFCq3RY.crl (hash: jxLRejfZDB49+7L2AZSdP4l6AmiTQTQ3ApeHSaw4gbQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XZOOJrKYSy-hYarAewS9uFCq3RY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:71:d3:60:d7:1a:6a:ef:df:40:d4:16:15:61:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d938e26b2984b2fa161aac07b04bdb850aadd16
        Validity
            Not Before: Jun 16 02:00:39 2024 GMT
            Not After : Jun 17 02:00:39 2024 GMT
        Subject: CN=12c0cd3bc1e17c23682a4acf677e3e5702ebdb24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:d3:05:00:f0:1f:aa:1c:5d:6f:fe:66:5e:
                    ee:8a:f0:75:71:4c:be:0f:99:32:b8:5c:19:18:f0:
                    19:21:d0:09:ec:60:b5:ce:f3:ff:ff:29:cf:e3:13:
                    ba:b0:c1:e4:42:8e:e4:a6:66:97:17:be:b7:74:ad:
                    33:24:70:f9:97:3b:15:64:79:46:74:3a:47:f8:4b:
                    0e:a3:54:e1:f4:ec:72:2b:23:b1:f5:fc:a0:14:41:
                    39:46:e2:25:3a:21:c6:6a:31:83:97:09:59:99:e3:
                    92:59:38:78:35:79:69:ba:69:3a:bb:5f:03:f5:3c:
                    8b:75:88:e8:a4:a3:ef:91:26:a7:78:0c:00:23:37:
                    91:b4:89:3b:67:00:2e:d2:bd:bb:91:23:27:dc:e8:
                    9f:df:38:a5:b6:84:23:51:fe:61:11:5a:76:e5:85:
                    c7:f7:04:9c:25:fc:29:74:a8:ef:5a:24:ac:1a:5b:
                    f7:85:d1:3a:ce:11:c9:c4:7a:af:2d:a4:38:53:66:
                    b4:82:5d:72:18:76:8d:9f:f0:63:1a:c5:63:b2:e6:
                    ed:bd:59:ca:4b:4b:2e:fa:96:ac:02:89:c5:10:1f:
                    a0:6b:52:ba:86:f0:f5:60:bd:d1:bd:83:94:81:56:
                    6c:d7:ed:7f:b6:15:57:b5:26:3b:ef:c0:0c:7a:13:
                    75:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C0:CD:3B:C1:E1:7C:23:68:2A:4A:CF:67:7E:3E:57:02:EB:DB:24
            X509v3 Authority Key Identifier:
                keyid:5D:93:8E:26:B2:98:4B:2F:A1:61:AA:C0:7B:04:BD:B8:50:AA:DD:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZOOJrKYSy-hYarAewS9uFCq3RY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:1f:a6:f0:d7:71:e2:fe:44:c9:51:22:66:f8:a8:b3:73:5b:
         14:10:11:d4:0f:68:cb:61:90:8a:04:99:c2:59:1a:fe:0d:8b:
         fe:35:3b:d3:f4:7d:8c:4e:35:20:a3:95:06:76:4d:bf:d0:f5:
         ee:3c:27:5f:30:bd:fc:e7:1e:b7:83:d3:be:18:12:51:bc:83:
         6b:18:0c:35:b5:e3:09:23:9f:e8:b5:15:14:73:e0:75:68:17:
         47:1c:fb:02:64:41:de:b3:10:04:ae:42:41:9c:ea:59:8d:4a:
         96:d4:f2:cf:a5:54:4a:c7:e9:af:4a:f1:1e:41:e5:1a:04:08:
         5f:2b:94:da:83:66:6c:da:09:e3:f0:e0:00:c9:e4:e5:cf:d0:
         7e:f9:98:4f:7a:dd:37:de:11:55:21:3d:0f:01:da:6d:b0:a4:
         75:12:eb:85:98:cd:5b:1a:4b:79:a9:8a:3f:0a:2d:9d:e5:ee:
         34:63:d0:1f:7d:b3:fc:18:8a:62:ad:92:b7:98:e4:49:7d:ae:
         29:64:d5:f7:0e:b8:36:80:b3:26:f5:6e:a3:cc:b7:dc:a0:a7:
         69:ae:2d:b4:15:57:cd:a2:48:60:e9:30:14:33:cc:f3:9f:28:
         4a:e6:28:f8:ee:d5:16:6c:2f:fe:a1:82:aa:31:7b:8f:b6:ff:
         f7:15:9e:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAexnHTYNcaau/fQNQWFWEUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkOTM4ZTI2YjI5ODRiMmZhMTYxYWFjMDdiMDRiZGI4NTBh
YWRkMTYwHhcNMjQwNjE2MDIwMDM5WhcNMjQwNjE3MDIwMDM5WjAzMTEwLwYDVQQD
EygxMmMwY2QzYmMxZTE3YzIzNjgyYTRhY2Y2NzdlM2U1NzAyZWJkYjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWXTBQDwH6ocXW/+Zl7uivB1cUy+
D5kyuFwZGPAZIdAJ7GC1zvP//ynP4xO6sMHkQo7kpmaXF763dK0zJHD5lzsVZHlG
dDpH+EsOo1Th9OxyKyOx9fygFEE5RuIlOiHGajGDlwlZmeOSWTh4NXlpumk6u18D
9TyLdYjopKPvkSaneAwAIzeRtIk7ZwAu0r27kSMn3Oif3ziltoQjUf5hEVp25YXH
9wScJfwpdKjvWiSsGlv3hdE6zhHJxHqvLaQ4U2a0gl1yGHaNn/BjGsVjsubtvVnK
S0su+pasAonFEB+ga1K6hvD1YL3RvYOUgVZs1+1/thVXtSY778AMehN1nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLAzTvB4XwjaCpKz2d+PlcC69skMB8GA1UdIwQY
MBaAFF2TjiaymEsvoWGqwHsEvbhQqt0WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFpPT0pyS1lTeS1oWWFyQWV3Uzl1RkNxM1JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8xYmU5ZjEtNWM0OC00NDI3LWEyYjEt
NmVjN2RiZTI3YmIzLzEvWFpPT0pyS1lTeS1oWWFyQWV3Uzl1RkNxM1JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8xYmU5ZjEtNWM0OC00NDI3LWEyYjEtNmVjN2RiZTI3YmIz
LzEvWFpPT0pyS1lTeS1oWWFyQWV3Uzl1RkNxM1JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAER+m8Ndx
4v5EyVEiZvios3NbFBAR1A9oy2GQigSZwlka/g2L/jU70/R9jE41IKOVBnZNv9D1
7jwnXzC9/Ocet4PTvhgSUbyDaxgMNbXjCSOf6LUVFHPgdWgXRxz7AmRB3rMQBK5C
QZzqWY1KltTyz6VUSsfpr0rxHkHlGgQIXyuU2oNmbNoJ4/DgAMnk5c/QfvmYT3rd
N94RVSE9DwHabbCkdRLrhZjNWxpLeamKPwotneXuNGPQH32z/BiKYq2St5jkSX2u
KWTV9w64NoCzJvVuo8y33KCnaa4ttBVXzaJIYOkwFDPM858oSuYo+O7VFmwv/qGC
qjF7j7b/9xWe9g==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:46:58 2024 by rpki-client on console-fra.rpki-client.org