Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
File:                     hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft (raw, json)
Hash identifier:          8gOaQaRrmuXaProckUjrxeWEBD7cQ+Q9gyZK8sO5qPU=
Subject key identifier:   6D:24:B2:23:0A:A9:D2:1A:86:A1:D9:4A:34:08:3A:31:88:27:96:EF
Authority key identifier: 86:19:FC:90:99:CE:23:EA:5A:3A:8F:19:9C:53:F9:14:28:87:87:05
Certificate issuer:       /CN=8619fc9099ce23ea5a3a8f199c53f91428878705
Certificate serial:       01903AE46DAD6A189B5ED27AAF4F5C32D21E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
Manifest number:          11D2
Signing time:             Fri 21 Jun 2024 13:02:47 +0000
Manifest this update:     Fri 21 Jun 2024 13:02:47 +0000
Manifest next update:     Sat 22 Jun 2024 13:02:47 +0000
Files and hashes:         1: hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl (hash: qfOgu4RBKOAyVkRKzhu3I2YCz1Ml/DtRLLu2u/BZuPE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:e4:6d:ad:6a:18:9b:5e:d2:7a:af:4f:5c:32:d2:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8619fc9099ce23ea5a3a8f199c53f91428878705
        Validity
            Not Before: Jun 21 13:02:47 2024 GMT
            Not After : Jun 22 13:02:47 2024 GMT
        Subject: CN=6d24b2230aa9d21a86a1d94a34083a31882796ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8a:0d:9e:87:7b:57:1d:85:57:14:ce:02:40:
                    07:4b:41:a6:61:9b:d7:b6:9d:51:25:01:21:61:49:
                    5b:ce:c0:d2:3f:70:b3:45:6e:08:c7:7a:2a:ba:a9:
                    64:25:6e:3e:e9:cb:00:b7:60:89:ee:d6:52:a9:59:
                    f6:11:9e:ad:c1:68:af:b9:2a:b2:d3:b2:d5:82:81:
                    5b:f6:d9:d4:71:e5:3d:a3:81:2a:4a:36:8a:e6:da:
                    21:fe:ac:e3:c1:d2:37:06:67:99:0b:21:83:56:07:
                    68:db:a7:03:44:68:ce:9c:7b:fd:ac:07:51:bf:c4:
                    cf:1d:08:73:4f:95:26:2e:7c:14:0e:73:f2:8f:37:
                    96:82:9f:74:dc:21:9f:e4:94:5b:d1:ad:ce:a4:46:
                    0d:29:85:7c:af:b1:d4:c6:ba:8c:7b:d0:13:69:ad:
                    a7:56:d4:25:01:7c:29:bd:4b:4b:d3:e1:0a:2f:8e:
                    a9:20:f9:fa:2b:67:a5:a7:c7:f7:a9:bb:a5:6f:30:
                    10:46:21:6d:66:4a:83:d2:e7:4b:e0:30:fd:b5:28:
                    0f:51:fd:e3:bd:11:42:fb:8a:81:3c:31:ef:3a:b5:
                    93:f4:4b:19:2f:63:50:ed:3d:47:fc:cb:0a:e0:7b:
                    1d:73:69:f3:2c:3f:58:33:3b:97:71:35:b1:c4:77:
                    a7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:24:B2:23:0A:A9:D2:1A:86:A1:D9:4A:34:08:3A:31:88:27:96:EF
            X509v3 Authority Key Identifier:
                keyid:86:19:FC:90:99:CE:23:EA:5A:3A:8F:19:9C:53:F9:14:28:87:87:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:38:33:ad:e0:dc:eb:cc:85:a4:e6:d1:46:d2:be:30:80:5f:
         f9:17:49:ee:ed:c0:5e:44:c2:56:b4:ad:00:21:6b:20:86:dd:
         29:3c:3d:db:d9:63:e3:94:31:a9:68:3d:d3:15:04:2a:fd:72:
         d5:69:4a:dc:5d:53:fc:a4:77:fd:aa:d5:1a:2a:09:7e:2f:56:
         95:7f:47:e3:a6:5e:67:ba:2d:6c:81:55:b8:2d:64:dc:f5:eb:
         33:b5:fc:29:7d:57:01:e4:33:bf:d7:2f:01:1d:98:c9:c7:8b:
         f9:2e:1b:4f:3b:7b:dc:6d:22:6c:a1:4e:ec:9c:98:a2:83:49:
         0d:8e:40:f4:e6:c7:7e:18:57:92:b8:bb:9c:3b:5b:18:8d:ec:
         33:d2:4c:35:a9:22:81:3f:84:ae:c2:26:b7:90:45:d5:5e:8d:
         ce:bb:07:b6:9f:b4:f1:83:b5:fa:bb:21:65:0c:eb:4a:2b:a5:
         0c:2b:e2:3e:6e:ea:22:32:6f:4b:1c:f5:3e:aa:1f:85:8a:85:
         4d:64:94:d8:55:c5:09:30:b8:e5:40:09:02:f0:f5:f7:ac:31:
         00:35:83:60:9f:0a:ce:5a:d3:82:77:45:b6:18:e8:f2:cd:41:
         28:29:9b:de:6e:11:d1:10:43:1f:83:da:38:cc:8a:69:8d:61:
         4f:50:60:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA65G2tahibXtJ6r09cMtIeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MTlmYzkwOTljZTIzZWE1YTNhOGYxOTljNTNmOTE0Mjg4
Nzg3MDUwHhcNMjQwNjIxMTMwMjQ3WhcNMjQwNjIyMTMwMjQ3WjAzMTEwLwYDVQQD
Eyg2ZDI0YjIyMzBhYTlkMjFhODZhMWQ5NGEzNDA4M2EzMTg4Mjc5NmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYoNnod7Vx2FVxTOAkAHS0GmYZvX
tp1RJQEhYUlbzsDSP3CzRW4Ix3oquqlkJW4+6csAt2CJ7tZSqVn2EZ6twWivuSqy
07LVgoFb9tnUceU9o4EqSjaK5toh/qzjwdI3BmeZCyGDVgdo26cDRGjOnHv9rAdR
v8TPHQhzT5UmLnwUDnPyjzeWgp903CGf5JRb0a3OpEYNKYV8r7HUxrqMe9ATaa2n
VtQlAXwpvUtL0+EKL46pIPn6K2elp8f3qbulbzAQRiFtZkqD0udL4DD9tSgPUf3j
vRFC+4qBPDHvOrWT9EsZL2NQ7T1H/MsK4Hsdc2nzLD9YMzuXcTWxxHenoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0ksiMKqdIahqHZSjQIOjGIJ5bvMB8GA1UdIwQY
MBaAFIYZ/JCZziPqWjqPGZxT+RQoh4cFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGhuOGtKbk9JLXBhT284Wm5GUDVGQ2lIaHdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jY2YzYjAtYWRmZC00ZmY0LWFlZjAt
YjNmOTkxMGVlOTBkLzEvaGhuOGtKbk9JLXBhT284Wm5GUDVGQ2lIaHdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9jY2YzYjAtYWRmZC00ZmY0LWFlZjAtYjNmOTkxMGVlOTBk
LzEvaGhuOGtKbk9JLXBhT284Wm5GUDVGQ2lIaHdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTgzreDc
68yFpObRRtK+MIBf+RdJ7u3AXkTCVrStACFrIIbdKTw929lj45QxqWg90xUEKv1y
1WlK3F1T/KR3/arVGioJfi9WlX9H46ZeZ7otbIFVuC1k3PXrM7X8KX1XAeQzv9cv
AR2YyceL+S4bTzt73G0ibKFO7JyYooNJDY5A9ObHfhhXkri7nDtbGI3sM9JMNaki
gT+ErsImt5BF1V6NzrsHtp+08YO1+rshZQzrSiulDCviPm7qIjJvSxz1PqofhYqF
TWSU2FXFCTC45UAJAvD196wxADWDYJ8KzlrTgndFthjo8s1BKCmb3m4R0RBDH4Pa
OMyKaY1hT1BgLw==
-----END CERTIFICATE-----
Generated at Fri Jun 21 16:21:27 2024 by rpki-client on console-ams.rpki-client.org