Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
File:                     KPev7E0_BvgNaHKm1iRs0B5z1qY.mft (raw, json)
Hash identifier:          YBpZ1A0KSXTxqsm7UIDtLVts5J7jDHg09yANB2XQANg=
Subject key identifier:   8D:28:81:07:67:30:4B:69:23:F4:9B:43:F4:2B:71:7B:58:5F:1F:30
Authority key identifier: 28:F7:AF:EC:4D:3F:06:F8:0D:68:72:A6:D6:24:6C:D0:1E:73:D6:A6
Certificate issuer:       /CN=28f7afec4d3f06f80d6872a6d6246cd01e73d6a6
Certificate serial:       0190448CC2AB8CF24C59442A030E81C34054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
Manifest number:          11D6
Signing time:             Sun 23 Jun 2024 10:03:13 +0000
Manifest this update:     Sun 23 Jun 2024 10:03:13 +0000
Manifest next update:     Mon 24 Jun 2024 10:03:13 +0000
Files and hashes:         1: KPev7E0_BvgNaHKm1iRs0B5z1qY.crl (hash: e6fNFG+FdAPtzDYomeN6k818/U1TD3vhino1Md+GFEg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:c2:ab:8c:f2:4c:59:44:2a:03:0e:81:c3:40:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28f7afec4d3f06f80d6872a6d6246cd01e73d6a6
        Validity
            Not Before: Jun 23 10:03:13 2024 GMT
            Not After : Jun 24 10:03:13 2024 GMT
        Subject: CN=8d28810767304b6923f49b43f42b717b585f1f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:d5:b2:9e:ee:d7:0f:5d:7d:c9:2b:0b:73:87:
                    ff:35:e9:4b:ce:32:4d:86:20:f3:41:a0:ba:37:b4:
                    e9:34:ab:de:b4:4f:da:36:84:9b:47:2d:2e:df:a6:
                    70:9b:73:df:e1:7c:c1:a9:47:6a:f7:26:7c:6b:fb:
                    87:c9:16:fd:c3:b0:f2:ed:cd:24:f7:af:8f:de:10:
                    92:d5:2e:47:fd:21:e3:6a:bb:75:b6:24:08:de:10:
                    db:19:d8:95:0f:24:c5:a1:8c:85:0f:1e:bc:c5:48:
                    80:97:81:da:c2:0c:bd:3c:38:a0:53:b8:bc:7c:8c:
                    40:fa:17:a4:9e:fd:62:1c:ac:85:65:4a:f1:05:58:
                    48:c8:f3:cb:47:1d:d2:d3:7a:ae:6c:03:df:1a:9a:
                    7c:cc:24:1b:de:3b:09:ff:9e:46:b7:93:df:b7:fc:
                    f9:bd:27:02:c9:a5:22:f2:21:7e:25:cf:42:23:14:
                    9d:70:97:a4:bd:48:a9:66:2e:ba:b3:d7:7c:f8:c4:
                    fa:0c:8c:70:2d:13:9b:c4:bd:e4:36:7e:12:0d:52:
                    d8:4e:e3:a9:ee:80:b9:e8:9c:85:23:d4:43:c1:1d:
                    44:cb:2b:9e:92:c9:24:af:f2:41:47:8e:12:80:60:
                    58:d2:5f:94:65:a8:1a:5a:9b:cc:b7:91:15:ae:ac:
                    8d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:28:81:07:67:30:4B:69:23:F4:9B:43:F4:2B:71:7B:58:5F:1F:30
            X509v3 Authority Key Identifier:
                keyid:28:F7:AF:EC:4D:3F:06:F8:0D:68:72:A6:D6:24:6C:D0:1E:73:D6:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:1d:6c:8e:a1:57:0c:0d:b4:bd:0b:06:ab:f0:6d:2a:a5:e6:
         c5:53:27:b6:33:76:07:33:0e:c0:76:a6:63:cd:96:b9:54:09:
         64:0a:0b:16:ff:3b:84:72:7a:34:48:f9:c1:a7:6e:bb:e1:88:
         ef:ee:58:a6:06:ad:29:65:55:a0:81:6c:ce:ec:84:78:11:a9:
         15:3d:17:fb:c0:ab:5b:3f:d5:eb:67:77:96:20:bb:bc:06:62:
         8f:e1:49:51:5d:2e:64:cd:34:c2:5c:7b:5a:75:1e:a9:e3:c6:
         1b:72:77:48:25:ef:04:92:d2:f6:7a:68:25:bf:cc:b2:81:1f:
         4a:02:25:ac:41:c0:77:1c:2e:af:2a:5e:89:9f:48:36:58:fb:
         fd:9a:a8:5c:65:60:89:e7:23:ff:1a:29:98:27:d8:ec:c4:ef:
         97:83:d2:6f:22:ec:ae:43:a1:07:31:3b:5e:2e:62:15:5e:37:
         69:cd:c3:3d:6a:a0:c1:75:d1:c6:d7:fb:6c:e4:9c:1c:9f:eb:
         b4:42:ec:fa:d3:e3:1a:35:2f:ec:d6:83:55:37:ef:e2:8a:68:
         9a:bb:eb:b2:b3:e1:41:72:c3:af:19:c9:b2:dd:e4:fa:03:02:
         3a:c6:e3:d6:de:f7:d7:27:1d:5c:ac:d7:0e:c2:ea:5a:52:71:
         c0:86:d6:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBEjMKrjPJMWUQqAw6Bw0BUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ZjdhZmVjNGQzZjA2ZjgwZDY4NzJhNmQ2MjQ2Y2QwMWU3
M2Q2YTYwHhcNMjQwNjIzMTAwMzEzWhcNMjQwNjI0MTAwMzEzWjAzMTEwLwYDVQQD
Eyg4ZDI4ODEwNzY3MzA0YjY5MjNmNDliNDNmNDJiNzE3YjU4NWYxZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8dWynu7XD119ySsLc4f/NelLzjJN
hiDzQaC6N7TpNKvetE/aNoSbRy0u36Zwm3Pf4XzBqUdq9yZ8a/uHyRb9w7Dy7c0k
96+P3hCS1S5H/SHjart1tiQI3hDbGdiVDyTFoYyFDx68xUiAl4Hawgy9PDigU7i8
fIxA+heknv1iHKyFZUrxBVhIyPPLRx3S03qubAPfGpp8zCQb3jsJ/55Gt5Pft/z5
vScCyaUi8iF+Jc9CIxSdcJekvUipZi66s9d8+MT6DIxwLRObxL3kNn4SDVLYTuOp
7oC56JyFI9RDwR1Eyyuekskkr/JBR44SgGBY0l+UZagaWpvMt5EVrqyN4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0ogQdnMEtpI/SbQ/QrcXtYXx8wMB8GA1UdIwQY
MBaAFCj3r+xNPwb4DWhyptYkbNAec9amMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1BldjdFMF9CdmdOYUhLbTFpUnMwQjV6MXFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yMTdhMzAtOGVlMS00OTEzLWExMjct
NTc2ZDQwM2M5MThmLzEvS1BldjdFMF9CdmdOYUhLbTFpUnMwQjV6MXFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8yMTdhMzAtOGVlMS00OTEzLWExMjctNTc2ZDQwM2M5MThm
LzEvS1BldjdFMF9CdmdOYUhLbTFpUnMwQjV6MXFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgx1sjqFX
DA20vQsGq/BtKqXmxVMntjN2BzMOwHamY82WuVQJZAoLFv87hHJ6NEj5waduu+GI
7+5YpgatKWVVoIFszuyEeBGpFT0X+8CrWz/V62d3liC7vAZij+FJUV0uZM00wlx7
WnUeqePGG3J3SCXvBJLS9npoJb/MsoEfSgIlrEHAdxwurypeiZ9INlj7/ZqoXGVg
iecj/xopmCfY7MTvl4PSbyLsrkOhBzE7Xi5iFV43ac3DPWqgwXXRxtf7bOScHJ/r
tELs+tPjGjUv7NaDVTfv4opomrvrsrPhQXLDrxnJst3k+gMCOsbj1t731ycdXKzX
DsLqWlJxwIbWOQ==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:03:37 2024 by rpki-client on console-fra.rpki-client.org