Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft
File:                     JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft (raw, json)
Hash identifier:          a87wQIi6WhY+H2DHElfEs23COdAhoHE2PUlGt9aVYdY=
Subject key identifier:   D0:A5:79:56:FA:C8:5A:52:9C:FA:AC:FC:11:09:AE:4B:F7:3D:DB:A2
Authority key identifier: 25:BA:87:95:F3:E7:E2:D2:C7:C9:0F:1C:36:66:CF:7F:92:83:DA:9E
Certificate issuer:       /CN=25ba8795f3e7e2d2c7c90f1c3666cf7f9283da9e
Certificate serial:       01901FDA10A25F65E4713004B3B09158444C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft
Manifest number:          11C1
Signing time:             Sun 16 Jun 2024 07:01:43 +0000
Manifest this update:     Sun 16 Jun 2024 07:01:43 +0000
Manifest next update:     Mon 17 Jun 2024 07:01:43 +0000
Files and hashes:         1: JbqHlfPn4tLHyQ8cNmbPf5KD2p4.crl (hash: /tV7hlJ/Q40b/bOAnCbjIr4kgXbKW63etr9OchYSn28=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:da:10:a2:5f:65:e4:71:30:04:b3:b0:91:58:44:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ba8795f3e7e2d2c7c90f1c3666cf7f9283da9e
        Validity
            Not Before: Jun 16 07:01:43 2024 GMT
            Not After : Jun 17 07:01:43 2024 GMT
        Subject: CN=d0a57956fac85a529cfaacfc1109ae4bf73ddba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2d:1f:de:28:4b:a2:23:c5:1a:62:fd:0f:35:
                    f6:60:5c:3a:2a:82:30:28:35:13:5c:44:42:26:98:
                    66:52:c7:d7:51:b6:bd:0a:9c:5d:79:f2:2a:24:d9:
                    37:6a:5e:f3:65:ea:b1:62:0c:03:bd:35:59:96:10:
                    57:17:f5:20:b6:17:df:d6:d6:6e:a2:78:50:42:57:
                    2a:af:2d:d8:6f:5c:bf:dd:5e:10:70:3c:5b:f9:d8:
                    f8:65:05:c0:80:d1:00:5e:02:ae:cd:d6:f2:bb:7e:
                    bf:f2:b8:08:8d:49:53:19:3e:d0:61:89:6a:ad:98:
                    8e:95:bd:3d:fe:44:34:38:5a:ac:19:9b:a7:a2:81:
                    22:17:2f:45:19:8e:83:c4:4b:32:79:2c:fb:ab:b9:
                    52:c7:37:53:e0:56:12:e9:8e:c4:c6:83:e8:b8:c5:
                    0c:48:3e:42:3b:fb:f3:85:25:73:e2:4c:d5:8f:da:
                    89:43:d9:c8:39:f9:69:c0:53:77:e9:24:df:ba:8f:
                    10:f0:94:4f:da:9b:19:0a:d6:03:37:a4:c7:64:9a:
                    a5:7b:df:2a:1e:b2:98:5a:02:e2:fe:de:9a:f3:6d:
                    b4:5e:42:0a:0d:e3:fd:67:2f:6b:0c:e7:01:a0:51:
                    53:17:03:99:da:16:5e:49:a6:c7:16:fc:8e:08:dd:
                    52:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A5:79:56:FA:C8:5A:52:9C:FA:AC:FC:11:09:AE:4B:F7:3D:DB:A2
            X509v3 Authority Key Identifier:
                keyid:25:BA:87:95:F3:E7:E2:D2:C7:C9:0F:1C:36:66:CF:7F:92:83:DA:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:94:9a:5d:7d:c7:6e:c0:f6:ff:60:bc:77:bb:5e:59:69:2a:
         2e:30:f0:74:57:77:bb:4a:bb:c2:85:7c:9e:2d:bb:a7:37:a4:
         2b:91:8a:d6:1d:11:31:8c:fe:95:2b:27:03:5a:73:20:e3:0e:
         76:df:a7:55:95:14:5f:e2:c3:8d:0c:4a:e8:75:0c:8e:fa:31:
         81:7c:bd:c5:1e:79:ec:96:53:fa:2b:03:7d:16:33:ff:39:07:
         5f:5b:32:df:50:e7:d8:d6:93:89:42:13:96:9c:e6:2a:85:e5:
         56:88:b9:72:12:e2:d5:18:23:f3:18:87:ef:d4:a4:bc:51:ef:
         65:b3:12:26:23:f0:c0:70:ce:97:b0:57:7d:68:0e:16:c0:f9:
         ec:ca:fc:52:e1:7a:63:59:ed:bd:69:4c:f7:c1:ae:2e:88:0e:
         87:66:cc:fa:41:83:e3:22:5c:13:d5:24:88:40:e6:90:54:e9:
         51:4e:b7:e8:7a:e8:08:d0:a5:d6:50:8a:8c:d7:b1:a2:03:64:
         eb:ef:21:7f:43:3c:20:76:f5:ca:4f:8e:15:0a:7a:7a:83:83:
         f6:4f:0a:69:da:a7:a0:f9:3d:75:09:1e:68:65:12:a1:76:46:
         fe:e8:b4:ce:1c:3f:e5:09:81:fd:21:fb:d1:29:5b:8a:4a:5f:
         49:fc:70:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAf2hCiX2XkcTAEs7CRWERMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YmE4Nzk1ZjNlN2UyZDJjN2M5MGYxYzM2NjZjZjdmOTI4
M2RhOWUwHhcNMjQwNjE2MDcwMTQzWhcNMjQwNjE3MDcwMTQzWjAzMTEwLwYDVQQD
EyhkMGE1Nzk1NmZhYzg1YTUyOWNmYWFjZmMxMTA5YWU0YmY3M2RkYmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS0f3ihLoiPFGmL9DzX2YFw6KoIw
KDUTXERCJphmUsfXUba9CpxdefIqJNk3al7zZeqxYgwDvTVZlhBXF/Ugthff1tZu
onhQQlcqry3Yb1y/3V4QcDxb+dj4ZQXAgNEAXgKuzdbyu36/8rgIjUlTGT7QYYlq
rZiOlb09/kQ0OFqsGZunooEiFy9FGY6DxEsyeSz7q7lSxzdT4FYS6Y7ExoPouMUM
SD5CO/vzhSVz4kzVj9qJQ9nIOflpwFN36STfuo8Q8JRP2psZCtYDN6THZJqle98q
HrKYWgLi/t6a8220XkIKDeP9Zy9rDOcBoFFTFwOZ2hZeSabHFvyOCN1SVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCleVb6yFpSnPqs/BEJrkv3PduiMB8GA1UdIwQY
MBaAFCW6h5Xz5+LSx8kPHDZmz3+Sg9qeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmJxSGxmUG40dExIeVE4Y05tYlBmNUtEMnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS81NDg0MTctNWIwMS00ZjVlLWI5YjMt
NGVkZGJlYjgzODdiLzEvSmJxSGxmUG40dExIeVE4Y05tYlBmNUtEMnA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS81NDg0MTctNWIwMS00ZjVlLWI5YjMtNGVkZGJlYjgzODdi
LzEvSmJxSGxmUG40dExIeVE4Y05tYlBmNUtEMnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAepSaXX3H
bsD2/2C8d7teWWkqLjDwdFd3u0q7woV8ni27pzekK5GK1h0RMYz+lSsnA1pzIOMO
dt+nVZUUX+LDjQxK6HUMjvoxgXy9xR557JZT+isDfRYz/zkHX1sy31Dn2NaTiUIT
lpzmKoXlVoi5chLi1Rgj8xiH79SkvFHvZbMSJiPwwHDOl7BXfWgOFsD57Mr8UuF6
Y1ntvWlM98GuLogOh2bM+kGD4yJcE9UkiEDmkFTpUU636HroCNCl1lCKjNexogNk
6+8hf0M8IHb1yk+OFQp6eoOD9k8KadqnoPk9dQkeaGUSoXZG/ui0zhw/5QmB/SH7
0SlbikpfSfxw3Q==
-----END CERTIFICATE-----
Generated at Sun Jun 16 08:02:14 2024 by rpki-client on console-fra.rpki-client.org