Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft
File:                     aBHhJcs1cHby-jE4yT6aJoGxeJM.mft (raw, json)
Hash identifier:          KXmy1OgHbU8IHjSPMxWR2HTu84j3v2C7rraJBYyl3h4=
Subject key identifier:   9C:37:17:FF:A6:C0:E1:D6:5E:80:4A:A9:90:6A:40:F0:FB:6A:BB:7B
Authority key identifier: 68:11:E1:25:CB:35:70:76:F2:FA:31:38:C9:3E:9A:26:81:B1:78:93
Certificate issuer:       /CN=6811e125cb357076f2fa3138c93e9a2681b17893
Certificate serial:       01901DECB04D5A259DF5274148D2A4B3A5DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:02:49 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:49 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:49 +0000
Files and hashes:         1: aBHhJcs1cHby-jE4yT6aJoGxeJM.crl (hash: dXexWRThDe7ytqouNzpGVjTKIa8hKUbi2Fi73czLlTE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:b0:4d:5a:25:9d:f5:27:41:48:d2:a4:b3:a5:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6811e125cb357076f2fa3138c93e9a2681b17893
        Validity
            Not Before: Jun 15 22:02:49 2024 GMT
            Not After : Jun 16 22:02:49 2024 GMT
        Subject: CN=9c3717ffa6c0e1d65e804aa9906a40f0fb6abb7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0c:dc:24:b7:21:1c:e5:c5:2b:6a:cf:0f:16:
                    34:bd:19:8f:54:cd:cb:34:6e:ad:17:28:85:44:7b:
                    54:dd:f9:b1:50:bd:c6:55:fd:7b:db:5c:20:79:d5:
                    c8:9e:cb:62:9d:85:55:95:de:51:26:cc:9a:bf:88:
                    18:1c:a3:6c:fb:2c:76:c8:d0:19:7b:89:0a:c0:59:
                    9c:7b:af:c9:ad:e3:3a:c3:53:2f:9b:39:cb:b0:67:
                    a7:06:a1:05:87:e6:a6:6e:4a:56:0f:80:b5:9c:b4:
                    24:48:11:5c:12:cc:f4:c0:48:ce:c7:7a:98:21:64:
                    3c:9a:b6:89:dc:98:e5:e8:0a:41:f3:81:2e:cb:bd:
                    33:4e:f3:1a:e0:01:72:10:04:c8:a9:18:49:bb:6b:
                    f2:cc:4c:a9:eb:60:65:e4:99:fe:27:33:66:4f:48:
                    30:19:45:05:f8:c8:2e:0c:e8:6e:38:e7:a5:8b:4b:
                    ad:51:5b:71:f5:69:cc:38:04:1b:b4:39:53:02:ff:
                    56:a4:27:13:e5:db:4d:f7:66:77:f1:6f:97:72:fb:
                    4d:de:23:11:ee:63:32:fb:9e:8c:6a:f9:69:00:4a:
                    40:4a:5c:07:a1:bf:d7:d0:b2:97:1f:e1:6b:e2:be:
                    43:66:af:d6:a0:62:27:c2:fe:9e:46:3b:ac:c2:af:
                    71:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:37:17:FF:A6:C0:E1:D6:5E:80:4A:A9:90:6A:40:F0:FB:6A:BB:7B
            X509v3 Authority Key Identifier:
                keyid:68:11:E1:25:CB:35:70:76:F2:FA:31:38:C9:3E:9A:26:81:B1:78:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:73:c6:c3:9d:a9:8a:59:b7:1f:5e:d7:bc:cc:d0:9a:f4:4e:
         20:2d:a8:cf:fc:7d:21:09:04:94:d2:37:13:b6:db:55:7b:f8:
         32:db:5c:ed:0d:d6:58:7f:8c:05:13:07:83:18:cf:ec:38:2c:
         1f:4d:b2:bb:01:0b:5e:eb:7a:88:84:53:6b:e0:23:d4:45:0e:
         a6:cf:5c:52:07:4e:16:0e:2b:33:2e:65:47:d4:fb:e6:bc:19:
         42:ca:51:dd:9d:26:43:39:b7:37:91:06:64:60:f4:61:1e:8c:
         05:47:ac:92:9f:1b:27:c0:ad:af:68:c8:5e:bd:2f:b7:4f:54:
         35:7b:0c:f4:f0:25:6f:db:dc:10:82:cf:bb:53:18:7b:c2:d8:
         bb:65:4d:bb:17:b0:36:a0:19:6b:14:17:08:3f:ff:0e:35:cf:
         a0:c0:c5:90:0c:11:7f:6b:bc:49:45:2a:da:b6:ab:65:53:1d:
         3a:2f:e4:46:87:67:5a:d4:82:11:0c:de:a5:48:d1:24:94:99:
         d6:bc:b0:e4:d4:d3:f4:32:85:fb:b8:5c:a3:8b:9c:c8:63:ee:
         f5:7a:b9:b8:a3:b7:d2:e5:18:94:98:fe:7c:19:b8:cf:15:f6:
         2d:82:a5:4e:86:16:be:a6:7c:6a:11:c1:19:1d:98:df:53:3d:
         db:8b:5b:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7LBNWiWd9SdBSNKks6XfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MTFlMTI1Y2IzNTcwNzZmMmZhMzEzOGM5M2U5YTI2ODFi
MTc4OTMwHhcNMjQwNjE1MjIwMjQ5WhcNMjQwNjE2MjIwMjQ5WjAzMTEwLwYDVQQD
Eyg5YzM3MTdmZmE2YzBlMWQ2NWU4MDRhYTk5MDZhNDBmMGZiNmFiYjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAzcJLchHOXFK2rPDxY0vRmPVM3L
NG6tFyiFRHtU3fmxUL3GVf1721wgedXInstinYVVld5RJsyav4gYHKNs+yx2yNAZ
e4kKwFmce6/JreM6w1MvmznLsGenBqEFh+ambkpWD4C1nLQkSBFcEsz0wEjOx3qY
IWQ8mraJ3Jjl6ApB84Euy70zTvMa4AFyEATIqRhJu2vyzEyp62Bl5Jn+JzNmT0gw
GUUF+MguDOhuOOeli0utUVtx9WnMOAQbtDlTAv9WpCcT5dtN92Z38W+XcvtN3iMR
7mMy+56MavlpAEpASlwHob/X0LKXH+Fr4r5DZq/WoGInwv6eRjuswq9xsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJw3F/+mwOHWXoBKqZBqQPD7art7MB8GA1UdIwQY
MBaAFGgR4SXLNXB28voxOMk+miaBsXiTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUJIaEpjczFjSGJ5LWpFNHlUNmFKb0d4ZUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lYmFjYmQtODE5MC00ZTVhLWEwM2Et
Y2Q0Mzk0OTJiN2FlLzEvYUJIaEpjczFjSGJ5LWpFNHlUNmFKb0d4ZUpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9lYmFjYmQtODE5MC00ZTVhLWEwM2EtY2Q0Mzk0OTJiN2Fl
LzEvYUJIaEpjczFjSGJ5LWpFNHlUNmFKb0d4ZUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIXPGw52p
ilm3H17XvMzQmvROIC2oz/x9IQkElNI3E7bbVXv4Mttc7Q3WWH+MBRMHgxjP7Dgs
H02yuwELXut6iIRTa+Aj1EUOps9cUgdOFg4rMy5lR9T75rwZQspR3Z0mQzm3N5EG
ZGD0YR6MBUeskp8bJ8Ctr2jIXr0vt09UNXsM9PAlb9vcEILPu1MYe8LYu2VNuxew
NqAZaxQXCD//DjXPoMDFkAwRf2u8SUUq2rarZVMdOi/kRodnWtSCEQzepUjRJJSZ
1ryw5NTT9DKF+7hco4ucyGPu9Xq5uKO30uUYlJj+fBm4zxX2LYKlToYWvqZ8ahHB
GR2Y31M924tbKQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:50:06 2024 by rpki-client on console-fra.rpki-client.org