Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
File:                     K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft (raw, json)
Hash identifier:          RxX64mMEQBOINjnELy8zW6vjJhVciFeenZ1mls1ts60=
Subject key identifier:   28:55:D5:11:A1:0A:1C:65:7A:94:99:5C:32:2B:E7:35:CA:11:04:2B
Authority key identifier: 2B:49:89:FE:3C:AC:A3:F3:04:43:C5:4A:90:2F:69:12:11:0D:91:95
Certificate issuer:       /CN=2b4989fe3caca3f30443c54a902f6912110d9195
Certificate serial:       01901CA10BE40E0535C9260296FD43D5A58A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
Manifest number:          03EE
Signing time:             Sat 15 Jun 2024 16:00:34 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:34 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:34 +0000
Files and hashes:         1: K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl (hash: uSY+QSJsoIiMWPgNhsIxJEDTPOdqp1EgD2Vbw+KUCgM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:0b:e4:0e:05:35:c9:26:02:96:fd:43:d5:a5:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b4989fe3caca3f30443c54a902f6912110d9195
        Validity
            Not Before: Jun 15 16:00:34 2024 GMT
            Not After : Jun 16 16:00:34 2024 GMT
        Subject: CN=2855d511a10a1c657a94995c322be735ca11042b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4d:a1:a6:23:f3:6d:4c:3a:93:01:ce:c6:e4:
                    35:17:68:95:65:cb:f7:36:95:58:b0:4c:ee:cc:73:
                    6e:2a:b8:ea:53:76:4f:57:b4:71:66:f5:1a:b6:b6:
                    29:31:5c:fb:d7:b6:73:7b:66:35:1b:39:04:20:70:
                    23:56:27:10:5d:6f:47:44:3b:02:42:92:90:08:64:
                    ac:36:39:fd:2f:fa:d0:bd:10:4f:9b:21:f6:aa:71:
                    2e:2a:a1:ac:34:9b:5b:bc:be:c8:3a:fd:1d:0f:64:
                    12:18:ab:b2:a3:ca:b0:d8:46:80:0c:59:73:1a:94:
                    ef:ed:eb:a7:c0:bb:17:47:8d:5a:c8:76:40:56:0d:
                    45:c0:f2:dd:2b:ba:c6:7a:cd:f8:89:95:20:78:68:
                    9a:ec:09:43:00:b8:df:2b:64:59:38:84:e8:9d:8e:
                    0f:bc:82:55:42:cf:e7:71:78:0f:38:a4:9a:32:47:
                    23:8e:0a:a6:e9:82:d7:c0:e5:55:fd:81:5a:97:ca:
                    88:93:82:51:13:5c:e9:d7:62:39:4e:91:5f:38:cc:
                    94:35:46:de:50:1a:d3:a9:f8:e6:98:fd:82:56:2c:
                    05:e9:b1:c1:73:56:fc:65:0b:fa:cf:ee:e6:b8:3f:
                    12:f4:be:29:1d:2f:ed:c1:8f:80:f7:cb:ab:ff:a9:
                    5f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:55:D5:11:A1:0A:1C:65:7A:94:99:5C:32:2B:E7:35:CA:11:04:2B
            X509v3 Authority Key Identifier:
                keyid:2B:49:89:FE:3C:AC:A3:F3:04:43:C5:4A:90:2F:69:12:11:0D:91:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ee:77:d2:71:51:28:af:52:87:6e:57:06:c7:77:43:84:1e:
         42:f9:06:f8:58:9e:44:da:75:c4:6e:f4:8f:a3:c1:4b:40:48:
         ee:33:9b:90:db:9e:8f:9f:3e:71:4c:ba:f1:11:46:53:e4:fb:
         6a:19:22:a6:37:af:7e:cc:ae:d5:01:38:5a:71:53:32:fa:f2:
         0a:74:f0:43:23:0d:88:be:9a:d4:e8:bd:f0:31:25:fa:15:78:
         16:32:9c:f1:62:8f:6e:1c:e9:1f:7e:a7:7e:52:6b:62:f7:8b:
         29:73:a3:19:a5:4d:9c:18:d7:e8:c3:68:20:a8:08:78:b3:a1:
         8b:13:90:6f:be:2d:d5:43:01:65:5b:8c:31:cd:73:0a:42:28:
         41:bf:f9:f8:ce:42:52:62:df:2a:cc:78:0c:fe:28:70:3d:0f:
         93:c4:f8:ac:5a:9e:55:bf:de:5c:73:d3:0a:77:61:3b:fc:ea:
         2d:ed:67:eb:ef:f6:05:3c:5b:e0:f7:e2:85:df:85:4c:e9:e8:
         5a:fa:25:5f:df:ae:d9:53:53:74:7b:88:38:5a:f2:97:cb:36:
         b4:e3:db:17:6f:46:28:75:a1:c7:4f:c5:f8:e5:43:9a:cf:5b:
         82:18:a3:b2:ab:b4:80:82:42:a8:38:31:a7:d7:89:65:10:42:
         4b:c9:46:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcoQvkDgU1ySYClv1D1aWKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNDk4OWZlM2NhY2EzZjMwNDQzYzU0YTkwMmY2OTEyMTEw
ZDkxOTUwHhcNMjQwNjE1MTYwMDM0WhcNMjQwNjE2MTYwMDM0WjAzMTEwLwYDVQQD
EygyODU1ZDUxMWExMGExYzY1N2E5NDk5NWMzMjJiZTczNWNhMTEwNDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAik2hpiPzbUw6kwHOxuQ1F2iVZcv3
NpVYsEzuzHNuKrjqU3ZPV7RxZvUatrYpMVz717Zze2Y1GzkEIHAjVicQXW9HRDsC
QpKQCGSsNjn9L/rQvRBPmyH2qnEuKqGsNJtbvL7IOv0dD2QSGKuyo8qw2EaADFlz
GpTv7eunwLsXR41ayHZAVg1FwPLdK7rGes34iZUgeGia7AlDALjfK2RZOITonY4P
vIJVQs/ncXgPOKSaMkcjjgqm6YLXwOVV/YFal8qIk4JRE1zp12I5TpFfOMyUNUbe
UBrTqfjmmP2CViwF6bHBc1b8ZQv6z+7muD8S9L4pHS/twY+A98ur/6lfPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChV1RGhChxlepSZXDIr5zXKEQQrMB8GA1UdIwQY
MBaAFCtJif48rKPzBEPFSpAvaRIRDZGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzBtSl9qeXNvX01FUThWS2tDOXBFaEVOa1pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85YTY0MWYtZTRhNy00Y2M0LWFjZWMt
NWMzOGU3ZmU4ZTgxLzEvSzBtSl9qeXNvX01FUThWS2tDOXBFaEVOa1pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi85YTY0MWYtZTRhNy00Y2M0LWFjZWMtNWMzOGU3ZmU4ZTgx
LzEvSzBtSl9qeXNvX01FUThWS2tDOXBFaEVOa1pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFO530nFR
KK9Sh25XBsd3Q4QeQvkG+FieRNp1xG70j6PBS0BI7jObkNuej58+cUy68RFGU+T7
ahkipjevfsyu1QE4WnFTMvryCnTwQyMNiL6a1Oi98DEl+hV4FjKc8WKPbhzpH36n
flJrYveLKXOjGaVNnBjX6MNoIKgIeLOhixOQb74t1UMBZVuMMc1zCkIoQb/5+M5C
UmLfKsx4DP4ocD0Pk8T4rFqeVb/eXHPTCndhO/zqLe1n6+/2BTxb4Pfihd+FTOno
WvolX9+u2VNTdHuIOFryl8s2tOPbF29GKHWhx0/F+OVDms9bghijsqu0gIJCqDgx
p9eJZRBCS8lGaA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:41:12 2024 by rpki-client on console-fra.rpki-client.org