Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/698ecb-539a-47e7-ac2a-762b4698f107/1/3zabhxi9Zo6HLIj3DyliLfPJgqQ.mft
File:                     3zabhxi9Zo6HLIj3DyliLfPJgqQ.mft (raw, json)
Hash identifier:          1zTkBvrbcRjG6GX98issrbObveunuyRZXcy+gO+B1vs=
Subject key identifier:   BD:43:5D:62:EF:E4:0F:8A:18:B8:A5:12:E6:4E:D2:66:7D:8D:57:2D
Authority key identifier: DF:36:9B:87:18:BD:66:8E:87:2C:88:F7:0F:29:62:2D:F3:C9:82:A4
Certificate issuer:       /CN=df369b8718bd668e872c88f70f29622df3c982a4
Certificate serial:       01901EC712F12ACE86B956454AF689547DB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3zabhxi9Zo6HLIj3DyliLfPJgqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/698ecb-539a-47e7-ac2a-762b4698f107/1/3zabhxi9Zo6HLIj3DyliLfPJgqQ.mft
Manifest number:          0F12
Signing time:             Sun 16 Jun 2024 02:01:21 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:21 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:21 +0000
Files and hashes:         1: 3zabhxi9Zo6HLIj3DyliLfPJgqQ.crl (hash: oLM2LXdPC+jTCxFRvgmWjmDKQX/NQKUUf/gT5D/5Tig=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/698ecb-539a-47e7-ac2a-762b4698f107/1/3zabhxi9Zo6HLIj3DyliLfPJgqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/698ecb-539a-47e7-ac2a-762b4698f107/1/3zabhxi9Zo6HLIj3DyliLfPJgqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3zabhxi9Zo6HLIj3DyliLfPJgqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c7:12:f1:2a:ce:86:b9:56:45:4a:f6:89:54:7d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df369b8718bd668e872c88f70f29622df3c982a4
        Validity
            Not Before: Jun 16 02:01:21 2024 GMT
            Not After : Jun 17 02:01:21 2024 GMT
        Subject: CN=bd435d62efe40f8a18b8a512e64ed2667d8d572d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0f:ee:3f:65:da:d4:43:f1:6f:51:0f:ec:d7:
                    e3:e1:b0:0f:1d:69:4e:e4:0d:3b:5c:c9:3e:48:2f:
                    94:e0:0f:b8:7d:e6:23:c6:06:d2:df:72:a7:dd:55:
                    60:c1:82:3e:4d:d7:25:cc:af:6b:3a:17:6b:79:aa:
                    ea:8e:3b:91:b2:72:36:e8:8b:6c:c4:f8:98:d8:a3:
                    69:da:6b:15:84:61:59:a3:12:93:45:92:0f:78:1f:
                    f0:66:0b:5a:5a:0c:0c:c8:d1:09:45:45:ce:96:0d:
                    09:9e:d0:df:8f:04:68:9d:68:dd:ce:16:4b:09:9e:
                    b1:16:31:71:11:9f:bb:bf:71:1c:09:f4:27:ee:c6:
                    3b:05:e5:3a:70:30:4d:6e:21:5e:cd:47:37:04:01:
                    7b:14:6f:8c:76:27:b0:0a:25:12:a3:08:56:08:27:
                    0c:a4:1c:4a:f0:ca:a7:f1:a7:98:33:69:b2:4f:b3:
                    0c:b1:ab:30:71:51:74:fd:13:f1:20:b4:ef:29:e5:
                    75:ac:73:af:aa:02:ea:77:90:f4:c4:37:8f:e9:ff:
                    01:52:86:b7:2d:7d:89:34:e7:70:35:9e:aa:ff:b2:
                    55:7f:7b:0c:2f:00:0f:93:2e:85:9d:0b:e4:19:c9:
                    b1:8b:71:71:97:b4:d1:00:17:09:e0:71:46:21:e1:
                    c5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:43:5D:62:EF:E4:0F:8A:18:B8:A5:12:E6:4E:D2:66:7D:8D:57:2D
            X509v3 Authority Key Identifier:
                keyid:DF:36:9B:87:18:BD:66:8E:87:2C:88:F7:0F:29:62:2D:F3:C9:82:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zabhxi9Zo6HLIj3DyliLfPJgqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/698ecb-539a-47e7-ac2a-762b4698f107/1/3zabhxi9Zo6HLIj3DyliLfPJgqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/698ecb-539a-47e7-ac2a-762b4698f107/1/3zabhxi9Zo6HLIj3DyliLfPJgqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:68:85:ee:4d:3f:88:6e:34:66:f6:ad:55:65:c0:79:4c:2e:
         57:a8:f4:b8:6c:7b:74:e0:58:0c:7f:3d:c3:15:85:69:52:72:
         2a:96:16:e8:bb:f9:d4:2e:1a:35:bf:eb:05:70:71:dd:4e:7f:
         db:be:87:a4:c9:a3:85:40:e4:7d:10:6c:ae:ac:c1:f3:f5:75:
         c1:90:be:cf:4f:cb:3a:0e:98:a2:67:39:6a:0d:f3:2e:fb:4c:
         78:3b:1d:60:a3:53:7d:b0:e9:3c:8d:7c:74:92:1c:64:db:41:
         e0:4c:3c:03:9e:2f:18:07:f0:1c:a3:ac:21:09:86:de:f3:86:
         5a:33:3f:40:4a:95:2a:52:e6:a1:8b:d5:12:81:29:84:09:a3:
         ee:70:e3:81:8e:33:55:be:60:a2:ee:44:19:10:76:cd:bd:87:
         e8:2e:31:59:53:e4:de:0f:8f:63:7e:f7:37:9e:f1:63:c0:2d:
         90:3a:22:36:8d:e9:ec:66:6d:00:43:af:21:cc:ab:0f:51:07:
         bf:09:0f:6d:c6:ee:3b:7d:88:cc:de:fe:f6:3e:99:96:b3:f2:
         d4:63:d6:00:f1:20:f8:ec:3f:40:92:eb:e2:85:e5:46:b9:ea:
         12:6e:6e:c5:38:cc:37:3f:22:6d:e5:24:00:b3:74:81:dd:85:
         38:6f:5c:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAexxLxKs6GuVZFSvaJVH21MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMzY5Yjg3MThiZDY2OGU4NzJjODhmNzBmMjk2MjJkZjNj
OTgyYTQwHhcNMjQwNjE2MDIwMTIxWhcNMjQwNjE3MDIwMTIxWjAzMTEwLwYDVQQD
EyhiZDQzNWQ2MmVmZTQwZjhhMThiOGE1MTJlNjRlZDI2NjdkOGQ1NzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg/uP2Xa1EPxb1EP7Nfj4bAPHWlO
5A07XMk+SC+U4A+4feYjxgbS33Kn3VVgwYI+TdclzK9rOhdrearqjjuRsnI26Its
xPiY2KNp2msVhGFZoxKTRZIPeB/wZgtaWgwMyNEJRUXOlg0JntDfjwRonWjdzhZL
CZ6xFjFxEZ+7v3EcCfQn7sY7BeU6cDBNbiFezUc3BAF7FG+MdiewCiUSowhWCCcM
pBxK8Mqn8aeYM2myT7MMsaswcVF0/RPxILTvKeV1rHOvqgLqd5D0xDeP6f8BUoa3
LX2JNOdwNZ6q/7JVf3sMLwAPky6FnQvkGcmxi3Fxl7TRABcJ4HFGIeHFLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1DXWLv5A+KGLilEuZO0mZ9jVctMB8GA1UdIwQY
MBaAFN82m4cYvWaOhyyI9w8pYi3zyYKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3phYmh4aTlabzZITElqM0R5bGlMZlBKZ3FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82OThlY2ItNTM5YS00N2U3LWFjMmEt
NzYyYjQ2OThmMTA3LzEvM3phYmh4aTlabzZITElqM0R5bGlMZlBKZ3FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82OThlY2ItNTM5YS00N2U3LWFjMmEtNzYyYjQ2OThmMTA3
LzEvM3phYmh4aTlabzZITElqM0R5bGlMZlBKZ3FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWiF7k0/
iG40ZvatVWXAeUwuV6j0uGx7dOBYDH89wxWFaVJyKpYW6Lv51C4aNb/rBXBx3U5/
276HpMmjhUDkfRBsrqzB8/V1wZC+z0/LOg6Yomc5ag3zLvtMeDsdYKNTfbDpPI18
dJIcZNtB4Ew8A54vGAfwHKOsIQmG3vOGWjM/QEqVKlLmoYvVEoEphAmj7nDjgY4z
Vb5gou5EGRB2zb2H6C4xWVPk3g+PY373N57xY8AtkDoiNo3p7GZtAEOvIcyrD1EH
vwkPbcbuO32IzN7+9j6ZlrPy1GPWAPEg+Ow/QJLr4oXlRrnqEm5uxTjMNz8ibeUk
ALN0gd2FOG9cOw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:50:21 2024 by rpki-client on console-fra.rpki-client.org