Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft
File:                     _ME6qqHk6E6wwly5UOJp_z3bzuA.mft (raw, json)
Hash identifier:          ifq9fj2trsWqyf5Epafb5VEYQBb3eSaNLMcxPUzm8sg=
Subject key identifier:   F7:D9:6C:BB:44:D0:50:05:DE:8D:D0:17:0C:4C:9E:F4:9F:8F:4F:13
Authority key identifier: FC:C1:3A:AA:A1:E4:E8:4E:B0:C2:5C:B9:50:E2:69:FF:3D:DB:CE:E0
Certificate issuer:       /CN=fcc13aaaa1e4e84eb0c25cb950e269ff3ddbcee0
Certificate serial:       019044F8B525B83030BE3FBEADF4849A768A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft
Manifest number:          03D8
Signing time:             Sun 23 Jun 2024 12:01:08 +0000
Manifest this update:     Sun 23 Jun 2024 12:01:08 +0000
Manifest next update:     Mon 24 Jun 2024 12:01:08 +0000
Files and hashes:         1: _ME6qqHk6E6wwly5UOJp_z3bzuA.crl (hash: Dc9Gfp6mzNS0jVAO3+H+xMvitONUTX32o4MuzXqOhDA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 12:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:f8:b5:25:b8:30:30:be:3f:be:ad:f4:84:9a:76:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcc13aaaa1e4e84eb0c25cb950e269ff3ddbcee0
        Validity
            Not Before: Jun 23 12:01:08 2024 GMT
            Not After : Jun 24 12:01:08 2024 GMT
        Subject: CN=f7d96cbb44d05005de8dd0170c4c9ef49f8f4f13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2c:17:b5:fd:d0:8c:5b:f9:b6:42:e3:3b:f2:
                    b5:0c:27:81:3b:69:1d:0f:af:70:81:36:7d:d7:db:
                    ad:68:a9:bd:97:39:c3:48:31:1e:bd:a9:91:c7:17:
                    fe:af:b5:a3:70:34:c1:0c:68:05:ca:04:25:d4:c5:
                    9e:83:4a:19:9f:12:9b:10:5d:ef:49:af:7e:c0:b1:
                    6e:f9:2f:51:de:a0:08:ae:82:96:2f:cd:e4:78:ec:
                    9d:b1:a6:45:19:ab:6a:73:d7:19:09:04:a4:f7:05:
                    e0:55:0b:7a:07:7a:1f:99:42:6b:2d:54:b5:f6:d3:
                    cd:c9:4a:91:c3:68:08:53:86:05:9b:fd:55:72:67:
                    ba:94:cb:03:84:30:81:25:f9:c5:a7:6c:95:9d:41:
                    48:85:37:fa:b5:8c:e7:86:b1:e4:4b:f5:bf:66:49:
                    a8:af:38:4e:58:06:2c:5e:ba:b5:90:4d:75:dc:11:
                    5b:45:22:a2:02:c8:3e:fd:2c:fd:9b:bc:bb:0d:07:
                    aa:99:d3:bb:6a:3a:f5:b0:a4:44:dc:60:08:65:4c:
                    af:a1:b7:6d:e3:c3:a9:35:44:e2:4c:45:50:19:07:
                    77:5c:cb:66:0c:9d:e4:45:e9:a9:f9:08:2a:79:b5:
                    4e:29:1f:e3:e9:59:5d:4f:93:c4:b4:db:90:33:8d:
                    25:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D9:6C:BB:44:D0:50:05:DE:8D:D0:17:0C:4C:9E:F4:9F:8F:4F:13
            X509v3 Authority Key Identifier:
                keyid:FC:C1:3A:AA:A1:E4:E8:4E:B0:C2:5C:B9:50:E2:69:FF:3D:DB:CE:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:c2:31:14:68:52:c5:50:ce:ee:c6:ae:55:ff:15:44:ab:a2:
         1b:be:50:b7:cd:2f:d9:70:dc:b1:12:60:66:5f:f5:92:7a:2c:
         50:86:dc:1a:95:36:1c:a8:b7:70:cf:b1:34:db:02:b0:b6:6e:
         79:78:df:d3:91:c5:98:04:d7:36:04:40:e6:86:1c:57:39:bb:
         0a:83:e4:4d:64:47:47:1c:dc:b0:e7:aa:fa:fa:08:d3:22:ba:
         00:98:9e:78:30:e9:90:16:52:57:a5:5a:31:0d:f5:04:c8:69:
         95:64:1c:27:0d:d1:47:c1:bb:9f:64:bb:39:74:e2:a2:46:25:
         0d:62:1a:e7:a9:2d:38:b6:84:22:7e:3a:89:70:01:65:d5:bf:
         7d:bb:5f:e2:48:bf:cd:ad:a9:e1:f9:0d:72:73:52:dc:13:ea:
         14:45:b4:c2:0b:7f:7b:e5:35:0a:62:e2:3a:c4:5a:87:d6:35:
         8d:89:83:35:28:0f:6f:8b:54:c5:70:53:a7:db:70:ee:0d:78:
         f9:91:8d:20:74:2a:66:41:89:bc:75:19:4b:65:d6:44:39:e4:
         e8:97:fb:7a:4b:16:72:22:ed:c6:55:9a:02:f3:8d:e1:ee:c2:
         2b:9f:d7:2f:3e:a5:dc:a4:d6:36:78:c3:1a:7f:12:91:16:81:
         21:43:cc:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBE+LUluDAwvj++rfSEmnaKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYzEzYWFhYTFlNGU4NGViMGMyNWNiOTUwZTI2OWZmM2Rk
YmNlZTAwHhcNMjQwNjIzMTIwMTA4WhcNMjQwNjI0MTIwMTA4WjAzMTEwLwYDVQQD
EyhmN2Q5NmNiYjQ0ZDA1MDA1ZGU4ZGQwMTcwYzRjOWVmNDlmOGY0ZjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SwXtf3QjFv5tkLjO/K1DCeBO2kd
D69wgTZ919utaKm9lznDSDEevamRxxf+r7WjcDTBDGgFygQl1MWeg0oZnxKbEF3v
Sa9+wLFu+S9R3qAIroKWL83keOydsaZFGatqc9cZCQSk9wXgVQt6B3ofmUJrLVS1
9tPNyUqRw2gIU4YFm/1Vcme6lMsDhDCBJfnFp2yVnUFIhTf6tYznhrHkS/W/Zkmo
rzhOWAYsXrq1kE113BFbRSKiAsg+/Sz9m7y7DQeqmdO7ajr1sKRE3GAIZUyvobdt
48OpNUTiTEVQGQd3XMtmDJ3kRemp+QgqebVOKR/j6VldT5PEtNuQM40ldwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfZbLtE0FAF3o3QFwxMnvSfj08TMB8GA1UdIwQY
MBaAFPzBOqqh5OhOsMJcuVDiaf89287gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX01FNnFxSGs2RTZ3d2x5NVVPSnBfejNienVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kZDBkZmEtOTE5My00MjliLTk4NjMt
M2ZmNjk1MmM1ZWU5LzEvX01FNnFxSGs2RTZ3d2x5NVVPSnBfejNienVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9kZDBkZmEtOTE5My00MjliLTk4NjMtM2ZmNjk1MmM1ZWU5
LzEvX01FNnFxSGs2RTZ3d2x5NVVPSnBfejNienVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa8IxFGhS
xVDO7sauVf8VRKuiG75Qt80v2XDcsRJgZl/1knosUIbcGpU2HKi3cM+xNNsCsLZu
eXjf05HFmATXNgRA5oYcVzm7CoPkTWRHRxzcsOeq+voI0yK6AJieeDDpkBZSV6Va
MQ31BMhplWQcJw3RR8G7n2S7OXTiokYlDWIa56ktOLaEIn46iXABZdW/fbtf4ki/
za2p4fkNcnNS3BPqFEW0wgt/e+U1CmLiOsRah9Y1jYmDNSgPb4tUxXBTp9tw7g14
+ZGNIHQqZkGJvHUZS2XWRDnk6Jf7eksWciLtxlWaAvON4e7CK5/XLz6l3KTWNnjD
Gn8SkRaBIUPMfg==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:05:52 2024 by rpki-client on console-fra.rpki-client.org