Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
File:                     qYI63d9sNfBbfByuB5BL_58vass.mft (raw, json)
Hash identifier:          nmbkgek8zzBqEW9zOl/sfKTLmel9zL7CI/c7yZ+x8hs=
Subject key identifier:   AC:98:EA:D1:37:4E:6E:0E:5B:1D:8C:B1:92:CE:B0:4D:05:3E:E0:CF
Authority key identifier: A9:82:3A:DD:DF:6C:35:F0:5B:7C:1C:AE:07:90:4B:FF:9F:2F:6A:CB
Certificate issuer:       /CN=a9823adddf6c35f05b7c1cae07904bff9f2f6acb
Certificate serial:       01901C6A6B725AB89C4B239253FC7D6E1BAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
Manifest number:          063B
Signing time:             Sat 15 Jun 2024 15:00:54 +0000
Manifest this update:     Sat 15 Jun 2024 15:00:54 +0000
Manifest next update:     Sun 16 Jun 2024 15:00:54 +0000
Files and hashes:         1: qYI63d9sNfBbfByuB5BL_58vass.crl (hash: vkQm2qmABn/SK7wxYD80m3BOLaq8MFv+amZ4t1re0qI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:6b:72:5a:b8:9c:4b:23:92:53:fc:7d:6e:1b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9823adddf6c35f05b7c1cae07904bff9f2f6acb
        Validity
            Not Before: Jun 15 15:00:54 2024 GMT
            Not After : Jun 16 15:00:54 2024 GMT
        Subject: CN=ac98ead1374e6e0e5b1d8cb192ceb04d053ee0cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d6:45:8d:a0:df:5c:a7:f4:39:ee:f0:f8:94:
                    af:bc:e7:f2:bc:51:55:37:3d:70:ed:7a:6d:26:8e:
                    98:3e:d5:65:0a:05:57:04:65:7e:95:59:a2:01:81:
                    5a:b2:3e:c1:79:72:8b:2d:02:22:e2:7d:28:23:6b:
                    8f:73:69:c3:84:1f:07:44:93:82:d5:04:96:22:51:
                    f9:c4:c2:72:fa:c3:25:4c:d6:d7:a6:90:15:1f:ae:
                    66:03:a8:79:a4:a1:a7:c8:d1:46:64:54:2c:16:79:
                    8a:13:0c:ba:70:c2:3f:f4:8b:83:15:ff:28:e3:2b:
                    41:b7:23:0a:09:82:d1:b6:39:c6:a6:a1:e1:64:4d:
                    de:84:5e:e6:32:a0:7e:00:11:bb:32:e9:bc:d8:58:
                    48:56:49:22:23:57:cf:b0:2e:d2:20:81:0e:4d:a4:
                    d0:05:f9:c7:a4:e9:1d:59:72:91:73:11:71:3f:ba:
                    16:c9:17:c1:30:f1:48:a4:e8:60:15:b0:c2:6a:2f:
                    c8:01:f7:69:e5:4b:92:42:b9:9e:3b:b8:aa:d1:07:
                    ee:bf:45:9a:ff:54:8a:c7:c4:61:52:64:2a:77:25:
                    03:5d:38:1e:df:0f:2b:f3:6b:66:32:2b:7a:e2:45:
                    3b:cd:37:59:53:cd:7e:b1:d0:ba:f4:f0:85:84:27:
                    ef:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:98:EA:D1:37:4E:6E:0E:5B:1D:8C:B1:92:CE:B0:4D:05:3E:E0:CF
            X509v3 Authority Key Identifier:
                keyid:A9:82:3A:DD:DF:6C:35:F0:5B:7C:1C:AE:07:90:4B:FF:9F:2F:6A:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c8:0f:fd:90:21:46:fb:20:bf:bd:37:13:37:26:36:dc:87:
         f3:b7:b7:42:3f:b3:f3:f5:34:46:6f:4f:44:e6:ea:77:d7:69:
         cf:d4:30:2e:9a:83:de:41:42:bd:6f:9c:08:b1:87:d9:5a:83:
         7f:66:8f:a6:19:28:fd:5c:fd:e4:7d:41:6d:88:e0:3b:15:9a:
         1c:3b:7d:b4:e8:9c:61:da:54:b3:6b:fe:2c:b9:08:98:b9:84:
         ac:c4:7a:e6:cc:2d:7c:cb:91:bd:f2:f7:c5:c4:17:ce:ba:45:
         97:a3:aa:d4:4f:b3:4f:49:e5:5f:63:a7:9e:fa:8a:68:25:30:
         09:1c:21:1e:ae:4d:d1:69:ce:06:68:eb:9a:98:20:7e:1e:bc:
         aa:96:33:29:b5:07:dc:a9:5d:e5:fe:40:b8:3f:1b:05:9a:fe:
         3a:df:05:86:dc:bd:1f:38:03:d2:7f:da:fd:49:00:a9:78:5d:
         e0:e3:73:4f:8f:f6:1f:a9:3a:f3:e3:da:a7:67:c0:a2:55:7c:
         20:9c:b5:70:16:4b:c9:b3:d8:4e:26:60:4d:19:4e:c3:02:70:
         2d:46:6c:dc:b8:40:31:e3:45:44:47:65:df:4d:13:c2:58:cf:
         5a:d0:05:48:dd:a2:e3:b6:a2:46:34:1f:02:7f:e9:f3:77:f9:
         2f:a4:97:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcamtyWricSyOSU/x9bhutMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ODIzYWRkZGY2YzM1ZjA1YjdjMWNhZTA3OTA0YmZmOWYy
ZjZhY2IwHhcNMjQwNjE1MTUwMDU0WhcNMjQwNjE2MTUwMDU0WjAzMTEwLwYDVQQD
EyhhYzk4ZWFkMTM3NGU2ZTBlNWIxZDhjYjE5MmNlYjA0ZDA1M2VlMGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdZFjaDfXKf0Oe7w+JSvvOfyvFFV
Nz1w7XptJo6YPtVlCgVXBGV+lVmiAYFasj7BeXKLLQIi4n0oI2uPc2nDhB8HRJOC
1QSWIlH5xMJy+sMlTNbXppAVH65mA6h5pKGnyNFGZFQsFnmKEwy6cMI/9IuDFf8o
4ytBtyMKCYLRtjnGpqHhZE3ehF7mMqB+ABG7Mum82FhIVkkiI1fPsC7SIIEOTaTQ
BfnHpOkdWXKRcxFxP7oWyRfBMPFIpOhgFbDCai/IAfdp5UuSQrmeO7iq0Qfuv0Wa
/1SKx8RhUmQqdyUDXTge3w8r82tmMit64kU7zTdZU81+sdC69PCFhCfvSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyY6tE3Tm4OWx2MsZLOsE0FPuDPMB8GA1UdIwQY
MBaAFKmCOt3fbDXwW3wcrgeQS/+fL2rLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVlJNjNkOXNOZkJiZkJ5dUI1QkxfNTh2YXNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8zNGZkMDgtY2U3Ni00YmMzLTg3YzAt
MzZkNGQ3ZjA3YzhhLzEvcVlJNjNkOXNOZkJiZkJ5dUI1QkxfNTh2YXNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8zNGZkMDgtY2U3Ni00YmMzLTg3YzAtMzZkNGQ3ZjA3Yzhh
LzEvcVlJNjNkOXNOZkJiZkJ5dUI1QkxfNTh2YXNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALMgP/ZAh
Rvsgv703EzcmNtyH87e3Qj+z8/U0Rm9PRObqd9dpz9QwLpqD3kFCvW+cCLGH2VqD
f2aPphko/Vz95H1BbYjgOxWaHDt9tOicYdpUs2v+LLkImLmErMR65swtfMuRvfL3
xcQXzrpFl6Oq1E+zT0nlX2OnnvqKaCUwCRwhHq5N0WnOBmjrmpggfh68qpYzKbUH
3Kld5f5AuD8bBZr+Ot8Fhty9HzgD0n/a/UkAqXhd4ONzT4/2H6k68+Pap2fAolV8
IJy1cBZLybPYTiZgTRlOwwJwLUZs3LhAMeNFREdl300TwljPWtAFSN2i47aiRjQf
An/p83f5L6SX2Q==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:43:56 2024 by rpki-client on console-fra.rpki-client.org