Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
File:                     j31CCyNDzZHsI_UImoNC6J1tkWU.mft (raw, json)
Hash identifier:          0Uies60IV9AwXoQECAICKRUpAkQaoYb+ibMi7VEmESo=
Subject key identifier:   63:C1:E5:46:29:35:A3:29:4C:50:9F:F4:65:62:89:5C:BD:FA:8F:46
Authority key identifier: 8F:7D:42:0B:23:43:CD:91:EC:23:F5:08:9A:83:42:E8:9D:6D:91:65
Certificate issuer:       /CN=8f7d420b2343cd91ec23f5089a8342e89d6d9165
Certificate serial:       01901DEB9AE417C1F4D4C64A176DA5C4ABF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j31CCyNDzZHsI_UImoNC6J1tkWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
Manifest number:          0B2C
Signing time:             Sat 15 Jun 2024 22:01:38 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:38 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:38 +0000
Files and hashes:         1: j31CCyNDzZHsI_UImoNC6J1tkWU.crl (hash: hjniMi+PMWHzDQepkvlO+aE9vygqciDLB7IHGag5EAQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j31CCyNDzZHsI_UImoNC6J1tkWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:9a:e4:17:c1:f4:d4:c6:4a:17:6d:a5:c4:ab:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f7d420b2343cd91ec23f5089a8342e89d6d9165
        Validity
            Not Before: Jun 15 22:01:38 2024 GMT
            Not After : Jun 16 22:01:38 2024 GMT
        Subject: CN=63c1e5462935a3294c509ff46562895cbdfa8f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:18:4b:4a:fd:a8:d3:ec:11:b5:1b:61:20:6d:
                    4d:3a:50:a3:a0:ef:af:a0:a2:05:dd:73:74:ff:70:
                    53:6d:75:bc:58:f6:8f:a8:3f:55:75:7c:51:58:2e:
                    c5:5f:81:33:16:9d:76:8a:87:3b:80:f5:69:52:8d:
                    32:47:71:46:81:57:c0:65:85:f4:1a:55:6c:d9:96:
                    b0:e8:92:82:2c:d7:40:55:4e:40:5e:bc:98:a2:07:
                    7d:93:bd:99:c2:bb:88:45:a3:c7:a9:e7:f0:9e:fa:
                    60:99:90:a4:9b:0b:69:70:bf:e4:f2:1b:8d:8a:32:
                    4b:b5:a7:f6:b4:1a:d2:31:36:92:00:bc:95:31:7c:
                    8e:60:b4:91:35:f4:3f:47:51:f2:ae:8e:c1:71:ea:
                    b5:bf:1d:8e:c9:46:79:f6:1f:de:e6:a7:32:14:cb:
                    d8:85:7f:40:5d:ad:b0:3d:75:0c:bf:9a:ee:9b:9c:
                    af:33:e1:98:c8:d5:3d:d7:dc:c6:f5:9c:be:42:85:
                    42:9f:cf:26:a1:d6:b4:6e:ee:55:83:38:90:5f:4b:
                    fd:be:bb:22:04:6e:63:06:a1:37:4b:4b:cb:6e:fa:
                    57:01:20:19:cd:71:8f:89:94:79:e3:e5:d8:b5:1b:
                    df:05:7d:1f:62:ee:1c:fa:05:64:e1:67:d0:8a:8f:
                    0d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C1:E5:46:29:35:A3:29:4C:50:9F:F4:65:62:89:5C:BD:FA:8F:46
            X509v3 Authority Key Identifier:
                keyid:8F:7D:42:0B:23:43:CD:91:EC:23:F5:08:9A:83:42:E8:9D:6D:91:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j31CCyNDzZHsI_UImoNC6J1tkWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:4b:74:a0:bc:4c:cb:80:d1:62:60:eb:22:74:18:d7:6c:3d:
         3f:cc:c9:b1:74:b8:44:cb:18:2c:0d:f7:cc:e5:53:e9:7f:0a:
         98:68:82:42:cf:dd:03:dd:fd:c0:2d:f7:c6:81:a3:d4:ad:9b:
         75:90:c6:b3:0a:c3:77:6d:d5:df:76:d5:76:5e:f5:6d:d8:c8:
         d4:26:2a:44:53:27:c7:96:8d:a7:ab:08:b5:83:98:a4:65:a8:
         c3:39:e1:3b:5c:f0:b4:25:65:ab:b7:3d:4d:bb:00:b7:11:4d:
         a8:ad:75:a1:ea:33:29:bc:79:38:dd:23:70:15:fa:2a:c9:07:
         6c:44:5e:cd:ae:61:62:5c:6e:53:86:b3:1c:3d:ef:05:e4:08:
         d8:8e:bc:4c:98:d4:c0:11:b9:57:e2:d7:e4:08:15:d2:a2:0b:
         bf:eb:16:75:4a:6f:2a:52:5d:b5:6d:33:e5:cf:85:80:d9:95:
         5c:c7:d7:8c:c5:68:2c:f3:87:32:a5:ba:9d:17:a5:93:c2:b4:
         0f:8d:54:88:cd:78:83:d1:a6:9a:88:81:f8:56:50:c3:bf:aa:
         51:c8:8c:58:fe:41:94:97:91:4b:a5:f8:ad:f9:07:a3:e1:60:
         fc:53:ab:7c:c3:2e:16:40:d8:04:a1:ea:3d:44:fc:2e:16:3f:
         b1:1a:0b:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd65rkF8H01MZKF22lxKv0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmN2Q0MjBiMjM0M2NkOTFlYzIzZjUwODlhODM0MmU4OWQ2
ZDkxNjUwHhcNMjQwNjE1MjIwMTM4WhcNMjQwNjE2MjIwMTM4WjAzMTEwLwYDVQQD
Eyg2M2MxZTU0NjI5MzVhMzI5NGM1MDlmZjQ2NTYyODk1Y2JkZmE4ZjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxhLSv2o0+wRtRthIG1NOlCjoO+v
oKIF3XN0/3BTbXW8WPaPqD9VdXxRWC7FX4EzFp12ioc7gPVpUo0yR3FGgVfAZYX0
GlVs2Zaw6JKCLNdAVU5AXryYogd9k72ZwruIRaPHqefwnvpgmZCkmwtpcL/k8huN
ijJLtaf2tBrSMTaSALyVMXyOYLSRNfQ/R1Hyro7Bceq1vx2OyUZ59h/e5qcyFMvY
hX9AXa2wPXUMv5rum5yvM+GYyNU919zG9Zy+QoVCn88moda0bu5VgziQX0v9vrsi
BG5jBqE3S0vLbvpXASAZzXGPiZR54+XYtRvfBX0fYu4c+gVk4WfQio8NgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPB5UYpNaMpTFCf9GViiVy9+o9GMB8GA1UdIwQY
MBaAFI99QgsjQ82R7CP1CJqDQuidbZFlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajMxQ0N5TkR6WkhzSV9VSW1vTkM2SjF0a1dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9kMTc2NjUtNjhiNC00OTZiLTlkOWEt
YzVlMTcyMmEwYzY4LzEvajMxQ0N5TkR6WkhzSV9VSW1vTkM2SjF0a1dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9kMTc2NjUtNjhiNC00OTZiLTlkOWEtYzVlMTcyMmEwYzY4
LzEvajMxQ0N5TkR6WkhzSV9VSW1vTkM2SjF0a1dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARUt0oLxM
y4DRYmDrInQY12w9P8zJsXS4RMsYLA33zOVT6X8KmGiCQs/dA939wC33xoGj1K2b
dZDGswrDd23V33bVdl71bdjI1CYqRFMnx5aNp6sItYOYpGWowznhO1zwtCVlq7c9
TbsAtxFNqK11oeozKbx5ON0jcBX6KskHbEReza5hYlxuU4azHD3vBeQI2I68TJjU
wBG5V+LX5AgV0qILv+sWdUpvKlJdtW0z5c+FgNmVXMfXjMVoLPOHMqW6nRelk8K0
D41UiM14g9GmmoiB+FZQw7+qUciMWP5BlJeRS6X4rfkHo+Fg/FOrfMMuFkDYBKHq
PUT8LhY/sRoLNg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:44:37 2024 by rpki-client on console-ams.rpki-client.org