Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.mft
File:                     rNbaLhYbceF0IP0x2l9D5VWNxH8.mft (raw, json)
Hash identifier:          u6Lg0Bjef5AbcSj/E+R/zEHnzNqcmyJ3g3U7Wd6yru8=
Subject key identifier:   8B:E6:5A:97:62:CC:7A:05:0D:80:86:8D:24:23:29:31:0C:3E:EF:28
Authority key identifier: AC:D6:DA:2E:16:1B:71:E1:74:20:FD:31:DA:5F:43:E5:55:8D:C4:7F
Certificate issuer:       /CN=acd6da2e161b71e17420fd31da5f43e5558dc47f
Certificate serial:       01901BFF1717B40BAE62F6965E52E97A3D22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rNbaLhYbceF0IP0x2l9D5VWNxH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.mft
Manifest number:          025B
Signing time:             Sat 15 Jun 2024 13:03:40 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:40 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:40 +0000
Files and hashes:         1: rNbaLhYbceF0IP0x2l9D5VWNxH8.crl (hash: j1hb5jZlwm+lF163lsuGb3cY4T0exEVmD2h6y0c3mX8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rNbaLhYbceF0IP0x2l9D5VWNxH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:ff:17:17:b4:0b:ae:62:f6:96:5e:52:e9:7a:3d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acd6da2e161b71e17420fd31da5f43e5558dc47f
        Validity
            Not Before: Jun 15 13:03:40 2024 GMT
            Not After : Jun 16 13:03:40 2024 GMT
        Subject: CN=8be65a9762cc7a050d80868d242329310c3eef28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bc:d3:df:71:b4:e7:ff:b8:ad:a8:0f:39:c1:
                    aa:6a:c4:4e:2b:5a:e1:60:aa:09:a7:e0:c7:31:f1:
                    87:d9:9a:ba:e7:b7:03:7b:bf:46:47:82:89:ad:66:
                    57:16:e2:49:56:9c:cf:f8:9c:55:c7:25:68:3a:82:
                    93:10:cd:0b:b7:0a:27:a9:17:3a:ee:81:68:7f:0b:
                    e4:22:2e:cf:df:f4:5b:b9:a7:9b:8f:f8:65:4c:f3:
                    d8:e5:b0:76:1f:ef:a0:a4:34:22:ea:4f:52:6f:99:
                    a5:77:51:3b:2b:e2:59:5e:e4:73:6a:d7:81:ca:9c:
                    b4:99:25:f1:de:04:6d:2b:ec:74:6c:b5:61:06:e0:
                    05:2c:de:c4:99:10:70:18:d6:54:d5:e1:01:da:0d:
                    4e:5c:2d:bf:ff:ef:e9:02:9b:5a:60:ee:0b:cc:86:
                    3c:74:38:78:af:f3:ec:bf:6d:39:41:91:43:6d:b8:
                    d2:2e:c8:37:11:82:52:ce:01:88:0c:64:92:a8:5e:
                    4a:9b:20:54:50:6d:8f:96:ab:ac:ce:32:1f:30:33:
                    a4:74:e0:f0:10:70:6f:a6:cc:5a:b7:38:04:7c:cb:
                    06:53:9e:99:5b:ff:77:cd:c1:10:f9:59:0a:1b:37:
                    67:79:5f:5b:ee:b9:ca:9c:1b:c7:92:e8:fe:96:de:
                    3c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E6:5A:97:62:CC:7A:05:0D:80:86:8D:24:23:29:31:0C:3E:EF:28
            X509v3 Authority Key Identifier:
                keyid:AC:D6:DA:2E:16:1B:71:E1:74:20:FD:31:DA:5F:43:E5:55:8D:C4:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNbaLhYbceF0IP0x2l9D5VWNxH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:16:d0:5a:17:b6:4f:ee:36:87:4d:40:a9:45:09:ff:93:7b:
         4e:3d:4c:bd:7c:2f:5b:88:e2:3e:4b:79:fa:0c:df:68:d3:e2:
         43:1d:dd:ea:0f:6a:bd:ad:fd:44:7f:2a:28:65:a9:b1:96:22:
         8d:96:aa:da:a6:36:f5:24:a3:2f:83:c9:3a:39:3e:09:29:9d:
         a8:6f:76:de:01:c2:95:fe:48:16:d7:07:7d:7e:15:80:74:45:
         9c:a3:6b:ff:fa:6e:10:1f:33:b3:41:dc:d4:a5:83:ae:c4:72:
         2b:d2:66:72:cf:ef:34:ed:72:55:b9:b1:49:0a:ab:e0:46:ab:
         e8:fd:2e:16:22:42:91:7f:ff:94:5d:f9:9a:e8:3f:2a:c1:f9:
         34:93:6b:71:b6:31:35:a2:75:4e:37:53:72:ab:6f:fb:14:bc:
         dd:6b:15:2b:19:bd:87:8b:27:c4:68:da:67:40:1b:82:51:ba:
         f9:02:fd:28:31:05:99:c9:4a:26:7a:dc:23:d3:82:77:df:fc:
         60:60:d7:ba:45:64:2b:43:ef:6a:a5:8c:c8:8a:1b:9f:c1:0e:
         55:30:d7:aa:30:b4:29:18:92:4e:46:5e:57:74:45:50:8b:d4:
         cf:2f:4c:28:0c:08:50:30:d1:b0:16:8b:e1:34:49:02:e8:12:
         fc:1f:86:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAb/xcXtAuuYvaWXlLpej0iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZDZkYTJlMTYxYjcxZTE3NDIwZmQzMWRhNWY0M2U1NTU4
ZGM0N2YwHhcNMjQwNjE1MTMwMzQwWhcNMjQwNjE2MTMwMzQwWjAzMTEwLwYDVQQD
Eyg4YmU2NWE5NzYyY2M3YTA1MGQ4MDg2OGQyNDIzMjkzMTBjM2VlZjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbzT33G05/+4ragPOcGqasROK1rh
YKoJp+DHMfGH2Zq657cDe79GR4KJrWZXFuJJVpzP+JxVxyVoOoKTEM0LtwonqRc6
7oFofwvkIi7P3/Rbuaebj/hlTPPY5bB2H++gpDQi6k9Sb5mld1E7K+JZXuRzateB
ypy0mSXx3gRtK+x0bLVhBuAFLN7EmRBwGNZU1eEB2g1OXC2//+/pAptaYO4LzIY8
dDh4r/Psv205QZFDbbjSLsg3EYJSzgGIDGSSqF5KmyBUUG2PlquszjIfMDOkdODw
EHBvpsxatzgEfMsGU56ZW/93zcEQ+VkKGzdneV9b7rnKnBvHkuj+lt48YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvmWpdizHoFDYCGjSQjKTEMPu8oMB8GA1UdIwQY
MBaAFKzW2i4WG3HhdCD9MdpfQ+VVjcR/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck5iYUxoWWJjZUYwSVAweDJsOUQ1VldOeEg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hYmQ5ZWItZTA3MC00YTYxLWI0MDMt
NTNlYWMwYjBhY2I1LzEvck5iYUxoWWJjZUYwSVAweDJsOUQ1VldOeEg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9hYmQ5ZWItZTA3MC00YTYxLWI0MDMtNTNlYWMwYjBhY2I1
LzEvck5iYUxoWWJjZUYwSVAweDJsOUQ1VldOeEg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMhbQWhe2
T+42h01AqUUJ/5N7Tj1MvXwvW4jiPkt5+gzfaNPiQx3d6g9qva39RH8qKGWpsZYi
jZaq2qY29SSjL4PJOjk+CSmdqG923gHClf5IFtcHfX4VgHRFnKNr//puEB8zs0Hc
1KWDrsRyK9Jmcs/vNO1yVbmxSQqr4Ear6P0uFiJCkX//lF35mug/KsH5NJNrcbYx
NaJ1TjdTcqtv+xS83WsVKxm9h4snxGjaZ0AbglG6+QL9KDEFmclKJnrcI9OCd9/8
YGDXukVkK0PvaqWMyIobn8EOVTDXqjC0KRiSTkZeV3RFUIvUzy9MKAwIUDDRsBaL
4TRJAugS/B+Gww==
-----END CERTIFICATE-----
Generated at Sat Jun 15 14:27:43 2024 by rpki-client on console-fra.rpki-client.org