Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
File:                     JY8HU8Azwa8JGGbQlCZFEmlspos.mft (raw, json)
Hash identifier:          i6JmBCxFBDbKcJtbPiMywkNY0PCOXDmmDnyKCS7KywQ=
Subject key identifier:   D4:BE:A7:72:AD:3F:7C:3A:E8:CF:D2:02:60:75:E4:C4:11:83:77:D1
Authority key identifier: 25:8F:07:53:C0:33:C1:AF:09:18:66:D0:94:26:45:12:69:6C:A6:8B
Certificate issuer:       /CN=258f0753c033c1af091866d094264512696ca68b
Certificate serial:       019040AF41E6F6DDDD473D776876C20C1FA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
Manifest number:          0522
Signing time:             Sat 22 Jun 2024 16:02:25 +0000
Manifest this update:     Sat 22 Jun 2024 16:02:25 +0000
Manifest next update:     Sun 23 Jun 2024 16:02:25 +0000
Files and hashes:         1: JY8HU8Azwa8JGGbQlCZFEmlspos.crl (hash: DfCPUxVEpjKk14866O+XEs0tCvUl6ZWTnuKm5E97YsM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:af:41:e6:f6:dd:dd:47:3d:77:68:76:c2:0c:1f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258f0753c033c1af091866d094264512696ca68b
        Validity
            Not Before: Jun 22 16:02:25 2024 GMT
            Not After : Jun 23 16:02:25 2024 GMT
        Subject: CN=d4bea772ad3f7c3ae8cfd2026075e4c4118377d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ff:c5:07:9c:3f:8a:a1:bf:7b:20:e2:8c:c1:
                    98:ed:1d:f5:9d:9b:a5:88:68:87:73:58:94:e3:e7:
                    4b:9c:91:a3:cc:5b:96:1a:a0:bb:82:55:81:ce:d5:
                    ae:b6:0c:ac:b2:ae:f3:cc:1d:37:ca:a2:c3:bb:5f:
                    42:66:f6:bb:fc:eb:e1:20:3e:b4:50:9e:a4:2e:25:
                    7f:8a:13:d5:00:6b:82:b5:67:58:30:d5:ed:f2:92:
                    31:72:82:a2:7a:9c:ea:8a:2c:d5:c6:bf:57:9f:24:
                    fd:41:9a:91:83:36:7c:c2:b0:b5:0d:bc:73:d5:2a:
                    02:31:14:9a:d6:00:ce:6b:84:46:83:7a:e9:51:a9:
                    00:b7:44:61:5c:ec:47:93:38:8a:18:2c:39:dc:fd:
                    e2:e0:63:64:c9:2c:98:73:e8:45:85:f1:66:2b:7d:
                    2b:09:ca:88:1c:e2:86:5e:12:77:5c:e8:e7:6e:71:
                    79:df:23:7f:50:65:3f:a8:9b:5e:d6:6b:41:fd:fb:
                    38:3f:8c:aa:9f:43:0b:4a:49:eb:be:13:30:7a:8a:
                    48:b3:35:67:a3:cc:12:5b:3d:9b:e4:54:40:1c:26:
                    73:dd:5e:3d:5b:04:f1:63:d1:59:dd:ce:cf:5b:d5:
                    84:10:d7:bc:69:9b:56:8c:7d:27:b4:7b:ed:57:bf:
                    8d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BE:A7:72:AD:3F:7C:3A:E8:CF:D2:02:60:75:E4:C4:11:83:77:D1
            X509v3 Authority Key Identifier:
                keyid:25:8F:07:53:C0:33:C1:AF:09:18:66:D0:94:26:45:12:69:6C:A6:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:6d:b5:00:3e:63:33:4e:4e:31:32:64:6b:07:2d:b6:16:2c:
         f7:1c:b7:99:a5:bf:be:05:e2:29:10:ce:7d:b7:10:fb:28:f1:
         4d:d9:4e:07:7f:e9:be:e7:12:68:67:5b:63:ae:03:5c:47:37:
         a4:59:88:4f:af:ab:89:e9:1a:ea:59:38:92:eb:fc:1d:8a:e0:
         6c:2c:33:5c:24:49:bd:c1:ce:65:8a:8e:d8:37:f5:54:fc:de:
         58:9d:5f:64:ff:bf:63:fa:2a:7f:91:08:97:7e:5a:23:6f:38:
         5c:67:e4:a1:ef:e6:39:f0:47:b2:cc:3d:46:6a:09:5a:b4:9d:
         ed:e0:38:81:14:c9:16:45:a7:5e:45:69:b1:47:df:b7:a1:a1:
         0d:cb:63:c1:b0:69:ff:a6:65:ce:f3:50:d1:1d:24:34:9e:9d:
         a1:24:91:fe:3f:26:6a:af:22:c4:3f:78:93:3e:31:73:6c:48:
         95:16:a1:2e:4a:c2:dd:c9:04:16:84:59:9a:74:0c:1c:1c:42:
         ae:c0:c3:69:3c:c8:16:99:53:3e:ef:8b:cc:44:91:6a:a9:1f:
         ab:83:7d:97:b7:e3:db:12:e7:8d:59:9f:20:f2:55:18:08:cc:
         65:f6:60:e4:8c:6d:20:77:8b:a1:4c:ba:a4:d7:4f:ff:df:88:
         fe:f7:00:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBAr0Hm9t3dRz13aHbCDB+iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1OGYwNzUzYzAzM2MxYWYwOTE4NjZkMDk0MjY0NTEyNjk2
Y2E2OGIwHhcNMjQwNjIyMTYwMjI1WhcNMjQwNjIzMTYwMjI1WjAzMTEwLwYDVQQD
EyhkNGJlYTc3MmFkM2Y3YzNhZThjZmQyMDI2MDc1ZTRjNDExODM3N2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP/FB5w/iqG/eyDijMGY7R31nZul
iGiHc1iU4+dLnJGjzFuWGqC7glWBztWutgyssq7zzB03yqLDu19CZva7/OvhID60
UJ6kLiV/ihPVAGuCtWdYMNXt8pIxcoKiepzqiizVxr9XnyT9QZqRgzZ8wrC1Dbxz
1SoCMRSa1gDOa4RGg3rpUakAt0RhXOxHkziKGCw53P3i4GNkySyYc+hFhfFmK30r
CcqIHOKGXhJ3XOjnbnF53yN/UGU/qJte1mtB/fs4P4yqn0MLSknrvhMweopIszVn
o8wSWz2b5FRAHCZz3V49WwTxY9FZ3c7PW9WEENe8aZtWjH0ntHvtV7+NyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNS+p3KtP3w66M/SAmB15MQRg3fRMB8GA1UdIwQY
MBaAFCWPB1PAM8GvCRhm0JQmRRJpbKaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlk4SFU4QXp3YThKR0diUWxDWkZFbWxzcG9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zYmFlODctODJlYi00NTFmLTgwNDQt
MmMyZjBkMjRmOTM2LzEvSlk4SFU4QXp3YThKR0diUWxDWkZFbWxzcG9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8zYmFlODctODJlYi00NTFmLTgwNDQtMmMyZjBkMjRmOTM2
LzEvSlk4SFU4QXp3YThKR0diUWxDWkZFbWxzcG9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa221AD5j
M05OMTJkawctthYs9xy3maW/vgXiKRDOfbcQ+yjxTdlOB3/pvucSaGdbY64DXEc3
pFmIT6+rieka6lk4kuv8HYrgbCwzXCRJvcHOZYqO2Df1VPzeWJ1fZP+/Y/oqf5EI
l35aI284XGfkoe/mOfBHssw9RmoJWrSd7eA4gRTJFkWnXkVpsUfft6GhDctjwbBp
/6ZlzvNQ0R0kNJ6doSSR/j8maq8ixD94kz4xc2xIlRahLkrC3ckEFoRZmnQMHBxC
rsDDaTzIFplTPu+LzESRaqkfq4N9l7fj2xLnjVmfIPJVGAjMZfZg5IxtIHeLoUy6
pNdP/9+I/vcA6w==
-----END CERTIFICATE-----
Generated at Sun Jun 23 00:51:35 2024 by rpki-client on console-fra.rpki-client.org