Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/132d65-5b93-4930-a2e0-f35a3007fd32/1/zKOvTdVqAZfFcwdhYG2uUn3gkmU.mft
File:                     zKOvTdVqAZfFcwdhYG2uUn3gkmU.mft (raw, json)
Hash identifier:          nFI6R1THfi88AhoOl+oZeTWvG+MvxBnL74Y65nfyTUY=
Subject key identifier:   8E:11:36:20:8B:0F:B5:A1:7E:A0:98:36:2C:7D:4A:07:81:5C:7D:DB
Authority key identifier: CC:A3:AF:4D:D5:6A:01:97:C5:73:07:61:60:6D:AE:52:7D:E0:92:65
Certificate issuer:       /CN=cca3af4dd56a0197c5730761606dae527de09265
Certificate serial:       0190448BAE96E10DB79874C913F46A9F9886
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zKOvTdVqAZfFcwdhYG2uUn3gkmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/132d65-5b93-4930-a2e0-f35a3007fd32/1/zKOvTdVqAZfFcwdhYG2uUn3gkmU.mft
Manifest number:          04EB
Signing time:             Sun 23 Jun 2024 10:02:03 +0000
Manifest this update:     Sun 23 Jun 2024 10:02:03 +0000
Manifest next update:     Mon 24 Jun 2024 10:02:03 +0000
Files and hashes:         1: zKOvTdVqAZfFcwdhYG2uUn3gkmU.crl (hash: 8wK6z5j2ppV7UK7qcqSMMIGStNm9agaZjbtEQ/T44+A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/132d65-5b93-4930-a2e0-f35a3007fd32/1/zKOvTdVqAZfFcwdhYG2uUn3gkmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/132d65-5b93-4930-a2e0-f35a3007fd32/1/zKOvTdVqAZfFcwdhYG2uUn3gkmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zKOvTdVqAZfFcwdhYG2uUn3gkmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8b:ae:96:e1:0d:b7:98:74:c9:13:f4:6a:9f:98:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cca3af4dd56a0197c5730761606dae527de09265
        Validity
            Not Before: Jun 23 10:02:03 2024 GMT
            Not After : Jun 24 10:02:03 2024 GMT
        Subject: CN=8e1136208b0fb5a17ea098362c7d4a07815c7ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c0:cf:c5:1d:5f:c9:90:e7:99:9f:38:4f:c5:
                    57:1a:e2:78:ed:1c:78:73:1d:48:7c:af:6e:53:e7:
                    44:30:f1:16:ac:47:4e:f5:22:16:8b:6c:b0:a5:f6:
                    35:03:61:01:e0:61:f2:55:0a:90:23:6d:5e:11:a7:
                    73:6a:18:b2:5b:76:9b:57:c8:87:bd:ad:7b:49:06:
                    d7:81:9c:5c:df:3e:8f:ab:ee:43:26:6d:3c:c1:a6:
                    4b:25:03:fb:d9:f9:87:61:00:40:cc:c1:e4:c8:10:
                    d5:c5:08:c0:78:94:2d:6b:2f:2c:ad:ed:a7:e6:75:
                    ac:18:be:41:6e:e6:34:7f:1b:a9:d0:9b:00:06:1c:
                    50:a3:c9:67:fa:e1:a7:cf:02:b0:a1:14:64:dc:8d:
                    5b:a8:ad:a6:7d:99:e9:12:7e:b5:3b:b9:40:89:fb:
                    c0:f7:0d:4a:4f:4d:5a:3c:92:ef:73:54:55:78:79:
                    3d:42:b7:1c:0a:99:a6:d2:6a:ba:8a:f4:75:cf:a4:
                    ce:cc:2e:3c:bb:27:7c:09:6c:e5:3f:26:87:36:b8:
                    01:58:cd:70:90:48:e8:94:a5:cb:47:8f:3c:10:b2:
                    8e:6c:db:32:29:e7:3e:8d:40:3e:8d:12:65:8d:6d:
                    ab:47:54:80:3b:b3:41:a5:10:f7:b0:d2:f6:dd:fb:
                    f7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:11:36:20:8B:0F:B5:A1:7E:A0:98:36:2C:7D:4A:07:81:5C:7D:DB
            X509v3 Authority Key Identifier:
                keyid:CC:A3:AF:4D:D5:6A:01:97:C5:73:07:61:60:6D:AE:52:7D:E0:92:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKOvTdVqAZfFcwdhYG2uUn3gkmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/132d65-5b93-4930-a2e0-f35a3007fd32/1/zKOvTdVqAZfFcwdhYG2uUn3gkmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/132d65-5b93-4930-a2e0-f35a3007fd32/1/zKOvTdVqAZfFcwdhYG2uUn3gkmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:0f:b3:a8:91:41:4c:35:2b:6c:4b:7d:8b:db:94:35:97:36:
         39:ad:db:ec:84:bf:de:59:25:3c:f0:3b:76:f7:41:8b:b0:17:
         07:a3:4c:ff:c6:81:ca:ea:b3:5f:ff:f2:5c:03:72:66:ff:e6:
         e5:1c:32:73:a7:f7:3d:02:1b:0f:f7:43:a0:6e:c2:0e:c4:77:
         33:9c:74:51:72:c3:3d:67:b5:7e:29:0d:91:7c:6e:42:88:78:
         ff:27:f3:15:e6:0f:1d:9d:6f:5f:8e:46:6a:3a:f6:1d:74:f4:
         59:c7:d9:f2:38:98:9a:de:04:ba:85:b9:00:e3:db:f8:7a:5e:
         c0:ac:57:81:8d:5f:8e:21:29:60:58:42:4c:ca:67:a6:be:52:
         f1:26:0d:4b:db:0a:49:ba:ea:3a:8b:bb:ee:89:7f:1c:7b:0b:
         89:e2:6d:12:a4:3a:1d:93:ce:a6:16:a3:fc:87:37:7b:68:b4:
         d9:cb:54:5a:e6:11:6a:aa:b8:7f:df:b8:0f:a7:83:61:c4:05:
         92:36:bc:9f:45:48:f0:7b:a0:b9:e6:c6:48:19:ec:0a:12:d7:
         9e:b2:d3:d2:08:d9:a3:a6:fd:ee:a5:0b:7b:a1:fb:c9:6c:03:
         f8:fa:c1:ff:22:ec:06:ab:31:85:c4:3f:58:aa:e5:06:15:38:
         97:4b:79:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBEi66W4Q23mHTJE/Rqn5iGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjYTNhZjRkZDU2YTAxOTdjNTczMDc2MTYwNmRhZTUyN2Rl
MDkyNjUwHhcNMjQwNjIzMTAwMjAzWhcNMjQwNjI0MTAwMjAzWjAzMTEwLwYDVQQD
Eyg4ZTExMzYyMDhiMGZiNWExN2VhMDk4MzYyYzdkNGEwNzgxNWM3ZGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMDPxR1fyZDnmZ84T8VXGuJ47Rx4
cx1IfK9uU+dEMPEWrEdO9SIWi2ywpfY1A2EB4GHyVQqQI21eEadzahiyW3abV8iH
va17SQbXgZxc3z6Pq+5DJm08waZLJQP72fmHYQBAzMHkyBDVxQjAeJQtay8sre2n
5nWsGL5BbuY0fxup0JsABhxQo8ln+uGnzwKwoRRk3I1bqK2mfZnpEn61O7lAifvA
9w1KT01aPJLvc1RVeHk9QrccCpmm0mq6ivR1z6TOzC48uyd8CWzlPyaHNrgBWM1w
kEjolKXLR488ELKObNsyKec+jUA+jRJljW2rR1SAO7NBpRD3sNL23fv3IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4RNiCLD7WhfqCYNix9SgeBXH3bMB8GA1UdIwQY
MBaAFMyjr03VagGXxXMHYWBtrlJ94JJlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvektPdlRkVnFBWmZGY3dkaFlHMnVVbjNna21VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xMzJkNjUtNWI5My00OTMwLWEyZTAt
ZjM1YTMwMDdmZDMyLzEvektPdlRkVnFBWmZGY3dkaFlHMnVVbjNna21VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8xMzJkNjUtNWI5My00OTMwLWEyZTAtZjM1YTMwMDdmZDMy
LzEvektPdlRkVnFBWmZGY3dkaFlHMnVVbjNna21VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYA+zqJFB
TDUrbEt9i9uUNZc2Oa3b7IS/3lklPPA7dvdBi7AXB6NM/8aByuqzX//yXANyZv/m
5Rwyc6f3PQIbD/dDoG7CDsR3M5x0UXLDPWe1fikNkXxuQoh4/yfzFeYPHZ1vX45G
ajr2HXT0WcfZ8jiYmt4EuoW5AOPb+HpewKxXgY1fjiEpYFhCTMpnpr5S8SYNS9sK
SbrqOou77ol/HHsLieJtEqQ6HZPOphaj/Ic3e2i02ctUWuYRaqq4f9+4D6eDYcQF
kja8n0VI8HuguebGSBnsChLXnrLT0gjZo6b97qULe6H7yWwD+PrB/yLsBqsxhcQ/
WKrlBhU4l0t5fw==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:10:55 2024 by rpki-client on console-fra.rpki-client.org