Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/339cbe-b85e-486d-8f5e-1ee24d88b357/1/mk6XscuztWK0k7LTD4yaKW6fE8E.mft
File:                     mk6XscuztWK0k7LTD4yaKW6fE8E.mft (raw, json)
Hash identifier:          WQI3LfiIl6tkh8uXAbx1LWQTbSs8MBcpHe6mFO25++E=
Subject key identifier:   A8:BC:F3:0D:32:CB:6A:41:29:ED:2F:0C:05:3B:F2:6D:CD:DD:86:F1
Authority key identifier: 9A:4E:97:B1:CB:B3:B5:62:B4:93:B2:D3:0F:8C:9A:29:6E:9F:13:C1
Certificate issuer:       /CN=9a4e97b1cbb3b562b493b2d30f8c9a296e9f13c1
Certificate serial:       019236CB09E8A57060CBFE88030605451EA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mk6XscuztWK0k7LTD4yaKW6fE8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/339cbe-b85e-486d-8f5e-1ee24d88b357/1/mk6XscuztWK0k7LTD4yaKW6fE8E.mft
Manifest number:          12DD
Signing time:             Sat 28 Sep 2024 04:02:08 +0000
Manifest this update:     Sat 28 Sep 2024 04:02:08 +0000
Manifest next update:     Sun 29 Sep 2024 04:02:08 +0000
Files and hashes:         1: mk6XscuztWK0k7LTD4yaKW6fE8E.crl (hash: m5hR1sN609AvfEg+sWmMaACYvnuO1jIt9+lihf4FB7s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/339cbe-b85e-486d-8f5e-1ee24d88b357/1/mk6XscuztWK0k7LTD4yaKW6fE8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/339cbe-b85e-486d-8f5e-1ee24d88b357/1/mk6XscuztWK0k7LTD4yaKW6fE8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mk6XscuztWK0k7LTD4yaKW6fE8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 04:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:36:cb:09:e8:a5:70:60:cb:fe:88:03:06:05:45:1e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a4e97b1cbb3b562b493b2d30f8c9a296e9f13c1
        Validity
            Not Before: Sep 28 04:02:08 2024 GMT
            Not After : Sep 29 04:02:08 2024 GMT
        Subject: CN=a8bcf30d32cb6a4129ed2f0c053bf26dcddd86f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ab:34:7b:81:83:54:46:00:ff:09:95:47:89:
                    f5:c2:b8:5c:0d:4e:e4:e8:d4:33:30:51:95:ff:e0:
                    61:a0:fb:93:b4:af:cc:1e:47:44:96:07:99:1e:91:
                    f6:b7:ef:81:fe:15:73:35:4b:c8:06:52:69:94:05:
                    8b:d8:0d:ff:06:08:4e:77:34:26:7c:3c:b1:b7:c5:
                    c1:34:b0:23:91:05:2f:c5:5e:f0:87:cb:62:74:73:
                    5b:a5:c1:2a:96:18:2d:c0:d0:1e:70:11:5c:56:29:
                    70:ef:5b:83:aa:ff:aa:2d:88:43:1a:85:d9:86:91:
                    87:ce:11:df:1c:ea:0e:42:88:a7:15:41:74:4b:c3:
                    c0:e7:b0:4c:69:15:19:e5:67:30:4c:48:c2:ee:49:
                    4b:8a:03:89:07:24:91:98:db:85:62:bc:91:26:4f:
                    4f:12:d3:ab:9a:39:0f:d8:b1:35:24:cb:5f:76:8c:
                    be:26:80:b1:80:1f:49:90:8f:c0:5f:cb:cc:ee:da:
                    e2:1b:7d:1d:d3:ce:bc:38:92:34:81:32:b5:46:7f:
                    2b:81:59:64:94:51:d8:19:e0:52:d8:0f:83:ee:76:
                    c1:33:d2:45:e1:1e:8a:73:57:16:e7:91:7b:fb:dc:
                    b3:bb:09:2d:98:5c:35:57:2b:dd:8f:69:15:01:c1:
                    ce:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BC:F3:0D:32:CB:6A:41:29:ED:2F:0C:05:3B:F2:6D:CD:DD:86:F1
            X509v3 Authority Key Identifier:
                keyid:9A:4E:97:B1:CB:B3:B5:62:B4:93:B2:D3:0F:8C:9A:29:6E:9F:13:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk6XscuztWK0k7LTD4yaKW6fE8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/339cbe-b85e-486d-8f5e-1ee24d88b357/1/mk6XscuztWK0k7LTD4yaKW6fE8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/339cbe-b85e-486d-8f5e-1ee24d88b357/1/mk6XscuztWK0k7LTD4yaKW6fE8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:70:3d:cc:f5:e3:2c:7c:e6:64:e4:de:cd:00:59:63:10:fa:
         99:54:14:40:4d:bc:52:d1:fe:08:94:8e:d5:08:89:90:0d:bc:
         34:63:ce:f1:10:70:35:a3:86:10:78:f9:5d:4a:90:aa:ce:fa:
         cf:92:c5:7e:64:0e:f1:fa:4c:e1:1e:fe:91:84:4e:03:90:b5:
         e4:ef:2e:69:03:c3:f5:06:ea:11:2f:66:5f:04:ca:af:39:e3:
         eb:28:1c:83:6f:1b:5e:be:0a:0b:1a:fe:0d:26:ae:96:c5:32:
         b0:79:18:da:a4:8f:ed:e5:bf:4b:c5:91:5c:8c:81:47:00:11:
         25:15:2c:f9:3c:bd:a4:98:b7:18:ca:d1:7e:fb:e4:9f:83:94:
         56:87:16:7e:f1:aa:5f:0e:86:c6:fa:d4:78:70:19:59:6b:24:
         c2:c4:b4:42:32:05:9a:5b:2c:f6:00:52:d2:6f:f4:96:34:bf:
         06:be:9e:c9:7c:cb:c6:bd:ee:9c:52:19:a4:b8:3f:83:0a:b2:
         ae:33:a7:eb:4c:ad:18:32:96:20:45:ef:5f:dc:a8:8f:74:17:
         bf:1a:43:b2:a8:0b:0e:a3:9d:e0:bd:ff:f0:04:53:80:ab:3d:
         ba:7a:7c:1b:03:d8:13:61:01:30:a5:c1:46:c4:2d:69:b1:5c:
         fa:7d:2c:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI2ywnopXBgy/6IAwYFRR6gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNGU5N2IxY2JiM2I1NjJiNDkzYjJkMzBmOGM5YTI5NmU5
ZjEzYzEwHhcNMjQwOTI4MDQwMjA4WhcNMjQwOTI5MDQwMjA4WjAzMTEwLwYDVQQD
EyhhOGJjZjMwZDMyY2I2YTQxMjllZDJmMGMwNTNiZjI2ZGNkZGQ4NmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKs0e4GDVEYA/wmVR4n1wrhcDU7k
6NQzMFGV/+BhoPuTtK/MHkdElgeZHpH2t++B/hVzNUvIBlJplAWL2A3/BghOdzQm
fDyxt8XBNLAjkQUvxV7wh8tidHNbpcEqlhgtwNAecBFcVilw71uDqv+qLYhDGoXZ
hpGHzhHfHOoOQoinFUF0S8PA57BMaRUZ5WcwTEjC7klLigOJBySRmNuFYryRJk9P
EtOrmjkP2LE1JMtfdoy+JoCxgB9JkI/AX8vM7triG30d0868OJI0gTK1Rn8rgVlk
lFHYGeBS2A+D7nbBM9JF4R6Kc1cW55F7+9yzuwktmFw1Vyvdj2kVAcHOuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKi88w0yy2pBKe0vDAU78m3N3YbxMB8GA1UdIwQY
MBaAFJpOl7HLs7VitJOy0w+MmilunxPBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWs2WHNjdXp0V0swazdMVEQ0eWFLVzZmRThFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zMzljYmUtYjg1ZS00ODZkLThmNWUt
MWVlMjRkODhiMzU3LzEvbWs2WHNjdXp0V0swazdMVEQ0eWFLVzZmRThFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8zMzljYmUtYjg1ZS00ODZkLThmNWUtMWVlMjRkODhiMzU3
LzEvbWs2WHNjdXp0V0swazdMVEQ0eWFLVzZmRThFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnXA9zPXj
LHzmZOTezQBZYxD6mVQUQE28UtH+CJSO1QiJkA28NGPO8RBwNaOGEHj5XUqQqs76
z5LFfmQO8fpM4R7+kYROA5C15O8uaQPD9QbqES9mXwTKrznj6ygcg28bXr4KCxr+
DSaulsUysHkY2qSP7eW/S8WRXIyBRwARJRUs+Ty9pJi3GMrRfvvkn4OUVocWfvGq
Xw6GxvrUeHAZWWskwsS0QjIFmlss9gBS0m/0ljS/Br6eyXzLxr3unFIZpLg/gwqy
rjOn60ytGDKWIEXvX9yoj3QXvxpDsqgLDqOd4L3/8ARTgKs9unp8GwPYE2EBMKXB
RsQtabFc+n0scQ==
-----END CERTIFICATE-----
Generated at Sat Sep 28 08:30:09 2024 by rpki-client on console-ams.rpki-client.org