Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
File:                     1-y1mYW_2l9UXaIaOijUhua3M7m0.mft (raw, json)
Hash identifier:          owdObJgGjqd9thhxmo8zOmZI9QWGEG+TUrQvizQZmSA=
Subject key identifier:   D5:A8:31:D0:8B:99:48:33:61:AD:D5:72:57:57:39:BB:DD:8B:1B:6F
Authority key identifier: FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
Certificate issuer:       /CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Certificate serial:       019044F85D8870F728148E48926FF487077A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
Manifest number:          0128
Signing time:             Sun 23 Jun 2024 12:00:45 +0000
Manifest this update:     Sun 23 Jun 2024 12:00:45 +0000
Manifest next update:     Mon 24 Jun 2024 12:00:45 +0000
Files and hashes:         1: 1-y1mYW_2l9UXaIaOijUhua3M7m0.crl (hash: bzpudX7/NZ97b2J4mL3YHbw4zhyD75inY7TMz0vWuTw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 12:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:f8:5d:88:70:f7:28:14:8e:48:92:6f:f4:87:07:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb2d66616ff697d51768868e8a3521b9adccee6d
        Validity
            Not Before: Jun 23 12:00:45 2024 GMT
            Not After : Jun 24 12:00:45 2024 GMT
        Subject: CN=d5a831d08b99483361add572575739bbdd8b1b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e0:dd:1f:f5:ae:12:31:01:d1:94:b1:c7:de:
                    a2:ee:c9:f1:c1:d3:4b:16:e8:b9:90:c3:86:8f:3f:
                    4d:a7:49:46:62:9c:dd:dc:bd:8d:8a:e2:d2:ca:82:
                    1b:25:e5:e6:24:a3:c1:8e:ca:5f:37:60:5e:27:dd:
                    6e:0d:29:01:1c:df:28:74:da:21:09:9b:0f:05:b7:
                    20:20:90:0a:73:aa:50:ae:16:e6:a8:c1:95:30:15:
                    da:a7:4d:3a:da:7d:7b:78:ce:75:fc:27:34:a8:45:
                    09:57:62:b1:02:77:3a:c0:c0:d7:80:9f:8e:75:b3:
                    21:03:a4:7c:b9:f9:af:1f:cf:5c:f9:c3:55:5a:93:
                    51:82:41:96:b2:7f:27:29:76:da:74:3a:c9:2d:15:
                    72:1b:10:ab:db:c1:3a:37:51:e9:26:ca:e8:c0:86:
                    f9:f6:fe:54:19:9b:ff:4a:ce:74:e7:0d:df:66:17:
                    cd:65:8a:14:88:9f:00:ae:82:10:66:30:d3:04:92:
                    c3:dd:5c:4c:b4:eb:a9:e2:ad:db:be:11:28:5d:4a:
                    2b:e1:3a:ba:72:60:c6:a6:e3:a1:87:55:98:ef:9e:
                    94:64:84:a2:6f:6d:7b:7e:e6:5b:fc:a8:9b:2d:0d:
                    fa:cb:c6:c4:f9:aa:e8:22:2d:bf:09:a9:4a:14:c3:
                    30:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A8:31:D0:8B:99:48:33:61:AD:D5:72:57:57:39:BB:DD:8B:1B:6F
            X509v3 Authority Key Identifier:
                keyid:FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:7d:08:05:2e:78:2d:bb:79:1a:69:78:60:42:ef:42:82:b3:
         e2:08:8d:fe:12:df:a8:58:17:23:cb:2f:86:f5:1b:44:57:0f:
         53:21:f9:3f:2b:18:5f:9a:f8:d7:23:be:6e:e0:01:85:de:5f:
         57:da:65:56:42:4e:06:fa:bf:0c:f7:ab:7b:54:38:54:16:85:
         c2:98:b3:08:ac:15:2c:18:07:2e:9f:87:c1:a3:ef:d1:c8:b3:
         c5:0d:38:a0:e8:83:25:59:c9:5e:9f:2f:b2:9f:43:ea:56:3f:
         39:3b:52:3a:95:c3:be:a7:62:f6:9f:d6:5d:f2:53:f4:4f:3f:
         20:15:76:b2:49:5b:35:28:f2:38:65:0f:57:24:b2:1d:dc:8c:
         2f:4d:e1:7e:16:4d:5e:43:b1:7f:db:95:f2:7a:e8:fa:df:d2:
         25:34:50:60:30:19:24:36:08:93:d1:fa:ad:00:7d:d1:c0:42:
         c8:36:69:d5:e2:bc:7c:54:8f:d2:0c:de:7c:9e:db:fd:69:e0:
         5b:84:c5:c8:9e:5e:61:06:9f:49:22:fd:02:07:b9:89:e8:51:
         71:f8:94:e3:71:f9:92:1f:7d:ae:da:97:8f:13:18:3f:f7:8a:
         65:b7:0c:51:e4:bd:c3:1c:b0:c8:62:34:3a:fd:80:90:9d:1a:
         9c:c5:52:98
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZBE+F2IcPcoFI5Ikm/0hwd6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMmQ2NjYxNmZmNjk3ZDUxNzY4ODY4ZThhMzUyMWI5YWRj
Y2VlNmQwHhcNMjQwNjIzMTIwMDQ1WhcNMjQwNjI0MTIwMDQ1WjAzMTEwLwYDVQQD
EyhkNWE4MzFkMDhiOTk0ODMzNjFhZGQ1NzI1NzU3MzliYmRkOGIxYjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvODdH/WuEjEB0ZSxx96i7snxwdNL
Fui5kMOGjz9Np0lGYpzd3L2NiuLSyoIbJeXmJKPBjspfN2BeJ91uDSkBHN8odNoh
CZsPBbcgIJAKc6pQrhbmqMGVMBXap0062n17eM51/Cc0qEUJV2KxAnc6wMDXgJ+O
dbMhA6R8ufmvH89c+cNVWpNRgkGWsn8nKXbadDrJLRVyGxCr28E6N1HpJsrowIb5
9v5UGZv/Ss505w3fZhfNZYoUiJ8AroIQZjDTBJLD3VxMtOup4q3bvhEoXUor4Tq6
cmDGpuOhh1WY756UZISib217fuZb/KibLQ36y8bE+aroIi2/CalKFMMwkQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNWoMdCLmUgzYa3VcldXObvdixtvMB8GA1UdIwQY
MBaAFPstZmFv9pfVF2iGjoo1IbmtzO5tMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS15MW1ZV18ybDlVWGFJYU9palVodWEzTTdtMC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvYWQwZWFiLWUyYTEtNDM5OC05ODcx
LWZmYWNhN2UzMDlhNi8xLzEteTFtWVdfMmw5VVhhSWFPaWpVaHVhM003bTAubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzM2L2FkMGVhYi1lMmExLTQzOTgtOTg3MS1mZmFjYTdlMzA5
YTYvMS8xLXkxbVlXXzJsOVVYYUlhT2lqVWh1YTNNN20wLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe30I
BS54Lbt5Gml4YELvQoKz4giN/hLfqFgXI8svhvUbRFcPUyH5PysYX5r41yO+buAB
hd5fV9plVkJOBvq/DPere1Q4VBaFwpizCKwVLBgHLp+HwaPv0cizxQ04oOiDJVnJ
Xp8vsp9D6lY/OTtSOpXDvqdi9p/WXfJT9E8/IBV2sklbNSjyOGUPVySyHdyML03h
fhZNXkOxf9uV8nro+t/SJTRQYDAZJDYIk9H6rQB90cBCyDZp1eK8fFSP0gzefJ7b
/WngW4TFyJ5eYQafSSL9Age5iehRcfiU43H5kh99rtqXjxMYP/eKZbcMUeS9wxyw
yGI0Ov2AkJ0anMVSmA==
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:39:23 2024 by rpki-client on console-ams.rpki-client.org