Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
File:                     YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft (raw, json)
Hash identifier:          Xuyshm0uH6cJM47L/AonxULGetBoLMfni47UgEESTek=
Subject key identifier:   A8:BD:FD:18:89:9A:5A:9F:85:F7:46:AB:9F:EE:88:83:38:92:77:5C
Authority key identifier: 60:1E:0A:AE:93:EB:05:FF:5D:42:DD:70:16:F5:DE:A3:81:FB:86:60
Certificate issuer:       /CN=601e0aae93eb05ff5d42dd7016f5dea381fb8660
Certificate serial:       0190452FD5F26E5A4EAACB52541D22CB8E38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
Manifest number:          11D6
Signing time:             Sun 23 Jun 2024 13:01:21 +0000
Manifest this update:     Sun 23 Jun 2024 13:01:21 +0000
Manifest next update:     Mon 24 Jun 2024 13:01:21 +0000
Files and hashes:         1: YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl (hash: GqTQf3NFBU+uuUItyL0oiif7VPLdPZRgrD7+UdJnaFc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 13:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:2f:d5:f2:6e:5a:4e:aa:cb:52:54:1d:22:cb:8e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601e0aae93eb05ff5d42dd7016f5dea381fb8660
        Validity
            Not Before: Jun 23 13:01:21 2024 GMT
            Not After : Jun 24 13:01:21 2024 GMT
        Subject: CN=a8bdfd18899a5a9f85f746ab9fee88833892775c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cc:ce:40:23:70:18:d6:04:6f:51:b5:7c:87:
                    b2:19:db:05:ec:11:5c:11:8a:7e:12:8f:21:ca:d9:
                    22:cb:14:95:bd:ad:3e:97:b9:80:8b:24:5b:2f:e7:
                    3f:c2:d8:34:fc:1a:8a:da:88:3e:1b:fa:44:de:76:
                    5e:c5:a1:58:39:62:46:cd:f0:e7:2d:a2:af:50:60:
                    3c:c2:0c:0d:1a:46:b6:c3:37:25:46:e0:56:17:2e:
                    29:74:94:03:a3:83:d3:8a:e5:27:d7:78:3d:5a:b1:
                    b4:35:5d:90:68:3b:da:18:fd:82:b6:9f:98:12:94:
                    b8:d7:39:a7:9b:19:b8:63:3e:86:63:0d:29:03:1e:
                    6f:e1:1d:9c:e9:92:43:b3:cd:58:d7:02:63:82:50:
                    1c:fd:ce:b0:a9:12:89:fd:75:37:0e:b2:3d:8d:de:
                    ff:d2:d4:ba:2b:49:d1:12:6d:b0:cf:e6:4b:89:a4:
                    3b:3c:0a:19:f1:8e:1d:51:8f:8a:0f:4f:fe:a0:5b:
                    51:eb:29:1b:2e:80:7a:a5:df:5f:d6:25:dd:ac:58:
                    09:f9:9d:15:ae:81:05:ea:17:6e:8b:1b:9f:e1:bb:
                    22:a3:da:c4:c1:db:cf:be:42:1e:80:70:a2:8b:4d:
                    6b:61:ef:70:a0:bd:be:47:32:05:40:97:44:78:1c:
                    b4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BD:FD:18:89:9A:5A:9F:85:F7:46:AB:9F:EE:88:83:38:92:77:5C
            X509v3 Authority Key Identifier:
                keyid:60:1E:0A:AE:93:EB:05:FF:5D:42:DD:70:16:F5:DE:A3:81:FB:86:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:31:89:d2:d0:13:ea:00:04:af:18:c3:64:08:b5:57:b6:27:
         72:38:ca:6b:ae:76:58:60:e5:17:09:21:9a:5d:0b:c4:d3:c9:
         83:7b:77:2a:f8:95:a6:fa:4a:28:8c:90:f7:9b:37:f7:0f:34:
         27:e6:5d:8e:3e:26:79:29:4e:1d:e9:60:9d:6e:1b:a7:ed:ca:
         e7:f0:07:8b:4c:0f:35:4c:8d:0c:66:43:11:c0:03:37:44:7a:
         8d:9a:e7:7a:39:90:0c:f9:30:a0:ce:fd:6b:d9:e8:59:19:68:
         44:ae:fa:f6:e2:51:52:1e:5f:41:e1:6e:ce:fe:da:11:5c:5c:
         aa:21:8b:2d:09:11:1c:5b:c3:d6:68:a0:e2:96:c8:6e:47:f9:
         90:4a:b7:75:da:82:cf:37:d4:4d:92:38:cd:a8:40:e0:1a:d4:
         a4:72:98:43:f1:4a:3f:25:80:c1:23:57:e7:31:dc:cb:b5:72:
         2f:ca:4a:27:c5:26:c5:48:1b:f7:d2:8e:f4:5b:ec:61:42:23:
         8d:0a:77:27:20:66:19:e4:d8:ff:3e:d1:e6:ac:9f:73:82:ec:
         db:d2:a8:51:db:e0:33:3d:09:79:66:ef:1f:67:79:3e:82:e8:
         86:25:80:a6:51:50:6f:27:46:3f:81:bf:b9:64:e9:8b:bb:34:
         07:6b:06:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBFL9XyblpOqstSVB0iy444MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMWUwYWFlOTNlYjA1ZmY1ZDQyZGQ3MDE2ZjVkZWEzODFm
Yjg2NjAwHhcNMjQwNjIzMTMwMTIxWhcNMjQwNjI0MTMwMTIxWjAzMTEwLwYDVQQD
EyhhOGJkZmQxODg5OWE1YTlmODVmNzQ2YWI5ZmVlODg4MzM4OTI3NzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8zOQCNwGNYEb1G1fIeyGdsF7BFc
EYp+Eo8hytkiyxSVva0+l7mAiyRbL+c/wtg0/BqK2og+G/pE3nZexaFYOWJGzfDn
LaKvUGA8wgwNGka2wzclRuBWFy4pdJQDo4PTiuUn13g9WrG0NV2QaDvaGP2Ctp+Y
EpS41zmnmxm4Yz6GYw0pAx5v4R2c6ZJDs81Y1wJjglAc/c6wqRKJ/XU3DrI9jd7/
0tS6K0nREm2wz+ZLiaQ7PAoZ8Y4dUY+KD0/+oFtR6ykbLoB6pd9f1iXdrFgJ+Z0V
roEF6hduixuf4bsio9rEwdvPvkIegHCii01rYe9woL2+RzIFQJdEeBy0IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKi9/RiJmlqfhfdGq5/uiIM4kndcMB8GA1UdIwQY
MBaAFGAeCq6T6wX/XULdcBb13qOB+4ZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUI0S3JwUHJCZjlkUXQxd0Z2WGVvNEg3aG1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8xZmM4NTMtNjUyNi00MDkxLTk1ZjQt
ZjlmNjAxYzA2ODZlLzEvWUI0S3JwUHJCZjlkUXQxd0Z2WGVvNEg3aG1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8xZmM4NTMtNjUyNi00MDkxLTk1ZjQtZjlmNjAxYzA2ODZl
LzEvWUI0S3JwUHJCZjlkUXQxd0Z2WGVvNEg3aG1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjGJ0tAT
6gAErxjDZAi1V7YncjjKa652WGDlFwkhml0LxNPJg3t3KviVpvpKKIyQ95s39w80
J+Zdjj4meSlOHelgnW4bp+3K5/AHi0wPNUyNDGZDEcADN0R6jZrnejmQDPkwoM79
a9noWRloRK769uJRUh5fQeFuzv7aEVxcqiGLLQkRHFvD1mig4pbIbkf5kEq3ddqC
zzfUTZI4zahA4BrUpHKYQ/FKPyWAwSNX5zHcy7VyL8pKJ8UmxUgb99KO9FvsYUIj
jQp3JyBmGeTY/z7R5qyfc4Ls29KoUdvgMz0JeWbvH2d5PoLohiWAplFQbydGP4G/
uWTpi7s0B2sGAw==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:12:39 2024 by rpki-client on console-fra.rpki-client.org