Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.mft
File:                     Cxki4fchUHXN_Lx0U7vAiGf_0lM.mft (raw, json)
Hash identifier:          pDspXxQSD4JT4NE8c+r2XXSt5nWHJMcelTt2E/klXuo=
Subject key identifier:   C0:64:C5:C4:17:77:B6:3F:F4:42:02:10:30:EB:CC:2E:ED:22:9A:3F
Authority key identifier: 0B:19:22:E1:F7:21:50:75:CD:FC:BC:74:53:BB:C0:88:67:FF:D2:53
Certificate issuer:       /CN=0b1922e1f7215075cdfcbc7453bbc08867ffd253
Certificate serial:       019040AFBD0DA1DF51BFCCEEE70AC02D486A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cxki4fchUHXN_Lx0U7vAiGf_0lM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.mft
Manifest number:          02AB
Signing time:             Sat 22 Jun 2024 16:02:57 +0000
Manifest this update:     Sat 22 Jun 2024 16:02:57 +0000
Manifest next update:     Sun 23 Jun 2024 16:02:57 +0000
Files and hashes:         1: Cxki4fchUHXN_Lx0U7vAiGf_0lM.crl (hash: TMS7tZ7ZBrVso88oZacRUF/w5x8zZHXhZpCj2B844fk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cxki4fchUHXN_Lx0U7vAiGf_0lM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:af:bd:0d:a1:df:51:bf:cc:ee:e7:0a:c0:2d:48:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1922e1f7215075cdfcbc7453bbc08867ffd253
        Validity
            Not Before: Jun 22 16:02:57 2024 GMT
            Not After : Jun 23 16:02:57 2024 GMT
        Subject: CN=c064c5c41777b63ff442021030ebcc2eed229a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b9:12:7d:02:1e:7f:e6:29:16:9b:d9:09:dd:
                    45:d7:77:0f:27:13:e9:64:94:49:c4:b6:8c:db:b6:
                    31:a8:06:25:aa:f5:4c:3e:27:86:7e:60:2a:57:1d:
                    28:36:2b:00:51:88:f0:0c:b7:f0:87:01:64:89:6e:
                    d2:e8:31:59:e2:9d:32:4c:35:a3:39:eb:98:a2:57:
                    54:85:a1:62:a3:b9:63:38:c6:50:1e:f2:83:ad:38:
                    fe:94:a6:ab:81:9b:05:57:88:9c:69:87:57:72:e8:
                    e7:14:78:7a:46:5f:a5:31:11:8a:d2:10:5c:44:00:
                    ed:2a:77:fc:b2:44:4f:f9:7a:7a:b8:bc:f4:7b:2f:
                    f9:4d:6e:89:16:f0:a3:27:44:d0:74:da:3e:77:bf:
                    cf:de:83:04:73:50:16:78:0a:58:2c:65:e8:66:21:
                    2a:94:15:06:b8:ab:12:02:e4:b8:be:fd:2f:4b:25:
                    99:bf:81:44:eb:3d:e9:d6:dd:46:93:7e:bd:c4:52:
                    e9:40:6d:d9:34:4f:22:e6:83:e8:8d:cf:21:43:ae:
                    40:49:ad:9c:20:02:05:b0:0a:10:fa:af:53:4c:0a:
                    90:12:f9:f4:18:2e:c4:74:d4:49:21:e4:71:49:67:
                    68:33:37:5c:16:68:96:5c:fc:63:84:8f:48:43:96:
                    f0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:64:C5:C4:17:77:B6:3F:F4:42:02:10:30:EB:CC:2E:ED:22:9A:3F
            X509v3 Authority Key Identifier:
                keyid:0B:19:22:E1:F7:21:50:75:CD:FC:BC:74:53:BB:C0:88:67:FF:D2:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cxki4fchUHXN_Lx0U7vAiGf_0lM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:24:a7:bf:67:92:ca:8b:d4:41:d9:12:03:c3:50:55:42:5d:
         49:8b:ad:9a:63:59:b7:d7:7e:7d:59:41:66:09:46:37:19:ad:
         c6:8d:ab:4a:0d:cf:ff:ac:07:15:b9:16:d5:ad:e5:5e:7e:6b:
         91:57:3c:d9:3a:76:39:22:27:7e:91:40:4d:ed:b6:5d:75:78:
         a5:82:a8:c9:70:fc:4b:83:0c:95:ab:b7:e4:3a:27:9b:1d:46:
         4b:3f:5a:2a:56:73:bd:bb:33:05:c6:d9:1e:a8:bf:30:bd:2e:
         d6:1d:d0:63:47:11:f3:6e:2d:b4:02:c3:b0:ad:1e:f2:65:c9:
         d0:0d:f5:74:9d:9b:02:b9:5b:08:bd:0c:0f:3c:c1:94:5d:53:
         46:9e:45:31:b8:1f:30:0b:30:7e:48:55:fb:df:d5:b0:0d:1e:
         4f:69:7e:5b:09:aa:fd:05:f0:46:a0:50:65:36:60:d9:dd:d5:
         c3:7f:fa:82:98:96:98:cd:e4:a9:7c:11:6b:b1:a6:3c:19:6b:
         05:d8:d0:9e:dc:38:77:67:52:c6:f1:74:cf:38:da:5a:10:0b:
         a1:12:59:28:10:19:72:dd:b8:e0:66:03:85:ea:9d:a6:fd:62:
         f9:a5:88:f1:15:cb:83:9d:03:37:06:28:8a:65:2f:e7:b3:1f:
         2e:eb:d3:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBAr70Nod9Rv8zu5wrALUhqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMTkyMmUxZjcyMTUwNzVjZGZjYmM3NDUzYmJjMDg4Njdm
ZmQyNTMwHhcNMjQwNjIyMTYwMjU3WhcNMjQwNjIzMTYwMjU3WjAzMTEwLwYDVQQD
EyhjMDY0YzVjNDE3NzdiNjNmZjQ0MjAyMTAzMGViY2MyZWVkMjI5YTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLkSfQIef+YpFpvZCd1F13cPJxPp
ZJRJxLaM27YxqAYlqvVMPieGfmAqVx0oNisAUYjwDLfwhwFkiW7S6DFZ4p0yTDWj
OeuYoldUhaFio7ljOMZQHvKDrTj+lKargZsFV4icaYdXcujnFHh6Rl+lMRGK0hBc
RADtKnf8skRP+Xp6uLz0ey/5TW6JFvCjJ0TQdNo+d7/P3oMEc1AWeApYLGXoZiEq
lBUGuKsSAuS4vv0vSyWZv4FE6z3p1t1Gk369xFLpQG3ZNE8i5oPojc8hQ65ASa2c
IAIFsAoQ+q9TTAqQEvn0GC7EdNRJIeRxSWdoMzdcFmiWXPxjhI9IQ5bwFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBkxcQXd7Y/9EICEDDrzC7tIpo/MB8GA1UdIwQY
MBaAFAsZIuH3IVB1zfy8dFO7wIhn/9JTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3hraTRmY2hVSFhOX0x4MFU3dkFpR2ZfMGxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9jN2ZiMjctMWY3ZS00YWQ0LWFiODQt
MjQyMzAxZjlhYTEwLzEvQ3hraTRmY2hVSFhOX0x4MFU3dkFpR2ZfMGxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9jN2ZiMjctMWY3ZS00YWQ0LWFiODQtMjQyMzAxZjlhYTEw
LzEvQ3hraTRmY2hVSFhOX0x4MFU3dkFpR2ZfMGxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZySnv2eS
yovUQdkSA8NQVUJdSYutmmNZt9d+fVlBZglGNxmtxo2rSg3P/6wHFbkW1a3lXn5r
kVc82Tp2OSInfpFATe22XXV4pYKoyXD8S4MMlau35Donmx1GSz9aKlZzvbszBcbZ
Hqi/ML0u1h3QY0cR824ttALDsK0e8mXJ0A31dJ2bArlbCL0MDzzBlF1TRp5FMbgf
MAswfkhV+9/VsA0eT2l+Wwmq/QXwRqBQZTZg2d3Vw3/6gpiWmM3kqXwRa7GmPBlr
BdjQntw4d2dSxvF0zzjaWhALoRJZKBAZct244GYDheqdpv1i+aWI8RXLg50DNwYo
imUv57MfLuvTdQ==
-----END CERTIFICATE-----
Generated at Sun Jun 23 00:53:46 2024 by rpki-client on console-fra.rpki-client.org