Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d42ef5-9e78-4ab2-91ba-1897d02dee4a/1/ubqA3i2Q_3y8JiU7-CZJ7oCQILI.mft
File:                     ubqA3i2Q_3y8JiU7-CZJ7oCQILI.mft (raw, json)
Hash identifier:          4BjdXr73bwLFiulWe1MXwqQuFLjOdaZfVyU7qdPYw1k=
Subject key identifier:   54:FA:AF:3B:07:13:55:5A:2B:FF:39:D0:42:22:06:4F:91:CE:8B:2D
Authority key identifier: B9:BA:80:DE:2D:90:FF:7C:BC:26:25:3B:F8:26:49:EE:80:90:20:B2
Certificate issuer:       /CN=b9ba80de2d90ff7cbc26253bf82649ee809020b2
Certificate serial:       01901F34576D4A81BBADA278A41109253671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubqA3i2Q_3y8JiU7-CZJ7oCQILI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/d42ef5-9e78-4ab2-91ba-1897d02dee4a/1/ubqA3i2Q_3y8JiU7-CZJ7oCQILI.mft
Manifest number:          0691
Signing time:             Sun 16 Jun 2024 04:00:42 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:42 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:42 +0000
Files and hashes:         1: ubqA3i2Q_3y8JiU7-CZJ7oCQILI.crl (hash: lpp2RIFYzjGlCCcms7rtmql0JkiWPe9By+2YfnmziP4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/d42ef5-9e78-4ab2-91ba-1897d02dee4a/1/ubqA3i2Q_3y8JiU7-CZJ7oCQILI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/d42ef5-9e78-4ab2-91ba-1897d02dee4a/1/ubqA3i2Q_3y8JiU7-CZJ7oCQILI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubqA3i2Q_3y8JiU7-CZJ7oCQILI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:57:6d:4a:81:bb:ad:a2:78:a4:11:09:25:36:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ba80de2d90ff7cbc26253bf82649ee809020b2
        Validity
            Not Before: Jun 16 04:00:42 2024 GMT
            Not After : Jun 17 04:00:42 2024 GMT
        Subject: CN=54faaf3b0713555a2bff39d04222064f91ce8b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:54:64:63:13:76:cf:b7:1a:d0:67:1e:9b:54:
                    df:e5:68:22:42:80:46:4a:d0:d0:19:f1:d1:54:61:
                    76:4d:36:ca:d4:a4:a5:2b:0c:64:1b:a2:88:52:af:
                    bb:45:b2:a7:b8:f3:d6:23:99:52:ea:40:66:96:6e:
                    87:35:96:df:72:f6:77:c7:ba:14:b5:3f:ab:ee:3a:
                    81:9f:70:8f:92:81:94:05:02:83:41:64:aa:ab:f7:
                    7c:1a:f5:be:52:e4:5a:01:d2:72:0e:e1:e8:11:46:
                    d1:52:3b:34:5d:f0:62:a7:15:27:15:b1:a9:f0:ac:
                    f3:ba:0c:6b:dd:cd:7a:f4:fe:c2:9e:6e:43:b1:45:
                    57:ce:a7:f7:37:eb:fe:06:29:22:3b:20:80:07:1e:
                    66:2a:6a:3e:7f:fb:71:62:89:ad:4f:68:47:f6:03:
                    4d:93:52:42:d4:9b:c8:dc:2a:d6:1e:a1:07:7a:bc:
                    51:ca:66:85:5b:76:17:85:67:1d:52:43:6b:fe:1e:
                    ac:5b:14:bc:45:d2:58:70:f9:6d:0c:4e:23:d6:46:
                    e3:a1:6c:4e:6e:a2:b8:0c:6e:c6:2e:4d:85:c0:08:
                    a2:a9:47:b6:b8:66:f6:b4:11:8c:37:5e:b4:99:0f:
                    29:f6:c6:20:ba:77:c2:8b:4a:fb:4e:39:fa:37:fa:
                    93:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FA:AF:3B:07:13:55:5A:2B:FF:39:D0:42:22:06:4F:91:CE:8B:2D
            X509v3 Authority Key Identifier:
                keyid:B9:BA:80:DE:2D:90:FF:7C:BC:26:25:3B:F8:26:49:EE:80:90:20:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubqA3i2Q_3y8JiU7-CZJ7oCQILI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d42ef5-9e78-4ab2-91ba-1897d02dee4a/1/ubqA3i2Q_3y8JiU7-CZJ7oCQILI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d42ef5-9e78-4ab2-91ba-1897d02dee4a/1/ubqA3i2Q_3y8JiU7-CZJ7oCQILI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:6d:41:e0:39:ab:40:06:78:ab:c0:b1:c3:ae:60:1f:de:a7:
         63:cf:98:3c:1d:f8:f3:21:6a:d2:46:6c:c1:20:62:53:cc:fd:
         d4:43:47:d5:71:b1:e7:ba:42:b7:41:8a:f9:0e:bb:51:5f:77:
         38:17:ea:26:17:cc:60:2a:42:43:a8:67:40:d6:aa:80:51:8c:
         0f:62:0e:4b:90:2c:c4:df:5b:0a:b2:ed:a2:e9:fa:82:1f:89:
         1b:64:69:b4:f8:e5:5a:2b:fa:8c:bb:9d:b7:fe:9d:97:9b:f3:
         f8:06:99:b3:88:27:8a:77:fd:65:1d:f2:dd:ef:45:1b:70:9e:
         67:49:96:d3:e1:8b:ee:62:f8:59:5f:f5:ce:7b:71:0e:ce:49:
         ff:7d:38:36:6c:5c:bd:c7:f4:5e:19:60:46:69:33:eb:f2:1e:
         33:bf:e2:44:61:21:e1:b3:35:90:45:f6:b5:1e:d4:57:82:92:
         20:80:80:9b:06:1d:14:5c:82:e6:74:23:44:e4:77:e3:fa:99:
         65:a1:77:3f:8f:0b:58:3d:ec:e3:7a:c0:d2:fd:be:55:4b:49:
         c5:03:b0:95:4e:c9:3c:71:2f:46:c9:9e:86:7d:10:cd:6e:3b:
         db:05:da:a9:e5:9e:bc:ae:fd:55:64:92:3f:70:b2:60:82:b5:
         46:7b:09:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAfNFdtSoG7raJ4pBEJJTZxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YmE4MGRlMmQ5MGZmN2NiYzI2MjUzYmY4MjY0OWVlODA5
MDIwYjIwHhcNMjQwNjE2MDQwMDQyWhcNMjQwNjE3MDQwMDQyWjAzMTEwLwYDVQQD
Eyg1NGZhYWYzYjA3MTM1NTVhMmJmZjM5ZDA0MjIyMDY0ZjkxY2U4YjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1RkYxN2z7ca0Gcem1Tf5WgiQoBG
StDQGfHRVGF2TTbK1KSlKwxkG6KIUq+7RbKnuPPWI5lS6kBmlm6HNZbfcvZ3x7oU
tT+r7jqBn3CPkoGUBQKDQWSqq/d8GvW+UuRaAdJyDuHoEUbRUjs0XfBipxUnFbGp
8Kzzugxr3c169P7Cnm5DsUVXzqf3N+v+BikiOyCABx5mKmo+f/txYomtT2hH9gNN
k1JC1JvI3CrWHqEHerxRymaFW3YXhWcdUkNr/h6sWxS8RdJYcPltDE4j1kbjoWxO
bqK4DG7GLk2FwAiiqUe2uGb2tBGMN160mQ8p9sYgunfCi0r7Tjn6N/qT/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFT6rzsHE1VaK/850EIiBk+RzostMB8GA1UdIwQY
MBaAFLm6gN4tkP98vCYlO/gmSe6AkCCyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWJxQTNpMlFfM3k4SmlVNy1DWko3b0NRSUxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kNDJlZjUtOWU3OC00YWIyLTkxYmEt
MTg5N2QwMmRlZTRhLzEvdWJxQTNpMlFfM3k4SmlVNy1DWko3b0NRSUxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9kNDJlZjUtOWU3OC00YWIyLTkxYmEtMTg5N2QwMmRlZTRh
LzEvdWJxQTNpMlFfM3k4SmlVNy1DWko3b0NRSUxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJW1B4Dmr
QAZ4q8Cxw65gH96nY8+YPB348yFq0kZswSBiU8z91ENH1XGx57pCt0GK+Q67UV93
OBfqJhfMYCpCQ6hnQNaqgFGMD2IOS5AsxN9bCrLtoun6gh+JG2RptPjlWiv6jLud
t/6dl5vz+AaZs4gninf9ZR3y3e9FG3CeZ0mW0+GL7mL4WV/1zntxDs5J/304Nmxc
vcf0XhlgRmkz6/IeM7/iRGEh4bM1kEX2tR7UV4KSIICAmwYdFFyC5nQjROR34/qZ
ZaF3P48LWD3s43rA0v2+VUtJxQOwlU7JPHEvRsmehn0QzW472wXaqeWevK79VWSS
P3CyYIK1RnsJDA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:46:36 2024 by rpki-client on console-fra.rpki-client.org