Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
File:                     JkQpgYmVnJWm1KdLdU9JlqWltlw.mft (raw, json)
Hash identifier:          02Hs7wSLyM3SD8yEhfHTc1UWYhczxXLttJ6VVVz4Qq8=
Subject key identifier:   2F:2E:C9:EA:18:23:4D:22:A5:0D:34:34:04:90:36:A7:59:78:8C:C1
Authority key identifier: 26:44:29:81:89:95:9C:95:A6:D4:A7:4B:75:4F:49:96:A5:A5:B6:5C
Certificate issuer:       /CN=2644298189959c95a6d4a74b754f4996a5a5b65c
Certificate serial:       01901DEB863AAF3E0FABFA896850EB2D390A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 22:01:32 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:32 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:32 +0000
Files and hashes:         1: JkQpgYmVnJWm1KdLdU9JlqWltlw.crl (hash: 2CozuW2zc9hSfy/bX8dcu8CLQ+3hJYOI0App3fVhH8M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:86:3a:af:3e:0f:ab:fa:89:68:50:eb:2d:39:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2644298189959c95a6d4a74b754f4996a5a5b65c
        Validity
            Not Before: Jun 15 22:01:32 2024 GMT
            Not After : Jun 16 22:01:32 2024 GMT
        Subject: CN=2f2ec9ea18234d22a50d3434049036a759788cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2d:73:26:14:84:97:7e:b1:16:bd:f2:df:bc:
                    3e:46:9b:cd:d2:66:96:76:b2:bb:1e:89:86:15:2e:
                    28:a8:62:2f:ea:1e:a1:c3:ce:06:ac:b7:71:7a:4a:
                    27:10:7c:0a:82:dc:fe:b9:3e:13:b1:19:09:39:96:
                    97:07:50:c9:fc:8e:f8:fc:0f:3a:36:42:73:52:2f:
                    83:06:79:b3:2a:8c:01:dc:0f:11:3a:1a:21:60:5e:
                    80:52:42:cf:40:62:b2:fc:d6:b6:33:15:35:7b:ab:
                    79:42:97:fa:4a:58:2f:40:e4:c1:ff:1d:32:e4:f4:
                    1e:57:61:b3:35:94:db:2c:8c:93:f1:4d:83:ca:a7:
                    74:6c:3d:bb:4c:29:6d:9c:dc:17:a7:ac:be:d9:84:
                    b7:d9:73:07:34:ff:94:30:ce:d0:a7:80:66:b3:cf:
                    39:dd:01:c8:39:ab:0e:28:77:df:73:a9:9e:20:20:
                    6f:33:71:fd:0a:30:b9:e1:a5:d7:73:7a:c2:79:83:
                    d1:d4:31:37:b3:e4:68:26:5a:67:e6:27:5c:f4:78:
                    c2:66:a8:92:a6:99:6d:67:04:5e:31:04:dc:f0:e2:
                    fd:34:ed:ad:be:e2:61:1e:07:f1:9a:76:3e:30:b8:
                    62:ee:fa:58:f5:4c:b5:22:be:8f:bc:35:3b:28:cb:
                    23:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2E:C9:EA:18:23:4D:22:A5:0D:34:34:04:90:36:A7:59:78:8C:C1
            X509v3 Authority Key Identifier:
                keyid:26:44:29:81:89:95:9C:95:A6:D4:A7:4B:75:4F:49:96:A5:A5:B6:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:d8:db:06:e3:94:86:ed:99:25:93:e3:26:bc:16:c8:83:a1:
         cc:bd:4b:a0:f0:e0:09:4f:d1:5a:0f:ca:50:30:bd:af:3d:14:
         de:10:71:07:f8:eb:86:4d:09:06:d9:8c:57:b5:6a:d1:ed:1e:
         26:92:59:c4:94:05:66:be:fb:84:6a:b5:69:af:fa:bc:38:4d:
         91:6b:f1:71:e4:be:50:7f:b1:4d:3e:0c:fe:11:ef:6d:8d:78:
         dd:ea:f1:7a:0e:b1:e5:f4:2b:83:ef:48:f6:cb:ce:26:59:df:
         86:d6:e0:f6:ae:7e:a5:e6:b2:89:fc:78:c7:48:41:90:b2:ad:
         2e:ff:0f:36:c1:d1:b6:38:3b:dd:56:01:1c:ce:a7:97:6d:b0:
         71:d9:cd:74:b2:0f:2d:59:ef:48:0d:67:86:df:33:a9:24:97:
         66:bb:a9:47:22:ba:ed:a3:75:02:58:d3:f9:01:ca:94:13:29:
         d2:5b:21:17:c4:87:c8:4e:95:41:65:1f:d8:b3:e6:eb:6c:bc:
         f9:fd:97:4e:ca:c1:ce:f6:c8:9c:35:52:f0:d9:32:ea:4d:54:
         46:40:6c:8d:f9:b8:b4:8c:ef:58:45:d9:fd:de:ad:46:b9:6e:
         08:db:d6:56:5a:14:61:72:37:28:3f:f4:b3:6d:50:8d:59:fa:
         cb:22:74:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd64Y6rz4Pq/qJaFDrLTkKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NDQyOTgxODk5NTljOTVhNmQ0YTc0Yjc1NGY0OTk2YTVh
NWI2NWMwHhcNMjQwNjE1MjIwMTMyWhcNMjQwNjE2MjIwMTMyWjAzMTEwLwYDVQQD
EygyZjJlYzllYTE4MjM0ZDIyYTUwZDM0MzQwNDkwMzZhNzU5Nzg4Y2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0y1zJhSEl36xFr3y37w+RpvN0maW
drK7HomGFS4oqGIv6h6hw84GrLdxekonEHwKgtz+uT4TsRkJOZaXB1DJ/I74/A86
NkJzUi+DBnmzKowB3A8ROhohYF6AUkLPQGKy/Na2MxU1e6t5Qpf6SlgvQOTB/x0y
5PQeV2GzNZTbLIyT8U2Dyqd0bD27TCltnNwXp6y+2YS32XMHNP+UMM7Qp4Bms885
3QHIOasOKHffc6meICBvM3H9CjC54aXXc3rCeYPR1DE3s+RoJlpn5idc9HjCZqiS
ppltZwReMQTc8OL9NO2tvuJhHgfxmnY+MLhi7vpY9Uy1Ir6PvDU7KMsjVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8uyeoYI00ipQ00NASQNqdZeIzBMB8GA1UdIwQY
MBaAFCZEKYGJlZyVptSnS3VPSZalpbZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmtRcGdZbVZuSldtMUtkTGRVOUpscVdsdGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZDE0ZDAtYmU4Yi00MTcwLTlmZDgt
MDdjZDRhMDYxYzgwLzEvSmtRcGdZbVZuSldtMUtkTGRVOUpscVdsdGx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wZDE0ZDAtYmU4Yi00MTcwLTlmZDgtMDdjZDRhMDYxYzgw
LzEvSmtRcGdZbVZuSldtMUtkTGRVOUpscVdsdGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9jbBuOU
hu2ZJZPjJrwWyIOhzL1LoPDgCU/RWg/KUDC9rz0U3hBxB/jrhk0JBtmMV7Vq0e0e
JpJZxJQFZr77hGq1aa/6vDhNkWvxceS+UH+xTT4M/hHvbY143erxeg6x5fQrg+9I
9svOJlnfhtbg9q5+peayifx4x0hBkLKtLv8PNsHRtjg73VYBHM6nl22wcdnNdLIP
LVnvSA1nht8zqSSXZrupRyK67aN1AljT+QHKlBMp0lshF8SHyE6VQWUf2LPm62y8
+f2XTsrBzvbInDVS8Nky6k1URkBsjfm4tIzvWEXZ/d6tRrluCNvWVloUYXI3KD/0
s21QjVn6yyJ0hA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:58:57 2024 by rpki-client on console-fra.rpki-client.org