Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
File:                     wsej20o9La--GGqmhfRzbqfQjDg.mft (raw, json)
Hash identifier:          vviyWvQkLpwwtPH70mdE+OEkAqaFF17b0c49w8G1TP0=
Subject key identifier:   30:07:96:30:82:45:8A:7C:38:B8:A7:11:A7:D1:37:D7:77:C2:F9:64
Authority key identifier: C2:C7:A3:DB:4A:3D:2D:AF:BE:18:6A:A6:85:F4:73:6E:A7:D0:8C:38
Certificate issuer:       /CN=c2c7a3db4a3d2dafbe186aa685f4736ea7d08c38
Certificate serial:       01901E8F93D8DBCBF3B118E5CA02E6CEF9E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
Manifest number:          0B1D
Signing time:             Sun 16 Jun 2024 01:00:44 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:44 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:44 +0000
Files and hashes:         1: wsej20o9La--GGqmhfRzbqfQjDg.crl (hash: TWu1qGSaHz0+6oqfzKyj8UIZezNWH/VfJN5RLBCSgHk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:93:d8:db:cb:f3:b1:18:e5:ca:02:e6:ce:f9:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c7a3db4a3d2dafbe186aa685f4736ea7d08c38
        Validity
            Not Before: Jun 16 01:00:44 2024 GMT
            Not After : Jun 17 01:00:44 2024 GMT
        Subject: CN=3007963082458a7c38b8a711a7d137d777c2f964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3a:14:51:68:33:52:72:84:64:1d:d8:c5:6e:
                    49:d0:88:01:c3:c3:94:d7:f5:3e:47:fa:50:cc:69:
                    38:28:41:9c:25:71:39:ad:97:c4:30:9e:34:ae:39:
                    c7:37:aa:73:92:4a:1b:fd:06:46:40:39:c8:91:82:
                    a2:0f:32:86:b0:f7:e9:95:3d:db:f5:37:ec:60:00:
                    3c:bb:6c:3a:9a:87:ee:61:e0:31:1c:84:63:90:50:
                    5b:3f:3b:91:b9:35:93:84:0b:26:39:ad:5c:30:e8:
                    97:39:dc:34:f7:a5:55:44:5d:49:52:03:b1:87:86:
                    67:78:8f:be:8f:49:43:42:6b:93:2a:29:ba:d0:d5:
                    26:ce:0f:fa:30:71:c5:6f:93:8a:bc:83:47:d9:3f:
                    1b:7d:f8:51:e2:7a:cf:d3:10:ba:71:74:53:7d:b6:
                    5a:2a:4c:81:2f:47:c5:7f:f2:c3:5d:ed:6f:1b:84:
                    f5:b8:25:b7:82:08:31:2e:4c:6b:d6:c4:6d:e3:0e:
                    6b:fe:c6:3d:58:2f:83:0e:88:3d:92:0b:e2:dc:f5:
                    57:eb:56:f1:e3:1e:1a:47:fd:3a:c6:59:a2:2c:75:
                    fd:b9:ff:a0:e2:4b:8b:ea:6c:e2:bf:54:aa:c4:1f:
                    d9:ff:23:5b:9d:3b:c4:63:d6:04:41:fd:50:78:08:
                    d7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:07:96:30:82:45:8A:7C:38:B8:A7:11:A7:D1:37:D7:77:C2:F9:64
            X509v3 Authority Key Identifier:
                keyid:C2:C7:A3:DB:4A:3D:2D:AF:BE:18:6A:A6:85:F4:73:6E:A7:D0:8C:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:db:71:2a:a6:e4:47:55:f8:73:c1:26:3a:ed:3a:0c:3f:e8:
         60:f9:63:3b:91:19:e4:56:c9:b8:54:83:4a:5f:b7:db:ab:18:
         d9:f1:65:be:e9:d0:6b:d5:6a:49:36:10:56:35:e4:80:96:6a:
         6c:67:92:c4:00:3a:a3:d6:e5:c7:f5:06:be:af:b5:bc:e6:b7:
         a7:38:52:3f:00:3a:7e:60:24:be:36:8f:3d:cc:bd:10:f0:68:
         30:a3:7d:31:79:3b:43:bf:e5:cf:01:c1:8a:de:e0:42:3a:73:
         31:33:a2:5f:52:dd:bb:1f:16:24:aa:86:ed:27:1d:35:df:93:
         0b:3b:48:8d:7c:b7:d6:75:71:62:7e:19:43:00:d3:61:4b:f5:
         50:16:84:6b:39:cf:ac:c7:91:ac:9e:5c:5c:a0:94:c7:f3:fb:
         d6:43:43:18:60:86:4e:ae:27:4b:bf:88:d1:48:ed:14:c1:0c:
         32:7c:f7:a8:f6:4b:fa:28:ed:94:28:ce:e4:a3:ec:52:a1:82:
         d2:ed:1c:24:5d:1a:ea:f0:84:26:6e:fb:af:32:cf:d9:01:28:
         d1:1e:67:53:20:75:ff:b7:4d:e8:2a:ef:9a:ce:61:af:fd:49:
         ee:36:21:bb:bd:ce:6d:80:fa:12:0f:01:43:54:a0:eb:c7:92:
         0a:39:67:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAej5PY28vzsRjlygLmzvnpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYzdhM2RiNGEzZDJkYWZiZTE4NmFhNjg1ZjQ3MzZlYTdk
MDhjMzgwHhcNMjQwNjE2MDEwMDQ0WhcNMjQwNjE3MDEwMDQ0WjAzMTEwLwYDVQQD
EygzMDA3OTYzMDgyNDU4YTdjMzhiOGE3MTFhN2QxMzdkNzc3YzJmOTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0joUUWgzUnKEZB3YxW5J0IgBw8OU
1/U+R/pQzGk4KEGcJXE5rZfEMJ40rjnHN6pzkkob/QZGQDnIkYKiDzKGsPfplT3b
9TfsYAA8u2w6mofuYeAxHIRjkFBbPzuRuTWThAsmOa1cMOiXOdw096VVRF1JUgOx
h4ZneI++j0lDQmuTKim60NUmzg/6MHHFb5OKvINH2T8bffhR4nrP0xC6cXRTfbZa
KkyBL0fFf/LDXe1vG4T1uCW3gggxLkxr1sRt4w5r/sY9WC+DDog9kgvi3PVX61bx
4x4aR/06xlmiLHX9uf+g4kuL6mziv1SqxB/Z/yNbnTvEY9YEQf1QeAjXpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAHljCCRYp8OLinEafRN9d3wvlkMB8GA1UdIwQY
MBaAFMLHo9tKPS2vvhhqpoX0c26n0Iw4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3NlajIwbzlMYS0tR0dxbWhmUnpicWZRakRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi82NTJiZWYtNmY0ZS00OTk3LWJiM2Et
NGM5ZTQ5MjM5NjI0LzEvd3NlajIwbzlMYS0tR0dxbWhmUnpicWZRakRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi82NTJiZWYtNmY0ZS00OTk3LWJiM2EtNGM5ZTQ5MjM5NjI0
LzEvd3NlajIwbzlMYS0tR0dxbWhmUnpicWZRakRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNtxKqbk
R1X4c8EmOu06DD/oYPljO5EZ5FbJuFSDSl+326sY2fFlvunQa9VqSTYQVjXkgJZq
bGeSxAA6o9blx/UGvq+1vOa3pzhSPwA6fmAkvjaPPcy9EPBoMKN9MXk7Q7/lzwHB
it7gQjpzMTOiX1Ldux8WJKqG7ScdNd+TCztIjXy31nVxYn4ZQwDTYUv1UBaEaznP
rMeRrJ5cXKCUx/P71kNDGGCGTq4nS7+I0UjtFMEMMnz3qPZL+ijtlCjO5KPsUqGC
0u0cJF0a6vCEJm77rzLP2QEo0R5nUyB1/7dN6Crvms5hr/1J7jYhu73ObYD6Eg8B
Q1Sg68eSCjlnZg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:59:01 2024 by rpki-client on console-fra.rpki-client.org