Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
File:                     3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft (raw, json)
Hash identifier:          wTS7ZhPnI+R5rxQ+rW4DtUOEA4JjnfMb/AnrJFU9w74=
Subject key identifier:   6B:8C:66:27:D3:5A:1C:26:C1:4F:10:0D:6F:B9:42:19:73:19:28:0C
Authority key identifier: DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08
Certificate issuer:       /CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08
Certificate serial:       01901DED6FDE9FF26565A91496EF362C3845
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
Manifest number:          08F9
Signing time:             Sat 15 Jun 2024 22:03:38 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:38 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:38 +0000
Files and hashes:         1: 3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl (hash: dNGbs4fznA26mVS4pJoSKIpLJWkvRDwXbZ8hC5I3gSg=)
                          2: hRuE6CyjU7nrCP6xo9mATidPVNs.roa (hash: SJIR9J9Vm7QY5bHaqezRK9Ngblys18PV/WNQGLUes+E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:6f:de:9f:f2:65:65:a9:14:96:ef:36:2c:38:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08
        Validity
            Not Before: Jun 15 22:03:38 2024 GMT
            Not After : Jun 16 22:03:38 2024 GMT
        Subject: CN=6b8c6627d35a1c26c14f100d6fb942197319280c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:55:39:9e:4c:81:a7:42:a4:21:ce:4d:58:4b:
                    ca:96:fb:d5:d9:0c:d6:4e:c6:ce:85:be:81:ba:83:
                    d7:b0:eb:32:74:fd:b3:62:fd:e0:bc:43:59:c9:80:
                    97:c0:89:f4:a0:4f:4b:47:11:de:2e:50:e7:82:43:
                    17:81:2a:22:ff:62:e3:0b:3c:5b:a4:31:f1:e4:33:
                    b7:e8:a1:0a:a6:83:a3:ab:5a:6f:26:24:84:55:e1:
                    a1:7c:bb:19:01:ee:b9:8c:18:07:d9:81:5a:9e:3e:
                    74:c9:30:c2:62:e0:e2:4b:1c:ed:8c:56:74:fd:fc:
                    94:b0:1e:0b:f5:7a:5e:6a:65:f9:ad:42:31:94:6e:
                    a1:98:5e:b7:47:6b:06:85:66:29:8a:24:07:4a:b3:
                    89:3f:e6:80:3a:a3:00:54:bf:0f:47:39:ec:49:19:
                    bc:74:67:b5:cb:a2:fd:9b:76:ee:49:fd:40:43:06:
                    24:3a:bd:80:c9:98:29:0e:7c:e6:7f:82:ce:d4:e1:
                    56:e7:b2:18:96:15:18:bf:6d:2f:2d:e2:8f:f5:a8:
                    a4:f7:3f:8f:62:42:98:9b:1e:84:d1:0d:69:cc:ff:
                    08:a7:4f:05:c9:50:2c:94:e0:6b:e8:c9:18:7f:b9:
                    2f:98:b4:0c:1d:5e:11:d6:59:d0:ec:6a:af:e1:16:
                    db:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8C:66:27:D3:5A:1C:26:C1:4F:10:0D:6F:B9:42:19:73:19:28:0C
            X509v3 Authority Key Identifier:
                keyid:DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:20:a6:fe:d1:7c:d1:d2:ab:73:d6:eb:1a:17:14:b7:e0:cc:
         03:2f:63:cc:88:ff:42:91:1b:ad:9a:4a:35:41:3b:1b:9e:6d:
         de:65:75:da:da:69:b3:5d:b4:9c:34:5f:5d:82:07:53:e4:05:
         e5:b6:81:38:1c:d7:29:49:74:de:99:b3:3b:59:2b:b0:da:15:
         e0:3c:e8:9d:e4:8a:28:b3:a2:af:99:1a:0a:c8:33:57:4a:4a:
         b4:26:cf:11:cf:a7:b7:8a:53:91:aa:95:3c:33:1c:ca:5d:b7:
         dc:58:a0:0b:83:90:93:ed:84:45:0b:60:aa:3d:c3:7d:5b:08:
         7f:d2:17:52:59:1e:81:70:78:00:87:a2:9f:10:35:ff:b5:a4:
         ca:c9:ee:aa:2f:f9:af:f0:eb:ad:46:06:dc:62:fa:15:70:ae:
         11:94:3a:6e:be:60:34:3e:58:a9:4c:c6:a0:fd:de:16:9f:58:
         af:dd:44:64:b5:da:5e:1f:30:0e:f1:34:7a:bb:64:5b:59:9d:
         9c:83:7e:a7:6f:73:23:3d:10:df:47:63:7c:be:7d:f6:50:98:
         f2:2e:54:91:9f:ca:57:e9:b8:ab:6a:5d:89:3a:f9:82:89:a2:
         53:b8:93:df:b8:ec:f9:30:08:3c:78:73:10:cd:35:a9:a3:f0:
         15:92:1e:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7W/en/JlZakUlu82LDhFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNTJmZWU5NTQyZDYzYTY4ZTQ5YjJjOGVkNzgzOGY4YTAz
NDZiMDgwHhcNMjQwNjE1MjIwMzM4WhcNMjQwNjE2MjIwMzM4WjAzMTEwLwYDVQQD
Eyg2YjhjNjYyN2QzNWExYzI2YzE0ZjEwMGQ2ZmI5NDIxOTczMTkyODBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslU5nkyBp0KkIc5NWEvKlvvV2QzW
TsbOhb6BuoPXsOsydP2zYv3gvENZyYCXwIn0oE9LRxHeLlDngkMXgSoi/2LjCzxb
pDHx5DO36KEKpoOjq1pvJiSEVeGhfLsZAe65jBgH2YFanj50yTDCYuDiSxztjFZ0
/fyUsB4L9XpeamX5rUIxlG6hmF63R2sGhWYpiiQHSrOJP+aAOqMAVL8PRznsSRm8
dGe1y6L9m3buSf1AQwYkOr2AyZgpDnzmf4LO1OFW57IYlhUYv20vLeKP9aik9z+P
YkKYmx6E0Q1pzP8Ip08FyVAslOBr6MkYf7kvmLQMHV4R1lnQ7Gqv4Rbb0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGuMZifTWhwmwU8QDW+5QhlzGSgMMB8GA1UdIwQY
MBaAFN5S/ulULWOmjkmyyO14OPigNGsIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2xMLTZWUXRZNmFPU2JMSTdYZzQtS0EwYXdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83NmUzYjMtYWI1NS00YWM5LWJiMjgt
YTRmMzMzNjU0Y2M5LzEvM2xMLTZWUXRZNmFPU2JMSTdYZzQtS0EwYXdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC83NmUzYjMtYWI1NS00YWM5LWJiMjgtYTRmMzMzNjU0Y2M5
LzEvM2xMLTZWUXRZNmFPU2JMSTdYZzQtS0EwYXdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAiCm/tF8
0dKrc9brGhcUt+DMAy9jzIj/QpEbrZpKNUE7G55t3mV12tpps120nDRfXYIHU+QF
5baBOBzXKUl03pmzO1krsNoV4DzoneSKKLOir5kaCsgzV0pKtCbPEc+nt4pTkaqV
PDMcyl233FigC4OQk+2ERQtgqj3DfVsIf9IXUlkegXB4AIeinxA1/7Wkysnuqi/5
r/DrrUYG3GL6FXCuEZQ6br5gND5YqUzGoP3eFp9Yr91EZLXaXh8wDvE0ertkW1md
nIN+p29zIz0Q30djfL599lCY8i5UkZ/KV+m4q2pdiTr5gomiU7iT37js+TAIPHhz
EM01qaPwFZIe1A==
-----END CERTIFICATE-----
Generated at Sat Jun 15 23:35:05 2024 by rpki-client on console-ams.rpki-client.org