Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
File:                     RfnjL_avPV5dd727mNo30LjkRRk.mft (raw, json)
Hash identifier:          dZVoA05YRRHnebKnEKcDopSDxKBZJ1nXiTHbdZHVwlw=
Subject key identifier:   6D:91:D0:FD:7A:3D:1F:5D:88:29:CC:E4:11:4C:A9:C1:14:3E:BF:55
Authority key identifier: 45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
Certificate issuer:       /CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Certificate serial:       01901CD81524C8C10C1F4063287DCB8CC040
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
Manifest number:          11CD
Signing time:             Sat 15 Jun 2024 17:00:41 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:41 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:41 +0000
Files and hashes:         1: RfnjL_avPV5dd727mNo30LjkRRk.crl (hash: YfDsxG2QQ8K6Mrl+bK1tuIgvGdEXfpcLLnU9xlOtkIE=)
                          2: TxsDqRMDuC5DG9Y9QPRYQazq-UQ.roa (hash: vrrR6AwNqdyW07zMg0Veiiglw/vq/yoAhvRAdzg8FE4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:15:24:c8:c1:0c:1f:40:63:28:7d:cb:8c:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
        Validity
            Not Before: Jun 15 17:00:41 2024 GMT
            Not After : Jun 16 17:00:41 2024 GMT
        Subject: CN=6d91d0fd7a3d1f5d8829cce4114ca9c1143ebf55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:19:0b:ee:4d:ef:e1:fb:95:22:a7:a6:08:1c:
                    a1:59:78:41:62:6c:04:6d:70:57:14:16:29:4a:ac:
                    a4:de:0e:fa:75:d6:ed:fa:9c:41:56:6c:06:93:01:
                    29:58:41:6b:27:d8:f0:80:ea:38:cb:02:8a:b5:06:
                    24:b5:f0:8e:1b:dc:d1:71:43:f9:46:31:f8:05:0f:
                    af:60:24:89:ed:08:79:a5:60:c5:a7:5b:f3:5b:8f:
                    ea:c1:90:29:29:4c:4a:0b:fa:b9:03:b9:1d:2f:e0:
                    bf:09:47:52:74:8e:46:06:88:15:e7:d2:4d:b8:77:
                    8d:0c:34:26:f2:1f:b1:59:ad:23:f0:b2:8a:d8:1a:
                    ac:ab:4e:be:3b:4a:46:fe:e8:82:f0:7e:d6:a5:2d:
                    80:e3:ce:c7:fc:bd:4c:d2:68:12:db:34:47:bd:c0:
                    be:fb:68:ec:d0:0d:09:bb:af:b2:76:e1:b4:ad:52:
                    ca:84:d1:b7:3b:29:fa:e2:b5:79:d5:48:ed:33:89:
                    6b:48:6f:89:4f:bb:4a:06:41:8d:18:8e:9b:5b:57:
                    c3:86:4c:b4:51:09:23:62:95:4a:2d:b7:0a:ff:1f:
                    00:06:ae:43:10:fe:21:b8:51:45:31:dd:73:9c:60:
                    7e:5e:b1:64:79:a5:f3:03:f3:85:ac:50:7b:c1:63:
                    01:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:91:D0:FD:7A:3D:1F:5D:88:29:CC:E4:11:4C:A9:C1:14:3E:BF:55
            X509v3 Authority Key Identifier:
                keyid:45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:4c:22:75:95:cd:47:04:28:a2:e6:9e:d4:94:61:8e:ff:88:
         11:f4:b6:2a:44:22:b5:d7:3f:2f:d8:8a:66:62:44:b6:30:6b:
         88:ee:08:ee:39:50:73:c2:77:7b:a5:ac:bc:9b:65:72:c2:22:
         f2:5b:a8:37:50:18:17:56:8e:e5:c6:ea:22:10:0e:50:28:96:
         9c:15:cd:c2:52:e2:eb:80:d2:ad:e5:95:f9:d8:28:b5:29:9e:
         96:89:f7:01:e9:98:08:3f:db:85:5f:29:6b:33:8f:af:8a:80:
         e2:97:b3:dd:64:e1:1f:16:21:f6:37:16:3d:cf:5f:91:40:1d:
         34:60:e8:a6:3b:59:c2:44:18:e7:e3:60:3f:f1:0c:f4:0f:f9:
         f5:86:45:70:df:88:c5:a9:d7:32:fb:a6:80:dc:c9:66:22:5b:
         47:cc:2d:38:ba:64:70:39:f6:5e:2a:1d:cf:43:22:f9:17:2f:
         60:e9:55:0b:0b:e1:65:73:0c:6f:eb:bf:1c:ce:1f:e5:7d:4e:
         a9:41:99:de:8b:76:4e:43:4e:85:b0:c8:50:27:a6:6a:d2:f6:
         39:8b:33:34:3b:da:ec:ce:37:73:bc:8b:4b:ce:ef:2e:40:8e:
         ca:2d:e3:73:31:be:53:44:58:de:9b:53:65:98:92:72:d5:dc:
         73:e2:58:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAc2BUkyMEMH0BjKH3LjMBAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZjllMzJmZjZhZjNkNWU1ZDc3YmRiYjk4ZGEzN2QwYjhl
NDQ1MTkwHhcNMjQwNjE1MTcwMDQxWhcNMjQwNjE2MTcwMDQxWjAzMTEwLwYDVQQD
Eyg2ZDkxZDBmZDdhM2QxZjVkODgyOWNjZTQxMTRjYTljMTE0M2ViZjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRkL7k3v4fuVIqemCByhWXhBYmwE
bXBXFBYpSqyk3g76ddbt+pxBVmwGkwEpWEFrJ9jwgOo4ywKKtQYktfCOG9zRcUP5
RjH4BQ+vYCSJ7Qh5pWDFp1vzW4/qwZApKUxKC/q5A7kdL+C/CUdSdI5GBogV59JN
uHeNDDQm8h+xWa0j8LKK2Bqsq06+O0pG/uiC8H7WpS2A487H/L1M0mgS2zRHvcC+
+2js0A0Ju6+yduG0rVLKhNG3Oyn64rV51UjtM4lrSG+JT7tKBkGNGI6bW1fDhky0
UQkjYpVKLbcK/x8ABq5DEP4huFFFMd1znGB+XrFkeaXzA/OFrFB7wWMBlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2R0P16PR9diCnM5BFMqcEUPr9VMB8GA1UdIwQY
MBaAFEX54y/2rz1eXXe9u5jaN9C45EUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmZuakxfYXZQVjVkZDcyN21ObzMwTGprUlJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85ZGVmMDgtNzU1Mi00YjVhLTk2NmYt
OGVlMGExMmEzNTliLzEvUmZuakxfYXZQVjVkZDcyN21ObzMwTGprUlJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC85ZGVmMDgtNzU1Mi00YjVhLTk2NmYtOGVlMGExMmEzNTli
LzEvUmZuakxfYXZQVjVkZDcyN21ObzMwTGprUlJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEUwidZXN
RwQoouae1JRhjv+IEfS2KkQitdc/L9iKZmJEtjBriO4I7jlQc8J3e6WsvJtlcsIi
8luoN1AYF1aO5cbqIhAOUCiWnBXNwlLi64DSreWV+dgotSmelon3AemYCD/bhV8p
azOPr4qA4pez3WThHxYh9jcWPc9fkUAdNGDopjtZwkQY5+NgP/EM9A/59YZFcN+I
xanXMvumgNzJZiJbR8wtOLpkcDn2Xiodz0Mi+RcvYOlVCwvhZXMMb+u/HM4f5X1O
qUGZ3ot2TkNOhbDIUCematL2OYszNDva7M43c7yLS87vLkCOyi3jczG+U0RY3ptT
ZZiSctXcc+JYqg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:49:49 2024 by rpki-client on console-fra.rpki-client.org