Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
File:                     Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft (raw, json)
Hash identifier:          SLmcVv5VKrrDajx2R56mDLdnXpOiafrC87sR+W1SzQM=
Subject key identifier:   9C:F6:6C:1F:74:7F:77:F3:40:67:70:1B:59:D2:09:FA:CD:C3:7F:0A
Authority key identifier: 46:F6:EE:BF:80:BD:64:DF:F5:AB:10:12:B9:0A:55:68:65:A8:48:DB
Certificate issuer:       /CN=46f6eebf80bd64dff5ab1012b90a556865a848db
Certificate serial:       019040E4960BA84CB894068CC5F3D8BDFB7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
Manifest number:          7A
Signing time:             Sat 22 Jun 2024 17:00:40 +0000
Manifest this update:     Sat 22 Jun 2024 17:00:40 +0000
Manifest next update:     Sun 23 Jun 2024 17:00:40 +0000
Files and hashes:         1: Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl (hash: ue3hjSpwZPj17HkCF7mCC0lKHr1L1KJtvzXcOUmNgFQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 17:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:e4:96:0b:a8:4c:b8:94:06:8c:c5:f3:d8:bd:fb:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46f6eebf80bd64dff5ab1012b90a556865a848db
        Validity
            Not Before: Jun 22 17:00:40 2024 GMT
            Not After : Jun 23 17:00:40 2024 GMT
        Subject: CN=9cf66c1f747f77f34067701b59d209facdc37f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:02:d1:75:9d:87:b7:d6:a8:37:79:54:8d:57:
                    d9:c4:74:91:40:2f:03:af:d8:40:31:0a:4c:1b:c7:
                    ca:b1:db:32:81:81:b5:20:81:ab:5a:d0:d7:82:44:
                    b8:bb:53:8a:37:53:17:03:1e:dc:47:c9:9d:f5:08:
                    91:b0:da:2c:d9:db:85:91:77:71:86:db:0a:3d:29:
                    b4:61:9a:6e:f4:98:2c:0a:9c:7a:57:a4:09:c8:b0:
                    7b:1d:b2:fe:56:52:1c:43:28:41:34:78:3a:b1:6a:
                    a6:9e:78:66:5c:c9:d8:25:b1:a2:23:92:b3:f4:d7:
                    a1:53:1f:70:1e:4f:a9:12:aa:da:1b:eb:bb:5b:c8:
                    64:ca:8e:a9:a5:7a:93:2f:72:52:88:d9:69:07:92:
                    6f:b6:34:31:55:c0:6a:b0:95:dd:58:29:17:3a:c4:
                    8e:95:5f:37:59:83:71:2d:cb:04:e1:92:e8:34:78:
                    e2:19:fe:ff:ee:f0:9f:b2:32:63:28:f2:09:20:c4:
                    df:4e:08:8c:bf:e8:94:08:03:49:31:21:2b:58:40:
                    ce:5e:a8:7f:27:ee:d5:2d:d2:78:3c:a7:6f:ee:40:
                    1c:bd:74:55:39:ce:2d:3c:79:24:b8:90:1e:f3:9d:
                    16:6f:35:7a:7b:8d:72:5b:37:24:7c:f9:41:14:32:
                    84:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F6:6C:1F:74:7F:77:F3:40:67:70:1B:59:D2:09:FA:CD:C3:7F:0A
            X509v3 Authority Key Identifier:
                keyid:46:F6:EE:BF:80:BD:64:DF:F5:AB:10:12:B9:0A:55:68:65:A8:48:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:19:5a:e4:d5:f1:f1:bc:73:0b:a9:6e:12:71:9d:00:70:2d:
         cc:1e:81:7e:73:35:47:87:65:89:e3:01:66:b3:2c:1b:3d:0b:
         c4:90:06:5e:bd:c7:a7:bd:54:61:e6:4b:09:33:47:c9:91:6b:
         4d:d9:95:6b:8c:7d:bc:7a:52:4b:f6:cc:8d:01:7b:fc:ad:b2:
         3a:51:81:c5:5d:95:20:30:cd:5b:0b:fa:a9:75:ae:f9:bf:66:
         8e:9b:9e:03:95:26:2f:00:64:69:fe:59:19:59:fb:05:21:18:
         33:30:40:e2:ce:2d:a9:ab:a2:0d:22:e9:39:9a:1f:88:89:0b:
         f5:19:2a:eb:93:bc:a8:3e:26:ee:d7:c8:83:f8:32:bc:61:cd:
         3c:e1:48:35:af:83:4b:7c:4b:cd:6d:ed:b0:32:3e:c0:49:20:
         eb:89:c9:91:17:a3:66:83:2e:75:43:bb:a8:45:ba:10:8c:f8:
         31:1f:57:b2:a0:33:20:61:95:84:6a:c4:00:63:31:00:06:10:
         1f:3b:9d:32:c5:4d:11:08:7d:58:4d:f1:0d:ee:af:6d:bd:a7:
         01:d7:be:73:c0:e2:25:58:e7:10:30:e5:70:b0:c4:32:6a:19:
         fc:83:48:c4:14:7d:46:5e:a4:ae:d8:7a:46:bb:4b:71:c3:38:
         f9:d2:d7:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBA5JYLqEy4lAaMxfPYvft9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZjZlZWJmODBiZDY0ZGZmNWFiMTAxMmI5MGE1NTY4NjVh
ODQ4ZGIwHhcNMjQwNjIyMTcwMDQwWhcNMjQwNjIzMTcwMDQwWjAzMTEwLwYDVQQD
Eyg5Y2Y2NmMxZjc0N2Y3N2YzNDA2NzcwMWI1OWQyMDlmYWNkYzM3ZjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQLRdZ2Ht9aoN3lUjVfZxHSRQC8D
r9hAMQpMG8fKsdsygYG1IIGrWtDXgkS4u1OKN1MXAx7cR8md9QiRsNos2duFkXdx
htsKPSm0YZpu9JgsCpx6V6QJyLB7HbL+VlIcQyhBNHg6sWqmnnhmXMnYJbGiI5Kz
9NehUx9wHk+pEqraG+u7W8hkyo6ppXqTL3JSiNlpB5JvtjQxVcBqsJXdWCkXOsSO
lV83WYNxLcsE4ZLoNHjiGf7/7vCfsjJjKPIJIMTfTgiMv+iUCANJMSErWEDOXqh/
J+7VLdJ4PKdv7kAcvXRVOc4tPHkkuJAe850WbzV6e41yWzckfPlBFDKEEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJz2bB90f3fzQGdwG1nSCfrNw38KMB8GA1UdIwQY
MBaAFEb27r+AvWTf9asQErkKVWhlqEjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnZidXY0QzlaTl8xcXhBU3VRcFZhR1dvU05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81NzhmYWEtMGEwMy00NmFjLWJiNWMt
OWJkYmI2MjZiNTk1LzEvUnZidXY0QzlaTl8xcXhBU3VRcFZhR1dvU05zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81NzhmYWEtMGEwMy00NmFjLWJiNWMtOWJkYmI2MjZiNTk1
LzEvUnZidXY0QzlaTl8xcXhBU3VRcFZhR1dvU05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuhla5NXx
8bxzC6luEnGdAHAtzB6BfnM1R4dlieMBZrMsGz0LxJAGXr3Hp71UYeZLCTNHyZFr
TdmVa4x9vHpSS/bMjQF7/K2yOlGBxV2VIDDNWwv6qXWu+b9mjpueA5UmLwBkaf5Z
GVn7BSEYMzBA4s4tqauiDSLpOZofiIkL9Rkq65O8qD4m7tfIg/gyvGHNPOFINa+D
S3xLzW3tsDI+wEkg64nJkRejZoMudUO7qEW6EIz4MR9XsqAzIGGVhGrEAGMxAAYQ
HzudMsVNEQh9WE3xDe6vbb2nAde+c8DiJVjnEDDlcLDEMmoZ/INIxBR9Rl6krth6
RrtLccM4+dLXIA==
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:25:22 2024 by rpki-client on console-ams.rpki-client.org