Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
File:                     cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft (raw, json)
Hash identifier:          Ou5JNnAox8kB2rjO568Vw0BRo5bS9HrGQ6NU015827M=
Subject key identifier:   F2:FE:00:19:A4:98:3E:FA:F6:6B:12:B1:B2:B2:2F:23:A8:83:42:C9
Authority key identifier: 70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
Certificate issuer:       /CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Certificate serial:       0190452F51A8A2F7D33813919E619166F01D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
Manifest number:          054A
Signing time:             Sun 23 Jun 2024 13:00:47 +0000
Manifest this update:     Sun 23 Jun 2024 13:00:47 +0000
Manifest next update:     Mon 24 Jun 2024 13:00:47 +0000
Files and hashes:         1: cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl (hash: mz58SimnCrGXt4dJZNGXFZzCPjIe1Q87mXYmLnzaUcs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 13:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:2f:51:a8:a2:f7:d3:38:13:91:9e:61:91:66:f0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
        Validity
            Not Before: Jun 23 13:00:47 2024 GMT
            Not After : Jun 24 13:00:47 2024 GMT
        Subject: CN=f2fe0019a4983efaf66b12b1b2b22f23a88342c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1a:04:32:3e:50:6b:88:be:a2:ba:38:2e:ce:
                    7e:62:64:16:4b:6a:0c:4c:8c:19:d4:18:ab:d8:b1:
                    5d:27:95:39:64:38:c4:0b:47:90:29:81:b2:18:e3:
                    63:bc:c5:a0:07:32:92:53:b6:9b:98:99:69:62:5b:
                    0b:41:8a:33:e9:91:40:a3:b0:7d:f2:58:30:7c:b6:
                    6a:6a:11:f4:7b:5e:6a:b2:d6:7f:90:5e:3b:f0:b6:
                    5e:34:18:b0:4a:de:ab:eb:26:14:b7:27:cd:e3:20:
                    c1:08:a8:00:28:16:6f:de:e5:dc:1f:10:dd:39:43:
                    af:e6:71:db:96:7d:de:ec:88:ab:bf:b3:3f:44:cb:
                    7e:cb:58:9f:59:38:34:f1:50:0a:3c:2d:58:99:12:
                    9e:24:bf:64:91:b1:81:ed:ee:01:2a:77:be:55:a5:
                    55:50:4a:b9:e9:21:40:f3:6e:65:1d:a0:33:27:8e:
                    fd:66:75:f1:ec:bc:0a:16:e1:f4:71:b3:63:59:a5:
                    2d:c5:30:6f:ab:2a:4b:e9:59:c9:d9:3e:6a:51:d8:
                    99:9a:ec:d7:7d:18:04:6f:34:28:47:40:dd:c5:db:
                    e9:f6:ee:48:f0:db:0e:48:86:0d:57:87:46:2b:89:
                    58:56:60:a5:70:70:1b:87:6d:41:c2:d8:0c:99:ae:
                    2a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FE:00:19:A4:98:3E:FA:F6:6B:12:B1:B2:B2:2F:23:A8:83:42:C9
            X509v3 Authority Key Identifier:
                keyid:70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:c8:0a:71:c8:b9:9c:cc:b3:bf:12:0d:dc:c0:65:23:db:6a:
         cc:21:e9:07:26:27:4e:25:cd:c7:31:96:29:31:5f:66:fc:c2:
         98:cf:d5:74:be:7d:92:3c:7d:e4:3c:81:ab:3c:41:30:f7:0a:
         e1:42:4d:a6:5c:e6:97:3f:cf:12:20:24:99:df:b3:9c:20:41:
         96:ef:a8:aa:fa:87:9a:4c:a8:f1:4f:04:c3:80:f6:7e:aa:bb:
         b1:05:5d:1b:8b:ad:82:e2:00:21:0d:03:19:94:4a:78:0a:f3:
         36:4f:50:b9:fc:57:c4:6d:4b:53:9a:78:1c:09:c1:43:5a:f9:
         e5:e5:f8:df:f7:0c:21:1f:aa:69:e0:f4:f2:2c:39:25:63:b5:
         3a:73:c7:3b:07:7a:80:07:ba:b4:68:19:29:a5:ed:64:07:1f:
         37:e7:65:39:ca:c9:2b:60:8c:bf:36:32:b2:38:68:4c:9b:1b:
         20:a7:45:4c:64:40:65:eb:1f:fc:cd:cb:9c:1c:33:75:a4:6e:
         e6:82:e7:f3:fd:16:a8:ee:25:87:65:95:0d:c8:f2:55:52:a1:
         7e:f7:00:db:30:67:7c:c0:3b:9e:63:b4:32:e2:dd:47:ec:a0:
         06:a7:3d:49:37:4d:f7:28:87:31:9b:48:36:34:e3:54:9f:90:
         38:bf:1a:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBFL1GoovfTOBORnmGRZvAdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZTI3YTFjZTc3YmNkNGM2NDk3ZTI4NWJmMmJhNmYzMjQ0
MzllYjgwHhcNMjQwNjIzMTMwMDQ3WhcNMjQwNjI0MTMwMDQ3WjAzMTEwLwYDVQQD
EyhmMmZlMDAxOWE0OTgzZWZhZjY2YjEyYjFiMmIyMmYyM2E4ODM0MmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBoEMj5Qa4i+oro4Ls5+YmQWS2oM
TIwZ1Bir2LFdJ5U5ZDjEC0eQKYGyGONjvMWgBzKSU7abmJlpYlsLQYoz6ZFAo7B9
8lgwfLZqahH0e15qstZ/kF478LZeNBiwSt6r6yYUtyfN4yDBCKgAKBZv3uXcHxDd
OUOv5nHbln3e7Iirv7M/RMt+y1ifWTg08VAKPC1YmRKeJL9kkbGB7e4BKne+VaVV
UEq56SFA825lHaAzJ479ZnXx7LwKFuH0cbNjWaUtxTBvqypL6VnJ2T5qUdiZmuzX
fRgEbzQoR0Ddxdvp9u5I8NsOSIYNV4dGK4lYVmClcHAbh21BwtgMma4q8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPL+ABmkmD769msSsbKyLyOog0LJMB8GA1UdIwQY
MBaAFHDiehzne81MZJfihb8rpvMkQ564MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iNjQwNDAtOThjOS00ZGJlLTlkY2Mt
MGJlYzk2Nzg3OTM3LzEvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iNjQwNDAtOThjOS00ZGJlLTlkY2MtMGJlYzk2Nzg3OTM3
LzEvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcgKcci5
nMyzvxIN3MBlI9tqzCHpByYnTiXNxzGWKTFfZvzCmM/VdL59kjx95DyBqzxBMPcK
4UJNplzmlz/PEiAkmd+znCBBlu+oqvqHmkyo8U8Ew4D2fqq7sQVdG4utguIAIQ0D
GZRKeArzNk9QufxXxG1LU5p4HAnBQ1r55eX43/cMIR+qaeD08iw5JWO1OnPHOwd6
gAe6tGgZKaXtZAcfN+dlOcrJK2CMvzYysjhoTJsbIKdFTGRAZesf/M3LnBwzdaRu
5oLn8/0WqO4lh2WVDcjyVVKhfvcA2zBnfMA7nmO0MuLdR+ygBqc9STdN9yiHMZtI
NjTjVJ+QOL8aiQ==
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:43:54 2024 by rpki-client on console-ams.rpki-client.org