Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
File:                     cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft (raw, json)
Hash identifier:          iLOuOw6dztGVvR/HDkGs5qriqZlKIL88YC7ao5Hlt9Y=
Subject key identifier:   9F:2A:50:CF:6F:14:25:92:78:FE:8A:A3:32:ED:BC:C6:DE:39:98:11
Authority key identifier: 70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
Certificate issuer:       /CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Certificate serial:       01901E8F7187C3783E85454E95230DB08CA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
Manifest number:          0536
Signing time:             Sun 16 Jun 2024 01:00:35 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:35 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:35 +0000
Files and hashes:         1: cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl (hash: tGRJiD/bsabry+ZOHXSMv/bM183oVk5s6GTG+hKjLHE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:71:87:c3:78:3e:85:45:4e:95:23:0d:b0:8c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
        Validity
            Not Before: Jun 16 01:00:35 2024 GMT
            Not After : Jun 17 01:00:35 2024 GMT
        Subject: CN=9f2a50cf6f14259278fe8aa332edbcc6de399811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9e:f5:e8:cf:3f:ec:06:38:a0:7b:2d:d9:33:
                    aa:99:6e:eb:30:98:80:6a:12:18:91:05:16:d8:2e:
                    59:69:c0:2b:f6:82:7a:04:5b:b5:b9:9e:cd:ec:4a:
                    3f:e1:f4:25:30:2c:80:b6:91:cb:57:d8:6a:22:61:
                    95:e9:aa:00:7c:6d:4d:ba:4d:5a:24:bf:dc:12:80:
                    af:ab:59:f5:0f:d9:5c:22:dd:a6:1e:d3:1a:78:64:
                    5c:be:e9:d0:c4:79:17:93:32:a9:89:bb:c6:46:b3:
                    cd:6e:d6:b5:23:af:cb:82:6a:f9:30:bf:ca:8b:71:
                    aa:a0:c6:63:fc:a7:82:46:b1:2c:4b:1c:60:83:b8:
                    0e:d6:e7:77:c8:7f:fc:74:e3:2d:58:57:f1:cf:83:
                    e9:e7:25:5a:54:65:d4:10:14:a4:0a:34:a4:0d:47:
                    c4:d8:bc:47:18:6d:a2:42:8f:72:5b:24:27:86:c7:
                    f6:b1:22:64:a8:51:67:71:e1:c8:b7:c4:8a:da:48:
                    ac:57:e0:a2:96:3e:44:e0:df:16:76:5a:29:55:c1:
                    6b:5f:28:0a:68:57:8f:89:06:cc:b8:77:43:38:83:
                    bb:c9:2a:07:cd:2c:1e:5f:67:ed:b1:34:90:e9:84:
                    ce:1a:84:ad:ba:f8:80:a3:ee:35:94:9c:9e:bc:87:
                    45:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2A:50:CF:6F:14:25:92:78:FE:8A:A3:32:ED:BC:C6:DE:39:98:11
            X509v3 Authority Key Identifier:
                keyid:70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c4:96:6e:fe:59:b4:83:cc:b6:02:35:55:87:42:56:88:d7:
         2e:b8:23:a8:a8:5b:a2:98:b6:f2:66:75:36:78:b8:69:d8:9c:
         ae:eb:af:44:05:42:91:31:07:46:65:8c:e9:db:18:41:9a:88:
         e4:ce:4e:79:2d:0e:0d:3a:ee:1c:e4:5f:62:d6:44:6e:d0:52:
         28:d0:b7:88:24:41:55:a4:7c:eb:fd:b4:21:42:38:49:36:d2:
         91:f1:bf:82:79:74:5b:86:fe:9c:96:3e:30:42:02:0b:d0:4c:
         ca:92:12:b2:17:7a:b4:5c:09:e6:d5:6d:df:89:39:46:43:45:
         09:f1:56:72:2d:8e:c8:2b:57:e7:a9:f7:51:09:b4:dc:6a:98:
         98:2e:3c:90:31:39:79:32:4f:03:76:21:69:da:8a:aa:08:19:
         06:b7:d7:70:3a:0a:ab:60:45:8a:ac:ec:4c:26:bb:2e:63:51:
         ce:ba:02:14:1d:77:97:f1:ed:1d:7f:47:e1:08:a2:11:f8:db:
         27:8b:8d:40:dd:a0:6d:79:6f:6b:1a:35:6d:4e:f7:ee:cf:35:
         ad:14:a1:be:ad:e9:1b:bd:93:8a:ca:25:f0:c6:91:85:e0:e2:
         f8:51:c1:7c:48:c7:30:1f:1f:e4:df:11:ac:af:21:89:bb:57:
         89:33:69:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAej3GHw3g+hUVOlSMNsIykMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZTI3YTFjZTc3YmNkNGM2NDk3ZTI4NWJmMmJhNmYzMjQ0
MzllYjgwHhcNMjQwNjE2MDEwMDM1WhcNMjQwNjE3MDEwMDM1WjAzMTEwLwYDVQQD
Eyg5ZjJhNTBjZjZmMTQyNTkyNzhmZThhYTMzMmVkYmNjNmRlMzk5ODExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35716M8/7AY4oHst2TOqmW7rMJiA
ahIYkQUW2C5ZacAr9oJ6BFu1uZ7N7Eo/4fQlMCyAtpHLV9hqImGV6aoAfG1Nuk1a
JL/cEoCvq1n1D9lcIt2mHtMaeGRcvunQxHkXkzKpibvGRrPNbta1I6/Lgmr5ML/K
i3GqoMZj/KeCRrEsSxxgg7gO1ud3yH/8dOMtWFfxz4Pp5yVaVGXUEBSkCjSkDUfE
2LxHGG2iQo9yWyQnhsf2sSJkqFFnceHIt8SK2kisV+Cilj5E4N8WdlopVcFrXygK
aFePiQbMuHdDOIO7ySoHzSweX2ftsTSQ6YTOGoStuviAo+41lJyevIdFLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8qUM9vFCWSeP6KozLtvMbeOZgRMB8GA1UdIwQY
MBaAFHDiehzne81MZJfihb8rpvMkQ564MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iNjQwNDAtOThjOS00ZGJlLTlkY2Mt
MGJlYzk2Nzg3OTM3LzEvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iNjQwNDAtOThjOS00ZGJlLTlkY2MtMGJlYzk2Nzg3OTM3
LzEvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMcSWbv5Z
tIPMtgI1VYdCVojXLrgjqKhbopi28mZ1Nni4adicruuvRAVCkTEHRmWM6dsYQZqI
5M5OeS0ODTruHORfYtZEbtBSKNC3iCRBVaR86/20IUI4STbSkfG/gnl0W4b+nJY+
MEICC9BMypISshd6tFwJ5tVt34k5RkNFCfFWci2OyCtX56n3UQm03GqYmC48kDE5
eTJPA3YhadqKqggZBrfXcDoKq2BFiqzsTCa7LmNRzroCFB13l/HtHX9H4QiiEfjb
J4uNQN2gbXlvaxo1bU737s81rRShvq3pG72Tisol8MaRheDi+FHBfEjHMB8f5N8R
rK8hibtXiTNp0Q==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:00:25 2024 by rpki-client on console-fra.rpki-client.org