Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
File:                     t6K9aUc7So6Fp2r72OW77ptLs0s.mft (raw, json)
Hash identifier:          Vs03vBWQked/TpbTf/j+w1tur+6J+H4YLL1X5dUjI6o=
Subject key identifier:   5E:A0:00:0A:35:32:51:1B:6A:40:1D:80:76:D0:14:6C:52:B1:53:44
Authority key identifier: B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B
Certificate issuer:       /CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b
Certificate serial:       0190448B3EE49FFB188B03527B9D8A6ABC54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
Manifest number:          0B3E
Signing time:             Sun 23 Jun 2024 10:01:34 +0000
Manifest this update:     Sun 23 Jun 2024 10:01:34 +0000
Manifest next update:     Mon 24 Jun 2024 10:01:34 +0000
Files and hashes:         1: t6K9aUc7So6Fp2r72OW77ptLs0s.crl (hash: 6D9GoRKthuNQDblEb8GT8vYnaHg3/fnGV4FlJT8SRHw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8b:3e:e4:9f:fb:18:8b:03:52:7b:9d:8a:6a:bc:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b
        Validity
            Not Before: Jun 23 10:01:34 2024 GMT
            Not After : Jun 24 10:01:34 2024 GMT
        Subject: CN=5ea0000a3532511b6a401d8076d0146c52b15344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9f:66:c4:ca:6d:64:1c:9a:fb:94:84:7e:87:
                    b6:6e:88:3d:44:1c:26:a5:de:91:86:cc:be:24:da:
                    32:f9:c4:db:9b:5d:3e:e4:39:f2:9a:be:44:5f:91:
                    3d:28:fa:a2:5b:f0:d9:9c:ac:5a:3b:db:9a:cc:93:
                    46:eb:35:28:be:a5:5c:2b:14:40:1c:5b:ab:59:d9:
                    43:8c:12:82:b3:37:04:a5:b4:24:2d:78:3c:2e:e9:
                    7e:65:b2:e0:07:74:1c:3e:0d:04:80:04:1a:fb:29:
                    33:ac:fb:b3:bc:40:55:71:4f:60:98:3b:dc:35:da:
                    33:5e:f7:b5:e8:96:d1:74:99:be:9e:cd:16:bd:31:
                    e9:37:ac:ff:da:db:74:09:38:ba:fa:c6:d1:21:f8:
                    95:12:7d:3d:22:ea:83:86:1c:b5:7f:96:34:bf:97:
                    4e:fa:a9:7f:b4:66:4b:3c:ab:4f:22:1b:56:c0:61:
                    9f:bb:b5:1b:1e:c2:27:8f:ed:4a:b6:ac:c7:6d:cc:
                    1d:62:8f:c6:d0:1e:e5:c0:ca:7f:90:3f:3b:9f:4e:
                    4b:c1:c3:14:9a:9a:5c:46:00:c8:d3:5b:18:21:ae:
                    b7:39:63:3f:a5:9a:12:6a:91:83:61:01:cb:30:25:
                    69:1d:bc:3c:bf:28:a4:71:01:50:f5:f8:3f:a4:1d:
                    dd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A0:00:0A:35:32:51:1B:6A:40:1D:80:76:D0:14:6C:52:B1:53:44
            X509v3 Authority Key Identifier:
                keyid:B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:2b:67:5c:dd:95:b2:c6:59:17:29:d3:78:a4:0a:9f:6e:28:
         63:13:17:f2:fb:dd:d4:c1:45:02:16:0a:59:85:7d:ce:2b:81:
         5c:be:e9:30:52:87:77:d1:13:f0:a1:a3:76:40:7f:08:01:61:
         d9:67:91:92:73:95:ba:28:0c:bf:f0:63:78:e4:5f:78:69:ab:
         e3:7e:d7:23:9c:5f:43:24:0a:7a:97:be:89:d1:a6:5c:c1:56:
         4b:b1:76:8d:3f:d8:ae:5d:2c:ff:df:74:4e:b8:54:04:49:49:
         22:43:dd:72:91:69:66:02:64:fb:15:93:1a:1c:6f:c6:fb:a4:
         6b:65:67:df:ec:13:89:f8:bb:ef:84:27:03:a3:ba:66:87:3e:
         83:85:be:d1:a4:9c:10:7d:65:ae:fc:06:4c:71:40:4a:30:4b:
         c2:f9:2c:73:6b:cf:21:ba:7b:f2:b7:09:cb:5e:41:2f:7f:22:
         7f:30:75:17:65:3c:62:24:ca:cf:65:33:0e:95:50:05:53:69:
         be:35:63:2b:ac:38:32:6b:65:a9:de:a2:da:33:75:75:12:cb:
         d9:cf:a1:05:70:ba:85:0b:ac:65:ad:89:f1:2e:9c:18:b3:cc:
         02:31:c3:ef:b2:44:d2:0a:e6:84:39:5d:65:33:f8:bc:cb:98:
         4f:6b:f5:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBEiz7kn/sYiwNSe52KarxUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YTJiZDY5NDczYjRhOGU4NWE3NmFmYmQ4ZTViYmVlOWI0
YmIzNGIwHhcNMjQwNjIzMTAwMTM0WhcNMjQwNjI0MTAwMTM0WjAzMTEwLwYDVQQD
Eyg1ZWEwMDAwYTM1MzI1MTFiNmE0MDFkODA3NmQwMTQ2YzUyYjE1MzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ9mxMptZBya+5SEfoe2bog9RBwm
pd6Rhsy+JNoy+cTbm10+5Dnymr5EX5E9KPqiW/DZnKxaO9uazJNG6zUovqVcKxRA
HFurWdlDjBKCszcEpbQkLXg8Lul+ZbLgB3QcPg0EgAQa+ykzrPuzvEBVcU9gmDvc
NdozXve16JbRdJm+ns0WvTHpN6z/2tt0CTi6+sbRIfiVEn09IuqDhhy1f5Y0v5dO
+ql/tGZLPKtPIhtWwGGfu7UbHsInj+1KtqzHbcwdYo/G0B7lwMp/kD87n05LwcMU
mppcRgDI01sYIa63OWM/pZoSapGDYQHLMCVpHbw8vyikcQFQ9fg/pB3dOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6gAAo1MlEbakAdgHbQFGxSsVNEMB8GA1UdIwQY
MBaAFLeivWlHO0qOhadq+9jlu+6bS7NLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDZLOWFVYzdTbzZGcDJyNzJPVzc3cHRMczBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NGQ1ZjYtZTY0MS00NDA4LWE3NmUt
NTM4ODliZGM4NGY1LzEvdDZLOWFVYzdTbzZGcDJyNzJPVzc3cHRMczBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83NGQ1ZjYtZTY0MS00NDA4LWE3NmUtNTM4ODliZGM4NGY1
LzEvdDZLOWFVYzdTbzZGcDJyNzJPVzc3cHRMczBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApitnXN2V
ssZZFynTeKQKn24oYxMX8vvd1MFFAhYKWYV9ziuBXL7pMFKHd9ET8KGjdkB/CAFh
2WeRknOVuigMv/BjeORfeGmr437XI5xfQyQKepe+idGmXMFWS7F2jT/Yrl0s/990
TrhUBElJIkPdcpFpZgJk+xWTGhxvxvuka2Vn3+wTifi774QnA6O6Zoc+g4W+0aSc
EH1lrvwGTHFASjBLwvksc2vPIbp78rcJy15BL38ifzB1F2U8YiTKz2UzDpVQBVNp
vjVjK6w4Mmtlqd6i2jN1dRLL2c+hBXC6hQusZa2J8S6cGLPMAjHD77JE0grmhDld
ZTP4vMuYT2v1MQ==
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:45:10 2024 by rpki-client on console-ams.rpki-client.org