Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
File:                     zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft (raw, json)
Hash identifier:          AYmJguFyElXrnUJ/MIXyoTQNl4OGzTNf8q0mq9AtWTw=
Subject key identifier:   51:E9:08:39:22:E4:21:9C:DA:88:9A:8A:9D:BF:BC:D1:B5:EC:43:C0
Authority key identifier: CF:2E:3D:1F:FF:9B:D5:47:9A:13:30:F8:8F:A2:EC:07:C0:EA:EC:49
Certificate issuer:       /CN=cf2e3d1fff9bd5479a1330f88fa2ec07c0eaec49
Certificate serial:       0190384F85168D9392242A014CEDF95BE3A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
Manifest number:          04B0
Signing time:             Fri 21 Jun 2024 01:00:53 +0000
Manifest this update:     Fri 21 Jun 2024 01:00:53 +0000
Manifest next update:     Sat 22 Jun 2024 01:00:53 +0000
Files and hashes:         1: zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl (hash: +hspx1FRI0ND1hPNrban/mTTpzdiWlm4HMRyzK4YNZM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:38:4f:85:16:8d:93:92:24:2a:01:4c:ed:f9:5b:e3:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2e3d1fff9bd5479a1330f88fa2ec07c0eaec49
        Validity
            Not Before: Jun 21 01:00:53 2024 GMT
            Not After : Jun 22 01:00:53 2024 GMT
        Subject: CN=51e9083922e4219cda889a8a9dbfbcd1b5ec43c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2a:49:dc:e5:a5:80:11:33:af:fa:76:5c:81:
                    56:cc:a5:d0:ab:82:f1:8d:d0:f5:84:ca:f6:6e:a9:
                    d8:42:79:6c:d1:f0:d3:5e:07:73:33:a1:57:98:df:
                    85:99:bb:0b:d0:18:9b:73:03:86:3e:fd:07:c5:26:
                    3a:c0:9a:bf:59:d6:0b:ac:22:26:65:49:fb:bb:41:
                    53:ac:65:57:8f:5d:38:65:68:95:8b:03:a0:fb:01:
                    95:8d:98:6e:62:9c:07:02:5d:ec:4f:0c:ea:af:5c:
                    31:92:74:06:04:76:88:ea:2c:82:11:4b:fc:85:e2:
                    0f:58:e5:8a:a6:05:f7:93:77:7b:9d:b8:87:71:9a:
                    d1:83:f9:c8:ab:82:cb:25:2a:a9:47:4a:dd:c8:b8:
                    fb:b1:78:9b:fb:0a:9e:b1:4c:d3:6b:c6:24:eb:8b:
                    1d:b5:be:f6:8c:e6:1a:4e:3b:8f:a7:29:41:d5:68:
                    c3:03:c4:5a:5b:79:cd:ce:41:25:cb:1b:28:68:89:
                    3c:cc:f0:e5:e6:ae:b1:93:a0:8c:c9:37:7e:54:ff:
                    59:94:f0:34:df:b2:0e:b7:ac:33:7f:bd:24:53:86:
                    28:40:f9:a8:5d:b1:5f:3a:93:75:6f:62:d0:3c:37:
                    ba:06:24:25:a8:44:f2:48:6e:29:e5:69:d9:f7:84:
                    cd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E9:08:39:22:E4:21:9C:DA:88:9A:8A:9D:BF:BC:D1:B5:EC:43:C0
            X509v3 Authority Key Identifier:
                keyid:CF:2E:3D:1F:FF:9B:D5:47:9A:13:30:F8:8F:A2:EC:07:C0:EA:EC:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:20:ad:8e:2f:c2:b4:20:f5:51:e7:a7:f6:be:33:4f:50:e3:
         fd:69:5e:1b:f2:58:ee:05:e7:f4:90:0c:1e:22:22:a4:84:7f:
         56:41:15:10:dd:8d:41:8d:05:17:1a:78:0a:ea:a9:be:51:36:
         d0:3c:64:ef:34:67:ab:94:89:b9:8f:34:e8:c0:09:d7:21:96:
         fd:54:fb:ce:d6:c6:ff:04:16:0d:03:3e:b6:90:f7:2a:9e:5c:
         cd:8f:f1:e8:50:b0:6d:6e:c3:cf:fe:52:3f:7a:e0:4b:39:28:
         73:06:7a:ab:3d:7a:05:9f:00:fb:cf:62:66:96:dd:b7:e0:59:
         da:bd:a8:09:d5:f4:79:65:b8:50:00:9d:3d:73:fb:1e:1d:7d:
         bc:76:23:82:7e:d9:ba:9c:99:83:27:ec:ca:8c:8e:9c:70:bb:
         56:1b:4f:85:17:7f:b9:e7:fd:a2:f6:92:34:3d:b5:13:c2:d4:
         ca:d2:76:ff:39:85:10:67:3f:e8:91:41:44:43:2f:fb:32:55:
         14:16:41:57:06:0b:5d:f5:10:b6:72:c3:84:c1:46:4e:55:be:
         b1:b4:aa:0c:7d:a8:03:80:38:55:70:6a:81:c7:57:c0:06:a5:
         9e:72:8e:da:f5:c4:d0:ad:8e:d6:dc:f5:15:2a:4c:f2:92:1c:
         88:96:76:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA4T4UWjZOSJCoBTO35W+OpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMmUzZDFmZmY5YmQ1NDc5YTEzMzBmODhmYTJlYzA3YzBl
YWVjNDkwHhcNMjQwNjIxMDEwMDUzWhcNMjQwNjIyMDEwMDUzWjAzMTEwLwYDVQQD
Eyg1MWU5MDgzOTIyZTQyMTljZGE4ODlhOGE5ZGJmYmNkMWI1ZWM0M2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCpJ3OWlgBEzr/p2XIFWzKXQq4Lx
jdD1hMr2bqnYQnls0fDTXgdzM6FXmN+FmbsL0BibcwOGPv0HxSY6wJq/WdYLrCIm
ZUn7u0FTrGVXj104ZWiViwOg+wGVjZhuYpwHAl3sTwzqr1wxknQGBHaI6iyCEUv8
heIPWOWKpgX3k3d7nbiHcZrRg/nIq4LLJSqpR0rdyLj7sXib+wqesUzTa8Yk64sd
tb72jOYaTjuPpylB1WjDA8RaW3nNzkElyxsoaIk8zPDl5q6xk6CMyTd+VP9ZlPA0
37IOt6wzf70kU4YoQPmoXbFfOpN1b2LQPDe6BiQlqETySG4p5WnZ94TNcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHpCDki5CGc2oiaip2/vNG17EPAMB8GA1UdIwQY
MBaAFM8uPR//m9VHmhMw+I+i7AfA6uxJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenk0OUhfLWIxVWVhRXpENGo2THNCOERxN0VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy84YmMwZDEtNzM0OC00YzY2LTgwNDMt
NTMxMjM1ZTU1YjIzLzEvenk0OUhfLWIxVWVhRXpENGo2THNCOERxN0VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy84YmMwZDEtNzM0OC00YzY2LTgwNDMtNTMxMjM1ZTU1YjIz
LzEvenk0OUhfLWIxVWVhRXpENGo2THNCOERxN0VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANCCtji/C
tCD1Ueen9r4zT1Dj/WleG/JY7gXn9JAMHiIipIR/VkEVEN2NQY0FFxp4CuqpvlE2
0Dxk7zRnq5SJuY806MAJ1yGW/VT7ztbG/wQWDQM+tpD3Kp5czY/x6FCwbW7Dz/5S
P3rgSzkocwZ6qz16BZ8A+89iZpbdt+BZ2r2oCdX0eWW4UACdPXP7Hh19vHYjgn7Z
upyZgyfsyoyOnHC7VhtPhRd/uef9ovaSND21E8LUytJ2/zmFEGc/6JFBREMv+zJV
FBZBVwYLXfUQtnLDhMFGTlW+sbSqDH2oA4A4VXBqgcdXwAalnnKO2vXE0K2O1tz1
FSpM8pIciJZ2sw==
-----END CERTIFICATE-----
Generated at Fri Jun 21 05:34:17 2024 by rpki-client on console-fra.rpki-client.org