Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2f6cc2-5c0b-46a7-9c63-fe3fcf68d634/1/XNdCqzn7aILMa1W4NsDrFGaiL0Y.mft
File:                     XNdCqzn7aILMa1W4NsDrFGaiL0Y.mft (raw, json)
Hash identifier:          uWY8NYMLIyay05alVaqSf0yBPXoHaSwPqmaz/9XBTHQ=
Subject key identifier:   D9:AE:36:03:6F:C8:FD:E4:86:65:D2:60:07:B4:17:01:04:E2:07:CF
Authority key identifier: 5C:D7:42:AB:39:FB:68:82:CC:6B:55:B8:36:C0:EB:14:66:A2:2F:46
Certificate issuer:       /CN=5cd742ab39fb6882cc6b55b836c0eb1466a22f46
Certificate serial:       01901E5911A051C575FEB2610E5B07A7B8BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XNdCqzn7aILMa1W4NsDrFGaiL0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/2f6cc2-5c0b-46a7-9c63-fe3fcf68d634/1/XNdCqzn7aILMa1W4NsDrFGaiL0Y.mft
Manifest number:          03AE
Signing time:             Sun 16 Jun 2024 00:01:11 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:11 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:11 +0000
Files and hashes:         1: XNdCqzn7aILMa1W4NsDrFGaiL0Y.crl (hash: H9QXrdFJULdvpFkQqncv1iwMBbguOpP8d+STl7dpRhQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/2f6cc2-5c0b-46a7-9c63-fe3fcf68d634/1/XNdCqzn7aILMa1W4NsDrFGaiL0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/2f6cc2-5c0b-46a7-9c63-fe3fcf68d634/1/XNdCqzn7aILMa1W4NsDrFGaiL0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XNdCqzn7aILMa1W4NsDrFGaiL0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:11:a0:51:c5:75:fe:b2:61:0e:5b:07:a7:b8:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd742ab39fb6882cc6b55b836c0eb1466a22f46
        Validity
            Not Before: Jun 16 00:01:11 2024 GMT
            Not After : Jun 17 00:01:11 2024 GMT
        Subject: CN=d9ae36036fc8fde48665d26007b4170104e207cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:61:25:45:f2:75:f8:11:b3:29:3c:c1:30:49:
                    3f:04:ab:82:69:b6:aa:86:fc:66:31:bd:d4:be:19:
                    bd:e4:b4:4e:d0:fa:39:7b:14:71:cd:29:ab:55:35:
                    da:b1:de:89:99:f2:ad:d5:df:1a:10:b2:45:39:2f:
                    df:2f:e6:38:bd:38:77:03:ed:15:f4:0e:d5:2b:c3:
                    5a:ab:d5:54:35:fc:0f:ba:1a:90:f2:50:54:0d:86:
                    f9:75:ab:e8:00:b5:6d:7d:39:10:80:91:2e:29:9e:
                    db:68:fb:8e:4a:12:89:6a:05:97:6d:5c:0d:df:0a:
                    97:3b:4b:df:fd:15:81:f3:df:a2:73:c5:f9:ab:a7:
                    6a:15:9a:46:60:ba:cf:ab:2a:6b:b2:f7:4a:19:90:
                    a7:3c:52:c6:c6:23:85:c9:7a:92:dd:db:e0:87:79:
                    3a:41:b0:b6:58:38:8f:32:e4:f2:72:9a:ed:a0:ef:
                    d4:71:96:76:d8:e8:e7:ce:e1:f1:fe:ca:80:93:c8:
                    b6:9f:a9:00:95:cd:ae:4b:44:e0:3e:a9:42:d1:69:
                    f6:a6:07:cc:d8:41:eb:3a:93:af:76:68:40:6f:e6:
                    1f:66:08:0b:5b:ff:dd:03:14:57:95:af:fb:aa:0a:
                    ee:36:4f:e6:85:8d:d9:c4:74:57:60:3a:5a:0a:16:
                    3a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:AE:36:03:6F:C8:FD:E4:86:65:D2:60:07:B4:17:01:04:E2:07:CF
            X509v3 Authority Key Identifier:
                keyid:5C:D7:42:AB:39:FB:68:82:CC:6B:55:B8:36:C0:EB:14:66:A2:2F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNdCqzn7aILMa1W4NsDrFGaiL0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f6cc2-5c0b-46a7-9c63-fe3fcf68d634/1/XNdCqzn7aILMa1W4NsDrFGaiL0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f6cc2-5c0b-46a7-9c63-fe3fcf68d634/1/XNdCqzn7aILMa1W4NsDrFGaiL0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:86:6b:c6:04:29:bb:b5:20:b9:b0:04:a5:57:d3:17:71:3d:
         63:76:4f:f2:92:90:c2:4a:37:12:0e:a5:28:8e:63:46:48:e2:
         3b:22:38:4a:57:d9:66:73:60:ff:01:46:ed:68:39:2f:ba:60:
         c3:3b:a6:b3:fa:f7:42:15:aa:22:7f:e4:a0:e3:8a:56:fa:93:
         ee:4c:be:c8:8d:49:73:a8:15:82:df:75:b5:29:05:ef:79:6b:
         8e:44:fa:58:b8:a6:63:e5:d3:dd:28:bf:8d:7b:0c:e2:01:0c:
         53:6c:ac:d4:29:13:1c:99:60:54:52:46:f0:29:79:3b:75:4d:
         c7:28:d7:00:f0:52:49:fa:10:68:76:8c:57:9d:60:af:62:7c:
         9c:45:cf:c7:d0:6b:05:5c:b3:b1:43:48:cc:fd:25:d5:98:33:
         da:c0:3a:16:49:2d:2d:79:d0:42:61:ac:29:de:a1:54:a5:8a:
         41:8e:e9:17:ff:74:8a:e6:41:29:ef:2c:ff:b9:5a:b0:82:b6:
         17:bc:34:0b:02:9e:50:b6:1f:01:93:50:8b:3c:1a:3d:4e:12:
         36:6b:98:a2:29:b0:e7:23:da:0e:5e:02:2a:c9:45:d5:ca:9e:
         03:87:92:3f:0d:cd:a8:41:ac:17:cb:ad:b9:ec:55:e6:44:1a:
         5c:08:a0:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWRGgUcV1/rJhDlsHp7i6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZDc0MmFiMzlmYjY4ODJjYzZiNTViODM2YzBlYjE0NjZh
MjJmNDYwHhcNMjQwNjE2MDAwMTExWhcNMjQwNjE3MDAwMTExWjAzMTEwLwYDVQQD
EyhkOWFlMzYwMzZmYzhmZGU0ODY2NWQyNjAwN2I0MTcwMTA0ZTIwN2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2ElRfJ1+BGzKTzBMEk/BKuCabaq
hvxmMb3Uvhm95LRO0Po5exRxzSmrVTXasd6JmfKt1d8aELJFOS/fL+Y4vTh3A+0V
9A7VK8Naq9VUNfwPuhqQ8lBUDYb5davoALVtfTkQgJEuKZ7baPuOShKJagWXbVwN
3wqXO0vf/RWB89+ic8X5q6dqFZpGYLrPqyprsvdKGZCnPFLGxiOFyXqS3dvgh3k6
QbC2WDiPMuTycprtoO/UcZZ22OjnzuHx/sqAk8i2n6kAlc2uS0TgPqlC0Wn2pgfM
2EHrOpOvdmhAb+YfZggLW//dAxRXla/7qgruNk/mhY3ZxHRXYDpaChY64wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmuNgNvyP3khmXSYAe0FwEE4gfPMB8GA1UdIwQY
MBaAFFzXQqs5+2iCzGtVuDbA6xRmoi9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE5kQ3F6bjdhSUxNYTFXNE5zRHJGR2FpTDBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yZjZjYzItNWMwYi00NmE3LTljNjMt
ZmUzZmNmNjhkNjM0LzEvWE5kQ3F6bjdhSUxNYTFXNE5zRHJGR2FpTDBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8yZjZjYzItNWMwYi00NmE3LTljNjMtZmUzZmNmNjhkNjM0
LzEvWE5kQ3F6bjdhSUxNYTFXNE5zRHJGR2FpTDBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIZrxgQp
u7UgubAEpVfTF3E9Y3ZP8pKQwko3Eg6lKI5jRkjiOyI4SlfZZnNg/wFG7Wg5L7pg
wzums/r3QhWqIn/koOOKVvqT7ky+yI1Jc6gVgt91tSkF73lrjkT6WLimY+XT3Si/
jXsM4gEMU2ys1CkTHJlgVFJG8Cl5O3VNxyjXAPBSSfoQaHaMV51gr2J8nEXPx9Br
BVyzsUNIzP0l1Zgz2sA6FkktLXnQQmGsKd6hVKWKQY7pF/90iuZBKe8s/7lasIK2
F7w0CwKeULYfAZNQizwaPU4SNmuYoimw5yPaDl4CKslF1cqeA4eSPw3NqEGsF8ut
uexV5kQaXAigTQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 01:03:28 2024 by rpki-client on console-fra.rpki-client.org