Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1f431e-37c8-4080-9bb3-416204a02737/1/yQDj7qi7474R-IxoK9E4wmUH99w.mft
File:                     yQDj7qi7474R-IxoK9E4wmUH99w.mft (raw, json)
Hash identifier:          BL6D7Wm58PqcmcLsMNwMa3ELtzNwE9THVhBdCGoB0gM=
Subject key identifier:   46:70:38:D7:AC:59:37:6C:57:CA:A2:79:A6:CF:D2:5F:38:C6:6E:D2
Authority key identifier: C9:00:E3:EE:A8:BB:E3:BE:11:F8:8C:68:2B:D1:38:C2:65:07:F7:DC
Certificate issuer:       /CN=c900e3eea8bbe3be11f88c682bd138c26507f7dc
Certificate serial:       01901DEDBB77201CA9A60BA115F361299F64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yQDj7qi7474R-IxoK9E4wmUH99w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/1f431e-37c8-4080-9bb3-416204a02737/1/yQDj7qi7474R-IxoK9E4wmUH99w.mft
Manifest number:          08AB
Signing time:             Sat 15 Jun 2024 22:03:57 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:57 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:57 +0000
Files and hashes:         1: yQDj7qi7474R-IxoK9E4wmUH99w.crl (hash: nYwVJbKNn01yfRXWOHaVpyGAUyZWH+hBBUNEvLhIgsI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/1f431e-37c8-4080-9bb3-416204a02737/1/yQDj7qi7474R-IxoK9E4wmUH99w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/1f431e-37c8-4080-9bb3-416204a02737/1/yQDj7qi7474R-IxoK9E4wmUH99w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yQDj7qi7474R-IxoK9E4wmUH99w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:bb:77:20:1c:a9:a6:0b:a1:15:f3:61:29:9f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c900e3eea8bbe3be11f88c682bd138c26507f7dc
        Validity
            Not Before: Jun 15 22:03:57 2024 GMT
            Not After : Jun 16 22:03:57 2024 GMT
        Subject: CN=467038d7ac59376c57caa279a6cfd25f38c66ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:38:2b:d8:12:52:77:97:e5:a9:68:7a:09:3e:
                    dc:96:92:1f:24:5a:d2:cf:cc:86:45:46:5b:58:72:
                    ab:e1:3a:84:51:d6:9b:a2:90:e7:03:cf:3c:08:2b:
                    64:59:f8:74:3b:26:e7:fe:a5:a3:5a:a8:d5:2e:01:
                    9d:1a:43:9d:a1:b0:86:b7:37:12:7c:75:0e:65:d1:
                    99:ee:1f:fe:1c:fe:1b:bf:e0:fd:8a:d8:43:f0:3e:
                    37:27:06:75:fd:d5:f0:1b:1f:90:c8:9a:c9:84:92:
                    02:d2:8a:ca:cf:18:96:28:c8:af:03:6a:29:ec:c5:
                    4a:a4:34:d7:3b:9f:f8:cf:be:28:bc:3f:d4:f0:26:
                    ec:82:0c:ac:96:28:e2:1d:7d:ad:49:4b:1f:b4:fa:
                    e1:ad:51:58:81:26:9e:90:b4:bf:eb:20:eb:23:6f:
                    96:30:2e:49:6d:c2:b5:a9:2f:9f:5b:9a:ab:2a:43:
                    86:ee:37:82:08:6f:5e:3b:96:4c:0c:80:54:a6:b6:
                    de:8d:32:78:da:e3:dd:90:f5:cb:21:85:96:d6:a9:
                    58:2e:67:8b:7e:74:45:e7:6b:8f:d1:1c:5c:c5:bb:
                    d1:92:25:e1:62:96:0d:53:c0:71:e2:13:94:62:4a:
                    0c:19:12:46:97:d5:40:66:ef:9a:43:6a:6e:c6:10:
                    0b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:70:38:D7:AC:59:37:6C:57:CA:A2:79:A6:CF:D2:5F:38:C6:6E:D2
            X509v3 Authority Key Identifier:
                keyid:C9:00:E3:EE:A8:BB:E3:BE:11:F8:8C:68:2B:D1:38:C2:65:07:F7:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQDj7qi7474R-IxoK9E4wmUH99w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1f431e-37c8-4080-9bb3-416204a02737/1/yQDj7qi7474R-IxoK9E4wmUH99w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1f431e-37c8-4080-9bb3-416204a02737/1/yQDj7qi7474R-IxoK9E4wmUH99w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:99:46:60:61:2a:b9:9e:57:2c:f4:07:92:c0:5e:24:19:aa:
         53:62:d9:c9:1b:f0:ab:dd:94:ae:23:6f:51:61:82:b2:25:a0:
         9c:85:f6:06:95:71:3d:fa:a9:90:50:11:77:3d:b6:e9:f9:c7:
         6f:d1:3e:ac:e0:1f:2c:0f:50:7c:fb:4c:03:6b:63:d6:cc:7a:
         6b:a3:da:d5:3e:3c:89:40:58:2f:10:19:6a:a7:bb:75:e1:56:
         ed:1c:3e:97:ff:b4:7f:13:7f:0f:7d:54:94:ff:eb:68:46:0e:
         c8:cb:17:26:5a:6b:fb:a7:71:26:2f:af:3e:41:d7:50:6a:9a:
         a3:72:1f:12:71:0b:e6:b2:dd:4d:42:b2:c9:1a:f4:f5:80:c8:
         cc:07:c0:87:05:f6:17:e7:cf:03:11:b5:23:b0:db:af:c6:cf:
         3e:9c:1a:e4:a3:3f:2d:7d:29:e0:bd:90:5c:6b:a1:15:51:24:
         42:51:df:be:90:c3:2c:70:67:45:af:20:7a:62:3a:e8:3a:e2:
         ec:26:f0:ea:a2:d5:a2:8d:34:0a:07:4d:d0:7f:ce:53:82:75:
         4e:30:e0:90:a6:78:ba:55:e3:cb:40:34:cd:59:30:e2:d3:bd:
         fd:6a:9c:40:73:bc:18:84:0a:d3:50:78:46:bb:d1:54:68:c0:
         3b:25:73:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7bt3IByppguhFfNhKZ9kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MDBlM2VlYThiYmUzYmUxMWY4OGM2ODJiZDEzOGMyNjUw
N2Y3ZGMwHhcNMjQwNjE1MjIwMzU3WhcNMjQwNjE2MjIwMzU3WjAzMTEwLwYDVQQD
Eyg0NjcwMzhkN2FjNTkzNzZjNTdjYWEyNzlhNmNmZDI1ZjM4YzY2ZWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzgr2BJSd5flqWh6CT7clpIfJFrS
z8yGRUZbWHKr4TqEUdabopDnA888CCtkWfh0Oybn/qWjWqjVLgGdGkOdobCGtzcS
fHUOZdGZ7h/+HP4bv+D9ithD8D43JwZ1/dXwGx+QyJrJhJIC0orKzxiWKMivA2op
7MVKpDTXO5/4z74ovD/U8CbsggyslijiHX2tSUsftPrhrVFYgSaekLS/6yDrI2+W
MC5JbcK1qS+fW5qrKkOG7jeCCG9eO5ZMDIBUprbejTJ42uPdkPXLIYWW1qlYLmeL
fnRF52uP0RxcxbvRkiXhYpYNU8Bx4hOUYkoMGRJGl9VAZu+aQ2puxhAL/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZwONesWTdsV8qieabP0l84xm7SMB8GA1UdIwQY
MBaAFMkA4+6ou+O+EfiMaCvROMJlB/fcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVFEajdxaTc0NzRSLUl4b0s5RTR3bVVIOTl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xZjQzMWUtMzdjOC00MDgwLTliYjMt
NDE2MjA0YTAyNzM3LzEveVFEajdxaTc0NzRSLUl4b0s5RTR3bVVIOTl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8xZjQzMWUtMzdjOC00MDgwLTliYjMtNDE2MjA0YTAyNzM3
LzEveVFEajdxaTc0NzRSLUl4b0s5RTR3bVVIOTl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZlGYGEq
uZ5XLPQHksBeJBmqU2LZyRvwq92UriNvUWGCsiWgnIX2BpVxPfqpkFARdz226fnH
b9E+rOAfLA9QfPtMA2tj1sx6a6Pa1T48iUBYLxAZaqe7deFW7Rw+l/+0fxN/D31U
lP/raEYOyMsXJlpr+6dxJi+vPkHXUGqao3IfEnEL5rLdTUKyyRr09YDIzAfAhwX2
F+fPAxG1I7Dbr8bPPpwa5KM/LX0p4L2QXGuhFVEkQlHfvpDDLHBnRa8gemI66Dri
7Cbw6qLVoo00CgdN0H/OU4J1TjDgkKZ4ulXjy0A0zVkw4tO9/WqcQHO8GIQK01B4
RrvRVGjAOyVznA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:05:16 2024 by rpki-client on console-fra.rpki-client.org