Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
File:                     4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft (raw, json)
Hash identifier:          C4vEQiHUUx+iLz0NTg86sWhD4wzMSE0EMiOqeGm47BE=
Subject key identifier:   36:1E:92:49:52:34:28:FA:0C:8D:C4:8D:FE:A1:77:6C:A2:08:3C:96
Authority key identifier: E1:F4:3F:3E:61:99:0F:D3:E5:76:7D:EB:E9:8E:51:CC:19:CA:C7:08
Certificate issuer:       /CN=e1f43f3e61990fd3e5767debe98e51cc19cac708
Certificate serial:       01901E8F9A703AB7A5173DCEF9281467E09A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
Manifest number:          80
Signing time:             Sun 16 Jun 2024 01:00:45 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:45 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:45 +0000
Files and hashes:         1: 4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl (hash: nSH9x1Zxq5Op/z1uOJIWoeMjv7dPqINrd7dKb0mDHhE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:9a:70:3a:b7:a5:17:3d:ce:f9:28:14:67:e0:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1f43f3e61990fd3e5767debe98e51cc19cac708
        Validity
            Not Before: Jun 16 01:00:45 2024 GMT
            Not After : Jun 17 01:00:45 2024 GMT
        Subject: CN=361e9249523428fa0c8dc48dfea1776ca2083c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3f:a3:17:4f:12:8d:ae:3c:52:c4:79:05:cf:
                    10:5e:c0:91:7c:65:ca:de:84:77:89:44:a4:58:f6:
                    9f:3a:0a:0d:1e:9f:4b:c7:30:13:4a:1b:24:ce:d3:
                    4c:d9:15:f2:5d:64:02:c4:52:c6:d2:5b:36:05:5b:
                    82:25:d6:9d:0a:38:46:e6:2f:a6:cd:40:8f:41:65:
                    5f:a1:25:99:5e:c5:22:e3:13:07:e5:92:78:4f:e8:
                    17:08:91:ad:89:c7:67:44:6e:2b:f5:2f:60:ff:9f:
                    cf:8b:72:00:28:fa:04:5f:86:3b:ae:8c:ac:95:89:
                    56:8e:90:0f:76:2d:7f:83:ac:84:7a:7d:df:63:4f:
                    78:ed:cf:39:47:4d:a8:89:97:81:ba:7e:6e:5b:94:
                    68:e8:55:f9:41:c6:61:37:5c:ff:01:84:82:a9:e0:
                    8d:d3:f9:45:5b:32:5e:5d:79:e2:27:2c:9e:1f:14:
                    51:56:b7:1a:e0:90:31:b2:18:15:98:dc:a0:17:57:
                    12:82:92:14:0b:15:bc:6d:f8:de:dd:98:c2:7e:c2:
                    d1:9b:45:12:78:be:e0:40:70:54:84:24:65:06:2d:
                    fc:59:d9:a1:70:c1:f3:75:b6:1f:7b:72:93:84:a1:
                    43:8f:61:e4:17:48:88:7d:f1:73:20:d4:da:2c:10:
                    0e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1E:92:49:52:34:28:FA:0C:8D:C4:8D:FE:A1:77:6C:A2:08:3C:96
            X509v3 Authority Key Identifier:
                keyid:E1:F4:3F:3E:61:99:0F:D3:E5:76:7D:EB:E9:8E:51:CC:19:CA:C7:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:03:94:c2:1f:48:c2:34:e7:24:05:26:13:93:67:0a:54:f5:
         10:cc:03:a1:6b:e0:67:35:9c:8e:e6:34:b2:fb:62:70:2d:9c:
         8a:d0:bf:d7:1d:27:ec:7a:7d:b6:37:b9:2a:20:ff:49:90:bd:
         75:09:cd:33:00:ea:d9:14:bf:41:54:c9:be:3e:bb:a3:6b:25:
         8c:81:47:06:34:0b:26:a6:af:69:60:a9:de:c1:c5:6e:fd:2f:
         fd:d7:e8:24:1b:2b:92:44:fa:52:7d:e9:1f:9a:df:ce:8e:22:
         75:65:df:d4:d5:9f:f6:59:ea:1c:a5:77:38:01:18:9d:c5:49:
         9b:dc:5b:7c:fa:c5:b2:e1:d6:13:dc:69:8e:8b:3d:5f:bb:e6:
         69:c5:4b:a0:1d:eb:7c:fd:78:7b:da:eb:06:2e:ab:0a:d9:aa:
         86:2b:44:f1:79:ad:3b:e6:a1:81:c1:07:86:d4:88:33:97:33:
         b5:68:5f:fe:7c:0d:27:ff:e6:c7:a0:31:f9:65:29:76:de:84:
         e1:2e:6c:c1:38:86:63:0a:d0:b9:cc:af:e8:7f:21:e1:3d:2c:
         13:99:78:ce:03:d2:e8:5e:c3:cb:a0:15:bf:5f:b5:2a:62:df:
         df:07:04:04:a1:43:44:ac:2a:ae:8b:7d:b5:47:13:9c:d1:fb:
         1f:71:d1:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAej5pwOrelFz3O+SgUZ+CaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZjQzZjNlNjE5OTBmZDNlNTc2N2RlYmU5OGU1MWNjMTlj
YWM3MDgwHhcNMjQwNjE2MDEwMDQ1WhcNMjQwNjE3MDEwMDQ1WjAzMTEwLwYDVQQD
EygzNjFlOTI0OTUyMzQyOGZhMGM4ZGM0OGRmZWExNzc2Y2EyMDgzYzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzz+jF08Sja48UsR5Bc8QXsCRfGXK
3oR3iUSkWPafOgoNHp9LxzATShskztNM2RXyXWQCxFLG0ls2BVuCJdadCjhG5i+m
zUCPQWVfoSWZXsUi4xMH5ZJ4T+gXCJGticdnRG4r9S9g/5/Pi3IAKPoEX4Y7roys
lYlWjpAPdi1/g6yEen3fY0947c85R02oiZeBun5uW5Ro6FX5QcZhN1z/AYSCqeCN
0/lFWzJeXXniJyyeHxRRVrca4JAxshgVmNygF1cSgpIUCxW8bfje3ZjCfsLRm0US
eL7gQHBUhCRlBi38WdmhcMHzdbYfe3KThKFDj2HkF0iIffFzINTaLBAOyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYekklSNCj6DI3Ejf6hd2yiCDyWMB8GA1UdIwQY
MBaAFOH0Pz5hmQ/T5XZ96+mOUcwZyscIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGZRX1BtR1pEOVBsZG4zcjZZNVJ6Qm5LeHdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9kNTM4M2ItMTBlNS00M2U5LWIzMjAt
MzIzNDE2MGRiY2Q0LzEvNGZRX1BtR1pEOVBsZG4zcjZZNVJ6Qm5LeHdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9kNTM4M2ItMTBlNS00M2U5LWIzMjAtMzIzNDE2MGRiY2Q0
LzEvNGZRX1BtR1pEOVBsZG4zcjZZNVJ6Qm5LeHdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcwOUwh9I
wjTnJAUmE5NnClT1EMwDoWvgZzWcjuY0svticC2citC/1x0n7Hp9tje5KiD/SZC9
dQnNMwDq2RS/QVTJvj67o2sljIFHBjQLJqavaWCp3sHFbv0v/dfoJBsrkkT6Un3p
H5rfzo4idWXf1NWf9lnqHKV3OAEYncVJm9xbfPrFsuHWE9xpjos9X7vmacVLoB3r
fP14e9rrBi6rCtmqhitE8XmtO+ahgcEHhtSIM5cztWhf/nwNJ//mx6Ax+WUpdt6E
4S5swTiGYwrQucyv6H8h4T0sE5l4zgPS6F7Dy6AVv1+1KmLf3wcEBKFDRKwqrot9
tUcTnNH7H3HR2Q==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:05:23 2024 by rpki-client on console-fra.rpki-client.org