Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
File:                     gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft (raw, json)
Hash identifier:          ilwrHQj/rf5yWH0/00WF4CLmWbxd2hdTxfAmfH+35Oc=
Subject key identifier:   73:33:0F:E5:C6:6C:92:1D:01:2D:F1:02:C8:9E:E6:F4:B4:CF:DD:63
Authority key identifier: 81:CD:02:62:A2:21:C3:5A:67:CF:17:3A:60:D1:EC:D9:AF:AB:DD:B5
Certificate issuer:       /CN=81cd0262a221c35a67cf173a60d1ecd9afabddb5
Certificate serial:       01901DED9D4D81845A2BC7C944B8815199B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
Manifest number:          0B34
Signing time:             Sat 15 Jun 2024 22:03:49 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:49 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:49 +0000
Files and hashes:         1: gc0CYqIhw1pnzxc6YNHs2a-r3bU.crl (hash: 3W0Foi294UTgJDaZRwfGRXG5v1t1qdKmPTcyKfcGCx8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:9d:4d:81:84:5a:2b:c7:c9:44:b8:81:51:99:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81cd0262a221c35a67cf173a60d1ecd9afabddb5
        Validity
            Not Before: Jun 15 22:03:49 2024 GMT
            Not After : Jun 16 22:03:49 2024 GMT
        Subject: CN=73330fe5c66c921d012df102c89ee6f4b4cfdd63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:70:df:e2:64:87:2a:07:90:06:3c:8e:26:c5:
                    ec:5d:29:34:fb:a9:80:89:27:d9:45:8f:b8:66:e5:
                    a4:9c:b5:05:86:a0:dc:62:53:05:5d:97:20:16:2e:
                    2e:ce:1b:9a:ab:20:10:33:09:47:e1:ca:8e:1c:f2:
                    aa:2d:10:50:49:f8:aa:18:c9:70:04:c6:43:49:4b:
                    57:a9:b7:c3:23:0e:8f:f4:23:bc:b4:5c:74:d4:ca:
                    65:b6:2e:e7:05:65:3e:e6:c3:00:d0:26:ec:bc:30:
                    ea:fe:06:42:c3:d9:f2:d9:fc:22:d5:75:20:bf:35:
                    16:fb:b8:6b:ae:c2:92:89:be:75:9e:1f:0f:72:22:
                    8e:8b:fd:cb:b2:35:da:51:00:43:29:0b:ee:07:38:
                    fb:4b:43:14:0d:c8:19:9f:88:32:8c:b8:82:ce:d9:
                    51:e8:1f:63:1d:63:4a:4d:db:02:36:92:d3:7b:c6:
                    c5:84:c7:89:2c:ed:04:af:23:d2:0b:c7:d1:b6:08:
                    25:ec:59:30:6a:ed:dc:2e:77:79:94:10:6d:55:5b:
                    c9:d0:14:cf:e0:82:9c:4f:40:01:31:02:ab:76:20:
                    6b:f3:5f:80:7e:1b:fa:f6:53:db:2a:b2:44:89:f3:
                    fb:89:a9:57:7f:e8:0e:f6:57:c8:53:fb:33:c7:9a:
                    0b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:33:0F:E5:C6:6C:92:1D:01:2D:F1:02:C8:9E:E6:F4:B4:CF:DD:63
            X509v3 Authority Key Identifier:
                keyid:81:CD:02:62:A2:21:C3:5A:67:CF:17:3A:60:D1:EC:D9:AF:AB:DD:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:5d:9a:37:e9:b2:fa:ff:94:04:9f:47:fd:d5:01:51:d8:f9:
         e9:ab:4a:95:2c:28:44:2b:2b:fe:ba:04:c0:38:9a:20:4b:e4:
         d3:7c:08:45:c4:94:6e:29:6b:79:3a:b1:11:4b:85:eb:6d:e5:
         d0:42:c7:5c:fb:09:3d:f1:7f:6e:5d:65:64:b7:d1:26:63:94:
         0b:3b:a5:d1:01:b1:4a:c5:79:a4:5a:d0:b4:32:e5:ea:81:c8:
         5c:a1:b4:23:90:3d:02:ff:b7:7c:44:e2:88:5e:99:8c:80:9c:
         48:96:61:64:73:51:cb:c8:a3:20:06:57:bb:b9:aa:16:75:cd:
         85:61:c0:95:2d:38:16:16:e1:37:b2:27:56:39:87:b2:78:e5:
         06:cf:6f:ae:98:7c:db:83:49:7a:7a:ff:c3:a4:ac:00:59:b4:
         de:91:1b:e0:f5:e7:bf:e5:16:5a:79:5b:d6:b0:82:d9:2f:c7:
         e6:46:23:12:fe:da:5c:f7:e0:6a:b5:8e:b9:7d:41:f3:5b:91:
         be:01:b6:42:35:d9:a7:d8:fd:c8:4c:24:72:48:f9:f2:ad:44:
         1c:de:63:37:2b:72:6f:f6:ba:dd:be:07:23:b4:da:d0:4e:b2:
         d1:7f:0c:4f:25:fe:5e:5b:f4:72:f6:7c:f9:5b:3b:21:0b:a9:
         04:d0:35:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7Z1NgYRaK8fJRLiBUZm4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2QwMjYyYTIyMWMzNWE2N2NmMTczYTYwZDFlY2Q5YWZh
YmRkYjUwHhcNMjQwNjE1MjIwMzQ5WhcNMjQwNjE2MjIwMzQ5WjAzMTEwLwYDVQQD
Eyg3MzMzMGZlNWM2NmM5MjFkMDEyZGYxMDJjODllZTZmNGI0Y2ZkZDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nDf4mSHKgeQBjyOJsXsXSk0+6mA
iSfZRY+4ZuWknLUFhqDcYlMFXZcgFi4uzhuaqyAQMwlH4cqOHPKqLRBQSfiqGMlw
BMZDSUtXqbfDIw6P9CO8tFx01Mplti7nBWU+5sMA0CbsvDDq/gZCw9ny2fwi1XUg
vzUW+7hrrsKSib51nh8PciKOi/3LsjXaUQBDKQvuBzj7S0MUDcgZn4gyjLiCztlR
6B9jHWNKTdsCNpLTe8bFhMeJLO0EryPSC8fRtggl7Fkwau3cLnd5lBBtVVvJ0BTP
4IKcT0ABMQKrdiBr81+Afhv69lPbKrJEifP7ialXf+gO9lfIU/szx5oLEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMzD+XGbJIdAS3xAsie5vS0z91jMB8GA1UdIwQY
MBaAFIHNAmKiIcNaZ88XOmDR7Nmvq921MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2MwQ1lxSWh3MXBuenhjNllOSHMyYS1yM2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83NDA4MTMtOTE4MC00MDZmLWFmNmEt
ZmRkMDk2MmNlYWFiLzEvZ2MwQ1lxSWh3MXBuenhjNllOSHMyYS1yM2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83NDA4MTMtOTE4MC00MDZmLWFmNmEtZmRkMDk2MmNlYWFi
LzEvZ2MwQ1lxSWh3MXBuenhjNllOSHMyYS1yM2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALV2aN+my
+v+UBJ9H/dUBUdj56atKlSwoRCsr/roEwDiaIEvk03wIRcSUbilreTqxEUuF623l
0ELHXPsJPfF/bl1lZLfRJmOUCzul0QGxSsV5pFrQtDLl6oHIXKG0I5A9Av+3fETi
iF6ZjICcSJZhZHNRy8ijIAZXu7mqFnXNhWHAlS04FhbhN7InVjmHsnjlBs9vrph8
24NJenr/w6SsAFm03pEb4PXnv+UWWnlb1rCC2S/H5kYjEv7aXPfgarWOuX1B81uR
vgG2QjXZp9j9yEwkckj58q1EHN5jNytyb/a63b4HI7Ta0E6y0X8MTyX+Xlv0cvZ8
+Vs7IQupBNA1Vg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:07:07 2024 by rpki-client on console-fra.rpki-client.org