Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a5e04d-487f-45ba-acab-f6e8fe3ef9ae/1/a2VUSgt2kuQAmWmjdRfA6z5JAfQ.mft
File:                     a2VUSgt2kuQAmWmjdRfA6z5JAfQ.mft (raw, json)
Hash identifier:          COTercxWrxrJmTUiLmOP0//j3Hsckbdpy5K9GACK0PE=
Subject key identifier:   D4:8D:FE:9B:73:06:3F:F6:4F:73:90:B4:60:40:64:79:62:D1:4A:BF
Authority key identifier: 6B:65:54:4A:0B:76:92:E4:00:99:69:A3:75:17:C0:EB:3E:49:01:F4
Certificate issuer:       /CN=6b65544a0b7692e4009969a37517c0eb3e4901f4
Certificate serial:       01901F34F0F5A691459D9AAF84FE0F4AB717
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a2VUSgt2kuQAmWmjdRfA6z5JAfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/a5e04d-487f-45ba-acab-f6e8fe3ef9ae/1/a2VUSgt2kuQAmWmjdRfA6z5JAfQ.mft
Manifest number:          080A
Signing time:             Sun 16 Jun 2024 04:01:21 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:21 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:21 +0000
Files and hashes:         1: a2VUSgt2kuQAmWmjdRfA6z5JAfQ.crl (hash: CtkAVA34j5IxSfr+XxqFMuwCVG6/+58fd6Nfu9NjwEc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/a5e04d-487f-45ba-acab-f6e8fe3ef9ae/1/a2VUSgt2kuQAmWmjdRfA6z5JAfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/a5e04d-487f-45ba-acab-f6e8fe3ef9ae/1/a2VUSgt2kuQAmWmjdRfA6z5JAfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a2VUSgt2kuQAmWmjdRfA6z5JAfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:f0:f5:a6:91:45:9d:9a:af:84:fe:0f:4a:b7:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b65544a0b7692e4009969a37517c0eb3e4901f4
        Validity
            Not Before: Jun 16 04:01:21 2024 GMT
            Not After : Jun 17 04:01:21 2024 GMT
        Subject: CN=d48dfe9b73063ff64f7390b46040647962d14abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2a:97:02:81:52:ab:19:c8:4b:e8:33:ca:4a:
                    fc:ce:e6:dc:ef:94:c8:f7:93:33:45:1a:fe:82:b5:
                    f6:e1:b7:e5:c6:0c:02:73:f7:31:e7:ea:37:b4:68:
                    6b:8c:7c:6c:78:9b:a5:05:58:18:f2:d3:b8:98:65:
                    b1:e3:8d:b3:28:2c:c8:7a:d6:ba:8e:9e:f2:d6:e2:
                    e5:f3:e6:e6:51:5f:6b:fa:3b:64:59:6f:f7:4d:7c:
                    f5:2d:b3:8d:8d:d0:e0:b8:9c:de:21:6a:5c:b2:cb:
                    82:03:c1:87:3d:ef:12:73:a4:a5:20:22:7d:38:71:
                    0b:d1:0c:b7:af:9b:1f:da:9e:db:5a:87:b7:b0:9f:
                    5b:89:ff:9a:85:f6:75:7e:46:a4:2d:e9:58:25:01:
                    78:45:33:7e:76:49:32:53:17:43:12:df:25:71:98:
                    44:6e:0e:18:8a:ef:73:82:e5:b4:72:7b:02:15:35:
                    c6:2f:80:68:91:50:ee:09:19:1c:1b:6c:8e:8c:d7:
                    bd:a8:10:b8:0b:07:3d:90:c1:20:0b:b1:8b:6b:c0:
                    9b:61:bd:a5:c7:f5:8a:0a:02:75:7a:75:09:7e:ea:
                    ef:be:0b:cc:aa:e8:54:ae:73:b3:d0:d4:8f:0b:4d:
                    51:1b:fe:e7:a6:e8:e4:48:33:ad:9f:c1:7f:89:6e:
                    ff:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8D:FE:9B:73:06:3F:F6:4F:73:90:B4:60:40:64:79:62:D1:4A:BF
            X509v3 Authority Key Identifier:
                keyid:6B:65:54:4A:0B:76:92:E4:00:99:69:A3:75:17:C0:EB:3E:49:01:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2VUSgt2kuQAmWmjdRfA6z5JAfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a5e04d-487f-45ba-acab-f6e8fe3ef9ae/1/a2VUSgt2kuQAmWmjdRfA6z5JAfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a5e04d-487f-45ba-acab-f6e8fe3ef9ae/1/a2VUSgt2kuQAmWmjdRfA6z5JAfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:07:77:72:c3:81:56:4c:55:d9:64:b6:de:fc:06:97:dc:98:
         74:ee:82:b1:37:76:94:1e:f0:be:f4:3d:f0:06:80:8a:02:5a:
         20:88:64:c1:08:23:9b:a0:3d:e5:ac:04:b1:48:89:43:45:04:
         f6:07:ee:c0:02:75:5c:57:4e:80:fb:52:a5:86:50:a1:ab:00:
         3b:25:86:1b:96:d5:f4:60:aa:bb:67:0b:8c:aa:7b:e6:0e:e5:
         07:38:f4:78:69:1a:1f:61:c1:05:47:31:2a:bf:28:bf:5c:63:
         be:58:d3:d1:53:ac:e0:fa:d8:ff:3b:97:53:89:b2:22:02:09:
         1a:0b:2b:54:7d:72:66:76:36:20:e8:a9:80:57:05:e2:13:d8:
         d4:e9:4f:b2:14:48:e4:79:73:e2:9a:19:b3:ae:3d:d6:f7:f8:
         32:cb:68:8d:17:0d:24:f4:09:cb:bd:19:99:8a:39:3d:fe:26:
         12:df:de:8a:5c:1b:57:ef:92:74:04:48:91:e3:d5:45:50:25:
         b3:92:89:d5:5e:48:e5:01:db:29:40:b3:58:df:d1:b4:84:8b:
         40:29:e0:4d:9b:9d:4a:b5:d4:a1:57:8b:c1:af:2e:a0:e6:a1:
         3c:58:a4:7d:fe:36:b2:35:4c:9a:a2:3a:de:3d:30:27:fb:17:
         fe:38:ae:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAfNPD1ppFFnZqvhP4PSrcXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNjU1NDRhMGI3NjkyZTQwMDk5NjlhMzc1MTdjMGViM2U0
OTAxZjQwHhcNMjQwNjE2MDQwMTIxWhcNMjQwNjE3MDQwMTIxWjAzMTEwLwYDVQQD
EyhkNDhkZmU5YjczMDYzZmY2NGY3MzkwYjQ2MDQwNjQ3OTYyZDE0YWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSqXAoFSqxnIS+gzykr8zubc75TI
95MzRRr+grX24bflxgwCc/cx5+o3tGhrjHxseJulBVgY8tO4mGWx442zKCzIeta6
jp7y1uLl8+bmUV9r+jtkWW/3TXz1LbONjdDguJzeIWpcssuCA8GHPe8Sc6SlICJ9
OHEL0Qy3r5sf2p7bWoe3sJ9bif+ahfZ1fkakLelYJQF4RTN+dkkyUxdDEt8lcZhE
bg4Yiu9zguW0cnsCFTXGL4BokVDuCRkcG2yOjNe9qBC4Cwc9kMEgC7GLa8CbYb2l
x/WKCgJ1enUJfurvvgvMquhUrnOz0NSPC01RG/7npujkSDOtn8F/iW7/bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSN/ptzBj/2T3OQtGBAZHli0Uq/MB8GA1UdIwQY
MBaAFGtlVEoLdpLkAJlpo3UXwOs+SQH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTJWVVNndDJrdVFBbVdtamRSZkE2ejVKQWZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9hNWUwNGQtNDg3Zi00NWJhLWFjYWIt
ZjZlOGZlM2VmOWFlLzEvYTJWVVNndDJrdVFBbVdtamRSZkE2ejVKQWZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9hNWUwNGQtNDg3Zi00NWJhLWFjYWItZjZlOGZlM2VmOWFl
LzEvYTJWVVNndDJrdVFBbVdtamRSZkE2ejVKQWZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqAd3csOB
VkxV2WS23vwGl9yYdO6CsTd2lB7wvvQ98AaAigJaIIhkwQgjm6A95awEsUiJQ0UE
9gfuwAJ1XFdOgPtSpYZQoasAOyWGG5bV9GCqu2cLjKp75g7lBzj0eGkaH2HBBUcx
Kr8ov1xjvljT0VOs4PrY/zuXU4myIgIJGgsrVH1yZnY2IOipgFcF4hPY1OlPshRI
5Hlz4poZs6491vf4MstojRcNJPQJy70ZmYo5Pf4mEt/eilwbV++SdARIkePVRVAl
s5KJ1V5I5QHbKUCzWN/RtISLQCngTZudSrXUoVeLwa8uoOahPFikff42sjVMmqI6
3j0wJ/sX/jiufw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 06:34:37 2024 by rpki-client on console-ams.rpki-client.org