Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft
File:                     0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft (raw, json)
Hash identifier:          KXVYpddCNEpck7/vaBlvnAW3ghEBKMO+qMkNQLGN4Jc=
Subject key identifier:   A1:F9:14:0B:B9:7D:7D:BE:FF:51:5C:7A:24:43:98:68:61:EE:B6:5B
Authority key identifier: D0:90:4A:36:68:D1:D5:A1:9B:DE:41:E5:A1:BA:D2:E9:94:D6:98:05
Certificate issuer:       /CN=d0904a3668d1d5a19bde41e5a1bad2e994d69805
Certificate serial:       01901DECB5AE7A0C78D2901D24E330AEF4F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JBKNmjR1aGb3kHlobrS6ZTWmAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 22:02:50 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:50 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:50 +0000
Files and hashes:         1: 0JBKNmjR1aGb3kHlobrS6ZTWmAU.crl (hash: f9DNkgwqxiyvxfzFUBHkmGYBTkxwf1P8kkyRDl9IkZ0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0JBKNmjR1aGb3kHlobrS6ZTWmAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:b5:ae:7a:0c:78:d2:90:1d:24:e3:30:ae:f4:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0904a3668d1d5a19bde41e5a1bad2e994d69805
        Validity
            Not Before: Jun 15 22:02:50 2024 GMT
            Not After : Jun 16 22:02:50 2024 GMT
        Subject: CN=a1f9140bb97d7dbeff515c7a2443986861eeb65b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:29:d8:51:2a:fc:67:39:66:f9:cf:7e:de:64:
                    17:f0:bf:59:9b:9b:a6:d4:3f:6a:e8:3f:8f:cf:51:
                    1f:3b:72:76:47:7f:3b:f4:7e:f9:de:97:21:d0:66:
                    17:cd:51:3d:af:f1:1e:4e:88:6d:4b:59:1b:f4:07:
                    1d:19:67:0a:23:9d:f5:9d:84:5c:4e:6a:fa:3d:ca:
                    e5:bc:c7:02:58:18:5b:1f:a5:99:82:6a:0f:80:56:
                    19:50:a6:cd:1d:0e:6f:5b:31:87:36:aa:2d:00:de:
                    8c:da:6d:92:b9:15:15:1b:bf:18:60:03:98:9b:91:
                    a5:d5:c9:d7:77:2f:53:89:2d:be:80:32:59:f4:b2:
                    97:d8:c6:e7:31:41:36:57:de:08:fc:85:49:8d:8c:
                    33:1f:76:e8:5f:c2:d6:8a:1f:23:66:c8:d3:73:6c:
                    2f:23:bc:60:50:67:e1:bd:c7:1f:40:11:97:6f:73:
                    16:79:6d:ca:72:c3:b7:82:19:1e:1f:d7:d5:0b:ec:
                    2e:84:a2:7f:05:0d:a2:d8:82:3a:77:a6:d0:d6:51:
                    d2:75:2f:ee:95:c3:ab:e4:a8:75:d5:39:75:56:20:
                    27:4f:63:61:2e:12:35:4f:e9:02:77:5e:ad:6e:97:
                    b7:dd:2d:20:23:84:bc:e6:77:0c:fc:03:c4:09:2c:
                    c8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F9:14:0B:B9:7D:7D:BE:FF:51:5C:7A:24:43:98:68:61:EE:B6:5B
            X509v3 Authority Key Identifier:
                keyid:D0:90:4A:36:68:D1:D5:A1:9B:DE:41:E5:A1:BA:D2:E9:94:D6:98:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JBKNmjR1aGb3kHlobrS6ZTWmAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:18:ee:7b:6b:08:72:fc:6f:b8:85:7a:94:bd:14:5c:8b:48:
         c8:48:da:12:62:d4:c8:87:a9:ce:d4:ae:64:f8:52:42:96:07:
         a6:df:3d:71:d5:7c:f2:c5:66:ac:61:58:95:a1:9f:06:21:bf:
         e1:0e:c0:72:e2:ea:ec:23:dd:80:e3:26:36:b8:89:3c:18:82:
         6f:3a:68:0d:67:b5:c9:31:b4:b5:9f:cd:fd:ea:91:a5:40:f5:
         c9:b2:54:ed:32:04:f3:66:19:5e:88:f0:30:7a:93:67:40:d8:
         fa:4f:e1:f1:91:8e:a2:6d:d4:69:75:6f:e8:f8:b0:fc:12:b9:
         a5:8b:63:d9:26:1b:b0:e4:f1:5f:3d:00:9e:c6:2e:2b:fd:be:
         6e:8d:b7:7a:29:c8:cb:00:23:5d:6b:a0:46:d9:a4:fc:f8:8d:
         26:bb:79:80:06:bd:2a:ea:55:0a:6d:d3:b4:87:47:d2:f0:a6:
         92:13:08:88:f6:46:47:a2:c5:44:5f:ba:02:d1:d4:ae:26:d6:
         1a:fb:f3:3e:a1:62:2e:e0:09:50:af:41:45:40:d6:f5:26:c2:
         67:67:f7:df:0c:3f:e3:c0:d4:4c:3c:a1:26:07:f2:64:27:85:
         f1:3d:6d:de:a8:56:c9:d7:ff:b8:c4:c8:44:43:1a:0b:90:17:
         70:6b:33:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7LWuegx40pAdJOMwrvT1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOTA0YTM2NjhkMWQ1YTE5YmRlNDFlNWExYmFkMmU5OTRk
Njk4MDUwHhcNMjQwNjE1MjIwMjUwWhcNMjQwNjE2MjIwMjUwWjAzMTEwLwYDVQQD
EyhhMWY5MTQwYmI5N2Q3ZGJlZmY1MTVjN2EyNDQzOTg2ODYxZWViNjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSnYUSr8Zzlm+c9+3mQX8L9Zm5um
1D9q6D+Pz1EfO3J2R3879H753pch0GYXzVE9r/EeTohtS1kb9AcdGWcKI531nYRc
Tmr6PcrlvMcCWBhbH6WZgmoPgFYZUKbNHQ5vWzGHNqotAN6M2m2SuRUVG78YYAOY
m5Gl1cnXdy9TiS2+gDJZ9LKX2MbnMUE2V94I/IVJjYwzH3boX8LWih8jZsjTc2wv
I7xgUGfhvccfQBGXb3MWeW3KcsO3ghkeH9fVC+wuhKJ/BQ2i2II6d6bQ1lHSdS/u
lcOr5Kh11Tl1ViAnT2NhLhI1T+kCd16tbpe33S0gI4S85ncM/APECSzI+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKH5FAu5fX2+/1FceiRDmGhh7rZbMB8GA1UdIwQY
MBaAFNCQSjZo0dWhm95B5aG60umU1pgFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpCS05talIxYUdiM2tIbG9iclM2WlRXbUFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8yMGM5MWYtMTA1MC00ZTQ0LWEwN2Yt
OTA3NjMwMWRkMTk0LzEvMEpCS05talIxYUdiM2tIbG9iclM2WlRXbUFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8yMGM5MWYtMTA1MC00ZTQ0LWEwN2YtOTA3NjMwMWRkMTk0
LzEvMEpCS05talIxYUdiM2tIbG9iclM2WlRXbUFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIRjue2sI
cvxvuIV6lL0UXItIyEjaEmLUyIepztSuZPhSQpYHpt89cdV88sVmrGFYlaGfBiG/
4Q7AcuLq7CPdgOMmNriJPBiCbzpoDWe1yTG0tZ/N/eqRpUD1ybJU7TIE82YZXojw
MHqTZ0DY+k/h8ZGOom3UaXVv6Piw/BK5pYtj2SYbsOTxXz0AnsYuK/2+bo23einI
ywAjXWugRtmk/PiNJrt5gAa9KupVCm3TtIdH0vCmkhMIiPZGR6LFRF+6AtHUribW
GvvzPqFiLuAJUK9BRUDW9SbCZ2f33ww/48DUTDyhJgfyZCeF8T1t3qhWydf/uMTI
REMaC5AXcGszKw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:10:02 2024 by rpki-client on console-fra.rpki-client.org