Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
File:                     nE-xCAvPALb912uv2dUTPF4cPTI.mft (raw, json)
Hash identifier:          pP0x2pVnkTZK0GJ09Zv89Rwp4m/1iZz23RiFx4Zgr2E=
Subject key identifier:   51:64:9A:6C:A0:96:4D:02:63:85:18:65:D9:1C:F0:10:D2:F8:44:89
Authority key identifier: 9C:4F:B1:08:0B:CF:00:B6:FD:D7:6B:AF:D9:D5:13:3C:5E:1C:3D:32
Certificate issuer:       /CN=9c4fb1080bcf00b6fdd76bafd9d5133c5e1c3d32
Certificate serial:       01901D45F30C64D56473AD94B2D317E8DC12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
Manifest number:          01AC
Signing time:             Sat 15 Jun 2024 19:00:41 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:41 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:41 +0000
Files and hashes:         1: nE-xCAvPALb912uv2dUTPF4cPTI.crl (hash: V3NFznC5w7v1fXdOlZt0Ho1grjC3HPjrYHYHfY0EuTI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:45:f3:0c:64:d5:64:73:ad:94:b2:d3:17:e8:dc:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c4fb1080bcf00b6fdd76bafd9d5133c5e1c3d32
        Validity
            Not Before: Jun 15 19:00:41 2024 GMT
            Not After : Jun 16 19:00:41 2024 GMT
        Subject: CN=51649a6ca0964d0263851865d91cf010d2f84489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:27:c9:48:08:4f:5e:6d:13:97:7b:57:ec:31:
                    88:93:fd:fd:99:0b:6f:c5:b3:ed:f9:c6:d1:e6:04:
                    6d:31:db:a9:f6:38:2e:24:f8:fa:f6:b9:3d:9c:7a:
                    2a:54:19:c2:70:77:9a:3d:02:49:51:96:c8:09:46:
                    20:0b:c3:c8:b0:1a:74:af:d5:99:b3:ae:20:22:b4:
                    9f:8d:f6:a5:19:58:74:cd:c9:e5:ab:66:5d:8b:13:
                    a4:49:a0:2c:a0:35:ba:80:0a:ae:d6:d0:60:fd:f0:
                    59:8f:6f:f2:a7:1f:f7:94:bc:f1:fa:14:23:20:34:
                    2f:98:bf:18:2d:9b:f7:e3:3f:b7:df:9c:43:b5:8e:
                    16:21:b3:10:c9:98:30:80:5d:d9:62:16:9f:96:9b:
                    a5:c1:d1:de:32:0e:98:85:e0:d4:c5:55:2b:4a:c7:
                    35:21:0f:d4:89:6a:fd:fb:bc:ce:b2:45:ea:49:c1:
                    69:dc:b2:03:1d:08:33:86:22:94:9e:da:5b:a9:be:
                    96:38:be:b6:2d:70:30:e5:b7:e6:13:eb:83:6d:47:
                    22:e2:04:59:ad:79:f3:c3:9c:d3:38:c6:ee:df:51:
                    a1:dc:dd:2c:55:ac:1a:7c:b8:e3:ec:97:f4:46:22:
                    d6:c1:33:4c:f2:c4:0c:c3:77:f7:64:7a:7e:ce:1e:
                    fd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:64:9A:6C:A0:96:4D:02:63:85:18:65:D9:1C:F0:10:D2:F8:44:89
            X509v3 Authority Key Identifier:
                keyid:9C:4F:B1:08:0B:CF:00:B6:FD:D7:6B:AF:D9:D5:13:3C:5E:1C:3D:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:2b:f3:de:42:2d:fe:2c:63:27:02:94:21:55:62:11:5c:56:
         ce:c6:b7:08:de:09:0d:d3:bf:0b:42:9a:0d:67:5a:00:d1:2a:
         e6:ce:19:47:55:96:3b:4e:6f:c9:7a:ac:41:cd:c7:87:3a:a1:
         1e:aa:e2:d0:0d:e0:56:57:73:a8:a0:43:d4:99:57:f8:ed:10:
         7a:81:07:b0:da:1e:45:49:22:34:36:71:57:31:ca:a2:d1:23:
         1c:1d:91:c5:9d:2a:87:e9:ef:3f:b5:36:ff:de:ba:59:1a:92:
         8d:18:b0:20:14:d6:da:47:e2:90:b9:14:ca:2e:86:9d:0a:d6:
         72:35:b5:06:cd:9f:f1:cd:af:98:52:f4:52:22:12:a2:04:cb:
         7d:92:c2:33:3c:09:43:96:36:fc:ed:f2:86:eb:fa:43:4c:6d:
         79:cf:73:08:35:d2:a3:42:f0:d1:6f:8d:60:69:8d:b4:c4:45:
         c5:c5:26:8e:29:52:7f:5e:2e:fa:22:5f:d9:53:14:07:38:42:
         51:12:06:20:8c:d8:b6:aa:a4:16:db:f1:81:4c:69:55:62:9e:
         d0:35:61:4b:24:26:88:95:88:a2:d2:35:54:3e:26:09:04:cb:
         6f:e4:41:97:54:2a:d7:83:d8:ad:f0:68:d6:00:29:90:bb:6c:
         43:c2:4d:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdRfMMZNVkc62UstMX6NwSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNGZiMTA4MGJjZjAwYjZmZGQ3NmJhZmQ5ZDUxMzNjNWUx
YzNkMzIwHhcNMjQwNjE1MTkwMDQxWhcNMjQwNjE2MTkwMDQxWjAzMTEwLwYDVQQD
Eyg1MTY0OWE2Y2EwOTY0ZDAyNjM4NTE4NjVkOTFjZjAxMGQyZjg0NDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yfJSAhPXm0Tl3tX7DGIk/39mQtv
xbPt+cbR5gRtMdup9jguJPj69rk9nHoqVBnCcHeaPQJJUZbICUYgC8PIsBp0r9WZ
s64gIrSfjfalGVh0zcnlq2ZdixOkSaAsoDW6gAqu1tBg/fBZj2/ypx/3lLzx+hQj
IDQvmL8YLZv34z+335xDtY4WIbMQyZgwgF3ZYhaflpulwdHeMg6YheDUxVUrSsc1
IQ/UiWr9+7zOskXqScFp3LIDHQgzhiKUntpbqb6WOL62LXAw5bfmE+uDbUci4gRZ
rXnzw5zTOMbu31Gh3N0sVawafLjj7Jf0RiLWwTNM8sQMw3f3ZHp+zh79vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFkmmyglk0CY4UYZdkc8BDS+ESJMB8GA1UdIwQY
MBaAFJxPsQgLzwC2/ddrr9nVEzxeHD0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkUteENBdlBBTGI5MTJ1djJkVVRQRjRjUFRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85YTM1OWYtNGI3MC00OGMzLWEzOGYt
MjNiN2NlMzRlYmFjLzEvbkUteENBdlBBTGI5MTJ1djJkVVRQRjRjUFRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS85YTM1OWYtNGI3MC00OGMzLWEzOGYtMjNiN2NlMzRlYmFj
LzEvbkUteENBdlBBTGI5MTJ1djJkVVRQRjRjUFRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbivz3kIt
/ixjJwKUIVViEVxWzsa3CN4JDdO/C0KaDWdaANEq5s4ZR1WWO05vyXqsQc3Hhzqh
Hqri0A3gVldzqKBD1JlX+O0QeoEHsNoeRUkiNDZxVzHKotEjHB2RxZ0qh+nvP7U2
/966WRqSjRiwIBTW2kfikLkUyi6GnQrWcjW1Bs2f8c2vmFL0UiISogTLfZLCMzwJ
Q5Y2/O3yhuv6Q0xtec9zCDXSo0Lw0W+NYGmNtMRFxcUmjilSf14u+iJf2VMUBzhC
URIGIIzYtqqkFtvxgUxpVWKe0DVhSyQmiJWIotI1VD4mCQTLb+RBl1Qq14PYrfBo
1gApkLtsQ8JNOw==
-----END CERTIFICATE-----
Generated at Sat Jun 15 20:01:40 2024 by rpki-client on console-fra.rpki-client.org