Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
File:                     YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft (raw, json)
Hash identifier:          Y30OQQtUH/F8TSwect7AnD6EHqv0wL4BN8aUYN07aaQ=
Subject key identifier:   4A:8D:EF:C0:5E:9D:1F:47:70:67:DF:1E:19:D3:FB:3E:E5:54:BE:A8
Authority key identifier: 60:6F:0A:EC:9F:C9:1F:4C:C6:04:9C:F2:D9:54:2E:BD:82:51:5A:EF
Certificate issuer:       /CN=606f0aec9fc91f4cc6049cf2d9542ebd82515aef
Certificate serial:       01901E8FB69BA00E09C776DB57D3367F74C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
Manifest number:          11C4
Signing time:             Sun 16 Jun 2024 01:00:53 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:53 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:53 +0000
Files and hashes:         1: YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl (hash: ox2XDiVVveqW126vA6SfvfjwBvWaRgzxD72Ua1ibQhU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:b6:9b:a0:0e:09:c7:76:db:57:d3:36:7f:74:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606f0aec9fc91f4cc6049cf2d9542ebd82515aef
        Validity
            Not Before: Jun 16 01:00:53 2024 GMT
            Not After : Jun 17 01:00:53 2024 GMT
        Subject: CN=4a8defc05e9d1f477067df1e19d3fb3ee554bea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d1:cb:3c:a5:7a:f8:16:af:f4:6c:e4:57:46:
                    3e:d6:cf:c2:7e:ca:75:e5:eb:fb:9e:ed:8e:00:7b:
                    be:87:a0:d5:ac:ba:e8:77:33:bd:54:74:f7:c0:b2:
                    5d:72:1f:38:6b:bc:f5:22:60:4d:54:fd:66:d2:07:
                    77:b6:af:f3:6e:ee:25:c2:5c:4c:70:ab:e6:eb:36:
                    02:6b:c9:bc:18:44:ea:30:13:bc:51:a2:85:27:17:
                    09:d4:9f:68:62:a0:74:8e:66:9b:2f:a4:74:af:55:
                    2a:cb:2f:24:48:a5:45:e8:8e:4e:f6:8d:b9:ac:07:
                    50:f2:de:7c:73:1e:d9:2f:74:ac:41:b8:53:94:5e:
                    07:ee:a9:24:1f:39:16:02:9e:93:94:b8:0a:31:39:
                    36:0f:ae:df:d0:f6:f8:73:bc:bb:ce:b2:0a:c7:3d:
                    6e:03:33:28:14:67:0c:fa:99:c8:39:8b:d3:4d:14:
                    07:0b:62:1e:58:22:a3:f8:82:f3:f9:bf:ef:ab:6c:
                    a3:8c:a0:6e:1b:9e:14:9a:6d:41:f8:23:ab:59:19:
                    26:cf:fd:8b:8f:cd:5b:43:ef:1a:e1:98:bf:32:73:
                    bc:93:da:be:e8:12:0d:45:03:16:4a:0f:08:8c:3f:
                    3c:dd:3b:da:9d:a7:99:7e:df:95:7c:68:be:ac:54:
                    d8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8D:EF:C0:5E:9D:1F:47:70:67:DF:1E:19:D3:FB:3E:E5:54:BE:A8
            X509v3 Authority Key Identifier:
                keyid:60:6F:0A:EC:9F:C9:1F:4C:C6:04:9C:F2:D9:54:2E:BD:82:51:5A:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:a0:a6:98:4f:5d:17:5e:c3:89:54:cd:a4:f6:41:a0:4a:fc:
         08:b5:b8:09:3f:43:d1:3a:2d:00:a2:49:5b:cf:ae:8c:0c:71:
         8d:83:31:43:4c:61:15:d2:31:51:ef:50:d1:b6:6b:73:7f:0b:
         b7:43:b5:34:34:89:39:c1:f1:16:14:94:80:b6:56:02:46:2b:
         e1:82:1c:d8:4d:ee:bd:4e:74:76:78:2f:5d:cb:b8:07:7a:b5:
         99:73:a9:9c:ae:6e:ee:c3:94:85:19:7c:44:7b:22:fd:f6:bd:
         9c:a5:a0:3a:4b:7c:e6:14:2b:89:ec:6b:f1:25:56:66:08:34:
         74:61:16:bf:41:a5:87:79:5a:70:0e:b1:75:dd:30:9c:c8:52:
         dd:01:82:b1:dd:f8:d8:c2:36:3b:46:67:d0:3e:89:48:3c:38:
         50:d6:0f:5c:70:dd:eb:5d:95:02:68:50:3e:42:3a:be:f1:2b:
         d0:f7:70:1e:4c:23:81:b2:0e:a0:c4:35:ac:14:15:67:c3:78:
         53:92:98:3d:f9:28:33:fb:eb:19:db:ed:37:1c:f8:eb:3a:49:
         f6:d7:d1:61:67:b5:5b:69:5d:46:4d:39:75:8e:0a:6f:66:87:
         2c:46:cd:ad:b3:93:e5:c8:40:9f:a4:c1:3e:47:ed:63:13:e9:
         1a:98:a2:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAej7aboA4Jx3bbV9M2f3TBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNmYwYWVjOWZjOTFmNGNjNjA0OWNmMmQ5NTQyZWJkODI1
MTVhZWYwHhcNMjQwNjE2MDEwMDUzWhcNMjQwNjE3MDEwMDUzWjAzMTEwLwYDVQQD
Eyg0YThkZWZjMDVlOWQxZjQ3NzA2N2RmMWUxOWQzZmIzZWU1NTRiZWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NHLPKV6+Bav9GzkV0Y+1s/Cfsp1
5ev7nu2OAHu+h6DVrLrodzO9VHT3wLJdch84a7z1ImBNVP1m0gd3tq/zbu4lwlxM
cKvm6zYCa8m8GETqMBO8UaKFJxcJ1J9oYqB0jmabL6R0r1Uqyy8kSKVF6I5O9o25
rAdQ8t58cx7ZL3SsQbhTlF4H7qkkHzkWAp6TlLgKMTk2D67f0Pb4c7y7zrIKxz1u
AzMoFGcM+pnIOYvTTRQHC2IeWCKj+ILz+b/vq2yjjKBuG54Umm1B+COrWRkmz/2L
j81bQ+8a4Zi/MnO8k9q+6BINRQMWSg8IjD883TvanaeZft+VfGi+rFTYlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqN78BenR9HcGffHhnT+z7lVL6oMB8GA1UdIwQY
MBaAFGBvCuyfyR9MxgSc8tlULr2CUVrvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUc4SzdKX0pIMHpHQkp6eTJWUXV2WUpSV3U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lMzZjM2QtNjAxMy00MGI0LTk1NzAt
ZDk5NDdhZjJmY2E3LzEvWUc4SzdKX0pIMHpHQkp6eTJWUXV2WUpSV3U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9lMzZjM2QtNjAxMy00MGI0LTk1NzAtZDk5NDdhZjJmY2E3
LzEvWUc4SzdKX0pIMHpHQkp6eTJWUXV2WUpSV3U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIaCmmE9d
F17DiVTNpPZBoEr8CLW4CT9D0TotAKJJW8+ujAxxjYMxQ0xhFdIxUe9Q0bZrc38L
t0O1NDSJOcHxFhSUgLZWAkYr4YIc2E3uvU50dngvXcu4B3q1mXOpnK5u7sOUhRl8
RHsi/fa9nKWgOkt85hQriexr8SVWZgg0dGEWv0Glh3lacA6xdd0wnMhS3QGCsd34
2MI2O0Zn0D6JSDw4UNYPXHDd612VAmhQPkI6vvEr0PdwHkwjgbIOoMQ1rBQVZ8N4
U5KYPfkoM/vrGdvtNxz46zpJ9tfRYWe1W2ldRk05dY4Kb2aHLEbNrbOT5chAn6TB
PkftYxPpGpii9w==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:11:58 2024 by rpki-client on console-fra.rpki-client.org