Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
File:                     xC-2EFO6LavFFxWw9TzXtrlFTQw.mft (raw, json)
Hash identifier:          DdL8io6FbND4/ohpTcupAoG9rCQRGCGE0S6m0kFyHOg=
Subject key identifier:   44:42:59:8A:04:A6:03:4D:2F:0C:55:3F:2C:C9:35:A7:0F:E5:50:98
Authority key identifier: C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C
Certificate issuer:       /CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c
Certificate serial:       01901EC6E439AB02E23B2B4362FDC3A7C2E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
Manifest number:          0CC7
Signing time:             Sun 16 Jun 2024 02:01:09 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:09 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:09 +0000
Files and hashes:         1: xC-2EFO6LavFFxWw9TzXtrlFTQw.crl (hash: s2s4kum92GYhBdX0CHyjl2Eyo50oQk/YhjEoahW2Tsw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:e4:39:ab:02:e2:3b:2b:43:62:fd:c3:a7:c2:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c
        Validity
            Not Before: Jun 16 02:01:09 2024 GMT
            Not After : Jun 17 02:01:09 2024 GMT
        Subject: CN=4442598a04a6034d2f0c553f2cc935a70fe55098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5e:9f:ba:07:10:67:a2:8a:a7:84:3f:b2:03:
                    5b:76:9e:83:47:33:dc:b4:e7:df:53:7c:21:7d:32:
                    0e:92:b4:2b:02:bf:2d:be:d0:e6:29:df:80:d2:15:
                    87:33:8f:c1:68:8d:c9:f3:fa:95:81:92:ad:76:46:
                    15:b7:19:3a:7d:c9:68:d8:db:40:55:63:07:88:3b:
                    82:29:c9:6d:e5:52:cb:c5:7c:a2:c2:c0:80:8c:d7:
                    10:73:51:39:56:bb:63:19:80:65:fc:c1:16:0a:81:
                    bd:10:a4:87:fc:ee:65:bf:a1:f1:96:b0:95:ab:53:
                    fb:20:52:55:d0:61:45:66:d2:ba:55:43:08:f4:13:
                    ad:a5:d7:c9:74:8d:76:8b:4e:f9:d3:3e:7d:34:cd:
                    3d:8f:ac:06:18:de:ca:c3:34:9f:8f:a5:43:da:d4:
                    62:d5:b8:67:58:dd:e7:e2:13:84:d8:a8:c1:8a:ca:
                    c4:f2:58:9c:26:a0:ea:6f:e5:5e:45:c6:a8:18:45:
                    54:30:7b:50:a1:5d:54:51:b1:bd:83:22:4a:f1:c4:
                    12:28:65:96:66:ae:32:a9:5a:f8:28:1b:da:af:db:
                    d0:0c:00:70:a1:b7:d4:4c:65:e1:ce:98:e8:b3:a1:
                    02:69:6a:71:23:89:22:e4:db:cf:42:fd:a1:d1:d0:
                    4f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:42:59:8A:04:A6:03:4D:2F:0C:55:3F:2C:C9:35:A7:0F:E5:50:98
            X509v3 Authority Key Identifier:
                keyid:C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b6:c7:65:3f:e3:cd:35:21:37:2e:79:1b:67:e2:07:b1:e9:
         37:f3:1c:66:f6:8c:da:8d:69:6d:ba:ae:28:93:bb:34:08:22:
         da:93:d2:f4:5f:df:44:93:43:c8:5a:f5:dd:8e:d9:6b:f9:9e:
         e0:5f:18:9b:e6:da:74:bd:67:1d:53:2b:dc:42:73:1c:ff:98:
         af:d0:e3:1a:36:52:b6:2a:1a:5c:31:d0:cf:16:60:29:df:e1:
         6f:2b:69:5d:29:04:6b:2d:80:16:67:d7:e8:b4:1d:06:ca:b9:
         fd:46:ef:e4:84:e7:2f:df:d9:b3:08:29:46:f1:0c:76:32:32:
         f1:3e:2b:48:13:66:9e:be:8e:f3:72:b6:e6:0f:b1:5a:c9:9e:
         97:a9:29:83:e6:88:2e:f4:9b:b5:54:80:aa:6d:03:b0:c2:1b:
         91:00:ff:4e:de:a2:2a:2d:03:20:c3:65:b3:b5:76:0d:8f:aa:
         7d:a7:fe:e1:c4:92:b3:e0:6f:d3:a4:75:82:33:57:c6:b9:33:
         ca:6f:3d:8a:c9:2c:a0:af:ed:61:33:73:62:db:28:62:20:00:
         b8:97:57:36:71:8f:6e:2e:65:77:39:40:e2:27:9f:33:91:c1:
         f6:7f:7c:01:79:0c:fe:c7:3c:91:51:af:34:c2:54:47:fe:b9:
         39:06:26:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAexuQ5qwLiOytDYv3Dp8LnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MmZiNjEwNTNiYTJkYWJjNTE3MTViMGY1M2NkN2I2Yjk0
NTRkMGMwHhcNMjQwNjE2MDIwMTA5WhcNMjQwNjE3MDIwMTA5WjAzMTEwLwYDVQQD
Eyg0NDQyNTk4YTA0YTYwMzRkMmYwYzU1M2YyY2M5MzVhNzBmZTU1MDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF6fugcQZ6KKp4Q/sgNbdp6DRzPc
tOffU3whfTIOkrQrAr8tvtDmKd+A0hWHM4/BaI3J8/qVgZKtdkYVtxk6fclo2NtA
VWMHiDuCKclt5VLLxXyiwsCAjNcQc1E5VrtjGYBl/MEWCoG9EKSH/O5lv6HxlrCV
q1P7IFJV0GFFZtK6VUMI9BOtpdfJdI12i0750z59NM09j6wGGN7KwzSfj6VD2tRi
1bhnWN3n4hOE2KjBisrE8licJqDqb+VeRcaoGEVUMHtQoV1UUbG9gyJK8cQSKGWW
Zq4yqVr4KBvar9vQDABwobfUTGXhzpjos6ECaWpxI4ki5NvPQv2h0dBPQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERCWYoEpgNNLwxVPyzJNacP5VCYMB8GA1UdIwQY
MBaAFMQvthBTui2rxRcVsPU817a5RU0MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEMtMkVGTzZMYXZGRnhXdzlUelh0cmxGVFF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mNzYzNmEtNWUwYy00MGIwLWIwYjIt
OGYxMWY2Mjc1YWFmLzEveEMtMkVGTzZMYXZGRnhXdzlUelh0cmxGVFF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9mNzYzNmEtNWUwYy00MGIwLWIwYjItOGYxMWY2Mjc1YWFm
LzEveEMtMkVGTzZMYXZGRnhXdzlUelh0cmxGVFF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrbHZT/j
zTUhNy55G2fiB7HpN/McZvaM2o1pbbquKJO7NAgi2pPS9F/fRJNDyFr13Y7Za/me
4F8Ym+badL1nHVMr3EJzHP+Yr9DjGjZStioaXDHQzxZgKd/hbytpXSkEay2AFmfX
6LQdBsq5/Ubv5ITnL9/ZswgpRvEMdjIy8T4rSBNmnr6O83K25g+xWsmel6kpg+aI
LvSbtVSAqm0DsMIbkQD/Tt6iKi0DIMNls7V2DY+qfaf+4cSSs+Bv06R1gjNXxrkz
ym89isksoK/tYTNzYtsoYiAAuJdXNnGPbi5ldzlA4iefM5HB9n98AXkM/sc8kVGv
NMJUR/65OQYmLA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:12:33 2024 by rpki-client on console-fra.rpki-client.org