Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
File:                     7O2DGd7RXV8LarRBAJ3hmxnRUps.mft (raw, json)
Hash identifier:          66sLa6DHh1Emnr6vvQJfWamWEr2y20t+38x91+A5lOM=
Subject key identifier:   8C:9D:32:6B:31:9D:0A:87:1C:55:38:54:A8:07:0F:F6:FC:0A:5F:DA
Authority key identifier: EC:ED:83:19:DE:D1:5D:5F:0B:6A:B4:41:00:9D:E1:9B:19:D1:52:9B
Certificate issuer:       /CN=eced8319ded15d5f0b6ab441009de19b19d1529b
Certificate serial:       01901E902A300E986DA139C6395B87F02F73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
Manifest number:          01CB
Signing time:             Sun 16 Jun 2024 01:01:22 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:22 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:22 +0000
Files and hashes:         1: 7O2DGd7RXV8LarRBAJ3hmxnRUps.crl (hash: Mx6BEtMKyla+XqPqm6SDnjC05+MK4uuS/eeciYdL0BU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:2a:30:0e:98:6d:a1:39:c6:39:5b:87:f0:2f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eced8319ded15d5f0b6ab441009de19b19d1529b
        Validity
            Not Before: Jun 16 01:01:22 2024 GMT
            Not After : Jun 17 01:01:22 2024 GMT
        Subject: CN=8c9d326b319d0a871c553854a8070ff6fc0a5fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5e:fb:62:c5:31:d7:bf:34:02:9d:41:71:05:
                    66:b4:93:2e:1d:a2:5f:63:9c:2f:cd:04:66:b1:c5:
                    11:67:73:0e:96:ac:f4:07:d6:83:78:3c:22:d5:1b:
                    99:dc:1b:01:d7:83:25:ee:7a:f5:d9:0c:fd:55:6e:
                    ed:df:d3:c7:a7:d9:a7:78:53:3d:01:91:d2:f6:88:
                    21:8d:d5:4a:0f:9c:db:5f:fe:b5:9f:00:42:bd:a9:
                    e7:23:b2:f8:9b:e1:9b:3b:68:e7:9f:36:dd:fa:14:
                    d1:e8:e2:50:0c:23:96:a4:47:1f:a2:4c:4f:da:79:
                    09:b5:7a:95:1e:34:3f:62:56:c4:90:3d:1b:c2:05:
                    2e:8a:d4:4b:03:d6:2d:2f:9f:1c:dd:1b:02:30:7b:
                    ca:b5:e6:df:56:e4:23:6a:54:f2:00:bb:ce:b3:d1:
                    7f:4f:e8:f8:04:9e:e1:47:32:59:42:e7:0e:19:2b:
                    a6:79:82:a8:aa:9d:8c:88:b7:c5:55:b0:73:3d:79:
                    79:5a:19:35:b0:e7:6b:7b:a5:23:04:c7:b5:0b:40:
                    34:82:fc:fc:34:46:e8:9f:f0:2c:c3:21:b4:c6:6b:
                    30:25:c3:fd:b6:7a:66:69:82:59:f4:03:89:d2:55:
                    54:83:ef:15:95:e9:1c:f8:5d:29:bd:b7:4a:b2:ee:
                    22:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9D:32:6B:31:9D:0A:87:1C:55:38:54:A8:07:0F:F6:FC:0A:5F:DA
            X509v3 Authority Key Identifier:
                keyid:EC:ED:83:19:DE:D1:5D:5F:0B:6A:B4:41:00:9D:E1:9B:19:D1:52:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:15:2d:d9:08:69:84:27:f1:ef:fc:7d:0c:f6:a7:cf:7d:38:
         57:5b:d9:a6:fd:48:20:eb:5d:8a:af:f9:c8:c7:5f:40:c9:fe:
         fd:39:6a:f7:3c:a0:6a:ca:03:78:d9:93:b7:9e:54:e4:cd:93:
         15:0b:56:47:54:60:b2:5b:2e:a1:47:fc:27:88:b0:49:fb:01:
         bc:6b:14:18:b4:31:c2:df:ec:c4:56:41:c1:88:0c:d8:e8:27:
         5f:a0:4d:85:05:e0:79:80:93:da:d9:22:b6:b1:f5:5c:18:4a:
         65:67:fc:e3:e9:f0:c4:ca:93:36:4a:f2:0d:05:dc:4f:d3:88:
         21:a9:87:49:04:b6:d8:58:a5:d8:94:47:7c:54:0d:c9:d6:fc:
         d0:6b:3b:82:e8:3b:46:0f:b6:25:ac:e3:b6:70:da:0e:a7:4d:
         03:42:68:de:7b:ed:5e:33:26:d3:c4:f8:fd:7d:d3:b7:de:47:
         15:63:c9:95:4e:95:de:6c:0c:92:8c:68:87:31:ab:c9:fa:90:
         73:40:dc:ef:c2:ac:dd:ce:cf:6e:32:ef:1d:61:5b:4a:a7:67:
         65:d8:52:d2:e7:80:25:6b:e6:03:7e:86:95:81:a5:7c:db:db:
         d2:84:40:d4:c7:90:0c:0d:6d:e0:3b:28:94:db:89:e2:a3:8b:
         8d:c2:57:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAekCowDphtoTnGOVuH8C9zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZWQ4MzE5ZGVkMTVkNWYwYjZhYjQ0MTAwOWRlMTliMTlk
MTUyOWIwHhcNMjQwNjE2MDEwMTIyWhcNMjQwNjE3MDEwMTIyWjAzMTEwLwYDVQQD
Eyg4YzlkMzI2YjMxOWQwYTg3MWM1NTM4NTRhODA3MGZmNmZjMGE1ZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1l77YsUx1780Ap1BcQVmtJMuHaJf
Y5wvzQRmscURZ3MOlqz0B9aDeDwi1RuZ3BsB14Ml7nr12Qz9VW7t39PHp9mneFM9
AZHS9oghjdVKD5zbX/61nwBCvannI7L4m+GbO2jnnzbd+hTR6OJQDCOWpEcfokxP
2nkJtXqVHjQ/YlbEkD0bwgUuitRLA9YtL58c3RsCMHvKtebfVuQjalTyALvOs9F/
T+j4BJ7hRzJZQucOGSumeYKoqp2MiLfFVbBzPXl5Whk1sOdre6UjBMe1C0A0gvz8
NEbon/AswyG0xmswJcP9tnpmaYJZ9AOJ0lVUg+8Vlekc+F0pvbdKsu4iWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIydMmsxnQqHHFU4VKgHD/b8Cl/aMB8GA1UdIwQY
MBaAFOztgxne0V1fC2q0QQCd4ZsZ0VKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN08yREdkN1JYVjhMYXJSQkFKM2hteG5SVXBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xZjZlZDItNTBjYS00ZDNjLWJiNTct
NzA2OWY0MzgyY2FiLzEvN08yREdkN1JYVjhMYXJSQkFKM2hteG5SVXBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8xZjZlZDItNTBjYS00ZDNjLWJiNTctNzA2OWY0MzgyY2Fi
LzEvN08yREdkN1JYVjhMYXJSQkFKM2hteG5SVXBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhUt2Qhp
hCfx7/x9DPanz304V1vZpv1IIOtdiq/5yMdfQMn+/Tlq9zygasoDeNmTt55U5M2T
FQtWR1RgslsuoUf8J4iwSfsBvGsUGLQxwt/sxFZBwYgM2OgnX6BNhQXgeYCT2tki
trH1XBhKZWf84+nwxMqTNkryDQXcT9OIIamHSQS22Fil2JRHfFQNydb80Gs7gug7
Rg+2JazjtnDaDqdNA0Jo3nvtXjMm08T4/X3Tt95HFWPJlU6V3mwMkoxohzGryfqQ
c0Dc78Ks3c7PbjLvHWFbSqdnZdhS0ueAJWvmA36GlYGlfNvb0oRA1MeQDA1t4Dso
lNuJ4qOLjcJX2g==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:13:04 2024 by rpki-client on console-fra.rpki-client.org