Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
File:                     mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft (raw, json)
Hash identifier:          YKy36/DOvs/RHrTjHVnosfm4nM0uPDlKSPPBGr6ygnQ=
Subject key identifier:   85:15:14:B6:36:FC:B6:97:3D:5E:0E:1E:24:6E:1F:73:7F:8F:F5:9C
Authority key identifier: 9A:95:F1:52:CC:A2:41:1D:40:B1:F5:20:59:1B:E3:B3:A1:1B:CD:F0
Certificate issuer:       /CN=9a95f152cca2411d40b1f520591be3b3a11bcdf0
Certificate serial:       01901DEBE756806F5AB10FB5C5B50DA00EB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
Manifest number:          B8
Signing time:             Sat 15 Jun 2024 22:01:57 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:57 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:57 +0000
Files and hashes:         1: mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl (hash: AvnQEMICRyMqHuY5Kv1HwD+4MPF2MuIXsUwKwlzq4pE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:e7:56:80:6f:5a:b1:0f:b5:c5:b5:0d:a0:0e:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a95f152cca2411d40b1f520591be3b3a11bcdf0
        Validity
            Not Before: Jun 15 22:01:57 2024 GMT
            Not After : Jun 16 22:01:57 2024 GMT
        Subject: CN=851514b636fcb6973d5e0e1e246e1f737f8ff59c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f5:d9:9a:19:96:e0:7e:69:3d:45:f7:92:e7:
                    ad:10:06:4e:0e:15:6f:fa:0b:fd:75:c7:32:ab:1f:
                    a6:61:ca:35:5a:47:db:ff:2f:e7:cc:bf:70:82:2b:
                    4b:33:ec:48:07:5b:a8:71:fb:09:ad:93:5c:37:c4:
                    a4:c2:7e:d7:e9:15:90:74:c2:6b:68:af:27:d1:9c:
                    0b:3a:62:5a:50:a6:a5:d2:68:df:b5:38:52:3e:0d:
                    f5:56:b5:e9:a6:47:cb:4e:32:d5:6b:b2:3f:0a:18:
                    70:ca:ad:a2:5b:0b:74:83:6b:90:ed:67:af:f2:c0:
                    01:ae:f5:5c:01:f3:c8:0c:e5:a6:60:3a:f5:2f:6c:
                    20:c4:05:07:d3:bc:0b:f6:3b:34:51:11:db:93:67:
                    1d:e6:f8:3d:14:c2:96:c6:70:54:49:e1:3f:ef:d9:
                    0b:1e:18:5f:8a:41:59:80:3a:d2:a0:d5:78:58:bc:
                    7e:28:dc:75:74:92:7e:ff:b4:b9:71:fc:58:cc:47:
                    18:b1:91:54:54:df:f1:bd:67:68:b7:7f:3b:38:55:
                    83:96:e2:5b:59:67:a7:82:d0:29:28:48:99:f8:5f:
                    54:a3:b7:b3:97:f9:31:1d:61:0e:66:0f:01:84:10:
                    a8:b7:ae:5c:72:d6:de:ff:64:b2:83:70:1c:ab:3a:
                    31:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:15:14:B6:36:FC:B6:97:3D:5E:0E:1E:24:6E:1F:73:7F:8F:F5:9C
            X509v3 Authority Key Identifier:
                keyid:9A:95:F1:52:CC:A2:41:1D:40:B1:F5:20:59:1B:E3:B3:A1:1B:CD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:35:d7:a5:82:17:4b:34:17:e2:31:ec:f1:d0:67:b1:58:ad:
         eb:15:6f:ef:c9:14:0f:5d:b3:3e:e0:ea:2f:60:d8:04:8f:04:
         8e:f3:3b:bb:30:58:ac:c0:dc:35:38:30:9c:53:90:fa:db:96:
         59:95:78:86:62:1c:03:2f:99:71:97:76:3d:ed:a2:74:6f:89:
         5a:f7:34:3f:1f:ed:ee:a1:8a:7d:0e:b8:54:cd:0d:d8:c0:e5:
         52:cc:6e:b7:36:7c:d1:9a:ea:08:07:13:99:2d:ff:18:bb:21:
         15:1f:45:0a:23:3c:0d:ef:73:4f:f6:d0:5a:de:cd:46:91:d5:
         2d:d3:e8:a5:e0:a3:f2:de:c6:0b:39:39:8f:80:1c:ab:6a:35:
         f8:dc:47:96:05:2b:c8:75:45:8e:f3:43:9f:f2:27:82:62:ed:
         8a:f1:d7:6d:4c:c9:e0:87:b8:e7:14:bb:92:7f:80:a2:16:8b:
         ff:b5:a4:e6:86:4c:a6:82:57:76:9d:24:0d:95:07:3c:d7:53:
         ba:e9:f8:6e:ec:a1:c5:2a:f0:a7:a2:21:c4:5f:b9:c0:7e:ea:
         33:05:4c:06:cf:d8:6f:4e:cd:7b:45:ab:fb:24:3c:37:15:7f:
         2b:ff:b5:e6:63:90:47:8d:50:6f:4a:2f:eb:3d:10:2f:ed:a4:
         27:9b:37:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd6+dWgG9asQ+1xbUNoA6xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOTVmMTUyY2NhMjQxMWQ0MGIxZjUyMDU5MWJlM2IzYTEx
YmNkZjAwHhcNMjQwNjE1MjIwMTU3WhcNMjQwNjE2MjIwMTU3WjAzMTEwLwYDVQQD
Eyg4NTE1MTRiNjM2ZmNiNjk3M2Q1ZTBlMWUyNDZlMWY3MzdmOGZmNTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPXZmhmW4H5pPUX3kuetEAZODhVv
+gv9dccyqx+mYco1Wkfb/y/nzL9wgitLM+xIB1uocfsJrZNcN8Skwn7X6RWQdMJr
aK8n0ZwLOmJaUKal0mjftThSPg31VrXppkfLTjLVa7I/Chhwyq2iWwt0g2uQ7Wev
8sABrvVcAfPIDOWmYDr1L2wgxAUH07wL9js0URHbk2cd5vg9FMKWxnBUSeE/79kL
HhhfikFZgDrSoNV4WLx+KNx1dJJ+/7S5cfxYzEcYsZFUVN/xvWdot387OFWDluJb
WWengtApKEiZ+F9Uo7ezl/kxHWEOZg8BhBCot65cctbe/2Syg3AcqzoxWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUVFLY2/LaXPV4OHiRuH3N/j/WcMB8GA1UdIwQY
MBaAFJqV8VLMokEdQLH1IFkb47OhG83wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXBYeFVzeWlRUjFBc2ZVZ1dSdmpzNkViemZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9lYjY4ZDYtZjZjMy00MzE4LTllODMt
YjNiNmM4ZmVjYzY0LzEvbXBYeFVzeWlRUjFBc2ZVZ1dSdmpzNkViemZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9lYjY4ZDYtZjZjMy00MzE4LTllODMtYjNiNmM4ZmVjYzY0
LzEvbXBYeFVzeWlRUjFBc2ZVZ1dSdmpzNkViemZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzXXpYIX
SzQX4jHs8dBnsVit6xVv78kUD12zPuDqL2DYBI8EjvM7uzBYrMDcNTgwnFOQ+tuW
WZV4hmIcAy+ZcZd2Pe2idG+JWvc0Px/t7qGKfQ64VM0N2MDlUsxutzZ80ZrqCAcT
mS3/GLshFR9FCiM8De9zT/bQWt7NRpHVLdPopeCj8t7GCzk5j4Acq2o1+NxHlgUr
yHVFjvNDn/IngmLtivHXbUzJ4Ie45xS7kn+AohaL/7Wk5oZMpoJXdp0kDZUHPNdT
uun4buyhxSrwp6IhxF+5wH7qMwVMBs/Yb07Ne0Wr+yQ8NxV/K/+15mOQR41Qb0ov
6z0QL+2kJ5s3xA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:13:21 2024 by rpki-client on console-fra.rpki-client.org