Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
File:                     aXC3r07RGKBaFTFefYuUY0yf6iA.mft (raw, json)
Hash identifier:          MDwp4gJoa9bHUUrCP7Pz/gB6WAwhY2yweH16a6YvgnE=
Subject key identifier:   73:F2:89:B3:A9:00:68:36:D0:41:64:08:9E:B0:36:17:AC:F9:95:65
Authority key identifier: 69:70:B7:AF:4E:D1:18:A0:5A:15:31:5E:7D:8B:94:63:4C:9F:EA:20
Certificate issuer:       /CN=6970b7af4ed118a05a15315e7d8b94634c9fea20
Certificate serial:       0190347295036B0700D43E0ED267E4D0C02E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
Manifest number:          075C
Signing time:             Thu 20 Jun 2024 07:00:42 +0000
Manifest this update:     Thu 20 Jun 2024 07:00:42 +0000
Manifest next update:     Fri 21 Jun 2024 07:00:42 +0000
Files and hashes:         1: aXC3r07RGKBaFTFefYuUY0yf6iA.crl (hash: zU1ivNHtt/Jz4j+owiyR7/nM9yZ2B8vFrJZQ/GkiYz8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:34:72:95:03:6b:07:00:d4:3e:0e:d2:67:e4:d0:c0:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6970b7af4ed118a05a15315e7d8b94634c9fea20
        Validity
            Not Before: Jun 20 07:00:42 2024 GMT
            Not After : Jun 21 07:00:42 2024 GMT
        Subject: CN=73f289b3a9006836d04164089eb03617acf99565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1d:57:fb:8a:98:64:0c:fd:8b:3d:2c:c8:13:
                    96:b6:28:21:70:66:95:68:51:ee:e6:73:f4:ae:1a:
                    74:83:8c:88:bd:5d:27:e5:84:c0:22:2a:a7:3a:54:
                    89:d9:15:b4:ee:31:54:e6:84:22:31:2d:4e:f5:d0:
                    63:af:89:aa:39:8a:98:08:61:60:75:b2:7e:58:82:
                    d9:d4:63:b4:7c:27:5f:72:13:3e:d7:8e:35:38:cd:
                    14:94:29:06:24:66:92:bf:23:f1:3a:7c:24:35:62:
                    ae:68:ca:96:e6:99:0a:85:91:f3:7e:78:95:b3:fe:
                    6e:2c:03:c7:5c:c4:41:2e:e8:07:78:4b:5c:fe:ae:
                    b3:d5:ba:43:32:e4:30:75:1f:97:81:dc:56:98:7c:
                    d5:e8:1d:31:78:8b:f2:b1:90:41:14:89:39:69:f9:
                    a0:c3:c4:21:95:5f:29:1b:2e:04:28:c3:18:77:4a:
                    03:4c:61:2d:ea:c1:47:c7:9c:a8:38:08:e2:e1:a3:
                    7d:85:dd:c7:4a:7f:6c:92:f1:0d:87:4c:30:9e:a3:
                    d6:40:30:0c:f3:94:9a:15:2a:c8:0e:50:6f:b8:bd:
                    3c:52:51:00:46:26:8a:6d:e0:60:45:aa:7e:3d:e6:
                    a6:59:8e:d8:b8:41:5b:63:3f:2c:cf:52:53:56:e0:
                    d1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F2:89:B3:A9:00:68:36:D0:41:64:08:9E:B0:36:17:AC:F9:95:65
            X509v3 Authority Key Identifier:
                keyid:69:70:B7:AF:4E:D1:18:A0:5A:15:31:5E:7D:8B:94:63:4C:9F:EA:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:77:53:79:cb:22:77:cf:5d:c8:e0:35:81:a0:51:74:40:7e:
         0c:ec:ee:fc:c7:b2:9d:2d:4f:b6:28:24:92:04:6c:f3:3d:1a:
         86:15:1c:49:f4:09:a2:1f:d4:8a:c0:07:4a:b1:6f:73:e3:4f:
         c0:c6:e5:1b:87:df:de:b8:4d:ad:38:80:f9:7e:a8:4f:26:6d:
         8e:d7:e9:22:65:0a:6f:e7:27:3c:48:c6:b1:eb:4a:8f:9d:e3:
         24:ab:03:7f:69:93:83:02:4b:8c:5c:21:dd:48:7a:49:ab:d6:
         a2:08:27:39:60:c6:f9:86:7f:1f:e1:72:04:24:91:4e:fb:78:
         6c:5a:91:62:8b:c4:64:b4:d2:87:66:93:46:23:80:54:bb:21:
         62:7c:3b:20:90:c1:c6:fa:af:62:5a:64:57:45:91:52:f0:a4:
         02:c1:2f:05:e0:88:72:f6:ce:7f:50:0c:c8:43:57:11:a0:89:
         5f:6a:ee:84:b2:35:e9:e8:98:2c:35:48:7b:71:80:f5:b2:aa:
         b6:b2:ef:12:d8:7b:cd:10:69:d9:a5:62:b6:1c:d8:01:95:3a:
         40:16:c5:5e:c0:e5:e1:49:27:73:83:5a:7c:41:d5:55:1a:92:
         81:e0:e4:9c:f4:8e:31:37:86:5d:43:c7:d2:bc:9d:4c:bb:a4:
         65:5b:dd:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA0cpUDawcA1D4O0mfk0MAuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NzBiN2FmNGVkMTE4YTA1YTE1MzE1ZTdkOGI5NDYzNGM5
ZmVhMjAwHhcNMjQwNjIwMDcwMDQyWhcNMjQwNjIxMDcwMDQyWjAzMTEwLwYDVQQD
Eyg3M2YyODliM2E5MDA2ODM2ZDA0MTY0MDg5ZWIwMzYxN2FjZjk5NTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx1X+4qYZAz9iz0syBOWtighcGaV
aFHu5nP0rhp0g4yIvV0n5YTAIiqnOlSJ2RW07jFU5oQiMS1O9dBjr4mqOYqYCGFg
dbJ+WILZ1GO0fCdfchM+1441OM0UlCkGJGaSvyPxOnwkNWKuaMqW5pkKhZHzfniV
s/5uLAPHXMRBLugHeEtc/q6z1bpDMuQwdR+XgdxWmHzV6B0xeIvysZBBFIk5afmg
w8QhlV8pGy4EKMMYd0oDTGEt6sFHx5yoOAji4aN9hd3HSn9skvENh0wwnqPWQDAM
85SaFSrIDlBvuL08UlEARiaKbeBgRap+PeamWY7YuEFbYz8sz1JTVuDR1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPyibOpAGg20EFkCJ6wNhes+ZVlMB8GA1UdIwQY
MBaAFGlwt69O0RigWhUxXn2LlGNMn+ogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVhDM3IwN1JHS0JhRlRGZWZZdVVZMHlmNmlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS82YzEzYWMtMzhhNy00NjhjLWI3ZjEt
YjEwNjIzMmEzNDJjLzEvYVhDM3IwN1JHS0JhRlRGZWZZdVVZMHlmNmlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS82YzEzYWMtMzhhNy00NjhjLWI3ZjEtYjEwNjIzMmEzNDJj
LzEvYVhDM3IwN1JHS0JhRlRGZWZZdVVZMHlmNmlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3dTecsi
d89dyOA1gaBRdEB+DOzu/MeynS1PtigkkgRs8z0ahhUcSfQJoh/UisAHSrFvc+NP
wMblG4ff3rhNrTiA+X6oTyZtjtfpImUKb+cnPEjGsetKj53jJKsDf2mTgwJLjFwh
3Uh6SavWoggnOWDG+YZ/H+FyBCSRTvt4bFqRYovEZLTSh2aTRiOAVLshYnw7IJDB
xvqvYlpkV0WRUvCkAsEvBeCIcvbOf1AMyENXEaCJX2ruhLI16eiYLDVIe3GA9bKq
trLvEth7zRBp2aVithzYAZU6QBbFXsDl4Uknc4NafEHVVRqSgeDknPSOMTeGXUPH
0rydTLukZVvdhg==
-----END CERTIFICATE-----
Generated at Thu Jun 20 11:42:50 2024 by rpki-client on console-fra.rpki-client.org