Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.mft
File:                     SmO14kps7e29L-j2bXl6s9jqpMk.mft (raw, json)
Hash identifier:          pJLlZ8K5lbEUwj3Ug5qsgf+G1PeExXdnulb30JZ2CgY=
Subject key identifier:   65:00:76:1A:CC:74:9F:FE:07:92:17:A7:54:8C:E6:48:BD:62:72:51
Authority key identifier: 4A:63:B5:E2:4A:6C:ED:ED:BD:2F:E8:F6:6D:79:7A:B3:D8:EA:A4:C9
Certificate issuer:       /CN=4a63b5e24a6cededbd2fe8f66d797ab3d8eaa4c9
Certificate serial:       0190448B263A8DA830B77D4A9913921B3B43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmO14kps7e29L-j2bXl6s9jqpMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.mft
Manifest number:          11D4
Signing time:             Sun 23 Jun 2024 10:01:28 +0000
Manifest this update:     Sun 23 Jun 2024 10:01:28 +0000
Manifest next update:     Mon 24 Jun 2024 10:01:28 +0000
Files and hashes:         1: SmO14kps7e29L-j2bXl6s9jqpMk.crl (hash: D/ZGbrHTTgR/j1p0CPY7ZH0f3QN63L5c/W/kbkY/G6Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmO14kps7e29L-j2bXl6s9jqpMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8b:26:3a:8d:a8:30:b7:7d:4a:99:13:92:1b:3b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a63b5e24a6cededbd2fe8f66d797ab3d8eaa4c9
        Validity
            Not Before: Jun 23 10:01:28 2024 GMT
            Not After : Jun 24 10:01:28 2024 GMT
        Subject: CN=6500761acc749ffe079217a7548ce648bd627251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e6:32:de:d2:14:d9:2b:a6:2d:7d:4b:89:06:
                    71:d8:4d:de:c2:86:77:5b:0f:37:6f:d1:84:77:78:
                    ec:d9:f3:b2:74:de:96:92:ab:85:50:b1:3b:4f:b0:
                    00:52:53:c6:08:58:77:61:77:d9:a1:0c:22:0d:f5:
                    d1:49:13:ad:fd:3b:4a:84:83:4f:16:83:f4:8e:2a:
                    9b:9f:8b:66:c6:26:de:6e:12:4e:2c:ed:19:c6:80:
                    2a:ee:96:41:41:c3:e4:de:39:2e:97:25:14:eb:bb:
                    70:66:33:af:b2:a4:18:06:9e:8a:48:6a:ee:3c:23:
                    e1:84:af:ca:59:bd:fe:f1:d2:10:92:af:ea:04:0f:
                    e4:7c:c5:01:82:5f:83:03:02:79:9f:c5:f4:6e:5c:
                    7d:1f:2a:2c:9b:7c:31:7f:d8:56:43:ea:af:c4:ef:
                    2e:1d:f6:49:cf:6f:79:ed:6b:1b:f3:3c:08:d1:ae:
                    0c:83:de:63:96:a0:4d:09:89:3a:63:fb:a6:36:43:
                    59:7a:e2:22:54:ab:c8:30:b2:9a:c3:ea:3e:ca:53:
                    e5:79:f1:b3:f5:b0:70:a9:2d:d0:52:e8:3a:15:a9:
                    6f:78:ae:51:c2:98:89:ef:48:5e:c0:55:d8:d3:6d:
                    b0:c6:a1:73:5f:fa:7d:0d:28:b3:2e:47:fd:fc:13:
                    1e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:00:76:1A:CC:74:9F:FE:07:92:17:A7:54:8C:E6:48:BD:62:72:51
            X509v3 Authority Key Identifier:
                keyid:4A:63:B5:E2:4A:6C:ED:ED:BD:2F:E8:F6:6D:79:7A:B3:D8:EA:A4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmO14kps7e29L-j2bXl6s9jqpMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:b4:11:47:76:f0:e9:bd:19:2e:71:db:64:7e:d0:51:a3:8d:
         5d:45:3f:87:c4:7a:f6:70:d4:4f:6b:30:b6:d6:f7:c0:ad:45:
         9a:fd:44:41:4d:87:96:2e:6e:63:6b:5d:93:65:22:d9:c4:49:
         0e:4e:e8:d4:b8:19:e7:85:b7:14:d6:3c:f7:c1:3e:0a:08:63:
         e9:11:ff:73:e4:a7:c9:46:4c:96:9f:77:aa:68:d1:2f:60:c0:
         1b:43:79:9b:6c:0e:76:84:d1:16:2e:5f:b2:48:77:b4:0c:7c:
         08:7e:c7:28:ff:ae:2b:1d:7c:b4:0b:24:ef:41:6c:f2:30:af:
         dd:3a:86:66:d7:81:5b:c2:04:ad:2e:71:db:db:fe:dd:c1:bc:
         08:22:4d:17:09:7c:6b:3b:0a:f8:a8:c8:41:d1:63:65:74:37:
         d7:c1:1b:bc:e1:d6:ae:04:a9:f6:6f:bb:ca:4b:80:23:11:6d:
         c6:e6:3a:ed:ce:64:47:47:41:3d:cf:4a:80:03:2a:ce:97:c9:
         91:43:4b:fe:4e:5b:74:73:fd:1c:0c:0a:4d:fb:54:86:e6:9c:
         0c:52:88:ba:8b:81:08:d3:64:65:7f:96:1c:41:c3:bb:e7:36:
         9a:86:ec:a1:00:66:fb:58:c9:cc:53:bf:55:29:9a:46:8a:e1:
         44:0b:d2:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBEiyY6jagwt31KmROSGztDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjNiNWUyNGE2Y2VkZWRiZDJmZThmNjZkNzk3YWIzZDhl
YWE0YzkwHhcNMjQwNjIzMTAwMTI4WhcNMjQwNjI0MTAwMTI4WjAzMTEwLwYDVQQD
Eyg2NTAwNzYxYWNjNzQ5ZmZlMDc5MjE3YTc1NDhjZTY0OGJkNjI3MjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uYy3tIU2SumLX1LiQZx2E3ewoZ3
Ww83b9GEd3js2fOydN6WkquFULE7T7AAUlPGCFh3YXfZoQwiDfXRSROt/TtKhINP
FoP0jiqbn4tmxibebhJOLO0ZxoAq7pZBQcPk3jkulyUU67twZjOvsqQYBp6KSGru
PCPhhK/KWb3+8dIQkq/qBA/kfMUBgl+DAwJ5n8X0blx9Hyosm3wxf9hWQ+qvxO8u
HfZJz2957Wsb8zwI0a4Mg95jlqBNCYk6Y/umNkNZeuIiVKvIMLKaw+o+ylPlefGz
9bBwqS3QUug6FalveK5RwpiJ70hewFXY022wxqFzX/p9DSizLkf9/BMe2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUAdhrMdJ/+B5IXp1SM5ki9YnJRMB8GA1UdIwQY
MBaAFEpjteJKbO3tvS/o9m15erPY6qTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21PMTRrcHM3ZTI5TC1qMmJYbDZzOWpxcE1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC82NGRhYmMtNjU2NC00Y2EwLTgwMmYt
Y2E5NzkwMDgwNzE2LzEvU21PMTRrcHM3ZTI5TC1qMmJYbDZzOWpxcE1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC82NGRhYmMtNjU2NC00Y2EwLTgwMmYtY2E5NzkwMDgwNzE2
LzEvU21PMTRrcHM3ZTI5TC1qMmJYbDZzOWpxcE1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqbQRR3bw
6b0ZLnHbZH7QUaONXUU/h8R69nDUT2swttb3wK1Fmv1EQU2Hli5uY2tdk2Ui2cRJ
Dk7o1LgZ54W3FNY898E+Cghj6RH/c+SnyUZMlp93qmjRL2DAG0N5m2wOdoTRFi5f
skh3tAx8CH7HKP+uKx18tAsk70Fs8jCv3TqGZteBW8IErS5x29v+3cG8CCJNFwl8
azsK+KjIQdFjZXQ318EbvOHWrgSp9m+7ykuAIxFtxuY67c5kR0dBPc9KgAMqzpfJ
kUNL/k5bdHP9HAwKTftUhuacDFKIuouBCNNkZX+WHEHDu+c2mobsoQBm+1jJzFO/
VSmaRorhRAvSjg==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:33:52 2024 by rpki-client on console-fra.rpki-client.org