Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.mft
File:                     IsOFEHH5YIjHtxGcteFGPLq5jFk.mft (raw, json)
Hash identifier:          hTw5lJWqMTcDo0ejh7DtLCpKtkQFD7HA5HWT4T79yBw=
Subject key identifier:   7D:EE:E4:33:5D:FD:A1:91:64:59:F4:4F:1C:D5:BB:D4:9E:83:FF:BE
Authority key identifier: 22:C3:85:10:71:F9:60:88:C7:B7:11:9C:B5:E1:46:3C:BA:B9:8C:59
Certificate issuer:       /CN=22c3851071f96088c7b7119cb5e1463cbab98c59
Certificate serial:       01901A1048301A0D405256C93E09D6C4ACB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsOFEHH5YIjHtxGcteFGPLq5jFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.mft
Manifest number:          0C11
Signing time:             Sat 15 Jun 2024 04:03:12 +0000
Manifest this update:     Sat 15 Jun 2024 04:03:12 +0000
Manifest next update:     Sun 16 Jun 2024 04:03:12 +0000
Files and hashes:         1: IsOFEHH5YIjHtxGcteFGPLq5jFk.crl (hash: iAEDo3qpqpVvK+EggQxX6NqohQiYOveQUZ4J6xbKlWQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IsOFEHH5YIjHtxGcteFGPLq5jFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 04:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1a:10:48:30:1a:0d:40:52:56:c9:3e:09:d6:c4:ac:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c3851071f96088c7b7119cb5e1463cbab98c59
        Validity
            Not Before: Jun 15 04:03:12 2024 GMT
            Not After : Jun 16 04:03:12 2024 GMT
        Subject: CN=7deee4335dfda1916459f44f1cd5bbd49e83ffbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:59:77:e2:84:89:69:25:cc:0c:9e:01:73:ef:
                    23:3b:1c:6b:f6:05:27:1c:83:2f:cd:79:60:88:99:
                    a3:a9:b1:c0:d9:1a:55:0f:20:3c:ce:0f:47:05:9d:
                    11:23:0d:35:3f:16:6e:27:4b:61:db:18:ae:bd:61:
                    ef:dd:8a:3f:ad:22:9f:7b:1c:8c:be:41:20:4b:ef:
                    61:38:de:a7:9c:a0:5a:73:5a:fe:24:aa:52:be:ce:
                    6c:8d:06:e7:0b:f1:74:69:d1:00:a0:a9:57:1e:b7:
                    88:20:07:0e:85:e9:84:19:14:d3:03:23:18:90:2f:
                    af:df:0d:af:5d:24:95:af:c8:d7:02:ca:0c:45:b8:
                    d4:7d:e7:27:96:66:b2:57:f3:75:af:ab:3a:01:30:
                    99:ad:f5:42:82:85:5f:b3:22:5b:8b:b0:89:24:91:
                    3a:c9:26:3f:41:13:0b:a1:90:f1:7a:97:96:e4:75:
                    c7:c6:fc:1d:8c:d0:48:ed:46:08:69:76:2f:c5:0b:
                    0d:ab:55:df:89:e6:c9:d0:43:ca:4f:78:a3:c5:c4:
                    88:d9:bf:83:88:64:96:c8:19:5f:a1:6b:65:7b:ae:
                    d7:de:6c:70:89:a6:06:83:64:4d:68:34:7d:36:96:
                    02:57:c4:66:51:26:ef:5a:90:f0:07:c5:bc:d3:68:
                    d5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:EE:E4:33:5D:FD:A1:91:64:59:F4:4F:1C:D5:BB:D4:9E:83:FF:BE
            X509v3 Authority Key Identifier:
                keyid:22:C3:85:10:71:F9:60:88:C7:B7:11:9C:B5:E1:46:3C:BA:B9:8C:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsOFEHH5YIjHtxGcteFGPLq5jFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:81:88:ce:81:bf:49:54:3f:64:b4:b3:56:c0:91:48:d8:fe:
         a7:0e:5b:b9:7d:f1:83:ce:be:0f:17:82:67:5b:3d:9a:12:11:
         25:4e:fe:24:ab:8f:17:f7:33:e9:dd:e6:71:b9:5c:20:6d:ad:
         36:f7:1d:00:ac:d4:2f:07:e7:e9:2c:af:69:c0:5d:06:b4:dc:
         7d:55:c4:b3:77:7f:11:ba:99:54:c8:ee:43:59:84:7e:06:e0:
         5b:55:8d:6f:31:c3:5b:d8:6c:82:12:7c:8b:e1:2c:21:42:66:
         20:02:f5:7e:07:e0:8e:11:8e:c8:01:52:74:a9:be:e3:cc:d9:
         f4:29:d2:d1:7a:0a:e2:b6:83:85:5a:8e:91:25:b4:70:23:9e:
         2a:6a:1b:96:9f:36:49:45:4f:e0:d4:a8:3b:ef:f6:0c:02:73:
         0b:91:52:df:6f:75:8f:47:d0:fd:61:93:12:c3:6b:35:cd:a2:
         78:c2:f3:7f:96:08:da:1b:f8:26:30:ff:81:ee:ac:25:34:95:
         49:47:4c:21:2d:aa:eb:5d:03:d3:5e:cc:67:27:66:9a:9f:9b:
         45:7d:ed:a2:01:fa:c6:65:c0:85:bd:3c:64:00:29:a9:45:c0:
         cc:72:2c:63:67:f2:aa:d6:f8:9c:56:85:6a:e7:d9:50:1d:4f:
         8c:3c:af:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAaEEgwGg1AUlbJPgnWxKy4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzM4NTEwNzFmOTYwODhjN2I3MTE5Y2I1ZTE0NjNjYmFi
OThjNTkwHhcNMjQwNjE1MDQwMzEyWhcNMjQwNjE2MDQwMzEyWjAzMTEwLwYDVQQD
Eyg3ZGVlZTQzMzVkZmRhMTkxNjQ1OWY0NGYxY2Q1YmJkNDllODNmZmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Fl34oSJaSXMDJ4Bc+8jOxxr9gUn
HIMvzXlgiJmjqbHA2RpVDyA8zg9HBZ0RIw01PxZuJ0th2xiuvWHv3Yo/rSKfexyM
vkEgS+9hON6nnKBac1r+JKpSvs5sjQbnC/F0adEAoKlXHreIIAcOhemEGRTTAyMY
kC+v3w2vXSSVr8jXAsoMRbjUfecnlmayV/N1r6s6ATCZrfVCgoVfsyJbi7CJJJE6
ySY/QRMLoZDxepeW5HXHxvwdjNBI7UYIaXYvxQsNq1XfiebJ0EPKT3ijxcSI2b+D
iGSWyBlfoWtle67X3mxwiaYGg2RNaDR9NpYCV8RmUSbvWpDwB8W802jVFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3u5DNd/aGRZFn0TxzVu9Seg/++MB8GA1UdIwQY
MBaAFCLDhRBx+WCIx7cRnLXhRjy6uYxZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNPRkVISDVZSWpIdHhHY3RlRkdQTHE1akZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mMGZmNWEtNTE2Yy00YjhlLWI5YTIt
Y2JmZGUwMjkwNzA4LzEvSXNPRkVISDVZSWpIdHhHY3RlRkdQTHE1akZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9mMGZmNWEtNTE2Yy00YjhlLWI5YTItY2JmZGUwMjkwNzA4
LzEvSXNPRkVISDVZSWpIdHhHY3RlRkdQTHE1akZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYGIzoG/
SVQ/ZLSzVsCRSNj+pw5buX3xg86+DxeCZ1s9mhIRJU7+JKuPF/cz6d3mcblcIG2t
NvcdAKzULwfn6SyvacBdBrTcfVXEs3d/EbqZVMjuQ1mEfgbgW1WNbzHDW9hsghJ8
i+EsIUJmIAL1fgfgjhGOyAFSdKm+48zZ9CnS0XoK4raDhVqOkSW0cCOeKmoblp82
SUVP4NSoO+/2DAJzC5FS3291j0fQ/WGTEsNrNc2ieMLzf5YI2hv4JjD/ge6sJTSV
SUdMIS2q610D017MZydmmp+bRX3togH6xmXAhb08ZAApqUXAzHIsY2fyqtb4nFaF
aufZUB1PjDyvpg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 14:31:04 2024 by rpki-client on console-ams.rpki-client.org