Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
File:                     J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft (raw, json)
Hash identifier:          0UScI/Pmt488TYtAcNlFVHcjY+4nE6O+oVg4jaM4im0=
Subject key identifier:   67:EE:F4:E8:F5:9E:F0:FD:3B:A2:51:EE:60:87:48:0D:E5:79:96:33
Authority key identifier: 27:7B:36:83:30:7C:6F:CC:32:BE:D1:77:23:2F:1D:47:45:41:FB:AE
Certificate issuer:       /CN=277b3683307c6fcc32bed177232f1d474541fbae
Certificate serial:       01901D4677C3AF60DE94907D641827317D69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
Manifest number:          0D94
Signing time:             Sat 15 Jun 2024 19:01:15 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:15 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:15 +0000
Files and hashes:         1: J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl (hash: G12HniBXx67WbeXHPYp4iuD9BHeAwfLENRqXG8LqfbA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:77:c3:af:60:de:94:90:7d:64:18:27:31:7d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=277b3683307c6fcc32bed177232f1d474541fbae
        Validity
            Not Before: Jun 15 19:01:15 2024 GMT
            Not After : Jun 16 19:01:15 2024 GMT
        Subject: CN=67eef4e8f59ef0fd3ba251ee6087480de5799633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bd:62:68:03:c2:9b:a9:7d:ae:af:23:99:59:
                    37:2d:e2:d3:5c:b5:2c:71:35:e2:c2:96:b9:cf:6d:
                    38:de:13:e8:6e:5f:72:98:4b:ce:58:50:02:61:b6:
                    7c:86:11:7c:0a:5a:f4:10:84:7a:1f:7d:e7:a7:f0:
                    02:86:c0:0f:b8:ca:3d:df:f2:87:66:7b:af:68:7d:
                    b2:28:66:26:12:24:9f:14:c0:d9:46:d7:f9:29:8d:
                    c2:af:8b:b3:f0:78:74:73:ed:12:79:9d:a2:b2:02:
                    af:5d:13:5f:04:0b:45:6b:c2:98:43:f4:45:2a:b8:
                    a9:96:2d:e6:f4:ff:83:cf:08:52:3d:32:99:14:9c:
                    31:a4:58:fa:e9:1b:41:74:0c:22:e7:3d:ea:00:5d:
                    d7:71:fa:02:ca:f2:e7:83:f9:53:6f:d7:d6:40:57:
                    6d:2f:c4:2c:a5:4e:3a:6b:d9:28:ca:df:ce:c1:b4:
                    ae:b9:cf:7b:b9:4a:e2:a4:61:5c:f4:04:d8:61:8a:
                    78:82:06:75:e3:3c:c0:26:76:e3:3f:de:19:52:5a:
                    58:ba:33:33:56:a8:05:a7:b1:f1:16:f7:be:ef:19:
                    c5:fe:5e:1a:db:58:3d:5c:9c:17:64:a9:f0:61:55:
                    7c:9f:9e:36:2d:44:3c:9b:e8:e4:0c:82:e7:f1:4e:
                    b7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:EE:F4:E8:F5:9E:F0:FD:3B:A2:51:EE:60:87:48:0D:E5:79:96:33
            X509v3 Authority Key Identifier:
                keyid:27:7B:36:83:30:7C:6F:CC:32:BE:D1:77:23:2F:1D:47:45:41:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:8b:83:45:98:6d:43:84:d4:06:fb:e0:ec:f2:92:3e:ff:65:
         e7:80:1f:1e:9a:de:f9:4e:7a:5a:0a:4d:9c:ec:22:32:8f:1e:
         ee:ff:97:a0:8d:4c:58:cd:17:fa:c8:08:1b:82:84:ff:da:1e:
         56:fc:30:09:2a:30:d9:c4:ad:bd:ae:e5:2f:34:3d:69:d8:cf:
         ee:23:7f:bb:9b:d9:62:d6:81:87:88:a4:9e:cd:a5:e0:35:50:
         4c:49:aa:57:13:7f:c1:7a:4a:a7:6c:04:50:d5:70:30:b9:81:
         62:2e:ce:ac:21:4d:63:1c:9d:2b:83:97:e7:00:8b:0b:93:a1:
         e7:e6:88:a1:7b:61:2a:3e:c6:b9:7f:40:35:8e:7b:9b:cb:50:
         e8:58:8d:ed:32:37:54:62:b3:c6:32:2c:87:d2:f4:2b:5f:85:
         c9:d0:b4:21:55:dc:f1:ba:19:18:dd:91:2f:2c:88:fe:4c:5b:
         df:61:29:0e:eb:e2:c0:09:a5:11:8e:c0:f1:5f:5e:f2:d6:44:
         d8:16:98:25:28:0b:cd:07:6d:00:5d:9b:44:70:14:50:bd:6b:
         2a:1f:77:5e:38:ef:2d:e1:7a:ae:10:40:93:a8:1a:49:a8:8e:
         e4:36:ab:fc:08:6b:01:6d:4f:4b:5e:ac:99:6c:b8:8f:3f:b5:
         46:b7:7a:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdRnfDr2DelJB9ZBgnMX1pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3N2IzNjgzMzA3YzZmY2MzMmJlZDE3NzIzMmYxZDQ3NDU0
MWZiYWUwHhcNMjQwNjE1MTkwMTE1WhcNMjQwNjE2MTkwMTE1WjAzMTEwLwYDVQQD
Eyg2N2VlZjRlOGY1OWVmMGZkM2JhMjUxZWU2MDg3NDgwZGU1Nzk5NjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr1iaAPCm6l9rq8jmVk3LeLTXLUs
cTXiwpa5z2043hPobl9ymEvOWFACYbZ8hhF8Clr0EIR6H33np/AChsAPuMo93/KH
ZnuvaH2yKGYmEiSfFMDZRtf5KY3Cr4uz8Hh0c+0SeZ2isgKvXRNfBAtFa8KYQ/RF
Kripli3m9P+DzwhSPTKZFJwxpFj66RtBdAwi5z3qAF3XcfoCyvLng/lTb9fWQFdt
L8QspU46a9koyt/OwbSuuc97uUripGFc9ATYYYp4ggZ14zzAJnbjP94ZUlpYujMz
VqgFp7HxFve+7xnF/l4a21g9XJwXZKnwYVV8n542LUQ8m+jkDILn8U63UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfu9Oj1nvD9O6JR7mCHSA3leZYzMB8GA1UdIwQY
MBaAFCd7NoMwfG/MMr7RdyMvHUdFQfuuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjNzMmd6QjhiOHd5dnRGM0l5OGRSMFZCLTY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85OTlkMDUtZDllMC00YmFlLTliMzkt
YWM1MjJmOTU3NTRmLzEvSjNzMmd6QjhiOHd5dnRGM0l5OGRSMFZCLTY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85OTlkMDUtZDllMC00YmFlLTliMzktYWM1MjJmOTU3NTRm
LzEvSjNzMmd6QjhiOHd5dnRGM0l5OGRSMFZCLTY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqIuDRZht
Q4TUBvvg7PKSPv9l54AfHpre+U56WgpNnOwiMo8e7v+XoI1MWM0X+sgIG4KE/9oe
VvwwCSow2cStva7lLzQ9adjP7iN/u5vZYtaBh4ikns2l4DVQTEmqVxN/wXpKp2wE
UNVwMLmBYi7OrCFNYxydK4OX5wCLC5Oh5+aIoXthKj7GuX9ANY57m8tQ6FiN7TI3
VGKzxjIsh9L0K1+FydC0IVXc8boZGN2RLyyI/kxb32EpDuviwAmlEY7A8V9e8tZE
2BaYJSgLzQdtAF2bRHAUUL1rKh93XjjvLeF6rhBAk6gaSaiO5Dar/AhrAW1PS16s
mWy4jz+1Rrd6VA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 21:56:07 2024 by rpki-client on console-ams.rpki-client.org