Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.mft
File:                     fUQxNNzRasFvbNIJ-hx_lYym234.mft (raw, json)
Hash identifier:          mfmSn65SdAl0DWc0x6uX62q2deAJEEfRdIs/c2DmUfs=
Subject key identifier:   39:73:75:6A:A8:BE:02:E7:C4:BA:09:0A:7F:88:6C:09:34:4B:04:E0
Authority key identifier: 7D:44:31:34:DC:D1:6A:C1:6F:6C:D2:09:FA:1C:7F:95:8C:A6:DB:7E
Certificate issuer:       /CN=7d443134dcd16ac16f6cd209fa1c7f958ca6db7e
Certificate serial:       019044F838AA07BE80CDF46D66DB7F1228C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fUQxNNzRasFvbNIJ-hx_lYym234.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.mft
Manifest number:          11D6
Signing time:             Sun 23 Jun 2024 12:00:36 +0000
Manifest this update:     Sun 23 Jun 2024 12:00:36 +0000
Manifest next update:     Mon 24 Jun 2024 12:00:36 +0000
Files and hashes:         1: fUQxNNzRasFvbNIJ-hx_lYym234.crl (hash: PJK0UgOIG0WJ1otNeqwepTcqymm/kA+Efk5okTDgSEM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fUQxNNzRasFvbNIJ-hx_lYym234.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 12:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:f8:38:aa:07:be:80:cd:f4:6d:66:db:7f:12:28:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d443134dcd16ac16f6cd209fa1c7f958ca6db7e
        Validity
            Not Before: Jun 23 12:00:36 2024 GMT
            Not After : Jun 24 12:00:36 2024 GMT
        Subject: CN=3973756aa8be02e7c4ba090a7f886c09344b04e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:09:98:e4:72:c5:df:3a:34:48:71:e7:76:09:
                    7f:7f:a5:0b:51:cd:b9:db:0c:85:40:18:5d:0f:f1:
                    0a:8c:ad:d2:9e:0e:30:ce:f7:88:e7:a9:29:0d:49:
                    0c:d2:9f:4f:b9:fc:37:74:b3:d1:53:36:59:62:3b:
                    67:1f:bb:f7:18:8d:7d:81:a5:c1:b1:ca:c1:22:aa:
                    e2:d5:3c:a0:fa:6f:1b:4e:ad:41:aa:bd:1c:15:61:
                    51:7d:c3:60:b7:30:08:f1:4d:28:cd:fb:f6:b8:6d:
                    86:b8:dd:73:ab:fa:7a:24:24:1d:fe:a9:0d:e4:4e:
                    58:19:56:cf:1f:05:e1:f9:a9:ed:b7:4b:d2:51:25:
                    ed:52:51:ce:94:e9:6c:32:72:64:a7:8e:9f:e6:ee:
                    2c:7e:76:b0:1a:89:d7:68:bc:eb:d7:c3:81:5f:14:
                    01:41:e9:79:71:43:3a:c6:f6:8e:f6:9f:b2:bd:f4:
                    43:5b:d4:96:09:2b:06:0c:16:d7:53:d5:bd:52:80:
                    81:90:f3:31:d4:32:53:29:41:ce:47:76:b1:cd:1c:
                    77:87:d5:37:b3:9a:11:25:04:c3:31:f5:0a:b1:47:
                    6e:24:fd:e4:3d:15:39:42:6b:74:9a:3f:7a:49:7f:
                    8f:a0:7d:12:f8:66:35:64:4b:c1:14:53:1d:64:5c:
                    44:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:73:75:6A:A8:BE:02:E7:C4:BA:09:0A:7F:88:6C:09:34:4B:04:E0
            X509v3 Authority Key Identifier:
                keyid:7D:44:31:34:DC:D1:6A:C1:6F:6C:D2:09:FA:1C:7F:95:8C:A6:DB:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUQxNNzRasFvbNIJ-hx_lYym234.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:a8:05:77:08:fd:ac:0f:e2:fd:bf:aa:20:03:d1:80:52:2c:
         ae:2b:d6:c8:d7:53:9e:90:77:af:2b:ed:34:51:78:af:59:7e:
         22:f6:c7:3a:27:ab:69:76:b7:3e:ac:cc:87:fd:78:88:80:15:
         50:3a:b3:32:0d:ba:97:01:1e:ec:ad:9b:0a:1e:a0:5f:94:21:
         36:40:e2:31:38:e9:e8:e3:2e:fc:56:a3:69:3c:42:f0:60:ef:
         42:6a:21:25:99:ac:5d:b0:4f:2a:8d:3f:9e:cf:c2:dc:04:0b:
         fb:c7:0f:6a:35:5d:53:c6:2a:c3:f3:e0:33:2f:a6:e7:65:04:
         c2:6c:03:e9:1a:6a:7a:f4:a4:2b:26:d2:0b:c2:ef:83:2a:91:
         c1:1c:99:56:74:85:3d:39:14:72:93:39:fd:56:34:4d:45:f7:
         00:93:c8:32:22:11:cc:7b:af:c3:e3:c8:ff:aa:59:ee:05:82:
         7a:0c:cb:3f:63:fb:49:7c:53:47:cf:b1:d2:e7:7a:b4:ee:ac:
         b3:f8:59:f8:29:8c:5f:ac:5e:eb:61:94:b8:ef:32:8a:84:e7:
         3f:17:39:76:b9:37:d8:a0:84:3a:6d:ac:99:c9:b3:28:bd:20:
         29:19:b6:6b:90:05:62:4a:a2:2a:d2:7c:41:43:88:ad:2e:0e:
         d7:96:ea:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBE+DiqB76AzfRtZtt/EijEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNDQzMTM0ZGNkMTZhYzE2ZjZjZDIwOWZhMWM3Zjk1OGNh
NmRiN2UwHhcNMjQwNjIzMTIwMDM2WhcNMjQwNjI0MTIwMDM2WjAzMTEwLwYDVQQD
EygzOTczNzU2YWE4YmUwMmU3YzRiYTA5MGE3Zjg4NmMwOTM0NGIwNGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQmY5HLF3zo0SHHndgl/f6ULUc25
2wyFQBhdD/EKjK3Sng4wzveI56kpDUkM0p9Pufw3dLPRUzZZYjtnH7v3GI19gaXB
scrBIqri1Tyg+m8bTq1Bqr0cFWFRfcNgtzAI8U0ozfv2uG2GuN1zq/p6JCQd/qkN
5E5YGVbPHwXh+antt0vSUSXtUlHOlOlsMnJkp46f5u4sfnawGonXaLzr18OBXxQB
Qel5cUM6xvaO9p+yvfRDW9SWCSsGDBbXU9W9UoCBkPMx1DJTKUHOR3axzRx3h9U3
s5oRJQTDMfUKsUduJP3kPRU5Qmt0mj96SX+PoH0S+GY1ZEvBFFMdZFxEnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlzdWqovgLnxLoJCn+IbAk0SwTgMB8GA1UdIwQY
MBaAFH1EMTTc0WrBb2zSCfocf5WMptt+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlVReE5OelJhc0Z2Yk5JSi1oeF9sWXltMjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTUxNTItNWM5MC00NTQ0LThiN2Mt
OWMxOTNlNzhlYzE4LzEvZlVReE5OelJhc0Z2Yk5JSi1oeF9sWXltMjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85MTUxNTItNWM5MC00NTQ0LThiN2MtOWMxOTNlNzhlYzE4
LzEvZlVReE5OelJhc0Z2Yk5JSi1oeF9sWXltMjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlagFdwj9
rA/i/b+qIAPRgFIsrivWyNdTnpB3ryvtNFF4r1l+IvbHOieraXa3PqzMh/14iIAV
UDqzMg26lwEe7K2bCh6gX5QhNkDiMTjp6OMu/FajaTxC8GDvQmohJZmsXbBPKo0/
ns/C3AQL+8cPajVdU8Yqw/PgMy+m52UEwmwD6RpqevSkKybSC8LvgyqRwRyZVnSF
PTkUcpM5/VY0TUX3AJPIMiIRzHuvw+PI/6pZ7gWCegzLP2P7SXxTR8+x0ud6tO6s
s/hZ+CmMX6xe62GUuO8yioTnPxc5drk32KCEOm2smcmzKL0gKRm2a5AFYkqiKtJ8
QUOIrS4O15bqRg==
-----END CERTIFICATE-----
Generated at Sun Jun 23 16:47:56 2024 by rpki-client on console-fra.rpki-client.org