Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
File:                     1qo_vHjjEikVfHi20jpl6y41Pc4.mft (raw, json)
Hash identifier:          waii8SagmArZTUS/Fu0/FxMLQ3zPGsJePuxxHVDOz3s=
Subject key identifier:   69:9C:03:65:7F:8D:D8:A7:D9:F3:12:DA:05:57:74:11:80:B4:50:DE
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Certificate issuer:       /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial:       019032F1F470FC8913B7D5639EBC6C7F10BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
Manifest number:          011A
Signing time:             Thu 20 Jun 2024 00:00:35 +0000
Manifest this update:     Thu 20 Jun 2024 00:00:35 +0000
Manifest next update:     Fri 21 Jun 2024 00:00:35 +0000
Files and hashes:         1: 1qo_vHjjEikVfHi20jpl6y41Pc4.crl (hash: oRxW6Pxi/tDfJphMCMqWSAxgIIoAEzZSartg/KlFbRU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 00:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:32:f1:f4:70:fc:89:13:b7:d5:63:9e:bc:6c:7f:10:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
        Validity
            Not Before: Jun 20 00:00:35 2024 GMT
            Not After : Jun 21 00:00:35 2024 GMT
        Subject: CN=699c03657f8dd8a7d9f312da0557741180b450de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:23:45:bd:17:a2:73:a1:51:94:04:8d:21:13:
                    a1:ea:20:c5:3b:26:4e:9b:4e:01:f1:6e:46:45:61:
                    03:bf:0b:c6:34:df:81:08:b9:44:d4:2c:61:10:14:
                    70:63:aa:2b:c5:bf:53:6f:b5:3d:f6:da:77:06:9b:
                    60:5e:39:72:e2:21:19:98:61:0d:f7:b4:49:5d:d0:
                    0f:cf:be:d1:93:bb:5f:32:95:35:ae:74:30:4d:ae:
                    84:38:2e:3c:27:9d:45:a4:da:a1:7a:45:a8:e7:0c:
                    69:81:e8:79:d9:a5:dd:a9:41:86:0e:f8:f7:eb:8e:
                    22:36:21:db:8c:c5:52:51:a1:c0:15:0a:46:58:a7:
                    1c:a9:a9:19:26:1a:a1:4e:d5:20:c0:f1:61:a2:a4:
                    76:3f:e0:b1:e6:eb:e6:a9:84:09:7f:29:7f:bc:9b:
                    88:d4:58:83:ff:35:c4:97:b6:83:66:40:42:ae:a5:
                    29:d3:4d:d1:c6:2a:e6:ca:8b:fe:17:68:eb:f7:1b:
                    ef:c7:1d:f3:cf:2d:a8:ad:7f:84:aa:09:ac:f1:e5:
                    99:8b:69:df:a3:6e:e1:1f:30:e6:87:01:00:2d:2a:
                    27:45:d7:89:62:3d:4e:fc:2d:a9:11:6d:fe:1a:50:
                    4d:72:85:b0:01:f6:8c:93:27:83:e0:db:d1:19:7d:
                    58:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9C:03:65:7F:8D:D8:A7:D9:F3:12:DA:05:57:74:11:80:B4:50:DE
            X509v3 Authority Key Identifier:
                keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:2f:d0:20:c1:b0:d6:6e:a7:eb:56:c1:66:72:d3:65:0f:08:
         81:a9:8b:4d:e2:1b:6b:39:68:95:02:9b:8a:e8:06:73:d2:0f:
         8d:c7:61:73:c0:c5:c2:2b:e3:cd:17:f3:0c:2c:5c:4a:77:ca:
         57:10:4f:1c:b8:f5:c6:2a:e8:51:74:18:20:4e:ef:62:73:05:
         4b:61:08:3b:cb:83:d0:c9:c4:f3:56:8a:e1:db:9b:bd:6d:03:
         29:d5:f2:dc:a5:9a:e6:50:2f:69:b9:ff:22:7c:ae:b7:7d:f3:
         9f:7e:16:5c:9f:65:94:8c:43:1a:5b:61:b9:d6:ec:12:dc:ab:
         24:6a:e5:62:56:2f:9c:26:9b:b1:f8:43:41:9f:de:d1:8e:1e:
         8a:7f:26:12:5e:4f:be:20:d3:d1:d2:9c:5d:2b:72:bb:e3:6f:
         8f:e1:9b:c0:17:f6:3e:a4:9b:b7:fd:76:53:33:be:36:db:f8:
         3f:c1:28:a8:a8:08:61:24:73:e5:a8:ca:1c:1e:2b:67:73:a1:
         c7:07:a8:dc:7b:12:0b:e8:27:4b:77:2d:c1:f3:75:fe:c9:5a:
         5e:4d:d3:b3:ee:01:08:f3:a2:9e:a6:13:fe:a1:36:8c:ba:7a:
         8d:76:df:2d:59:e5:1b:53:b5:60:78:02:5e:ca:0a:03:2f:0f:
         fc:f7:0f:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAy8fRw/IkTt9VjnrxsfxC7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz
NTNkY2UwHhcNMjQwNjIwMDAwMDM1WhcNMjQwNjIxMDAwMDM1WjAzMTEwLwYDVQQD
Eyg2OTljMDM2NTdmOGRkOGE3ZDlmMzEyZGEwNTU3NzQxMTgwYjQ1MGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CNFvReic6FRlASNIROh6iDFOyZO
m04B8W5GRWEDvwvGNN+BCLlE1CxhEBRwY6orxb9Tb7U99tp3BptgXjly4iEZmGEN
97RJXdAPz77Rk7tfMpU1rnQwTa6EOC48J51FpNqhekWo5wxpgeh52aXdqUGGDvj3
644iNiHbjMVSUaHAFQpGWKccqakZJhqhTtUgwPFhoqR2P+Cx5uvmqYQJfyl/vJuI
1FiD/zXEl7aDZkBCrqUp003Rxirmyov+F2jr9xvvxx3zzy2orX+Eqgms8eWZi2nf
o27hHzDmhwEALSonRdeJYj1O/C2pEW3+GlBNcoWwAfaMkyeD4NvRGX1YPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmcA2V/jdin2fMS2gVXdBGAtFDeMB8GA1UdIwQY
MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt
ODI3NmM4YWFjNTBlLzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl
LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQy/QIMGw
1m6n61bBZnLTZQ8IgamLTeIbazlolQKbiugGc9IPjcdhc8DFwivjzRfzDCxcSnfK
VxBPHLj1xiroUXQYIE7vYnMFS2EIO8uD0MnE81aK4dubvW0DKdXy3KWa5lAvabn/
Inyut33zn34WXJ9llIxDGlthudbsEtyrJGrlYlYvnCabsfhDQZ/e0Y4ein8mEl5P
viDT0dKcXStyu+Nvj+GbwBf2PqSbt/12UzO+Ntv4P8EoqKgIYSRz5ajKHB4rZ3Oh
xweo3HsSC+gnS3ctwfN1/slaXk3Ts+4BCPOinqYT/qE2jLp6jXbfLVnlG1O1YHgC
XsoKAy8P/PcP6w==
-----END CERTIFICATE-----
Generated at Thu Jun 20 09:50:29 2024 by rpki-client on console-fra.rpki-client.org