Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.mft
File:                     oiPRU0TAKlUeY_gxxgT4Db7EuhA.mft (raw, json)
Hash identifier:          ivH8v1MOwwxIGAAYs5c/6atOZUf3gMPDYqDfjnzeqD0=
Subject key identifier:   22:B4:75:C2:90:34:BC:22:B5:CD:57:2E:9E:9C:F2:E1:CB:EA:BD:D9
Authority key identifier: A2:23:D1:53:44:C0:2A:55:1E:63:F8:31:C6:04:F8:0D:BE:C4:BA:10
Certificate issuer:       /CN=a223d15344c02a551e63f831c604f80dbec4ba10
Certificate serial:       01901DEBE4E93092893A4E282C76D8B167C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oiPRU0TAKlUeY_gxxgT4Db7EuhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.mft
Manifest number:          061B
Signing time:             Sat 15 Jun 2024 22:01:57 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:57 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:57 +0000
Files and hashes:         1: oiPRU0TAKlUeY_gxxgT4Db7EuhA.crl (hash: 9I6Zve0lJfjRl1e0XdhaOnmFQkRhj0HMzbvpunBwqL4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oiPRU0TAKlUeY_gxxgT4Db7EuhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:e4:e9:30:92:89:3a:4e:28:2c:76:d8:b1:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a223d15344c02a551e63f831c604f80dbec4ba10
        Validity
            Not Before: Jun 15 22:01:57 2024 GMT
            Not After : Jun 16 22:01:57 2024 GMT
        Subject: CN=22b475c29034bc22b5cd572e9e9cf2e1cbeabdd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:df:bd:da:51:7e:4d:01:13:ab:b9:b7:38:40:
                    23:b4:1a:c4:ac:f8:4e:59:24:b1:8e:6f:cb:b6:46:
                    0f:88:01:81:ff:a0:4e:df:60:09:38:35:73:5d:52:
                    93:32:f0:44:8c:82:92:18:52:0c:e2:d5:d8:7a:d5:
                    79:aa:6e:8a:e5:84:d3:ea:a5:89:92:94:48:3a:30:
                    a3:00:f9:d1:37:c3:d7:df:2d:ab:7e:ec:40:d1:86:
                    8f:07:4b:2f:40:9b:22:cc:00:47:1a:fd:44:d0:3a:
                    31:ec:e0:a9:b9:fe:05:7b:ed:db:45:55:e3:84:da:
                    fd:a1:66:1a:22:db:ef:35:16:0e:b7:e7:a9:6c:ea:
                    95:25:6d:57:30:52:c6:52:c0:df:c5:a2:be:d5:a4:
                    2f:5b:7e:b2:ab:b1:46:53:a4:80:65:cf:4f:59:cf:
                    09:41:17:bf:0a:51:fd:fb:79:b2:7a:aa:2c:72:0c:
                    66:df:96:8e:25:96:30:b6:23:3b:3a:ef:c4:43:9f:
                    cc:5c:ab:93:8f:2a:3d:f6:ab:27:37:b2:41:88:32:
                    16:a3:8d:ff:fa:e1:f4:44:95:de:97:38:c5:95:3a:
                    42:f0:22:0a:ae:50:a9:95:00:e5:28:01:d5:51:ab:
                    82:0c:bb:be:6d:31:79:46:ef:ee:87:7e:e0:81:79:
                    80:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B4:75:C2:90:34:BC:22:B5:CD:57:2E:9E:9C:F2:E1:CB:EA:BD:D9
            X509v3 Authority Key Identifier:
                keyid:A2:23:D1:53:44:C0:2A:55:1E:63:F8:31:C6:04:F8:0D:BE:C4:BA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oiPRU0TAKlUeY_gxxgT4Db7EuhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:67:a1:16:d5:2e:b8:25:86:7d:5a:e3:d8:61:8e:d7:3c:70:
         01:a4:c0:60:9f:b9:a3:ed:7f:49:1d:5e:d6:b5:9c:a6:b4:ab:
         83:7c:a7:7a:02:bc:a2:a3:15:db:cb:ed:a4:fd:d6:bf:62:a5:
         48:a7:13:75:43:79:ac:1c:5f:71:6b:72:68:cd:59:b0:f6:25:
         8f:cd:16:28:d6:ff:a8:e7:12:86:86:92:fa:bf:6e:55:e0:20:
         8b:7a:c2:9a:66:97:8d:a8:61:4f:ec:85:7b:53:ec:f1:0d:3c:
         18:b4:88:a6:63:18:bc:5a:4c:d1:49:e9:a9:6f:48:28:7d:01:
         96:bb:96:0a:04:d9:26:15:0c:25:bf:30:ff:b6:88:eb:b3:d4:
         e3:ac:92:85:b3:75:64:ee:ca:06:b3:ff:25:47:6f:93:ca:c0:
         a4:2c:ea:59:30:c1:13:d0:c9:32:bf:43:1a:e9:99:cf:e5:61:
         65:33:cf:51:56:96:a8:0e:4d:c8:fd:ad:ce:f0:7b:2c:3a:e0:
         96:66:56:54:df:c1:94:b9:e2:8d:90:24:38:3c:0d:de:08:76:
         26:5f:24:13:b9:69:5f:e3:62:02:2e:9a:e7:77:67:bf:23:c1:
         ca:f7:db:67:2e:7c:66:e0:66:17:53:f7:5d:4a:ff:15:de:b6:
         c2:91:9e:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd6+TpMJKJOk4oLHbYsWfAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMjNkMTUzNDRjMDJhNTUxZTYzZjgzMWM2MDRmODBkYmVj
NGJhMTAwHhcNMjQwNjE1MjIwMTU3WhcNMjQwNjE2MjIwMTU3WjAzMTEwLwYDVQQD
EygyMmI0NzVjMjkwMzRiYzIyYjVjZDU3MmU5ZTljZjJlMWNiZWFiZGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1t+92lF+TQETq7m3OEAjtBrErPhO
WSSxjm/LtkYPiAGB/6BO32AJODVzXVKTMvBEjIKSGFIM4tXYetV5qm6K5YTT6qWJ
kpRIOjCjAPnRN8PX3y2rfuxA0YaPB0svQJsizABHGv1E0Dox7OCpuf4Fe+3bRVXj
hNr9oWYaItvvNRYOt+epbOqVJW1XMFLGUsDfxaK+1aQvW36yq7FGU6SAZc9PWc8J
QRe/ClH9+3myeqoscgxm35aOJZYwtiM7Ou/EQ5/MXKuTjyo99qsnN7JBiDIWo43/
+uH0RJXelzjFlTpC8CIKrlCplQDlKAHVUauCDLu+bTF5Ru/uh37ggXmA8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCK0dcKQNLwitc1XLp6c8uHL6r3ZMB8GA1UdIwQY
MBaAFKIj0VNEwCpVHmP4McYE+A2+xLoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2lQUlUwVEFLbFVlWV9neHhnVDREYjdFdWhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84YzJmYWUtYmQ0OS00YmY3LWJhYTct
ODA5YTJkN2ZmMzQ4LzEvb2lQUlUwVEFLbFVlWV9neHhnVDREYjdFdWhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84YzJmYWUtYmQ0OS00YmY3LWJhYTctODA5YTJkN2ZmMzQ4
LzEvb2lQUlUwVEFLbFVlWV9neHhnVDREYjdFdWhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2ehFtUu
uCWGfVrj2GGO1zxwAaTAYJ+5o+1/SR1e1rWcprSrg3ynegK8oqMV28vtpP3Wv2Kl
SKcTdUN5rBxfcWtyaM1ZsPYlj80WKNb/qOcShoaS+r9uVeAgi3rCmmaXjahhT+yF
e1Ps8Q08GLSIpmMYvFpM0UnpqW9IKH0BlruWCgTZJhUMJb8w/7aI67PU46yShbN1
ZO7KBrP/JUdvk8rApCzqWTDBE9DJMr9DGumZz+VhZTPPUVaWqA5NyP2tzvB7LDrg
lmZWVN/BlLnijZAkODwN3gh2Jl8kE7lpX+NiAi6a53dnvyPByvfbZy58ZuBmF1P3
XUr/Fd62wpGevw==
-----END CERTIFICATE-----
Generated at Sat Jun 15 22:59:21 2024 by rpki-client on console-fra.rpki-client.org