Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
File:                     q8Legg4C88P4bluMnEndxJMlEj8.mft (raw, json)
Hash identifier:          Uq2bwB4zF8ruQtqnDu0y+SBdqXYHiazFnGdIMRm8hU4=
Subject key identifier:   98:97:30:FC:97:37:5A:C7:C4:E7:CE:6B:9C:38:BD:E9:3B:AE:12:40
Authority key identifier: AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F
Certificate issuer:       /CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f
Certificate serial:       01901DECFA63576F0B1A5E893B86B3125D8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 22:03:08 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:08 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:08 +0000
Files and hashes:         1: q8Legg4C88P4bluMnEndxJMlEj8.crl (hash: UEXjzDbZQxdoAXpl070Fm0CARqBuqXkBaasSeiBWhQ4=)
                          2: uQ84OjfWymLhhXSjPJE0HdM5Edo.roa (hash: BKcmoZ4tD4ick2qhMB3PZ78y5jEeGU8XFql3VZxR6U8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:fa:63:57:6f:0b:1a:5e:89:3b:86:b3:12:5d:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f
        Validity
            Not Before: Jun 15 22:03:08 2024 GMT
            Not After : Jun 16 22:03:08 2024 GMT
        Subject: CN=989730fc97375ac7c4e7ce6b9c38bde93bae1240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1d:20:6b:3e:ad:1c:4a:4f:60:93:a0:41:5a:
                    18:f3:88:5d:c8:59:eb:32:f3:75:79:42:4d:46:52:
                    da:ca:c8:6d:b0:9f:1a:51:0a:5d:bb:5a:66:71:ad:
                    be:22:18:64:d0:13:17:1c:98:ae:39:1e:d9:3e:9f:
                    89:f6:28:3a:be:69:6b:88:ec:39:5d:de:f9:7f:55:
                    4b:0d:1f:13:b9:c1:d3:15:48:d9:8d:a3:9c:d4:30:
                    99:26:5a:6c:d3:71:59:74:86:3d:4b:5b:b8:14:f0:
                    29:99:de:a6:b7:77:37:e9:98:46:dd:cc:70:b0:93:
                    73:c2:db:73:6d:16:70:8e:58:2e:37:51:af:18:67:
                    fe:0f:3b:2f:32:0f:2d:ee:c5:de:ca:a9:4e:ab:fb:
                    d7:24:55:0a:34:87:ec:ce:ac:58:43:9a:93:0a:2c:
                    b5:93:46:52:cd:e2:43:c3:02:38:7b:9e:63:dd:79:
                    93:e7:de:c9:af:70:27:c4:f7:2a:cf:7e:94:28:40:
                    87:fd:27:5a:06:34:3d:e1:5e:b3:75:26:4c:2d:ae:
                    0a:e9:b8:de:b1:25:c6:09:f6:7d:78:34:4d:d5:94:
                    af:7c:61:56:4b:9c:52:52:cf:e1:1e:1c:4c:e4:e3:
                    45:36:75:13:4a:8b:4f:e0:9f:98:98:00:06:4f:bb:
                    f9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:97:30:FC:97:37:5A:C7:C4:E7:CE:6B:9C:38:BD:E9:3B:AE:12:40
            X509v3 Authority Key Identifier:
                keyid:AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:95:3f:8d:ba:de:66:a6:96:dd:73:10:19:fe:70:be:c9:e9:
         c9:f1:13:45:c1:b1:43:0e:17:f3:9c:28:3e:a2:fd:b6:99:3b:
         7d:d4:b9:54:be:b3:64:93:f9:5a:c0:a5:e4:cc:7d:25:9f:b3:
         e8:c5:24:d2:6f:2d:06:97:4d:b2:08:2e:4d:96:61:f0:cb:01:
         41:ce:83:0d:34:31:c5:af:6b:ec:dc:a8:25:9f:89:a6:2a:ad:
         1a:20:42:d5:df:99:95:91:f0:ba:69:79:bb:92:e0:87:44:28:
         db:8a:6c:3f:10:a1:aa:50:32:35:e4:17:16:fa:83:a6:d7:3b:
         7c:f2:fb:42:6e:e6:d5:30:7b:ae:38:10:97:f0:92:d5:ff:a9:
         fe:0b:84:c0:33:27:f1:a3:83:ca:ff:95:8f:73:f0:44:bd:c5:
         30:50:7c:55:32:85:c3:0e:ea:ee:cb:a0:95:84:a9:ba:1c:f0:
         39:a7:92:7a:bf:a6:7f:89:6e:4a:2a:a3:e3:63:61:d8:6d:c6:
         a6:98:1d:f9:a8:f1:9b:96:a1:f5:a9:ca:f7:f7:52:bc:fe:10:
         ee:48:89:12:ba:6d:25:f4:d8:5b:c4:a4:4c:fb:48:92:fe:62:
         79:73:7a:26:4e:bb:31:78:ff:b3:fd:b1:bb:c6:63:63:3f:08:
         ab:bb:35:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7PpjV28LGl6JO4azEl2PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzJkZTgyMGUwMmYzYzNmODZlNWI4YzljNDlkZGM0OTMy
NTEyM2YwHhcNMjQwNjE1MjIwMzA4WhcNMjQwNjE2MjIwMzA4WjAzMTEwLwYDVQQD
Eyg5ODk3MzBmYzk3Mzc1YWM3YzRlN2NlNmI5YzM4YmRlOTNiYWUxMjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2h0gaz6tHEpPYJOgQVoY84hdyFnr
MvN1eUJNRlLayshtsJ8aUQpdu1pmca2+Ihhk0BMXHJiuOR7ZPp+J9ig6vmlriOw5
Xd75f1VLDR8TucHTFUjZjaOc1DCZJlps03FZdIY9S1u4FPApmd6mt3c36ZhG3cxw
sJNzwttzbRZwjlguN1GvGGf+DzsvMg8t7sXeyqlOq/vXJFUKNIfszqxYQ5qTCiy1
k0ZSzeJDwwI4e55j3XmT597Jr3AnxPcqz36UKECH/SdaBjQ94V6zdSZMLa4K6bje
sSXGCfZ9eDRN1ZSvfGFWS5xSUs/hHhxM5ONFNnUTSotP4J+YmAAGT7v5wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJiXMPyXN1rHxOfOa5w4vek7rhJAMB8GA1UdIwQY
MBaAFKvC3oIOAvPD+G5bjJxJ3cSTJRI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThMZWdnNEM4OFA0Ymx1TW5FbmR4Sk1sRWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS81Njc0OGUtYzI5Ny00ZGU3LThlOTYt
ODk3ODMzMTdlYTI5LzEvcThMZWdnNEM4OFA0Ymx1TW5FbmR4Sk1sRWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS81Njc0OGUtYzI5Ny00ZGU3LThlOTYtODk3ODMzMTdlYTI5
LzEvcThMZWdnNEM4OFA0Ymx1TW5FbmR4Sk1sRWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5U/jbre
ZqaW3XMQGf5wvsnpyfETRcGxQw4X85woPqL9tpk7fdS5VL6zZJP5WsCl5Mx9JZ+z
6MUk0m8tBpdNsgguTZZh8MsBQc6DDTQxxa9r7NyoJZ+JpiqtGiBC1d+ZlZHwuml5
u5Lgh0Qo24psPxChqlAyNeQXFvqDptc7fPL7Qm7m1TB7rjgQl/CS1f+p/guEwDMn
8aODyv+Vj3PwRL3FMFB8VTKFww7q7suglYSpuhzwOaeSer+mf4luSiqj42Nh2G3G
ppgd+ajxm5ah9anK9/dSvP4Q7kiJErptJfTYW8SkTPtIkv5ieXN6Jk67MXj/s/2x
u8ZjYz8Iq7s1yg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 22:59:28 2024 by rpki-client on console-fra.rpki-client.org