Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
File:                     ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft (raw, json)
Hash identifier:          ONfwPEtPczWC+txD8SGb31J/D90X11Il4ZrvBzAKbdY=
Subject key identifier:   78:76:42:75:04:B4:57:BD:A8:E5:3A:D4:F5:56:5D:6C:C2:BD:5F:85
Authority key identifier: BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8
Certificate issuer:       /CN=ba58275572434893b9cbd14e4ade708929e467f8
Certificate serial:       0190448C2D05346F73D1D9E26397B2C0B2EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
Manifest number:          0DB5
Signing time:             Sun 23 Jun 2024 10:02:35 +0000
Manifest this update:     Sun 23 Jun 2024 10:02:35 +0000
Manifest next update:     Mon 24 Jun 2024 10:02:35 +0000
Files and hashes:         1: ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl (hash: GuQpKoJhlu8bbtu1jNAbdHmfb6Z0Czgw8gTd7mOzAOA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:2d:05:34:6f:73:d1:d9:e2:63:97:b2:c0:b2:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba58275572434893b9cbd14e4ade708929e467f8
        Validity
            Not Before: Jun 23 10:02:35 2024 GMT
            Not After : Jun 24 10:02:35 2024 GMT
        Subject: CN=7876427504b457bda8e53ad4f5565d6cc2bd5f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:01:6f:62:ea:00:5b:a1:cf:4c:88:6d:21:87:
                    0c:28:4f:64:c6:40:1b:db:a1:ae:6d:62:1e:ce:fe:
                    32:0b:fc:ad:09:84:11:e3:5a:f2:6e:c2:4d:f3:45:
                    92:e1:99:4a:49:dc:8a:0f:24:71:83:ff:4b:df:87:
                    da:47:d1:65:26:f5:82:e4:8c:a2:c3:a6:30:cb:ee:
                    d7:cf:44:2f:dd:90:05:09:19:e2:01:c5:4c:21:df:
                    d7:11:af:21:1e:9b:2d:a6:57:b0:61:a0:ca:95:f1:
                    7f:db:1e:34:a6:5a:88:38:2c:4e:6d:84:28:1a:04:
                    97:70:5c:a2:42:07:84:1c:0f:43:08:44:15:06:b9:
                    2e:b2:df:d5:84:c4:7a:71:0a:c8:ff:7c:44:cd:a3:
                    09:7f:24:cb:62:ea:7d:87:58:b0:8f:6e:bd:03:c9:
                    60:17:b8:81:07:75:70:b9:cf:b6:11:bc:c5:db:b1:
                    db:21:0e:4e:e3:c5:1a:d9:33:30:43:d6:ce:b6:cf:
                    7d:d6:4c:d0:10:8c:17:23:ef:40:5e:b6:8a:d5:86:
                    a7:db:f4:cd:cf:e1:58:f1:fb:d0:a8:20:38:28:be:
                    b5:c9:c4:f8:c1:34:c5:39:4d:b7:22:23:69:ba:f3:
                    0a:a4:d9:41:c6:be:fe:d4:36:a6:75:43:84:f9:60:
                    b9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:76:42:75:04:B4:57:BD:A8:E5:3A:D4:F5:56:5D:6C:C2:BD:5F:85
            X509v3 Authority Key Identifier:
                keyid:BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b1:9f:57:02:8a:7e:3b:de:b2:2f:6d:1e:af:76:e0:2a:c8:
         36:e1:2f:d9:5e:14:5b:ce:41:37:1b:a0:28:43:81:9a:79:c8:
         5f:b0:a3:bf:d3:1c:d7:73:d8:ab:7e:98:8c:77:fa:ef:48:2a:
         02:a2:d7:1d:67:03:c9:c0:b4:12:bd:dd:1e:a8:f1:f7:1c:d7:
         31:20:67:06:a7:fc:f2:af:8f:32:ea:77:99:d2:32:e9:29:b7:
         81:26:65:91:67:4c:71:d3:1c:c5:eb:33:70:46:a4:a5:77:d4:
         af:2f:18:63:d4:8b:83:0e:70:60:3a:46:11:c9:04:54:54:7c:
         5d:8f:31:0c:13:59:b6:80:ab:95:7e:f0:27:39:06:28:e2:81:
         bf:00:b8:e3:ad:e8:fc:87:bb:6d:7b:8a:22:cd:7a:4f:bf:40:
         cd:72:c7:b0:20:e0:2c:94:52:cd:bc:e7:4f:f9:61:98:e2:3e:
         05:ec:71:73:6f:eb:c8:7d:d5:26:a3:dd:0b:04:f2:44:87:7e:
         18:e5:77:ce:93:9f:bc:ad:64:a5:c7:46:ea:18:72:02:cc:63:
         a3:93:68:a9:7a:a5:7a:55:f7:29:45:ae:80:d5:3b:4c:17:51:
         d0:67:61:fa:8c:06:4b:10:05:ab:78:62:e6:ee:a6:5f:91:e7:
         35:b1:44:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBEjC0FNG9z0dniY5eywLLrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNTgyNzU1NzI0MzQ4OTNiOWNiZDE0ZTRhZGU3MDg5Mjll
NDY3ZjgwHhcNMjQwNjIzMTAwMjM1WhcNMjQwNjI0MTAwMjM1WjAzMTEwLwYDVQQD
Eyg3ODc2NDI3NTA0YjQ1N2JkYThlNTNhZDRmNTU2NWQ2Y2MyYmQ1Zjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgFvYuoAW6HPTIhtIYcMKE9kxkAb
26GubWIezv4yC/ytCYQR41rybsJN80WS4ZlKSdyKDyRxg/9L34faR9FlJvWC5Iyi
w6Ywy+7Xz0Qv3ZAFCRniAcVMId/XEa8hHpstplewYaDKlfF/2x40plqIOCxObYQo
GgSXcFyiQgeEHA9DCEQVBrkust/VhMR6cQrI/3xEzaMJfyTLYup9h1iwj269A8lg
F7iBB3Vwuc+2EbzF27HbIQ5O48Ua2TMwQ9bOts991kzQEIwXI+9AXraK1Yan2/TN
z+FY8fvQqCA4KL61ycT4wTTFOU23IiNpuvMKpNlBxr7+1DamdUOE+WC5QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHh2QnUEtFe9qOU61PVWXWzCvV+FMB8GA1UdIwQY
MBaAFLpYJ1VyQ0iTucvRTkrecIkp5Gf4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWxnblZYSkRTSk81eTlGT1N0NXdpU25rWl9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wNmFiM2MtN2YxYi00MDYyLTg3OTIt
MjYyNTU3Yzc0ZDRjLzEvdWxnblZYSkRTSk81eTlGT1N0NXdpU25rWl9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8wNmFiM2MtN2YxYi00MDYyLTg3OTItMjYyNTU3Yzc0ZDRj
LzEvdWxnblZYSkRTSk81eTlGT1N0NXdpU25rWl9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrGfVwKK
fjvesi9tHq924CrINuEv2V4UW85BNxugKEOBmnnIX7Cjv9Mc13PYq36YjHf670gq
AqLXHWcDycC0Er3dHqjx9xzXMSBnBqf88q+PMup3mdIy6Sm3gSZlkWdMcdMcxesz
cEakpXfUry8YY9SLgw5wYDpGEckEVFR8XY8xDBNZtoCrlX7wJzkGKOKBvwC4463o
/Ie7bXuKIs16T79AzXLHsCDgLJRSzbznT/lhmOI+Bexxc2/ryH3VJqPdCwTyRId+
GOV3zpOfvK1kpcdG6hhyAsxjo5NoqXqlelX3KUWugNU7TBdR0Gdh+owGSxAFq3hi
5u6mX5HnNbFEug==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:43:54 2024 by rpki-client on console-ams.rpki-client.org