Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Upvm9FzWQYii0KNkSnL06EKmOmk.mft
File:                     Upvm9FzWQYii0KNkSnL06EKmOmk.mft (raw, json)
Hash identifier:          qCWu496P8JZdQEiW+1vHVYAjG25bNdKUqQnGiHIJc1Y=
Subject key identifier:   88:C1:9C:60:54:86:BE:90:52:BE:38:5D:C1:5D:E6:E3:F4:BF:7F:0D
Authority key identifier: 52:9B:E6:F4:5C:D6:41:88:A2:D0:A3:64:4A:72:F4:E8:42:A6:3A:69
Certificate issuer:       /CN=529be6f45cd64188a2d0a3644a72f4e842a63a69
Certificate serial:       01901E593E6DD51AEB3B0CCC7158749E4A7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Upvm9FzWQYii0KNkSnL06EKmOmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Upvm9FzWQYii0KNkSnL06EKmOmk.mft
Manifest number:          75
Signing time:             Sun 16 Jun 2024 00:01:23 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:23 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:23 +0000
Files and hashes:         1: Upvm9FzWQYii0KNkSnL06EKmOmk.crl (hash: pMwuUXfNl5fnwYMwQxxnLhNlXnoFqEQET/gTIJE2h/M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Upvm9FzWQYii0KNkSnL06EKmOmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Upvm9FzWQYii0KNkSnL06EKmOmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Upvm9FzWQYii0KNkSnL06EKmOmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:3e:6d:d5:1a:eb:3b:0c:cc:71:58:74:9e:4a:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529be6f45cd64188a2d0a3644a72f4e842a63a69
        Validity
            Not Before: Jun 16 00:01:23 2024 GMT
            Not After : Jun 17 00:01:23 2024 GMT
        Subject: CN=88c19c605486be9052be385dc15de6e3f4bf7f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:24:84:71:f1:86:8f:28:81:d1:8d:aa:36:1e:
                    64:65:90:41:36:6e:c5:3c:8a:d6:cf:12:e0:ba:b8:
                    ce:10:d3:91:f0:e2:50:65:bf:91:ef:d9:b8:ce:55:
                    01:4e:62:c1:c9:dc:5c:db:c9:36:86:9b:1b:c1:e2:
                    82:17:83:7d:85:ac:fc:d9:3d:74:47:8b:9c:6a:89:
                    d6:ad:a9:5f:21:cb:db:64:51:03:14:d7:ef:da:e7:
                    81:79:aa:9b:40:28:0f:08:04:2e:56:c1:ab:0a:ba:
                    42:a7:8c:63:a6:7e:e8:dd:30:e6:94:f2:a1:5c:d6:
                    9c:f8:a2:6c:cc:25:d5:74:8b:1f:19:ea:44:97:78:
                    ff:1e:ad:2d:3e:1e:ff:0f:84:2f:01:c9:d3:fc:3d:
                    bb:e2:f6:a7:94:67:c2:b7:44:51:7f:d8:c3:b1:a8:
                    75:b0:d6:f9:e6:ce:d6:8a:49:8e:e7:ac:44:fb:59:
                    c2:fa:47:fb:4d:80:2e:97:71:5f:65:29:ea:89:46:
                    6e:9e:3d:b5:6a:69:20:a4:f4:04:e9:80:c9:28:ee:
                    d9:28:28:d3:c7:f9:cc:52:df:89:ef:52:f2:06:49:
                    02:4d:0b:46:ea:fd:ae:b0:a2:2f:51:49:c1:f3:05:
                    a8:ad:4d:de:88:03:cb:12:51:dd:0c:f8:0a:15:f1:
                    f4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C1:9C:60:54:86:BE:90:52:BE:38:5D:C1:5D:E6:E3:F4:BF:7F:0D
            X509v3 Authority Key Identifier:
                keyid:52:9B:E6:F4:5C:D6:41:88:A2:D0:A3:64:4A:72:F4:E8:42:A6:3A:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Upvm9FzWQYii0KNkSnL06EKmOmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Upvm9FzWQYii0KNkSnL06EKmOmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Upvm9FzWQYii0KNkSnL06EKmOmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:2b:36:17:db:25:a8:2a:3f:1d:99:b4:61:ab:fa:24:72:e9:
         7b:47:08:ca:7c:28:15:ca:40:5f:1a:63:51:fb:a8:27:3c:da:
         8f:e1:99:b6:71:38:05:4b:f6:69:0d:3a:d7:1e:54:29:45:3c:
         f7:b2:85:40:c1:1d:39:d2:24:1f:8b:b7:1e:fb:52:ed:24:df:
         ed:df:b6:62:88:f5:a3:d0:2b:a5:97:d6:b7:d1:07:a6:7e:cc:
         46:1a:1f:33:16:5c:7f:30:dd:2f:84:ef:43:b3:83:1c:e4:37:
         5a:2e:96:1b:bf:67:db:1b:45:7c:13:c6:ab:2a:91:f4:5d:b9:
         ef:81:47:78:8c:cb:d3:eb:b8:90:4a:82:b0:d7:32:18:f1:13:
         47:f1:66:f7:5e:3a:f6:0b:be:93:30:aa:43:f9:4f:4d:24:d3:
         2a:b7:d1:c6:13:ce:9b:ba:d0:50:08:fb:56:0f:ee:8e:8b:47:
         05:d7:f3:a0:d1:f6:0e:9a:58:15:e2:2a:f0:19:a9:ee:53:0e:
         f0:53:43:cd:4a:7c:39:db:70:55:23:b4:f2:7a:54:0b:0e:11:
         97:97:65:b9:28:dd:68:da:c5:f2:cf:41:77:d3:5e:8e:2e:65:
         c6:33:0f:e2:ff:79:ae:dd:a9:0b:ed:65:38:ab:c3:fe:05:45:
         56:f5:2a:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWT5t1RrrOwzMcVh0nkp9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyOWJlNmY0NWNkNjQxODhhMmQwYTM2NDRhNzJmNGU4NDJh
NjNhNjkwHhcNMjQwNjE2MDAwMTIzWhcNMjQwNjE3MDAwMTIzWjAzMTEwLwYDVQQD
Eyg4OGMxOWM2MDU0ODZiZTkwNTJiZTM4NWRjMTVkZTZlM2Y0YmY3ZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliSEcfGGjyiB0Y2qNh5kZZBBNm7F
PIrWzxLgurjOENOR8OJQZb+R79m4zlUBTmLBydxc28k2hpsbweKCF4N9haz82T10
R4ucaonWralfIcvbZFEDFNfv2ueBeaqbQCgPCAQuVsGrCrpCp4xjpn7o3TDmlPKh
XNac+KJszCXVdIsfGepEl3j/Hq0tPh7/D4QvAcnT/D274vanlGfCt0RRf9jDsah1
sNb55s7WikmO56xE+1nC+kf7TYAul3FfZSnqiUZunj21amkgpPQE6YDJKO7ZKCjT
x/nMUt+J71LyBkkCTQtG6v2usKIvUUnB8wWorU3eiAPLElHdDPgKFfH0bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjBnGBUhr6QUr44XcFd5uP0v38NMB8GA1UdIwQY
MBaAFFKb5vRc1kGIotCjZEpy9OhCpjppMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXB2bTlGeldRWWlpMEtOa1NuTDA2RUttT21rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85YzBhN2UtOTk2My00YzBkLTk0YWMt
NDQ2ZDBhN2U5NDA0LzEvVXB2bTlGeldRWWlpMEtOa1NuTDA2RUttT21rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS85YzBhN2UtOTk2My00YzBkLTk0YWMtNDQ2ZDBhN2U5NDA0
LzEvVXB2bTlGeldRWWlpMEtOa1NuTDA2RUttT21rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJys2F9sl
qCo/HZm0Yav6JHLpe0cIynwoFcpAXxpjUfuoJzzaj+GZtnE4BUv2aQ061x5UKUU8
97KFQMEdOdIkH4u3HvtS7STf7d+2Yoj1o9ArpZfWt9EHpn7MRhofMxZcfzDdL4Tv
Q7ODHOQ3Wi6WG79n2xtFfBPGqyqR9F2574FHeIzL0+u4kEqCsNcyGPETR/Fm9146
9gu+kzCqQ/lPTSTTKrfRxhPOm7rQUAj7Vg/ujotHBdfzoNH2DppYFeIq8Bmp7lMO
8FNDzUp8OdtwVSO08npUCw4Rl5dluSjdaNrF8s9Bd9Neji5lxjMP4v95rt2pC+1l
OKvD/gVFVvUqlg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:44:52 2024 by rpki-client on console-fra.rpki-client.org