Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
File:                     8qsLWFucOWKI0g6c9mWuHeOfeDM.mft (raw, json)
Hash identifier:          TcKGwMO8ABi3o7mQW36tdmshb7HzvYyWKUr3L7wQTNM=
Subject key identifier:   7D:60:8D:65:8B:15:DF:5A:23:DC:2F:5A:A6:41:D8:E4:20:00:DF:C9
Authority key identifier: F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
Certificate issuer:       /CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Certificate serial:       01901CA1ABCDF16295FDBF86A73D49C633BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 16:01:15 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:15 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:15 +0000
Files and hashes:         1: 8qsLWFucOWKI0g6c9mWuHeOfeDM.crl (hash: Ux84ofxgKXNEirm3s6B5DMNkDVRf8ySs4cUsudmWHGk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:ab:cd:f1:62:95:fd:bf:86:a7:3d:49:c6:33:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
        Validity
            Not Before: Jun 15 16:01:15 2024 GMT
            Not After : Jun 16 16:01:15 2024 GMT
        Subject: CN=7d608d658b15df5a23dc2f5aa641d8e42000dfc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0c:f7:b7:7c:5f:94:56:6c:8f:14:b7:dc:a2:
                    65:47:c3:bf:7c:12:db:26:b5:07:e7:2c:2b:4e:61:
                    fe:b3:f8:31:e1:4e:51:19:f3:e2:24:36:4f:04:67:
                    0f:c9:1a:40:7e:47:f2:98:42:ac:6c:01:fd:b7:9b:
                    a7:7b:c9:86:9c:7b:91:ee:de:31:36:d3:93:d8:0f:
                    56:53:71:8a:0c:a0:96:35:c5:14:40:c2:e5:90:9d:
                    6d:70:29:85:3f:3a:3c:39:df:f3:b2:53:b3:15:ac:
                    3a:df:0b:f2:58:bf:85:7d:73:b8:8d:8f:3e:17:46:
                    1d:69:d1:65:a4:67:02:23:d5:99:d4:84:bc:33:47:
                    47:9a:cc:22:3e:99:7f:e9:bb:e4:0b:81:aa:fe:5e:
                    2b:36:d7:64:a5:9f:16:b7:77:3f:ea:cd:9c:3a:3b:
                    58:09:61:98:9b:86:7c:25:6a:80:27:3c:0c:4e:c4:
                    06:90:d2:eb:59:1c:22:33:58:53:a4:15:76:a9:bc:
                    99:b8:a5:7b:39:84:6e:90:2b:c4:1d:16:0d:40:21:
                    69:25:1b:cd:a0:df:f9:59:5a:a8:14:bb:f6:30:3b:
                    e0:f3:fa:1b:18:04:f5:3c:bc:bf:41:e8:9b:08:f1:
                    ce:85:4a:26:ff:77:e6:31:c5:6d:a4:04:55:37:37:
                    33:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:60:8D:65:8B:15:DF:5A:23:DC:2F:5A:A6:41:D8:E4:20:00:DF:C9
            X509v3 Authority Key Identifier:
                keyid:F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ef:c6:32:9d:67:39:c3:8b:53:2f:08:47:43:7b:7a:d2:78:
         55:7d:72:09:f9:d9:6a:f0:66:01:3b:07:43:aa:55:70:2c:14:
         12:44:bf:10:bf:8a:ee:06:50:65:09:9a:22:80:c4:ef:5b:6e:
         13:6f:72:36:28:32:52:e7:e9:b9:3e:69:12:03:11:ae:1c:19:
         cb:0b:b5:4d:94:a3:33:1b:9f:55:46:97:cd:59:51:00:30:e4:
         d1:35:58:fd:65:9f:9f:ff:a7:e7:87:3e:f3:4f:20:03:9e:1c:
         84:66:e0:75:fb:1b:05:98:50:01:e8:6e:46:65:50:a9:1a:43:
         00:dc:63:15:dd:03:6a:2a:3f:24:92:39:6b:78:a3:98:51:e0:
         96:c8:b2:8b:d4:a5:78:d9:29:89:ae:d2:b2:a8:0d:00:fd:84:
         f5:8d:9f:55:8b:9c:93:59:61:46:54:b4:2e:8e:66:dd:14:4d:
         db:b6:7e:6b:40:33:6d:92:fd:e8:92:71:2d:c8:4b:7c:df:7c:
         cb:9b:5e:ac:42:5d:2f:19:19:f4:99:75:ae:47:61:ea:fb:26:
         55:ba:a0:86:22:0b:f2:af:bd:4a:43:ba:50:0e:fe:19:ef:d8:
         d9:1c:f5:74:07:5f:a9:82:a3:8d:ca:50:e7:b6:f3:1f:8d:1e:
         a4:dd:3b:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcoavN8WKV/b+Gpz1JxjO6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYWIwYjU4NWI5YzM5NjI4OGQyMGU5Y2Y2NjVhZTFkZTM5
Zjc4MzMwHhcNMjQwNjE1MTYwMTE1WhcNMjQwNjE2MTYwMTE1WjAzMTEwLwYDVQQD
Eyg3ZDYwOGQ2NThiMTVkZjVhMjNkYzJmNWFhNjQxZDhlNDIwMDBkZmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwz3t3xflFZsjxS33KJlR8O/fBLb
JrUH5ywrTmH+s/gx4U5RGfPiJDZPBGcPyRpAfkfymEKsbAH9t5une8mGnHuR7t4x
NtOT2A9WU3GKDKCWNcUUQMLlkJ1tcCmFPzo8Od/zslOzFaw63wvyWL+FfXO4jY8+
F0YdadFlpGcCI9WZ1IS8M0dHmswiPpl/6bvkC4Gq/l4rNtdkpZ8Wt3c/6s2cOjtY
CWGYm4Z8JWqAJzwMTsQGkNLrWRwiM1hTpBV2qbyZuKV7OYRukCvEHRYNQCFpJRvN
oN/5WVqoFLv2MDvg8/obGAT1PLy/QeibCPHOhUom/3fmMcVtpARVNzczyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1gjWWLFd9aI9wvWqZB2OQgAN/JMB8GA1UdIwQY
MBaAFPKrC1hbnDliiNIOnPZlrh3jn3gzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9iYmZhMTktZGViYy00Yzc3LThkNjMt
OTA4YjI1MGNiYTc5LzEvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9iYmZhMTktZGViYy00Yzc3LThkNjMtOTA4YjI1MGNiYTc5
LzEvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+/GMp1n
OcOLUy8IR0N7etJ4VX1yCfnZavBmATsHQ6pVcCwUEkS/EL+K7gZQZQmaIoDE71tu
E29yNigyUufpuT5pEgMRrhwZywu1TZSjMxufVUaXzVlRADDk0TVY/WWfn/+n54c+
808gA54chGbgdfsbBZhQAehuRmVQqRpDANxjFd0Daio/JJI5a3ijmFHglsiyi9Sl
eNkpia7SsqgNAP2E9Y2fVYuck1lhRlS0Lo5m3RRN27Z+a0AzbZL96JJxLchLfN98
y5terEJdLxkZ9Jl1rkdh6vsmVbqghiIL8q+9SkO6UA7+Ge/Y2Rz1dAdfqYKjjcpQ
57bzH40epN07tw==
-----END CERTIFICATE-----
Generated at Sat Jun 15 20:34:46 2024 by rpki-client on console-fra.rpki-client.org