Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
File:                     uji5p2P2XAJ6o92th8GI2nikvZc.mft (raw, json)
Hash identifier:          tw24yfnCs6Fi4dy88WS3lOPYydYPpR4EpnKSmVX6pxI=
Subject key identifier:   BB:77:8C:44:40:AF:AB:82:61:C5:25:8C:8D:6D:87:8E:1A:C5:77:49
Authority key identifier: BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97
Certificate issuer:       /CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
Certificate serial:       01901C6A415869D58F9DD9C2CBFC7B178635
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 15:00:43 +0000
Manifest this update:     Sat 15 Jun 2024 15:00:43 +0000
Manifest next update:     Sun 16 Jun 2024 15:00:43 +0000
Files and hashes:         1: uji5p2P2XAJ6o92th8GI2nikvZc.crl (hash: u9RW6upTL6SXht9xRXdcyPs7uoG9IHR002pkJluHzsA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:41:58:69:d5:8f:9d:d9:c2:cb:fc:7b:17:86:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
        Validity
            Not Before: Jun 15 15:00:43 2024 GMT
            Not After : Jun 16 15:00:43 2024 GMT
        Subject: CN=bb778c4440afab8261c5258c8d6d878e1ac57749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d5:a3:ce:6b:79:bb:e9:ac:c2:d1:a5:e3:68:
                    66:aa:04:14:51:ca:0a:fb:dd:5d:36:97:2a:46:6a:
                    b3:2d:75:f9:da:6a:04:b5:03:86:11:33:21:46:e6:
                    2a:c3:37:3d:6c:e6:da:29:8b:b6:f3:24:b1:11:53:
                    30:c6:d7:ea:33:d0:57:25:f6:69:2c:17:11:df:95:
                    e0:75:80:32:ae:b5:d8:f6:ee:ec:7d:53:6e:75:c3:
                    8a:45:cd:8f:b9:58:2a:39:d3:78:31:bf:b3:99:d9:
                    0b:59:ce:a8:d9:b3:0e:ef:45:c2:ea:79:30:68:6a:
                    19:67:7e:1a:7c:2a:21:4a:07:d5:5b:3a:7a:c7:1c:
                    89:01:e4:38:76:b6:39:be:5b:e3:45:bb:d0:ee:1a:
                    c9:21:69:e1:75:4b:b9:08:4c:a7:9b:c0:0b:19:bf:
                    2e:48:7b:94:99:65:d9:44:d5:af:b5:ea:f4:28:88:
                    65:f9:fd:d0:e1:71:92:db:96:a7:78:34:81:74:61:
                    63:fc:cc:df:35:2a:20:cb:4e:1c:03:aa:86:a0:45:
                    0d:05:a3:76:77:9a:7a:a9:5d:6c:63:f2:41:d3:bb:
                    07:50:95:c7:9b:78:7c:14:50:58:f1:dc:ed:fa:76:
                    9b:65:c0:15:d3:55:8a:4d:72:eb:6d:17:51:f6:7c:
                    bd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:77:8C:44:40:AF:AB:82:61:C5:25:8C:8D:6D:87:8E:1A:C5:77:49
            X509v3 Authority Key Identifier:
                keyid:BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:bb:4f:a8:97:74:fb:4a:1f:60:57:78:18:28:c0:1e:1c:5e:
         a8:cb:00:41:6b:79:90:e5:3b:80:e1:df:b8:82:81:e8:89:da:
         4a:14:35:16:ff:6f:47:89:8f:57:6d:b6:1d:12:23:0d:f1:e5:
         8e:ea:95:98:2f:a4:41:26:d0:88:71:8c:3d:1c:94:91:c4:2d:
         6b:42:12:7d:02:bc:f8:74:86:00:7e:fa:57:5d:7a:06:b8:a4:
         80:55:19:d8:44:f6:2d:48:83:dd:9c:4d:7f:15:96:35:10:68:
         4e:dd:81:37:6b:d4:6a:d0:9e:e1:02:bf:a4:62:46:2d:6f:02:
         45:9f:68:eb:bd:0c:33:35:fb:67:7d:7d:bf:17:d1:8a:cc:dd:
         f5:79:62:7b:24:0b:14:08:bf:58:0f:73:73:1f:9e:87:e3:3e:
         46:b1:4a:d3:20:b4:2d:61:e2:ca:21:c4:4d:a5:c2:39:6e:a3:
         ba:69:04:02:4d:f8:37:62:b1:a8:38:20:51:6f:ee:21:21:02:
         6e:9f:08:f1:30:ed:27:86:64:8e:c8:8c:62:f9:45:67:02:dc:
         71:69:40:df:8a:29:4e:4c:de:4a:c9:6a:c3:ab:26:af:34:c2:
         6b:76:21:50:25:2b:ea:32:d2:6d:84:e7:52:22:02:a7:c3:0c:
         1c:9e:cc:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcakFYadWPndnCy/x7F4Y1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMzhiOWE3NjNmNjVjMDI3YWEzZGRhZDg3YzE4OGRhNzhh
NGJkOTcwHhcNMjQwNjE1MTUwMDQzWhcNMjQwNjE2MTUwMDQzWjAzMTEwLwYDVQQD
EyhiYjc3OGM0NDQwYWZhYjgyNjFjNTI1OGM4ZDZkODc4ZTFhYzU3NzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutWjzmt5u+mswtGl42hmqgQUUcoK
+91dNpcqRmqzLXX52moEtQOGETMhRuYqwzc9bObaKYu28ySxEVMwxtfqM9BXJfZp
LBcR35XgdYAyrrXY9u7sfVNudcOKRc2PuVgqOdN4Mb+zmdkLWc6o2bMO70XC6nkw
aGoZZ34afCohSgfVWzp6xxyJAeQ4drY5vlvjRbvQ7hrJIWnhdUu5CEynm8ALGb8u
SHuUmWXZRNWvter0KIhl+f3Q4XGS25aneDSBdGFj/MzfNSogy04cA6qGoEUNBaN2
d5p6qV1sY/JB07sHUJXHm3h8FFBY8dzt+nabZcAV01WKTXLrbRdR9ny94QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLt3jERAr6uCYcUljI1th44axXdJMB8GA1UdIwQY
MBaAFLo4uadj9lwCeqPdrYfBiNp4pL2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWppNXAyUDJYQUo2bzkydGg4R0kybmlrdlpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8zZDY3MmQtNDY3NS00NjcxLTgxYzEt
NjBmN2Y4N2M3N2U2LzEvdWppNXAyUDJYQUo2bzkydGg4R0kybmlrdlpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8zZDY3MmQtNDY3NS00NjcxLTgxYzEtNjBmN2Y4N2M3N2U2
LzEvdWppNXAyUDJYQUo2bzkydGg4R0kybmlrdlpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnLtPqJd0
+0ofYFd4GCjAHhxeqMsAQWt5kOU7gOHfuIKB6InaShQ1Fv9vR4mPV222HRIjDfHl
juqVmC+kQSbQiHGMPRyUkcQta0ISfQK8+HSGAH76V116BrikgFUZ2ET2LUiD3ZxN
fxWWNRBoTt2BN2vUatCe4QK/pGJGLW8CRZ9o670MMzX7Z319vxfRiszd9XlieyQL
FAi/WA9zcx+eh+M+RrFK0yC0LWHiyiHETaXCOW6jumkEAk34N2KxqDggUW/uISEC
bp8I8TDtJ4ZkjsiMYvlFZwLccWlA34opTkzeSslqw6smrzTCa3YhUCUr6jLSbYTn
UiICp8MMHJ7Mog==
-----END CERTIFICATE-----
Generated at Sat Jun 15 20:34:52 2024 by rpki-client on console-fra.rpki-client.org