Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.mft
File:                     C53uHUCq19-1viY4ApT04HcD14Q.mft (raw, json)
Hash identifier:          g2RT9S3GsvX1w/Yecacw6GNKz5l3qnIv9rhcznV2gcI=
Subject key identifier:   01:F9:6D:EF:E0:3B:C6:C3:99:BD:93:FE:1F:5C:0F:B0:F5:FD:88:6C
Authority key identifier: 0B:9D:EE:1D:40:AA:D7:DF:B5:BE:26:38:02:94:F4:E0:77:03:D7:84
Certificate issuer:       /CN=0b9dee1d40aad7dfb5be26380294f4e07703d784
Certificate serial:       01901EC6A16F349958BD5AA0F0F66306336A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C53uHUCq19-1viY4ApT04HcD14Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.mft
Manifest number:          11C3
Signing time:             Sun 16 Jun 2024 02:00:52 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:52 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:52 +0000
Files and hashes:         1: C53uHUCq19-1viY4ApT04HcD14Q.crl (hash: 5U6WOjwreBdWYkcpErKf9smWhDsh6nhgtYWGBInoEVk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C53uHUCq19-1viY4ApT04HcD14Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:a1:6f:34:99:58:bd:5a:a0:f0:f6:63:06:33:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b9dee1d40aad7dfb5be26380294f4e07703d784
        Validity
            Not Before: Jun 16 02:00:52 2024 GMT
            Not After : Jun 17 02:00:52 2024 GMT
        Subject: CN=01f96defe03bc6c399bd93fe1f5c0fb0f5fd886c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f6:60:44:76:ab:c2:f6:00:61:7d:70:0e:c7:
                    3e:8f:f7:6b:c2:00:c6:6d:89:a4:46:6c:d1:79:99:
                    26:6e:89:73:08:f1:8f:fb:bd:dc:fc:0e:54:2b:6c:
                    83:9f:84:24:21:73:b0:68:70:26:83:e5:e1:77:41:
                    05:ba:1a:1e:69:61:9e:21:66:85:b7:16:37:fe:55:
                    20:de:d1:8e:b5:05:41:11:e7:a2:dd:a6:18:54:8b:
                    39:7e:f6:c5:50:10:f6:a5:13:96:6c:6c:33:b3:d4:
                    b1:4a:ed:04:9e:ec:2f:b5:2b:96:e0:5a:86:5f:c3:
                    7a:65:44:bf:3d:6b:55:54:2e:f8:fd:6e:3c:9f:4f:
                    79:03:36:ed:9c:46:bd:d6:88:37:9f:ac:c8:89:49:
                    77:ad:d3:88:4d:fb:2a:10:71:d5:ef:ca:3b:b1:c3:
                    5d:9d:ec:14:47:8f:7a:2f:4a:f7:a4:3e:cc:2c:8d:
                    6f:f1:75:56:a4:68:02:7c:ff:75:9e:85:7e:c3:7d:
                    4b:cf:e1:3d:35:c8:12:30:48:5e:f1:f1:ab:4b:69:
                    cb:fb:43:ed:0b:9c:9e:59:07:e3:42:ed:c8:70:a3:
                    dc:12:35:78:49:fb:17:e9:61:52:b9:5e:12:82:a1:
                    98:6c:2e:08:44:9c:98:15:82:51:bc:aa:5e:91:8e:
                    c3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F9:6D:EF:E0:3B:C6:C3:99:BD:93:FE:1F:5C:0F:B0:F5:FD:88:6C
            X509v3 Authority Key Identifier:
                keyid:0B:9D:EE:1D:40:AA:D7:DF:B5:BE:26:38:02:94:F4:E0:77:03:D7:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C53uHUCq19-1viY4ApT04HcD14Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8473c3-1de8-4a50-9cab-7ce5eca263de/1/C53uHUCq19-1viY4ApT04HcD14Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ae:f7:0a:2b:66:53:0c:cb:46:83:cc:76:10:dd:15:a4:4f:
         50:34:2c:27:5f:d3:e7:5d:c2:3b:2d:b7:ba:ac:3d:6d:8f:94:
         d6:65:75:8a:82:1e:fd:20:b1:d8:c3:ed:c6:fa:eb:6a:f9:b5:
         09:36:0e:a1:9b:45:47:8c:fe:37:15:a4:45:8f:d8:ab:2f:d6:
         74:92:3f:e5:61:b9:bc:ba:36:bc:2e:aa:ae:79:04:b3:3a:96:
         d0:4b:aa:6d:2c:03:6c:b6:f2:b2:86:b1:f4:cc:87:8c:5c:fa:
         36:6b:1c:fd:1f:1e:fd:0a:df:25:dc:ca:98:d7:d2:0b:0c:81:
         98:41:36:0b:ca:f9:f7:25:17:e8:8f:24:17:7a:b6:8f:63:b7:
         92:02:76:0b:43:43:9f:d7:d7:30:2d:e7:1c:9c:4a:5c:a1:35:
         29:b8:31:f3:48:9e:f1:fb:e8:9b:41:37:39:55:1a:5e:15:ad:
         17:14:03:8d:3b:b8:20:ab:db:6c:71:ca:9f:3e:90:6f:a4:88:
         08:57:a9:a7:93:da:4f:5a:50:e5:22:02:15:0d:83:74:cf:6e:
         f4:4c:15:2b:30:b5:06:25:cc:42:44:7e:8e:3b:f5:88:43:46:
         0f:83:16:72:1c:3b:2c:cb:d1:e8:3b:ae:2b:c1:a3:ef:ef:04:
         7c:07:a4:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAexqFvNJlYvVqg8PZjBjNqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiOWRlZTFkNDBhYWQ3ZGZiNWJlMjYzODAyOTRmNGUwNzcw
M2Q3ODQwHhcNMjQwNjE2MDIwMDUyWhcNMjQwNjE3MDIwMDUyWjAzMTEwLwYDVQQD
EygwMWY5NmRlZmUwM2JjNmMzOTliZDkzZmUxZjVjMGZiMGY1ZmQ4ODZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/ZgRHarwvYAYX1wDsc+j/drwgDG
bYmkRmzReZkmbolzCPGP+73c/A5UK2yDn4QkIXOwaHAmg+Xhd0EFuhoeaWGeIWaF
txY3/lUg3tGOtQVBEeei3aYYVIs5fvbFUBD2pROWbGwzs9SxSu0EnuwvtSuW4FqG
X8N6ZUS/PWtVVC74/W48n095AzbtnEa91og3n6zIiUl3rdOITfsqEHHV78o7scNd
newUR496L0r3pD7MLI1v8XVWpGgCfP91noV+w31Lz+E9NcgSMEhe8fGrS2nL+0Pt
C5yeWQfjQu3IcKPcEjV4SfsX6WFSuV4SgqGYbC4IRJyYFYJRvKpekY7DLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAH5be/gO8bDmb2T/h9cD7D1/YhsMB8GA1UdIwQY
MBaAFAud7h1Aqtfftb4mOAKU9OB3A9eEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzUzdUhVQ3ExOS0xdmlZNEFwVDA0SGNEMTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84NDczYzMtMWRlOC00YTUwLTljYWIt
N2NlNWVjYTI2M2RlLzEvQzUzdUhVQ3ExOS0xdmlZNEFwVDA0SGNEMTRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84NDczYzMtMWRlOC00YTUwLTljYWItN2NlNWVjYTI2M2Rl
LzEvQzUzdUhVQ3ExOS0xdmlZNEFwVDA0SGNEMTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAda73Citm
UwzLRoPMdhDdFaRPUDQsJ1/T513COy23uqw9bY+U1mV1ioIe/SCx2MPtxvrravm1
CTYOoZtFR4z+NxWkRY/Yqy/WdJI/5WG5vLo2vC6qrnkEszqW0EuqbSwDbLbysoax
9MyHjFz6Nmsc/R8e/QrfJdzKmNfSCwyBmEE2C8r59yUX6I8kF3q2j2O3kgJ2C0ND
n9fXMC3nHJxKXKE1Kbgx80ie8fvom0E3OVUaXhWtFxQDjTu4IKvbbHHKnz6Qb6SI
CFepp5PaT1pQ5SICFQ2DdM9u9EwVKzC1BiXMQkR+jjv1iENGD4MWchw7LMvR6Duu
K8Gj7+8EfAekbA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:46:11 2024 by rpki-client on console-fra.rpki-client.org