Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
File:                     TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft (raw, json)
Hash identifier:          k3N+FMbCxnxBr1Un1Qk0e0K19buz+aDHyn0nKbnDCvE=
Subject key identifier:   0F:5D:7C:F8:FB:D3:E2:A8:C9:27:52:98:1A:55:7E:68:88:59:F1:ED
Authority key identifier: 4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44
Certificate issuer:       /CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
Certificate serial:       019044F86A83C11DA5687CC6295776756156
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
Manifest number:          11D7
Signing time:             Sun 23 Jun 2024 12:00:49 +0000
Manifest this update:     Sun 23 Jun 2024 12:00:49 +0000
Manifest next update:     Mon 24 Jun 2024 12:00:49 +0000
Files and hashes:         1: TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl (hash: Ssu0rTYvJs2nG+GK6xmKy6Bsu4D1Yfj5dHSFqHrEJSo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 12:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:f8:6a:83:c1:1d:a5:68:7c:c6:29:57:76:75:61:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
        Validity
            Not Before: Jun 23 12:00:49 2024 GMT
            Not After : Jun 24 12:00:49 2024 GMT
        Subject: CN=0f5d7cf8fbd3e2a8c92752981a557e688859f1ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e1:3e:51:f9:2c:09:88:3f:9a:15:e4:01:28:
                    c4:83:11:38:63:27:8c:df:a2:0d:ca:c2:51:25:de:
                    0c:34:4a:a9:43:f1:3e:dc:9b:93:a3:79:74:85:26:
                    90:08:52:5d:60:d7:82:20:d7:64:dc:6d:23:26:33:
                    4a:39:88:39:5c:f1:2e:16:b6:f3:c4:e0:fd:cd:d5:
                    92:d1:d0:ab:3b:e2:8a:02:b5:8a:da:2a:b9:87:cb:
                    82:ed:f4:10:2c:4b:14:8c:fc:48:a9:20:24:ee:5e:
                    46:09:d4:bf:6c:69:14:a0:bd:a1:fb:1c:88:1c:6a:
                    51:42:ac:28:64:fa:cb:4d:13:47:15:e8:28:93:42:
                    00:25:40:96:d4:fa:c8:32:b1:53:e0:63:c3:14:50:
                    73:91:89:42:64:bc:b7:0e:15:08:1f:38:a7:52:bd:
                    13:23:e6:38:fa:0a:09:38:54:7e:60:e3:97:98:97:
                    3b:8b:e3:95:4d:28:de:a9:2f:e7:85:43:e7:ba:43:
                    51:62:58:71:eb:25:14:bd:a2:a5:e5:59:0a:0e:a4:
                    88:22:5f:0a:df:43:88:67:cc:dd:6c:f0:35:ed:9b:
                    f9:e3:89:26:96:09:d1:98:53:ba:e2:8a:f5:30:d2:
                    ba:d6:c7:08:14:9f:ad:08:69:e3:20:e4:a9:98:60:
                    89:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5D:7C:F8:FB:D3:E2:A8:C9:27:52:98:1A:55:7E:68:88:59:F1:ED
            X509v3 Authority Key Identifier:
                keyid:4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:57:3e:dd:35:18:5d:75:b3:73:d2:6b:40:55:d6:a3:16:33:
         a2:3d:a7:bc:4e:43:c6:bd:57:94:05:07:ce:0d:77:7b:bb:b1:
         71:6b:13:4a:26:e2:ac:8d:18:5f:e2:f0:b8:ff:d5:f2:7d:09:
         30:69:6f:c7:69:5b:97:60:df:29:43:d3:94:00:6e:82:ff:0d:
         3f:76:aa:8c:e7:cf:d5:6a:11:a9:42:59:80:cc:b5:55:77:c7:
         2b:e4:14:da:ea:2c:67:e4:ea:3b:1c:a3:7d:5f:c8:0b:ae:a0:
         30:9b:8b:52:27:91:20:af:ee:88:67:60:91:dc:cd:45:84:0d:
         0f:6b:03:ef:18:53:0e:ff:f6:fb:b7:1b:a2:a5:ec:2e:98:1a:
         ce:2a:ac:22:9e:91:20:7b:01:37:49:54:05:78:dd:43:af:3c:
         83:e4:cf:12:5a:d7:31:38:c6:ed:9a:d2:55:69:a7:1a:fa:f6:
         16:df:80:d3:30:6a:ae:8e:f6:63:3f:5b:fc:e7:aa:cc:21:16:
         3b:61:1b:2f:ce:de:3b:bb:eb:e0:32:0b:00:35:70:4a:8e:d2:
         ee:b4:12:7a:eb:bb:00:55:0b:62:de:57:cc:d8:3b:88:bc:c4:
         6e:0c:06:b9:2a:af:76:87:7b:02:cc:f1:e9:c1:8c:15:dc:6b:
         aa:25:c3:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBE+GqDwR2laHzGKVd2dWFWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNGNmY2U2MGM5YjBmMmQ0N2IzNjI4NjRkOGZlYmIyMjVi
YjUyNDQwHhcNMjQwNjIzMTIwMDQ5WhcNMjQwNjI0MTIwMDQ5WjAzMTEwLwYDVQQD
EygwZjVkN2NmOGZiZDNlMmE4YzkyNzUyOTgxYTU1N2U2ODg4NTlmMWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+E+UfksCYg/mhXkASjEgxE4YyeM
36INysJRJd4MNEqpQ/E+3JuTo3l0hSaQCFJdYNeCINdk3G0jJjNKOYg5XPEuFrbz
xOD9zdWS0dCrO+KKArWK2iq5h8uC7fQQLEsUjPxIqSAk7l5GCdS/bGkUoL2h+xyI
HGpRQqwoZPrLTRNHFegok0IAJUCW1PrIMrFT4GPDFFBzkYlCZLy3DhUIHzinUr0T
I+Y4+goJOFR+YOOXmJc7i+OVTSjeqS/nhUPnukNRYlhx6yUUvaKl5VkKDqSIIl8K
30OIZ8zdbPA17Zv544kmlgnRmFO64or1MNK61scIFJ+tCGnjIOSpmGCJ8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9dfPj70+KoySdSmBpVfmiIWfHtMB8GA1UdIwQY
MBaAFExM/OYMmw8tR7Nihk2P67Ilu1JEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEV6ODVneWJEeTFIczJLR1RZX3JzaVc3VWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iZjhiMGUtYmVkYS00YTU2LWJhZjAt
ODJhZDExNjI2ZWVkLzEvVEV6ODVneWJEeTFIczJLR1RZX3JzaVc3VWtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9iZjhiMGUtYmVkYS00YTU2LWJhZjAtODJhZDExNjI2ZWVk
LzEvVEV6ODVneWJEeTFIczJLR1RZX3JzaVc3VWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVc+3TUY
XXWzc9JrQFXWoxYzoj2nvE5Dxr1XlAUHzg13e7uxcWsTSibirI0YX+LwuP/V8n0J
MGlvx2lbl2DfKUPTlABugv8NP3aqjOfP1WoRqUJZgMy1VXfHK+QU2uosZ+TqOxyj
fV/IC66gMJuLUieRIK/uiGdgkdzNRYQND2sD7xhTDv/2+7cboqXsLpgaziqsIp6R
IHsBN0lUBXjdQ688g+TPElrXMTjG7ZrSVWmnGvr2Ft+A0zBqro72Yz9b/OeqzCEW
O2EbL87eO7vr4DILADVwSo7S7rQSeuu7AFULYt5XzNg7iLzEbgwGuSqvdod7Aszx
6cGMFdxrqiXDtw==
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:02:04 2024 by rpki-client on console-fra.rpki-client.org