Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
File:                     jQjCXuFjw27WtzFxYBoYNkgupe4.mft (raw, json)
Hash identifier:          Glz8u0u5ZJRRA+CsZlO6MOcMfDlAwdFgoTl/vW3g/2c=
Subject key identifier:   E8:96:B4:72:C1:D9:23:6B:1A:D6:5E:1E:22:AD:70:33:A9:1E:2C:3E
Authority key identifier: 8D:08:C2:5E:E1:63:C3:6E:D6:B7:31:71:60:1A:18:36:48:2E:A5:EE
Certificate issuer:       /CN=8d08c25ee163c36ed6b73171601a1836482ea5ee
Certificate serial:       01923AA7E65C36874C6E6D9C74D052D32E1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
Manifest number:          063C
Signing time:             Sat 28 Sep 2024 22:02:14 +0000
Manifest this update:     Sat 28 Sep 2024 22:02:14 +0000
Manifest next update:     Sun 29 Sep 2024 22:02:14 +0000
Files and hashes:         1: jQjCXuFjw27WtzFxYBoYNkgupe4.crl (hash: jGL6movlw8w9zkvcLcs74AtDpdhKqiMZ/8pIf4Qvesg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:3a:a7:e6:5c:36:87:4c:6e:6d:9c:74:d0:52:d3:2e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d08c25ee163c36ed6b73171601a1836482ea5ee
        Validity
            Not Before: Sep 28 22:02:14 2024 GMT
            Not After : Sep 29 22:02:14 2024 GMT
        Subject: CN=e896b472c1d9236b1ad65e1e22ad7033a91e2c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ac:b8:e4:8a:9f:86:bf:7d:b3:5d:8c:dd:7f:
                    9a:d0:74:b9:e4:29:c9:8f:3b:a7:ea:5d:e8:c1:6e:
                    12:28:83:31:88:61:f6:fe:98:38:46:78:89:64:5e:
                    71:ba:00:d9:8e:70:4b:47:1e:ec:9e:0a:3b:fe:55:
                    e7:7c:c0:1f:e7:cb:de:dc:08:31:4c:0f:35:0d:44:
                    8c:de:d3:d4:da:29:d9:3e:81:a7:bd:82:9e:b1:e2:
                    fa:7a:fd:76:d5:c9:6d:c7:0c:03:56:12:7a:45:3e:
                    a3:d3:fd:cf:8c:a6:c2:57:51:24:39:f7:0e:32:90:
                    10:3a:d2:a9:da:02:02:3f:f9:30:b0:ec:20:23:a2:
                    0a:2b:22:23:56:28:7d:b9:e2:c1:5a:e2:d4:f4:20:
                    e9:9a:d7:f9:91:d9:90:c9:8a:67:f0:12:98:05:46:
                    04:40:6a:36:4f:4a:02:59:f9:2a:c8:ea:7d:f9:86:
                    55:5a:d9:4f:a9:0a:58:1d:da:56:5c:4e:47:95:d3:
                    ef:34:a4:37:28:37:38:26:7f:2f:03:82:b9:e2:40:
                    1e:79:9a:e6:66:51:51:c3:7d:07:72:a5:c3:fc:c8:
                    21:b7:cf:ec:7d:c2:84:fe:14:bb:a3:1a:05:98:bf:
                    9d:f9:3b:1b:9f:0b:53:f9:54:de:cc:b7:48:a1:7b:
                    93:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:96:B4:72:C1:D9:23:6B:1A:D6:5E:1E:22:AD:70:33:A9:1E:2C:3E
            X509v3 Authority Key Identifier:
                keyid:8D:08:C2:5E:E1:63:C3:6E:D6:B7:31:71:60:1A:18:36:48:2E:A5:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:7c:05:0f:90:44:0d:b9:0b:0d:9e:02:e6:f8:13:80:19:e8:
         14:ba:84:eb:9d:a9:f6:5f:7c:5c:7e:4a:5b:e3:68:65:35:b7:
         f7:36:d1:63:8f:9d:69:cb:73:37:b1:ce:f9:a5:51:e9:cc:3c:
         9c:ba:67:d2:d6:b7:0b:bb:79:0b:a4:52:36:1a:94:63:49:17:
         62:d3:0c:fb:99:0b:c8:36:5d:cc:e4:e4:44:f9:67:14:0a:df:
         82:75:4f:6e:1e:26:5e:6a:db:fa:83:f5:a8:d5:7b:68:99:2b:
         cc:84:ad:ac:b3:38:51:a7:af:e7:02:4a:61:f5:97:04:0b:7e:
         36:0b:c9:a5:f2:ad:fd:7f:ab:d2:f8:50:7f:f1:c9:b9:85:85:
         c8:a9:86:aa:b1:33:f8:a8:ed:97:f5:a6:02:6f:f0:bb:e6:d1:
         54:2f:68:99:3e:1e:59:29:e2:63:67:2c:4a:63:0f:a7:64:16:
         1a:b9:ee:d6:f0:c0:b8:bb:d3:e3:dc:67:a9:96:68:b3:d2:0d:
         d7:2d:a4:59:e9:45:47:77:33:84:26:06:1b:a0:b2:e1:5b:82:
         8f:ee:a7:bd:08:87:21:f8:83:5d:89:01:df:41:3b:ee:86:85:
         34:83:0b:0b:44:e6:7a:2f:cf:33:a5:a7:a3:ac:01:06:2d:c9:
         de:07:67:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI6p+ZcNodMbm2cdNBS0y4cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMDhjMjVlZTE2M2MzNmVkNmI3MzE3MTYwMWExODM2NDgy
ZWE1ZWUwHhcNMjQwOTI4MjIwMjE0WhcNMjQwOTI5MjIwMjE0WjAzMTEwLwYDVQQD
EyhlODk2YjQ3MmMxZDkyMzZiMWFkNjVlMWUyMmFkNzAzM2E5MWUyYzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKy45Iqfhr99s12M3X+a0HS55CnJ
jzun6l3owW4SKIMxiGH2/pg4RniJZF5xugDZjnBLRx7sngo7/lXnfMAf58ve3Agx
TA81DUSM3tPU2inZPoGnvYKeseL6ev121cltxwwDVhJ6RT6j0/3PjKbCV1EkOfcO
MpAQOtKp2gICP/kwsOwgI6IKKyIjVih9ueLBWuLU9CDpmtf5kdmQyYpn8BKYBUYE
QGo2T0oCWfkqyOp9+YZVWtlPqQpYHdpWXE5HldPvNKQ3KDc4Jn8vA4K54kAeeZrm
ZlFRw30HcqXD/Mght8/sfcKE/hS7oxoFmL+d+TsbnwtT+VTezLdIoXuTKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiWtHLB2SNrGtZeHiKtcDOpHiw+MB8GA1UdIwQY
MBaAFI0Iwl7hY8Nu1rcxcWAaGDZILqXuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalFqQ1h1Rmp3MjdXdHpGeFlCb1lOa2d1cGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81MWNjMjAtMWY4MS00ZWUxLWJkOTMt
NDRkNzgxZWQ2MmQ0LzEvalFqQ1h1Rmp3MjdXdHpGeFlCb1lOa2d1cGU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC81MWNjMjAtMWY4MS00ZWUxLWJkOTMtNDRkNzgxZWQ2MmQ0
LzEvalFqQ1h1Rmp3MjdXdHpGeFlCb1lOa2d1cGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOnwFD5BE
DbkLDZ4C5vgTgBnoFLqE652p9l98XH5KW+NoZTW39zbRY4+dactzN7HO+aVR6cw8
nLpn0ta3C7t5C6RSNhqUY0kXYtMM+5kLyDZdzOTkRPlnFArfgnVPbh4mXmrb+oP1
qNV7aJkrzIStrLM4Uaev5wJKYfWXBAt+NgvJpfKt/X+r0vhQf/HJuYWFyKmGqrEz
+Kjtl/WmAm/wu+bRVC9omT4eWSniY2csSmMPp2QWGrnu1vDAuLvT49xnqZZos9IN
1y2kWelFR3czhCYGG6Cy4VuCj+6nvQiHIfiDXYkB30E77oaFNIMLC0Tmei/PM6Wn
o6wBBi3J3gdn5w==
-----END CERTIFICATE-----
Generated at Sat Sep 28 23:09:10 2024 by rpki-client on console-fra.rpki-client.org