Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
File:                     xqJJoOrNiry-oNgu9xAW04bo75Q.mft (raw, json)
Hash identifier:          xY+lf8X+Ujwq7K+5sYC65dvZnioqy5HIeREvXeS3OBw=
Subject key identifier:   A6:48:40:77:3B:53:B8:C9:DD:50:D6:11:40:8D:69:14:40:BC:10:33
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Certificate issuer:       /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial:       01901CA14E533499E163B5EB8C5B27FBEE54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 16:00:51 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:51 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:51 +0000
Files and hashes:         1: xqJJoOrNiry-oNgu9xAW04bo75Q.crl (hash: 0KVY3DQ9ddk4F5T3TXMMFg5e0aLNFqGnavvKRcCqvIQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:4e:53:34:99:e1:63:b5:eb:8c:5b:27:fb:ee:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
        Validity
            Not Before: Jun 15 16:00:51 2024 GMT
            Not After : Jun 16 16:00:51 2024 GMT
        Subject: CN=a64840773b53b8c9dd50d611408d691440bc1033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:37:5a:01:53:e3:10:6a:73:08:18:8c:d2:84:
                    a7:c6:c0:ec:71:3e:99:9b:b2:4a:4d:6b:6d:eb:a7:
                    7d:af:6c:10:0b:3e:1e:33:da:f7:46:dc:be:85:26:
                    49:81:13:e5:6d:70:bb:28:d8:06:94:a7:4f:68:c1:
                    2b:44:82:3e:1b:c1:3c:71:46:f7:1a:23:43:a6:e2:
                    cd:cd:f3:90:7d:3d:22:d4:70:ab:84:fa:0b:01:34:
                    d6:c6:2a:40:0f:df:84:07:73:5d:ae:96:0d:ca:4a:
                    8f:8a:bc:dc:27:0f:43:ec:a1:af:51:03:c2:15:55:
                    b8:86:44:f3:46:79:bf:a3:37:d5:a8:3d:27:72:37:
                    cc:7e:70:7e:99:a0:cc:e9:83:a1:25:00:01:f3:91:
                    21:4b:af:84:5b:90:26:4c:60:19:84:c2:42:26:43:
                    cb:2b:8a:98:35:fe:72:e5:01:c2:83:2c:54:7c:62:
                    74:08:cd:56:35:ae:ae:2d:13:9d:84:bd:89:26:60:
                    d9:07:e7:2e:9a:2e:e8:b7:9b:3e:58:c7:94:07:97:
                    ed:ac:90:9d:90:66:df:ab:84:d1:5b:81:ee:04:a5:
                    e3:a6:70:6e:4e:70:74:c5:a7:e2:65:b5:bc:9b:8f:
                    01:4a:5b:79:11:9f:05:ea:c9:fc:13:66:e1:1a:77:
                    a2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:48:40:77:3B:53:B8:C9:DD:50:D6:11:40:8D:69:14:40:BC:10:33
            X509v3 Authority Key Identifier:
                keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:16:4c:2f:c0:f1:c4:92:00:0c:38:ba:8d:3c:45:35:19:fb:
         21:18:84:de:58:af:87:99:c6:7a:42:b6:43:a3:51:b2:f4:d2:
         ad:31:64:c8:32:7d:15:cd:b6:fa:b6:4e:c7:15:91:d1:59:cc:
         6c:87:17:28:d3:8d:db:f8:6d:1b:1f:00:19:0a:3f:8e:e8:6f:
         de:e3:e2:df:14:11:bf:dd:2e:a5:57:41:1e:ea:76:ba:8d:89:
         f6:88:80:cb:69:ba:28:37:1d:59:4f:83:91:af:58:9c:c8:cd:
         d7:98:12:99:d6:8c:bc:c9:31:c9:78:9f:df:54:84:c8:70:8a:
         46:d0:ae:09:73:c4:71:ef:d5:1e:23:a2:f2:eb:e4:c9:9b:4d:
         6c:8f:f9:16:26:54:c7:59:34:95:23:d0:e2:e7:3f:0a:37:4e:
         a7:f2:8f:1a:74:72:e4:7b:ac:49:7c:21:24:a2:07:f2:5f:07:
         00:b5:a9:de:8c:3d:41:c4:f3:4c:bd:b8:da:d3:dd:4d:cb:2a:
         f7:03:c7:01:93:47:87:77:a9:5b:31:ea:8f:0b:d7:cc:1e:2a:
         77:6c:08:8a:76:f8:3d:d2:9e:29:d2:4f:4f:04:8a:1b:c7:ce:
         a2:dd:d6:b2:84:59:ae:d7:67:77:ab:28:b3:cb:6c:ee:88:e7:
         0d:17:3c:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcoU5TNJnhY7XrjFsn++5UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl
OGVmOTQwHhcNMjQwNjE1MTYwMDUxWhcNMjQwNjE2MTYwMDUxWjAzMTEwLwYDVQQD
EyhhNjQ4NDA3NzNiNTNiOGM5ZGQ1MGQ2MTE0MDhkNjkxNDQwYmMxMDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTdaAVPjEGpzCBiM0oSnxsDscT6Z
m7JKTWtt66d9r2wQCz4eM9r3Rty+hSZJgRPlbXC7KNgGlKdPaMErRII+G8E8cUb3
GiNDpuLNzfOQfT0i1HCrhPoLATTWxipAD9+EB3NdrpYNykqPirzcJw9D7KGvUQPC
FVW4hkTzRnm/ozfVqD0ncjfMfnB+maDM6YOhJQAB85EhS6+EW5AmTGAZhMJCJkPL
K4qYNf5y5QHCgyxUfGJ0CM1WNa6uLROdhL2JJmDZB+cumi7ot5s+WMeUB5ftrJCd
kGbfq4TRW4HuBKXjpnBuTnB0xafiZbW8m48BSlt5EZ8F6sn8E2bhGnei5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZIQHc7U7jJ3VDWEUCNaRRAvBAzMB8GA1UdIwQY
MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut
MjEwNTdkMjI4ZDA1LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1
LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWxZML8Dx
xJIADDi6jTxFNRn7IRiE3livh5nGekK2Q6NRsvTSrTFkyDJ9Fc22+rZOxxWR0VnM
bIcXKNON2/htGx8AGQo/juhv3uPi3xQRv90upVdBHup2uo2J9oiAy2m6KDcdWU+D
ka9YnMjN15gSmdaMvMkxyXif31SEyHCKRtCuCXPEce/VHiOi8uvkyZtNbI/5FiZU
x1k0lSPQ4uc/CjdOp/KPGnRy5HusSXwhJKIH8l8HALWp3ow9QcTzTL242tPdTcsq
9wPHAZNHh3epWzHqjwvXzB4qd2wIinb4PdKeKdJPTwSKG8fOot3WsoRZrtdnd6so
s8ts7ojnDRc83g==
-----END CERTIFICATE-----
Generated at Sat Jun 15 17:56:17 2024 by rpki-client on console-ams.rpki-client.org