Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
File:                     U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json)
Hash identifier:          Lu+PX1/Z/+h4/NEMST5p5wnqD3UMharo+sjtiCebh6A=
Subject key identifier:   F4:ED:BE:E7:C7:CA:A5:17:A1:07:82:FF:A4:18:26:69:A5:12:0E:F3
Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
Certificate issuer:       /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Certificate serial:       01901D460B1CEB83C4869B987A7D8E027281
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 19:00:47 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:47 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:47 +0000
Files and hashes:         1: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: 1K/t3Pjh50VOWyHaeec7uUxLP38q7DOaGMMRzDtoDPY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:0b:1c:eb:83:c4:86:9b:98:7a:7d:8e:02:72:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
        Validity
            Not Before: Jun 15 19:00:47 2024 GMT
            Not After : Jun 16 19:00:47 2024 GMT
        Subject: CN=f4edbee7c7caa517a10782ffa4182669a5120ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:38:6f:38:fa:39:5b:95:7f:d9:82:db:54:e8:
                    75:a4:cc:d9:99:5b:67:cd:1c:4e:82:a5:76:0d:6c:
                    3f:d0:12:f8:91:71:97:6a:00:2d:d2:2a:8d:81:03:
                    db:cd:e7:2d:25:ab:fa:17:7d:d1:4b:9a:a9:a3:b4:
                    80:84:9c:42:62:e2:2e:3d:d7:35:89:09:64:16:dd:
                    56:38:6f:89:85:74:4f:ff:87:dd:41:b0:9f:b2:0b:
                    78:5c:43:e6:4a:c5:59:3f:c3:21:be:7e:b2:77:89:
                    d7:f9:b5:86:b3:f7:e2:9e:df:e8:0b:30:2e:67:d1:
                    51:ed:1f:d6:06:56:0d:66:86:ef:45:e1:39:e3:91:
                    2e:d9:21:7d:13:a7:5c:ab:5d:de:4a:c4:a1:76:22:
                    98:a4:5f:c9:0d:64:5f:23:42:b3:0f:dd:67:14:b8:
                    97:1a:7f:3b:05:85:b5:81:5f:17:ac:b2:1a:af:f9:
                    c3:bc:24:ec:65:11:37:1e:50:27:fd:13:07:bf:28:
                    c6:05:5e:22:18:24:60:d4:b1:ef:31:d5:ce:6a:dc:
                    73:44:6a:92:d0:f1:a2:33:6b:c2:12:df:ea:7f:b3:
                    06:f1:35:b7:dc:e7:e7:74:a7:22:41:0e:71:e7:e3:
                    2a:d0:13:9f:8a:87:bb:a8:0a:a7:cf:f4:0d:4e:ee:
                    f9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:ED:BE:E7:C7:CA:A5:17:A1:07:82:FF:A4:18:26:69:A5:12:0E:F3
            X509v3 Authority Key Identifier:
                keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:a0:90:7f:52:37:be:54:96:e3:ba:c2:2a:ee:b6:aa:dd:19:
         f9:7e:5d:96:e2:e2:8e:d4:3e:46:c0:bc:ee:b1:8c:89:5f:41:
         a1:d7:d3:3f:25:94:3f:50:07:4f:8c:bb:43:7c:b0:32:e2:ec:
         30:f3:18:05:84:7e:f4:f8:59:01:1d:8d:81:01:63:dd:39:c1:
         aa:8d:11:d2:70:4a:68:36:24:b4:44:f6:c1:8b:22:ff:76:a9:
         ec:d7:7f:7e:f7:b4:21:65:1d:1e:cc:58:b0:5f:f6:be:fb:5b:
         7c:4a:12:5b:1f:60:9b:c7:73:77:a4:8b:c0:dd:0c:07:5a:4d:
         61:7b:7e:9a:78:bf:d1:a9:14:7b:21:d7:6f:b4:7b:9d:9a:21:
         a0:01:ad:2f:78:7c:f6:7d:f9:be:00:a5:08:ff:97:eb:f4:62:
         f9:eb:0a:b1:e2:93:60:92:71:d6:50:d9:3c:df:45:bd:41:ba:
         a3:90:54:b3:3b:a7:a9:aa:a1:da:73:f5:ec:45:c6:e5:87:29:
         b4:77:cb:69:5e:80:fc:56:40:82:9d:70:1a:87:e7:a5:9e:68:
         33:b7:e7:87:2b:01:72:42:b6:a4:6b:2f:a7:fb:6c:c9:0e:e8:
         1e:2d:43:68:f0:f4:07:84:1c:83:03:99:bb:4e:d1:0e:4a:54:
         89:9f:c3:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdRgsc64PEhpuYen2OAnKBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNzY0NjdlZjA5MjFjNTExOTBlMmVhNjBmMmFiYjNiZDZl
OWMxOWYwHhcNMjQwNjE1MTkwMDQ3WhcNMjQwNjE2MTkwMDQ3WjAzMTEwLwYDVQQD
EyhmNGVkYmVlN2M3Y2FhNTE3YTEwNzgyZmZhNDE4MjY2OWE1MTIwZWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzhvOPo5W5V/2YLbVOh1pMzZmVtn
zRxOgqV2DWw/0BL4kXGXagAt0iqNgQPbzectJav6F33RS5qpo7SAhJxCYuIuPdc1
iQlkFt1WOG+JhXRP/4fdQbCfsgt4XEPmSsVZP8Mhvn6yd4nX+bWGs/fint/oCzAu
Z9FR7R/WBlYNZobvReE545Eu2SF9E6dcq13eSsShdiKYpF/JDWRfI0KzD91nFLiX
Gn87BYW1gV8XrLIar/nDvCTsZRE3HlAn/RMHvyjGBV4iGCRg1LHvMdXOatxzRGqS
0PGiM2vCEt/qf7MG8TW33OfndKciQQ5x5+Mq0BOfioe7qAqnz/QNTu75xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTtvufHyqUXoQeC/6QYJmmlEg7zMB8GA1UdIwQY
MBaAFFN2Rn7wkhxRGQ4upg8quzvW6cGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9jOWRiMGUtOTAzZS00ODVlLWI2N2Yt
MmM3YTJhNzQ2Mjc5LzEvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9jOWRiMGUtOTAzZS00ODVlLWI2N2YtMmM3YTJhNzQ2Mjc5
LzEvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlqCQf1I3
vlSW47rCKu62qt0Z+X5dluLijtQ+RsC87rGMiV9BodfTPyWUP1AHT4y7Q3ywMuLs
MPMYBYR+9PhZAR2NgQFj3TnBqo0R0nBKaDYktET2wYsi/3ap7Nd/fve0IWUdHsxY
sF/2vvtbfEoSWx9gm8dzd6SLwN0MB1pNYXt+mni/0akUeyHXb7R7nZohoAGtL3h8
9n35vgClCP+X6/Ri+esKseKTYJJx1lDZPN9FvUG6o5BUszunqaqh2nP17EXG5Ycp
tHfLaV6A/FZAgp1wGofnpZ5oM7fnhysBckK2pGsvp/tsyQ7oHi1DaPD0B4QcgwOZ
u07RDkpUiZ/Dcw==
-----END CERTIFICATE-----
Generated at Sat Jun 15 22:17:43 2024 by rpki-client on console-ams.rpki-client.org