Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6ba14b-312a-48c8-a80f-3bd35fff4076/1/W9AP2CBMnXtEUUQbJICDOn98g5A.mft
File:                     W9AP2CBMnXtEUUQbJICDOn98g5A.mft (raw, json)
Hash identifier:          +LSRyZt7rcd1NfPAufeEgNSsTsMWpZjTJIikUq/Uoss=
Subject key identifier:   B8:5A:17:09:B7:A4:25:41:A1:0C:1B:7F:8A:F4:C2:C1:02:BD:3F:2B
Authority key identifier: 5B:D0:0F:D8:20:4C:9D:7B:44:51:44:1B:24:80:83:3A:7F:7C:83:90
Certificate issuer:       /CN=5bd00fd8204c9d7b4451441b2480833a7f7c8390
Certificate serial:       01901E590E9816D45742C0ACC5B3E04DD8BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W9AP2CBMnXtEUUQbJICDOn98g5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba14b-312a-48c8-a80f-3bd35fff4076/1/W9AP2CBMnXtEUUQbJICDOn98g5A.mft
Manifest number:          11C3
Signing time:             Sun 16 Jun 2024 00:01:11 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:11 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:11 +0000
Files and hashes:         1: W9AP2CBMnXtEUUQbJICDOn98g5A.crl (hash: LaGiRHnq8I2+uEKDFYprW5T19wR0y5NqMgh/D3ZdmRI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba14b-312a-48c8-a80f-3bd35fff4076/1/W9AP2CBMnXtEUUQbJICDOn98g5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba14b-312a-48c8-a80f-3bd35fff4076/1/W9AP2CBMnXtEUUQbJICDOn98g5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W9AP2CBMnXtEUUQbJICDOn98g5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:0e:98:16:d4:57:42:c0:ac:c5:b3:e0:4d:d8:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bd00fd8204c9d7b4451441b2480833a7f7c8390
        Validity
            Not Before: Jun 16 00:01:11 2024 GMT
            Not After : Jun 17 00:01:11 2024 GMT
        Subject: CN=b85a1709b7a42541a10c1b7f8af4c2c102bd3f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:00:3f:b3:54:69:5e:ea:93:4f:8f:87:57:a3:
                    b4:30:e8:db:32:73:02:c3:0b:68:1a:08:ab:3f:54:
                    fd:59:27:c1:32:d5:3c:10:08:ea:22:9c:50:2c:0e:
                    b4:26:f6:3d:36:58:1e:e4:68:86:61:8b:04:b9:81:
                    80:bb:8f:90:3f:12:91:0b:34:c9:6b:a3:df:ad:09:
                    f9:fb:20:79:21:29:08:50:fc:c9:81:83:ce:f7:7f:
                    2d:f7:2a:6c:4e:c9:91:cb:f0:8f:6c:8b:2e:74:4d:
                    2f:cf:1b:57:b6:bc:e0:2b:1c:97:4f:00:3c:dd:08:
                    a3:ce:47:11:1a:11:bc:20:6c:97:b3:23:fa:66:a1:
                    f1:6e:9b:d1:66:64:94:e3:20:11:75:4d:5d:be:34:
                    e8:ed:2f:71:68:c9:39:87:0f:65:e2:de:0e:66:62:
                    49:9f:82:c0:ad:b6:87:de:3c:cb:05:93:f0:db:75:
                    6c:8d:ef:11:8a:97:8f:7b:0c:b2:c2:f9:59:cc:41:
                    17:92:a7:c3:6a:10:e8:9f:dc:44:49:f0:7c:81:b6:
                    e6:9f:99:ff:4a:4c:df:f4:b2:b9:ec:42:13:51:1a:
                    bb:61:e6:42:cf:79:4e:45:f6:90:64:4f:ec:2f:c0:
                    ac:13:6c:7f:b1:73:c0:35:04:6a:11:1d:61:13:95:
                    5f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5A:17:09:B7:A4:25:41:A1:0C:1B:7F:8A:F4:C2:C1:02:BD:3F:2B
            X509v3 Authority Key Identifier:
                keyid:5B:D0:0F:D8:20:4C:9D:7B:44:51:44:1B:24:80:83:3A:7F:7C:83:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9AP2CBMnXtEUUQbJICDOn98g5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba14b-312a-48c8-a80f-3bd35fff4076/1/W9AP2CBMnXtEUUQbJICDOn98g5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba14b-312a-48c8-a80f-3bd35fff4076/1/W9AP2CBMnXtEUUQbJICDOn98g5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:cf:e9:bf:e2:32:3a:7b:7c:43:8f:15:80:8a:e4:f6:e7:19:
         e6:4b:bd:ae:c0:e8:08:31:0f:d8:35:fb:93:96:20:f2:5b:70:
         d2:90:36:12:3c:28:a4:4b:1c:17:57:95:1f:6b:75:e8:6e:49:
         67:f6:13:1e:f8:66:62:36:0d:71:83:10:e8:11:40:79:fc:bb:
         7b:bb:3e:c8:94:e7:79:07:57:a6:6e:fb:d7:31:93:50:ff:d5:
         d4:85:aa:c8:27:37:23:8b:8b:9a:a8:fb:7c:e2:ff:7f:e6:28:
         bb:1d:8f:36:a5:d1:71:b9:2d:8a:58:51:5a:e7:84:05:03:ec:
         4b:99:c5:5e:ab:59:65:cd:ce:0a:ea:27:9d:48:bd:7d:ef:05:
         72:21:9e:19:15:6a:c7:ab:fb:87:62:46:d6:b1:78:fd:fc:dd:
         62:4e:b2:40:be:ec:65:7f:de:8f:61:44:29:4e:0c:57:22:77:
         1c:43:b5:d8:37:e7:d4:79:68:89:59:89:b4:31:0c:da:cf:51:
         5b:74:c1:db:02:88:12:b6:0a:5a:ee:25:be:69:83:ee:2b:5b:
         80:45:80:ff:40:16:8d:c8:eb:93:e5:6f:6e:f1:da:95:75:72:
         76:81:8b:25:17:22:32:d4:47:17:99:b2:6e:1a:e2:e8:60:81:
         df:26:03:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWQ6YFtRXQsCsxbPgTdi7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZDAwZmQ4MjA0YzlkN2I0NDUxNDQxYjI0ODA4MzNhN2Y3
YzgzOTAwHhcNMjQwNjE2MDAwMTExWhcNMjQwNjE3MDAwMTExWjAzMTEwLwYDVQQD
EyhiODVhMTcwOWI3YTQyNTQxYTEwYzFiN2Y4YWY0YzJjMTAyYmQzZjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QA/s1RpXuqTT4+HV6O0MOjbMnMC
wwtoGgirP1T9WSfBMtU8EAjqIpxQLA60JvY9Nlge5GiGYYsEuYGAu4+QPxKRCzTJ
a6PfrQn5+yB5ISkIUPzJgYPO938t9ypsTsmRy/CPbIsudE0vzxtXtrzgKxyXTwA8
3QijzkcRGhG8IGyXsyP6ZqHxbpvRZmSU4yARdU1dvjTo7S9xaMk5hw9l4t4OZmJJ
n4LArbaH3jzLBZPw23Vsje8RipePewyywvlZzEEXkqfDahDon9xESfB8gbbmn5n/
Skzf9LK57EITURq7YeZCz3lORfaQZE/sL8CsE2x/sXPANQRqER1hE5VfpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhaFwm3pCVBoQwbf4r0wsECvT8rMB8GA1UdIwQY
MBaAFFvQD9ggTJ17RFFEGySAgzp/fIOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzlBUDJDQk1uWHRFVVVRYkpJQ0RPbjk4ZzVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi82YmExNGItMzEyYS00OGM4LWE4MGYt
M2JkMzVmZmY0MDc2LzEvVzlBUDJDQk1uWHRFVVVRYkpJQ0RPbjk4ZzVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi82YmExNGItMzEyYS00OGM4LWE4MGYtM2JkMzVmZmY0MDc2
LzEvVzlBUDJDQk1uWHRFVVVRYkpJQ0RPbjk4ZzVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8/pv+Iy
Ont8Q48VgIrk9ucZ5ku9rsDoCDEP2DX7k5Yg8ltw0pA2EjwopEscF1eVH2t16G5J
Z/YTHvhmYjYNcYMQ6BFAefy7e7s+yJTneQdXpm771zGTUP/V1IWqyCc3I4uLmqj7
fOL/f+Youx2PNqXRcbktilhRWueEBQPsS5nFXqtZZc3OCuonnUi9fe8FciGeGRVq
x6v7h2JG1rF4/fzdYk6yQL7sZX/ej2FEKU4MVyJ3HEO12Dfn1HloiVmJtDEM2s9R
W3TB2wKIErYKWu4lvmmD7itbgEWA/0AWjcjrk+VvbvHalXVydoGLJRciMtRHF5my
bhri6GCB3yYDRw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 01:06:26 2024 by rpki-client on console-fra.rpki-client.org