Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
File:                     gXFLKnOMo96ukVr4fDqRxhPhvEk.mft (raw, json)
Hash identifier:          NBgx2wAol2zwejA0sSvrHpVqU2XjBoTpvMHRjpwuLBo=
Subject key identifier:   DD:08:8A:4B:B7:44:F1:73:3D:98:A7:63:F4:88:51:42:1D:47:57:BE
Authority key identifier: 81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49
Certificate issuer:       /CN=81714b2a738ca3deae915af87c3a91c613e1bc49
Certificate serial:       01901DEBA0B2ECFDB077D6232AC38A844D3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
Manifest number:          024A
Signing time:             Sat 15 Jun 2024 22:01:39 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:39 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:39 +0000
Files and hashes:         1: gXFLKnOMo96ukVr4fDqRxhPhvEk.crl (hash: xC+MmDHXiX1Aq95ZAdRGwfsMJkm+k/BYuEMLiXRpGig=)
                          2: oL0490q0Wl7BCyQ2x88ZS1sNQX0.roa (hash: wNQ8fksfJTaxngr+KerYT8vTJHGBHkmElAH8H/p8XKs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:a0:b2:ec:fd:b0:77:d6:23:2a:c3:8a:84:4d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81714b2a738ca3deae915af87c3a91c613e1bc49
        Validity
            Not Before: Jun 15 22:01:39 2024 GMT
            Not After : Jun 16 22:01:39 2024 GMT
        Subject: CN=dd088a4bb744f1733d98a763f48851421d4757be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:31:ec:98:87:26:c5:53:ae:b9:33:e3:0d:9e:
                    8b:91:d3:b0:fc:c6:4f:31:da:45:74:3c:50:59:92:
                    5b:78:86:0a:31:91:be:fa:3a:0b:0e:52:e0:cd:9f:
                    a0:1f:ee:87:ae:a8:30:bd:c8:80:03:10:cd:d0:a4:
                    50:1b:66:59:3f:39:de:32:7f:5d:f5:6d:b1:8b:c6:
                    75:74:91:91:5a:8e:59:6a:2f:72:df:d7:b6:f7:59:
                    96:b8:92:9a:ea:e5:d3:c0:63:a2:61:5b:87:22:82:
                    3b:e5:43:e0:c0:d0:ef:5a:6e:82:9c:b9:97:33:93:
                    9f:fe:8b:aa:37:12:60:73:03:f2:5f:13:34:b0:57:
                    36:3e:80:e6:67:d2:1d:bc:24:dd:a3:80:7c:e7:2c:
                    89:0d:4a:7d:44:ac:ea:99:f4:d1:8e:b8:43:10:77:
                    69:67:af:ea:9f:ce:78:f2:a5:c3:dc:d4:99:b5:15:
                    cb:98:0f:08:d9:bd:7d:6f:9c:e0:d1:4e:dc:60:af:
                    bb:e8:18:b2:fb:fc:f5:83:49:cf:d1:b5:2b:29:de:
                    b7:46:a4:38:6b:a5:44:bf:cb:63:24:1e:ea:69:f6:
                    1e:20:c4:5d:c0:f4:20:95:46:d6:07:b5:4c:66:a7:
                    5e:b1:03:74:c2:62:c8:7f:5f:62:ca:cc:a7:03:94:
                    29:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:08:8A:4B:B7:44:F1:73:3D:98:A7:63:F4:88:51:42:1D:47:57:BE
            X509v3 Authority Key Identifier:
                keyid:81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:a0:39:98:eb:33:e3:b3:e8:e7:4c:ba:20:19:1a:f9:da:58:
         06:07:8b:f3:5f:68:47:c8:2c:cd:fc:bd:c9:b0:ee:82:bb:ce:
         e8:f9:3c:1b:d2:8e:80:6e:df:a8:5c:c5:fd:1b:45:18:6c:47:
         e7:f4:18:01:5a:91:a4:99:88:20:1b:97:fe:e2:f1:02:fe:65:
         20:b0:67:b7:f7:ac:59:a9:c6:76:48:6a:45:20:b1:76:d2:d2:
         6f:c6:92:38:04:72:6f:4f:e4:f7:04:ce:da:4e:63:52:42:16:
         7e:48:79:ea:6c:e4:cc:9c:64:5d:49:ba:a5:45:10:54:d7:3c:
         9a:84:2a:7b:fd:13:60:e1:74:a0:c6:ee:cc:52:41:22:3f:43:
         2d:7f:b3:6b:1e:52:e8:ba:63:ba:ce:63:2c:ba:9a:7b:93:b9:
         8b:e7:00:8c:00:85:23:bf:1d:d8:5f:36:aa:22:38:d8:a3:78:
         36:03:b4:82:b6:b9:ab:ca:ac:e7:31:e1:d7:e6:31:31:ae:ab:
         eb:86:82:82:84:d6:8f:58:ab:6a:98:47:bf:21:b0:7e:01:78:
         f9:ec:37:1d:57:f0:9a:a0:42:64:3c:b3:0b:fe:e1:3e:00:4c:
         1d:5b:02:ef:6c:d2:18:73:3a:10:dc:f9:48:78:be:a2:ad:e6:
         80:0b:56:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd66Cy7P2wd9YjKsOKhE0+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNzE0YjJhNzM4Y2EzZGVhZTkxNWFmODdjM2E5MWM2MTNl
MWJjNDkwHhcNMjQwNjE1MjIwMTM5WhcNMjQwNjE2MjIwMTM5WjAzMTEwLwYDVQQD
EyhkZDA4OGE0YmI3NDRmMTczM2Q5OGE3NjNmNDg4NTE0MjFkNDc1N2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jHsmIcmxVOuuTPjDZ6LkdOw/MZP
MdpFdDxQWZJbeIYKMZG++joLDlLgzZ+gH+6HrqgwvciAAxDN0KRQG2ZZPzneMn9d
9W2xi8Z1dJGRWo5Zai9y39e291mWuJKa6uXTwGOiYVuHIoI75UPgwNDvWm6CnLmX
M5Of/ouqNxJgcwPyXxM0sFc2PoDmZ9IdvCTdo4B85yyJDUp9RKzqmfTRjrhDEHdp
Z6/qn8548qXD3NSZtRXLmA8I2b19b5zg0U7cYK+76Biy+/z1g0nP0bUrKd63RqQ4
a6VEv8tjJB7qafYeIMRdwPQglUbWB7VMZqdesQN0wmLIf19iysynA5QpxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0Iiku3RPFzPZinY/SIUUIdR1e+MB8GA1UdIwQY
MBaAFIFxSypzjKPerpFa+Hw6kcYT4bxJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1hGTEtuT01vOTZ1a1ZyNGZEcVJ4aFBodkVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hMWU3M2QtNWExYy00Zjc0LWE0NWIt
MTg5NzI0M2M2MmVmLzEvZ1hGTEtuT01vOTZ1a1ZyNGZEcVJ4aFBodkVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hMWU3M2QtNWExYy00Zjc0LWE0NWItMTg5NzI0M2M2MmVm
LzEvZ1hGTEtuT01vOTZ1a1ZyNGZEcVJ4aFBodkVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqA5mOsz
47Po50y6IBka+dpYBgeL819oR8gszfy9ybDugrvO6Pk8G9KOgG7fqFzF/RtFGGxH
5/QYAVqRpJmIIBuX/uLxAv5lILBnt/esWanGdkhqRSCxdtLSb8aSOARyb0/k9wTO
2k5jUkIWfkh56mzkzJxkXUm6pUUQVNc8moQqe/0TYOF0oMbuzFJBIj9DLX+zax5S
6Lpjus5jLLqae5O5i+cAjACFI78d2F82qiI42KN4NgO0gra5q8qs5zHh1+YxMa6r
64aCgoTWj1iraphHvyGwfgF4+ew3HVfwmqBCZDyzC/7hPgBMHVsC72zSGHM6ENz5
SHi+oq3mgAtWRg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 23:03:43 2024 by rpki-client on console-fra.rpki-client.org