Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.mft
File:                     _C-Nzs9k1DCkjs1YaHg7Bfdcv6s.mft (raw, json)
Hash identifier:          DnYBliTWcmp0fb9RyBMJvwgycKZHgv62b9idj/GPYi8=
Subject key identifier:   EF:C4:25:E2:5E:03:C7:09:C2:6C:8E:6B:46:08:86:C7:6E:15:30:3C
Authority key identifier: FC:2F:8D:CE:CF:64:D4:30:A4:8E:CD:58:68:78:3B:05:F7:5C:BF:AB
Certificate issuer:       /CN=fc2f8dcecf64d430a48ecd5868783b05f75cbfab
Certificate serial:       01901D46053B14F50752FF6DED905F7D18D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.mft
Manifest number:          0B75
Signing time:             Sat 15 Jun 2024 19:00:46 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:46 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:46 +0000
Files and hashes:         1: _C-Nzs9k1DCkjs1YaHg7Bfdcv6s.crl (hash: jOl1jlJxSGSrLQTLHzPTMrI6ukERn0HJCvezwutRrug=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:05:3b:14:f5:07:52:ff:6d:ed:90:5f:7d:18:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc2f8dcecf64d430a48ecd5868783b05f75cbfab
        Validity
            Not Before: Jun 15 19:00:46 2024 GMT
            Not After : Jun 16 19:00:46 2024 GMT
        Subject: CN=efc425e25e03c709c26c8e6b460886c76e15303c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:15:49:8a:04:fc:d8:71:d6:85:65:f3:ed:5a:
                    2a:77:21:7b:ed:3b:a4:e1:76:e3:13:1e:4d:a7:74:
                    65:10:d3:6d:58:df:c0:c1:7c:43:a4:d1:fc:0a:e4:
                    db:79:a9:a3:28:34:14:ea:c1:97:07:6a:06:5f:b8:
                    6b:a9:37:18:0e:b2:55:51:2b:70:68:1c:38:0b:23:
                    a8:1e:40:02:11:12:69:a7:11:b9:49:4b:f8:63:aa:
                    6f:70:ec:96:a0:42:19:b3:a5:69:e0:08:54:1c:97:
                    a9:4f:f7:97:d0:ea:33:52:30:04:73:0a:68:75:2c:
                    93:67:82:42:52:1d:d4:b6:02:e3:95:3a:de:f4:16:
                    00:3e:31:bf:c2:d9:d8:5c:26:36:af:e8:f1:3f:ee:
                    73:dd:e5:a0:d3:3e:6d:fd:e4:5e:7d:54:1c:b0:4d:
                    3f:08:45:27:cf:f8:40:a4:13:dc:02:c7:41:e3:27:
                    5b:a9:20:da:80:c9:b7:38:30:1d:87:d3:a3:0e:0c:
                    be:71:ee:aa:02:e6:5e:58:81:6d:ab:4e:77:58:e8:
                    cc:16:0a:6d:8d:18:64:67:f2:6c:5e:5d:5a:1c:12:
                    46:1f:67:9f:81:93:07:58:c1:93:52:79:fd:64:ca:
                    d6:a6:c3:16:9a:38:6f:fe:c5:d4:32:15:8e:41:c4:
                    d6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C4:25:E2:5E:03:C7:09:C2:6C:8E:6B:46:08:86:C7:6E:15:30:3C
            X509v3 Authority Key Identifier:
                keyid:FC:2F:8D:CE:CF:64:D4:30:A4:8E:CD:58:68:78:3B:05:F7:5C:BF:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:b3:b5:49:46:1a:88:c7:52:16:82:13:d7:ec:54:96:ca:1e:
         f6:6c:63:56:a0:05:48:1e:ac:3c:77:ec:ce:a4:cb:c7:07:2e:
         2d:7d:db:06:21:d0:89:96:99:47:4a:84:cb:75:b9:6a:ea:7c:
         7c:02:a9:04:f0:fa:8f:a5:ed:c2:67:3b:d6:aa:74:4d:f5:52:
         2e:e5:61:24:9f:16:08:56:17:db:f7:5e:e9:85:66:22:d2:0e:
         4c:8b:8f:9c:72:29:ef:7a:92:a5:74:b4:86:6f:f2:76:16:40:
         f1:1e:f0:d4:ad:43:81:62:11:ff:f6:6a:c7:0d:4d:cf:24:12:
         30:c3:7f:b7:d6:38:89:a8:eb:d1:42:40:ae:ae:b8:5a:3a:23:
         45:c6:49:e6:4d:59:db:60:bb:a0:a5:74:15:30:d4:e1:3c:de:
         be:24:6e:39:8c:49:7a:ba:8c:2a:40:88:70:14:3c:d9:41:58:
         2d:3b:65:83:dd:f5:bc:d2:1e:65:6f:87:67:c3:ed:f3:de:30:
         a5:c5:cf:c8:24:c4:8b:cb:48:66:78:d0:be:a6:05:f9:a9:e1:
         42:2e:b6:d5:45:2a:30:a8:8c:7a:90:50:6c:64:66:81:c6:0b:
         e9:ba:3e:01:a2:10:e5:b6:b0:d6:47:82:d6:c7:db:79:b4:28:
         8c:bb:fc:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdRgU7FPUHUv9t7ZBffRjQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMmY4ZGNlY2Y2NGQ0MzBhNDhlY2Q1ODY4NzgzYjA1Zjc1
Y2JmYWIwHhcNMjQwNjE1MTkwMDQ2WhcNMjQwNjE2MTkwMDQ2WjAzMTEwLwYDVQQD
EyhlZmM0MjVlMjVlMDNjNzA5YzI2YzhlNmI0NjA4ODZjNzZlMTUzMDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBVJigT82HHWhWXz7VoqdyF77Tuk
4XbjEx5Np3RlENNtWN/AwXxDpNH8CuTbeamjKDQU6sGXB2oGX7hrqTcYDrJVUStw
aBw4CyOoHkACERJppxG5SUv4Y6pvcOyWoEIZs6Vp4AhUHJepT/eX0OozUjAEcwpo
dSyTZ4JCUh3UtgLjlTre9BYAPjG/wtnYXCY2r+jxP+5z3eWg0z5t/eRefVQcsE0/
CEUnz/hApBPcAsdB4ydbqSDagMm3ODAdh9OjDgy+ce6qAuZeWIFtq053WOjMFgpt
jRhkZ/JsXl1aHBJGH2efgZMHWMGTUnn9ZMrWpsMWmjhv/sXUMhWOQcTWtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/EJeJeA8cJwmyOa0YIhsduFTA8MB8GA1UdIwQY
MBaAFPwvjc7PZNQwpI7NWGh4OwX3XL+rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0MtTnpzOWsxRENranMxWWFIZzdCZmRjdjZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kNTIwNDUtZGVlYS00OTlhLWIwZmMt
OGJlZmI4NzRkODVjLzEvX0MtTnpzOWsxRENranMxWWFIZzdCZmRjdjZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9kNTIwNDUtZGVlYS00OTlhLWIwZmMtOGJlZmI4NzRkODVj
LzEvX0MtTnpzOWsxRENranMxWWFIZzdCZmRjdjZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzbO1SUYa
iMdSFoIT1+xUlsoe9mxjVqAFSB6sPHfszqTLxwcuLX3bBiHQiZaZR0qEy3W5aup8
fAKpBPD6j6Xtwmc71qp0TfVSLuVhJJ8WCFYX2/de6YVmItIOTIuPnHIp73qSpXS0
hm/ydhZA8R7w1K1DgWIR//Zqxw1NzyQSMMN/t9Y4iajr0UJArq64WjojRcZJ5k1Z
22C7oKV0FTDU4TzeviRuOYxJerqMKkCIcBQ82UFYLTtlg931vNIeZW+HZ8Pt894w
pcXPyCTEi8tIZnjQvqYF+anhQi621UUqMKiMepBQbGRmgcYL6bo+AaIQ5baw1keC
1sfbebQojLv8Mg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 20:42:40 2024 by rpki-client on console-fra.rpki-client.org