Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/334ce9-4ec7-42d8-b046-3c2c7cdf3643/1/FVdMqaKSn0zlcaqcdVAJgCnDV0Y.mft
File:                     FVdMqaKSn0zlcaqcdVAJgCnDV0Y.mft (raw, json)
Hash identifier:          Dof+c9XwTKaePLyuaBBqGlLKiOxHhXAT5c5F4Q8csOA=
Subject key identifier:   09:FE:CF:13:22:A4:E3:72:22:6D:96:32:99:DA:42:36:2C:7F:4C:51
Authority key identifier: 15:57:4C:A9:A2:92:9F:4C:E5:71:AA:9C:75:50:09:80:29:C3:57:46
Certificate issuer:       /CN=15574ca9a2929f4ce571aa9c7550098029c35746
Certificate serial:       018FD8D2B05CE3924AB12D9A2BBCCB2D51FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FVdMqaKSn0zlcaqcdVAJgCnDV0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/334ce9-4ec7-42d8-b046-3c2c7cdf3643/1/FVdMqaKSn0zlcaqcdVAJgCnDV0Y.mft
Manifest number:          04F0
Signing time:             Sun 02 Jun 2024 12:00:37 +0000
Manifest this update:     Sun 02 Jun 2024 12:00:37 +0000
Manifest next update:     Mon 03 Jun 2024 12:00:37 +0000
Files and hashes:         1: FVdMqaKSn0zlcaqcdVAJgCnDV0Y.crl (hash: 3uwF3Ho3fmUy46O0zqiSwL+bomXRpCk1dr/qG++duqE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/334ce9-4ec7-42d8-b046-3c2c7cdf3643/1/FVdMqaKSn0zlcaqcdVAJgCnDV0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/334ce9-4ec7-42d8-b046-3c2c7cdf3643/1/FVdMqaKSn0zlcaqcdVAJgCnDV0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FVdMqaKSn0zlcaqcdVAJgCnDV0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d8:d2:b0:5c:e3:92:4a:b1:2d:9a:2b:bc:cb:2d:51:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15574ca9a2929f4ce571aa9c7550098029c35746
        Validity
            Not Before: Jun  2 12:00:37 2024 GMT
            Not After : Jun  3 12:00:37 2024 GMT
        Subject: CN=09fecf1322a4e372226d963299da42362c7f4c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b9:85:92:92:d3:6c:0b:b6:2e:49:4c:8e:d8:
                    99:9d:d7:b3:94:d2:ef:66:3d:24:d8:49:91:84:0f:
                    7e:fc:07:a0:51:cf:23:3b:e5:b3:10:be:85:e3:fc:
                    d8:f2:26:23:a5:a1:10:57:21:81:85:4b:72:df:77:
                    2f:ca:07:24:49:8d:c5:99:27:21:a1:71:b5:d3:53:
                    83:76:14:f7:7e:62:c3:87:15:29:8e:42:8f:ef:58:
                    34:a9:2d:b7:51:21:84:92:f4:65:ed:33:ab:8d:b0:
                    74:51:17:db:16:1e:ee:dc:a5:92:09:9c:61:e9:2d:
                    ae:4c:db:a7:4a:4d:af:6c:f3:e1:d2:48:c3:02:db:
                    e5:00:70:6c:50:ca:93:4c:7a:c7:c3:e6:0b:4f:6a:
                    4b:18:c3:0f:72:7e:65:d5:62:67:35:09:c5:cc:55:
                    95:d6:86:46:e0:20:6a:a5:86:08:67:89:1c:9f:9e:
                    6f:95:cc:c7:08:2d:38:6a:92:be:7c:fe:3b:25:08:
                    60:e7:e3:2b:7d:fc:86:d6:d1:07:e1:9f:af:e1:d9:
                    46:4a:38:0c:e4:b5:15:b4:b5:fd:11:e7:24:4c:ad:
                    a1:bf:c5:2a:d4:d3:dc:6a:2f:30:db:cc:ba:f5:13:
                    27:23:a7:05:17:00:0d:74:ef:7f:1c:8a:9e:86:88:
                    f7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FE:CF:13:22:A4:E3:72:22:6D:96:32:99:DA:42:36:2C:7F:4C:51
            X509v3 Authority Key Identifier:
                keyid:15:57:4C:A9:A2:92:9F:4C:E5:71:AA:9C:75:50:09:80:29:C3:57:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FVdMqaKSn0zlcaqcdVAJgCnDV0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/334ce9-4ec7-42d8-b046-3c2c7cdf3643/1/FVdMqaKSn0zlcaqcdVAJgCnDV0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/334ce9-4ec7-42d8-b046-3c2c7cdf3643/1/FVdMqaKSn0zlcaqcdVAJgCnDV0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:dc:a2:10:38:fd:fe:86:ac:d6:96:d0:ea:bf:55:f8:ec:a3:
         c0:5f:0e:eb:af:93:d2:87:f4:bf:3a:d5:01:2c:ea:51:75:35:
         9e:d5:03:c8:64:78:db:ca:28:6e:87:07:94:23:5e:9a:21:8f:
         d4:c6:c8:1c:40:a0:7b:23:3b:53:e6:b7:f8:c9:d1:0d:6a:38:
         6c:6e:8b:6f:15:7d:8a:70:16:d6:07:9f:2f:5e:ec:13:9e:7c:
         b2:bd:6e:2a:a4:33:ad:b6:38:ad:23:81:51:f7:41:91:1a:f6:
         4b:fb:60:6e:d7:12:1a:cd:60:26:fa:c4:db:e7:81:f1:f9:a6:
         86:c5:24:ef:f2:f0:76:10:aa:eb:73:6e:c7:e8:a5:bc:d9:a9:
         a6:e0:9e:02:2a:56:cc:29:04:7c:dc:4b:d1:6e:60:c2:90:b1:
         a0:72:92:15:0b:41:a7:85:e4:63:13:99:59:fe:40:78:81:cd:
         71:0f:f2:87:a8:99:22:8b:04:24:4b:fc:05:66:fb:36:8d:24:
         fd:93:c2:44:fa:7a:c8:5f:f1:61:ed:0b:9a:b1:f0:cc:2b:e0:
         7e:43:9a:44:3c:b7:4d:3d:39:a3:a2:a5:6c:4c:5f:61:5f:41:
         df:a4:d8:b3:22:63:0e:8f:15:82:81:bd:69:d3:aa:70:0c:db:
         e2:f5:5c:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY/Y0rBc45JKsS2aK7zLLVH/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NTc0Y2E5YTI5MjlmNGNlNTcxYWE5Yzc1NTAwOTgwMjlj
MzU3NDYwHhcNMjQwNjAyMTIwMDM3WhcNMjQwNjAzMTIwMDM3WjAzMTEwLwYDVQQD
EygwOWZlY2YxMzIyYTRlMzcyMjI2ZDk2MzI5OWRhNDIzNjJjN2Y0YzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7mFkpLTbAu2LklMjtiZndezlNLv
Zj0k2EmRhA9+/AegUc8jO+WzEL6F4/zY8iYjpaEQVyGBhUty33cvygckSY3FmSch
oXG101ODdhT3fmLDhxUpjkKP71g0qS23USGEkvRl7TOrjbB0URfbFh7u3KWSCZxh
6S2uTNunSk2vbPPh0kjDAtvlAHBsUMqTTHrHw+YLT2pLGMMPcn5l1WJnNQnFzFWV
1oZG4CBqpYYIZ4kcn55vlczHCC04apK+fP47JQhg5+MrffyG1tEH4Z+v4dlGSjgM
5LUVtLX9EeckTK2hv8Uq1NPcai8w28y69RMnI6cFFwANdO9/HIqehoj3RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAn+zxMipONyIm2WMpnaQjYsf0xRMB8GA1UdIwQY
MBaAFBVXTKmikp9M5XGqnHVQCYApw1dGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlZkTXFhS1NuMHpsY2FxY2RWQUpnQ25EVjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8zMzRjZTktNGVjNy00MmQ4LWIwNDYt
M2MyYzdjZGYzNjQzLzEvRlZkTXFhS1NuMHpsY2FxY2RWQUpnQ25EVjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8zMzRjZTktNGVjNy00MmQ4LWIwNDYtM2MyYzdjZGYzNjQz
LzEvRlZkTXFhS1NuMHpsY2FxY2RWQUpnQ25EVjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNyiEDj9
/oas1pbQ6r9V+OyjwF8O66+T0of0vzrVASzqUXU1ntUDyGR428oobocHlCNemiGP
1MbIHECgeyM7U+a3+MnRDWo4bG6LbxV9inAW1gefL17sE558sr1uKqQzrbY4rSOB
UfdBkRr2S/tgbtcSGs1gJvrE2+eB8fmmhsUk7/LwdhCq63Nux+ilvNmppuCeAipW
zCkEfNxL0W5gwpCxoHKSFQtBp4XkYxOZWf5AeIHNcQ/yh6iZIosEJEv8BWb7No0k
/ZPCRPp6yF/xYe0LmrHwzCvgfkOaRDy3TT05o6KlbExfYV9B36TYsyJjDo8VgoG9
adOqcAzb4vVcTA==
-----END CERTIFICATE-----
Generated at Sun Jun 2 14:39:52 2024 by rpki-client on console-fra.rpki-client.org