Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/bb040a-c802-4960-8dbf-b9baa9f061fe/1/2f2qHAH51r-3yaAN4AlCpGY2A2U.mft
File:                     2f2qHAH51r-3yaAN4AlCpGY2A2U.mft (raw, json)
Hash identifier:          HKM1O7B210X9ixzoNYvhyzYxSqNFkbCmoBunsitOkws=
Subject key identifier:   9C:79:B2:4E:54:FE:D5:31:02:B5:D4:1E:32:28:62:95:CE:94:25:C0
Authority key identifier: D9:FD:AA:1C:01:F9:D6:BF:B7:C9:A0:0D:E0:09:42:A4:66:36:03:65
Certificate issuer:       /CN=d9fdaa1c01f9d6bfb7c9a00de00942a466360365
Certificate serial:       01901FDB2FA78897CF016173A8B95DF01B90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2f2qHAH51r-3yaAN4AlCpGY2A2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/bb040a-c802-4960-8dbf-b9baa9f061fe/1/2f2qHAH51r-3yaAN4AlCpGY2A2U.mft
Manifest number:          064E
Signing time:             Sun 16 Jun 2024 07:02:56 +0000
Manifest this update:     Sun 16 Jun 2024 07:02:56 +0000
Manifest next update:     Mon 17 Jun 2024 07:02:56 +0000
Files and hashes:         1: 2f2qHAH51r-3yaAN4AlCpGY2A2U.crl (hash: OQrzsf4i7JkF5RmCSEFmOEmdKvuFO2LEJ4+1t++j3rM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/bb040a-c802-4960-8dbf-b9baa9f061fe/1/2f2qHAH51r-3yaAN4AlCpGY2A2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/bb040a-c802-4960-8dbf-b9baa9f061fe/1/2f2qHAH51r-3yaAN4AlCpGY2A2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2f2qHAH51r-3yaAN4AlCpGY2A2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Jun 2024 07:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:db:2f:a7:88:97:cf:01:61:73:a8:b9:5d:f0:1b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9fdaa1c01f9d6bfb7c9a00de00942a466360365
        Validity
            Not Before: Jun 16 07:02:56 2024 GMT
            Not After : Jun 17 07:02:56 2024 GMT
        Subject: CN=9c79b24e54fed53102b5d41e32286295ce9425c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e1:0a:fb:af:c4:61:58:2b:d3:8a:f2:99:1a:
                    66:c7:58:25:6a:72:89:d9:f4:65:e1:e7:13:9e:d8:
                    29:14:91:03:8e:69:c3:cc:08:ed:b0:f4:b1:48:2c:
                    d3:03:aa:bf:00:75:cf:f6:78:06:e0:6e:cf:6f:12:
                    61:10:2a:4c:6a:44:7f:0d:b2:c2:ea:62:bf:6f:bd:
                    cd:3f:ed:4e:9a:ac:e3:20:b2:fa:23:8d:a3:11:61:
                    34:28:8f:a0:b1:bc:20:f3:df:6f:ab:53:2c:8c:01:
                    ac:cb:a1:42:1d:f4:d8:82:c1:08:0c:6c:ad:c3:7e:
                    0f:54:45:3d:c1:e0:c8:4c:bf:82:a7:6a:ca:76:19:
                    d4:57:0e:36:c9:f9:12:20:08:c2:0c:a1:f4:39:35:
                    33:91:db:ab:18:07:53:ca:5d:b6:9b:c8:1c:5c:11:
                    ee:e1:36:9b:36:05:ae:16:d9:a3:47:35:a9:5a:37:
                    20:88:6c:79:b5:7b:bd:60:38:61:77:f9:92:2a:cc:
                    2a:1d:09:32:93:bc:88:12:f7:a1:c2:97:56:51:0b:
                    31:8f:ef:34:de:1b:89:2a:c3:ce:d0:17:90:6e:42:
                    83:1e:d8:bc:fa:4c:67:b4:8a:9b:53:cb:e5:54:b4:
                    20:7d:d8:47:1c:77:dc:50:aa:55:17:41:a8:18:34:
                    bc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:79:B2:4E:54:FE:D5:31:02:B5:D4:1E:32:28:62:95:CE:94:25:C0
            X509v3 Authority Key Identifier:
                keyid:D9:FD:AA:1C:01:F9:D6:BF:B7:C9:A0:0D:E0:09:42:A4:66:36:03:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f2qHAH51r-3yaAN4AlCpGY2A2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bb040a-c802-4960-8dbf-b9baa9f061fe/1/2f2qHAH51r-3yaAN4AlCpGY2A2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bb040a-c802-4960-8dbf-b9baa9f061fe/1/2f2qHAH51r-3yaAN4AlCpGY2A2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:60:08:c1:36:e6:be:da:cf:4f:55:40:16:32:f6:6e:3a:15:
         85:37:de:de:ca:e6:9a:11:f2:44:a7:07:93:e0:5d:0f:df:89:
         07:0d:e5:4d:a2:3a:f5:e3:50:52:f5:ef:9b:db:42:4a:38:7f:
         be:e9:cc:88:15:c8:14:fb:6b:2d:93:90:08:38:45:16:7d:e0:
         e0:4f:8a:6c:50:0d:73:e5:ff:69:34:fc:7e:7e:f4:7b:48:ad:
         69:de:01:24:2c:87:77:fb:09:fa:a0:16:dc:f5:1d:6d:31:5d:
         1d:7a:50:f8:8d:94:ff:27:1d:98:c8:68:e8:83:3a:37:bd:8d:
         dc:bc:02:85:b1:0a:b2:a5:6d:61:6c:8d:e2:04:3b:c9:ac:1e:
         47:29:40:4f:76:09:cc:74:53:92:14:d5:27:e5:45:a5:8f:34:
         07:1b:e5:07:8b:f3:44:dd:2d:f6:d4:27:71:fb:e7:16:29:27:
         8e:5c:08:ff:fc:c1:06:92:22:aa:1a:13:92:b0:3a:f6:41:99:
         cc:8b:26:f3:cc:07:71:53:d4:e8:68:5e:87:b7:79:dc:6f:18:
         91:27:44:1f:21:19:8d:7f:dc:1e:73:8f:9b:96:05:9c:ff:ee:
         cb:64:db:7a:3e:66:e6:08:18:26:9d:3b:c9:f8:b6:42:6f:af:
         e4:a8:27:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAf2y+niJfPAWFzqLld8BuQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZmRhYTFjMDFmOWQ2YmZiN2M5YTAwZGUwMDk0MmE0NjYz
NjAzNjUwHhcNMjQwNjE2MDcwMjU2WhcNMjQwNjE3MDcwMjU2WjAzMTEwLwYDVQQD
Eyg5Yzc5YjI0ZTU0ZmVkNTMxMDJiNWQ0MWUzMjI4NjI5NWNlOTQyNWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+EK+6/EYVgr04rymRpmx1glanKJ
2fRl4ecTntgpFJEDjmnDzAjtsPSxSCzTA6q/AHXP9ngG4G7PbxJhECpMakR/DbLC
6mK/b73NP+1OmqzjILL6I42jEWE0KI+gsbwg899vq1MsjAGsy6FCHfTYgsEIDGyt
w34PVEU9weDITL+Cp2rKdhnUVw42yfkSIAjCDKH0OTUzkdurGAdTyl22m8gcXBHu
4TabNgWuFtmjRzWpWjcgiGx5tXu9YDhhd/mSKswqHQkyk7yIEvehwpdWUQsxj+80
3huJKsPO0BeQbkKDHti8+kxntIqbU8vlVLQgfdhHHHfcUKpVF0GoGDS8fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJx5sk5U/tUxArXUHjIoYpXOlCXAMB8GA1UdIwQY
MBaAFNn9qhwB+da/t8mgDeAJQqRmNgNlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmYycUhBSDUxci0zeWFBTjRBbENwR1kyQTJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9iYjA0MGEtYzgwMi00OTYwLThkYmYt
YjliYWE5ZjA2MWZlLzEvMmYycUhBSDUxci0zeWFBTjRBbENwR1kyQTJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9iYjA0MGEtYzgwMi00OTYwLThkYmYtYjliYWE5ZjA2MWZl
LzEvMmYycUhBSDUxci0zeWFBTjRBbENwR1kyQTJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmAIwTbm
vtrPT1VAFjL2bjoVhTfe3srmmhHyRKcHk+BdD9+JBw3lTaI69eNQUvXvm9tCSjh/
vunMiBXIFPtrLZOQCDhFFn3g4E+KbFANc+X/aTT8fn70e0itad4BJCyHd/sJ+qAW
3PUdbTFdHXpQ+I2U/ycdmMho6IM6N72N3LwChbEKsqVtYWyN4gQ7yaweRylAT3YJ
zHRTkhTVJ+VFpY80BxvlB4vzRN0t9tQncfvnFiknjlwI//zBBpIiqhoTkrA69kGZ
zIsm88wHcVPU6Gheh7d53G8YkSdEHyEZjX/cHnOPm5YFnP/uy2Tbej5m5ggYJp07
yfi2Qm+v5Kgnng==
-----END CERTIFICATE-----
Generated at Sun Jun 16 11:09:22 2024 by rpki-client on console-fra.rpki-client.org