Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
File:                     GUwuZp9lV99OPUmk8mW1QReS_6A.mft (raw, json)
Hash identifier:          bZNikaGCLa22Fs2tZhayyZrjYmYAMoSzVdfErYAS5Pc=
Subject key identifier:   0D:DA:3C:05:20:88:B2:F3:0A:AA:FA:D2:42:31:05:12:91:E5:13:A7
Authority key identifier: 19:4C:2E:66:9F:65:57:DF:4E:3D:49:A4:F2:65:B5:41:17:92:FF:A0
Certificate issuer:       /CN=194c2e669f6557df4e3d49a4f265b5411792ffa0
Certificate serial:       0192392665AC9E21EA17ADBCCF4FFFF66BF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
Manifest number:          0A3B
Signing time:             Sat 28 Sep 2024 15:01:10 +0000
Manifest this update:     Sat 28 Sep 2024 15:01:10 +0000
Manifest next update:     Sun 29 Sep 2024 15:01:10 +0000
Files and hashes:         1: GUwuZp9lV99OPUmk8mW1QReS_6A.crl (hash: ILeuW3Y6Sl0eXJNhk7QvI3JajvF7z0f5LAjkTneVWKA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 15:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:26:65:ac:9e:21:ea:17:ad:bc:cf:4f:ff:f6:6b:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194c2e669f6557df4e3d49a4f265b5411792ffa0
        Validity
            Not Before: Sep 28 15:01:10 2024 GMT
            Not After : Sep 29 15:01:10 2024 GMT
        Subject: CN=0dda3c052088b2f30aaafad24231051291e513a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4e:29:ee:9a:d8:a9:88:aa:25:58:29:c4:7d:
                    db:92:3f:32:86:15:ff:ea:7e:45:59:3e:57:74:c2:
                    28:60:ef:aa:7c:28:d1:56:ce:05:23:ff:04:09:ad:
                    05:00:b5:4a:f4:ba:d8:46:10:07:3e:42:47:da:10:
                    0b:04:ef:35:76:5f:60:56:08:19:d0:95:23:fa:3b:
                    e9:95:b8:43:de:d4:f7:75:ff:42:a5:b4:c7:c9:5a:
                    c1:6e:ea:5b:9b:b0:5e:a1:6d:d0:80:22:e7:4a:ee:
                    0e:5e:07:ab:7a:99:ed:65:d5:e5:be:ec:d5:f8:f7:
                    b3:43:60:e8:df:5f:6b:6b:f0:d7:00:64:f8:4a:dd:
                    51:bf:1d:c9:02:f5:11:39:58:2d:20:aa:12:3f:30:
                    00:28:21:3c:4b:d3:83:c8:82:94:b4:3c:34:43:ba:
                    fa:ae:76:2b:93:00:dd:55:38:3f:e5:a6:2e:c4:fe:
                    f7:70:1c:67:a6:45:dc:8f:e9:31:ba:7c:c9:fe:d7:
                    92:b4:32:b0:50:e4:05:d2:26:13:45:a1:8f:3c:ce:
                    77:e1:6a:91:f3:a1:ea:73:29:eb:5a:e4:fb:5c:ae:
                    a6:a3:a5:b8:bc:ca:a7:4e:da:20:a7:11:4b:67:88:
                    7e:81:ec:74:72:0b:47:53:5c:ab:0a:a6:9f:b7:9d:
                    f6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:DA:3C:05:20:88:B2:F3:0A:AA:FA:D2:42:31:05:12:91:E5:13:A7
            X509v3 Authority Key Identifier:
                keyid:19:4C:2E:66:9F:65:57:DF:4E:3D:49:A4:F2:65:B5:41:17:92:FF:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:88:08:a9:e4:0e:d1:b3:e9:cb:8b:5c:bf:51:37:20:39:10:
         21:c9:41:29:fa:5f:6e:7e:c7:ff:be:19:cb:f9:f7:73:46:2b:
         b0:d7:98:a8:33:96:ef:f2:a8:35:ee:ae:c4:32:18:30:eb:50:
         50:a4:ac:08:59:b1:77:be:41:c5:b2:44:9f:f8:98:b0:40:bc:
         50:18:1b:0d:7d:8c:f7:97:57:f3:01:de:8b:05:c7:6d:ef:c9:
         2b:26:00:4b:c7:38:36:fd:96:61:69:79:03:a2:98:b5:b1:38:
         fa:12:e5:a6:37:5d:4e:a3:61:07:dc:e6:c5:3e:7b:f5:01:0f:
         7b:ee:da:dd:4b:7b:44:ac:62:ca:45:d0:d2:d6:dd:2a:47:88:
         ee:89:ee:25:e0:c1:13:3a:5a:c4:7a:47:c0:6f:d2:46:43:84:
         33:69:ca:cf:65:bc:e3:07:f1:d5:7f:c3:e9:f6:39:e3:9e:c2:
         ea:7a:fe:24:40:c8:72:ff:49:da:eb:ea:df:da:35:45:24:99:
         05:e5:2e:97:4b:69:5b:2c:fa:37:48:b2:2c:15:7d:2f:d9:ff:
         b2:50:88:2b:15:7a:f3:32:a1:f3:2c:a6:36:2d:83:f1:e8:d8:
         7c:07:14:7b:bf:47:cd:5d:8a:71:9e:bc:88:d6:e6:9c:ab:89:
         e7:64:2d:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI5JmWsniHqF628z0//9mv2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NGMyZTY2OWY2NTU3ZGY0ZTNkNDlhNGYyNjViNTQxMTc5
MmZmYTAwHhcNMjQwOTI4MTUwMTEwWhcNMjQwOTI5MTUwMTEwWjAzMTEwLwYDVQQD
EygwZGRhM2MwNTIwODhiMmYzMGFhYWZhZDI0MjMxMDUxMjkxZTUxM2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE4p7prYqYiqJVgpxH3bkj8yhhX/
6n5FWT5XdMIoYO+qfCjRVs4FI/8ECa0FALVK9LrYRhAHPkJH2hALBO81dl9gVggZ
0JUj+jvplbhD3tT3df9CpbTHyVrBbupbm7BeoW3QgCLnSu4OXgerepntZdXlvuzV
+PezQ2Do319ra/DXAGT4St1Rvx3JAvUROVgtIKoSPzAAKCE8S9ODyIKUtDw0Q7r6
rnYrkwDdVTg/5aYuxP73cBxnpkXcj+kxunzJ/teStDKwUOQF0iYTRaGPPM534WqR
86HqcynrWuT7XK6mo6W4vMqnTtogpxFLZ4h+gex0cgtHU1yrCqaft532WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3aPAUgiLLzCqr60kIxBRKR5ROnMB8GA1UdIwQY
MBaAFBlMLmafZVffTj1JpPJltUEXkv+gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1V3dVpwOWxWOTlPUFVtazhtVzFRUmVTXzZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8zNGRmZTAtOTIwNi00MWRmLWJhMDEt
YTlmZjdhNTM3NTNhLzEvR1V3dVpwOWxWOTlPUFVtazhtVzFRUmVTXzZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8zNGRmZTAtOTIwNi00MWRmLWJhMDEtYTlmZjdhNTM3NTNh
LzEvR1V3dVpwOWxWOTlPUFVtazhtVzFRUmVTXzZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4gIqeQO
0bPpy4tcv1E3IDkQIclBKfpfbn7H/74Zy/n3c0YrsNeYqDOW7/KoNe6uxDIYMOtQ
UKSsCFmxd75BxbJEn/iYsEC8UBgbDX2M95dX8wHeiwXHbe/JKyYAS8c4Nv2WYWl5
A6KYtbE4+hLlpjddTqNhB9zmxT579QEPe+7a3Ut7RKxiykXQ0tbdKkeI7onuJeDB
EzpaxHpHwG/SRkOEM2nKz2W84wfx1X/D6fY5457C6nr+JEDIcv9J2uvq39o1RSSZ
BeUul0tpWyz6N0iyLBV9L9n/slCIKxV68zKh8yymNi2D8ejYfAcUe79HzV2KcZ68
iNbmnKuJ52QtIQ==
-----END CERTIFICATE-----
Generated at Sun Sep 29 00:13:53 2024 by rpki-client on console-fra.rpki-client.org