Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
File:                     F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft (raw, json)
Hash identifier:          tZ1D129pkf8WKI9EXx7B+db9PEo2C9GT78CDC6+2OK0=
Subject key identifier:   63:AB:DD:8E:A4:56:DE:C6:73:58:EA:77:F7:23:F8:E8:D8:B1:31:99
Authority key identifier: 17:A1:66:57:A2:49:77:37:CA:03:62:1C:C6:68:D2:0C:76:21:36:D5
Certificate issuer:       /CN=17a16657a2497737ca03621cc668d20c762136d5
Certificate serial:       018FD375C3FBB4879B29D899B86B163A7638
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
Manifest number:          0941
Signing time:             Sat 01 Jun 2024 11:01:01 +0000
Manifest this update:     Sat 01 Jun 2024 11:01:01 +0000
Manifest next update:     Sun 02 Jun 2024 11:01:01 +0000
Files and hashes:         1: F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl (hash: T/tLgHgfoaip+CFh7CWOzoxSFidsAOn0skoOgRsxZZI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Jun 2024 10:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d3:75:c3:fb:b4:87:9b:29:d8:99:b8:6b:16:3a:76:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17a16657a2497737ca03621cc668d20c762136d5
        Validity
            Not Before: Jun  1 11:01:01 2024 GMT
            Not After : Jun  2 11:01:01 2024 GMT
        Subject: CN=63abdd8ea456dec67358ea77f723f8e8d8b13199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:24:e0:61:c5:33:6a:28:a6:77:69:2a:48:fa:
                    c3:95:b7:05:c2:8c:91:c9:b7:20:57:26:76:c1:ef:
                    57:d0:73:78:b1:f9:b7:bd:b8:2b:31:bb:7d:bd:65:
                    5f:ba:b7:1f:9b:00:06:20:99:e4:77:ba:24:05:b5:
                    39:8b:2b:91:b1:7e:a7:d6:82:44:cd:a7:78:51:34:
                    9f:7e:af:4a:6f:69:ce:7d:f3:ba:bb:1e:4c:75:a0:
                    e6:2c:cd:05:30:97:d3:97:4a:34:4f:61:4e:c8:81:
                    19:4f:73:01:3b:3d:6b:42:fb:7b:47:e2:b1:38:7d:
                    84:03:f7:71:9a:8e:29:71:1e:58:56:4f:58:88:84:
                    a9:59:86:60:8f:6e:71:21:9c:9a:b3:b7:5a:12:be:
                    3a:63:58:7c:28:6c:05:26:f4:f2:cc:52:5f:26:5b:
                    5d:4e:6c:77:89:5a:15:01:ce:1b:ab:29:0f:93:27:
                    03:16:b5:2e:d0:db:84:26:25:ce:3d:05:8b:e9:9e:
                    89:01:79:90:90:be:85:32:bf:56:ea:a4:5b:4a:49:
                    e3:87:ee:64:a8:bf:f0:5b:01:54:fb:9b:6b:5d:bf:
                    ee:a2:7c:90:26:32:b9:5d:68:08:88:cc:c4:18:05:
                    0e:4a:1f:fd:14:e8:b7:32:b2:27:ae:90:ad:ad:aa:
                    f5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AB:DD:8E:A4:56:DE:C6:73:58:EA:77:F7:23:F8:E8:D8:B1:31:99
            X509v3 Authority Key Identifier:
                keyid:17:A1:66:57:A2:49:77:37:CA:03:62:1C:C6:68:D2:0C:76:21:36:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:13:4c:64:19:1a:0f:61:95:c0:9e:0f:65:0e:3b:1f:6d:9a:
         a4:1d:51:9f:ac:88:dc:a4:ae:7a:f5:6e:ce:08:02:c5:4c:eb:
         98:fa:a5:d4:f3:ca:0c:da:1b:c0:a3:dc:68:24:0a:32:00:a1:
         7d:7d:31:cb:57:2a:e6:7d:43:a7:f3:dc:bf:9c:07:c8:75:13:
         ea:5a:3f:6c:d6:1d:82:8e:99:b3:ca:42:cd:63:95:69:cc:c0:
         eb:54:80:3c:b9:d6:51:97:b0:ba:25:09:28:58:02:3a:b6:fa:
         dc:ef:aa:f8:28:e5:d7:d8:4e:40:d3:5f:a5:90:70:f3:db:4c:
         a8:12:f0:ee:fa:26:78:61:6f:a7:54:19:ea:17:ba:6d:c0:b7:
         cf:e7:4e:54:ad:ca:99:3f:2e:31:03:83:bf:e6:d1:0c:bf:ad:
         31:f1:69:dd:4f:88:6c:02:9d:8b:74:0f:f2:4f:97:2f:bf:7e:
         ff:57:2a:96:ea:d7:fe:5b:20:90:bd:6d:a3:7d:63:a2:a4:30:
         56:00:1c:bd:a6:fb:09:c1:2d:e1:60:e4:f9:d3:1a:61:70:8c:
         44:9b:d2:3c:7e:88:7c:4e:dc:89:ab:f8:4d:bf:41:f8:eb:d7:
         2b:e0:47:b8:bf:ff:e0:9e:70:99:62:d4:c1:32:19:ee:9c:21:
         ce:36:91:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY/TdcP7tIebKdiZuGsWOnY4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YTE2NjU3YTI0OTc3MzdjYTAzNjIxY2M2NjhkMjBjNzYy
MTM2ZDUwHhcNMjQwNjAxMTEwMTAxWhcNMjQwNjAyMTEwMTAxWjAzMTEwLwYDVQQD
Eyg2M2FiZGQ4ZWE0NTZkZWM2NzM1OGVhNzdmNzIzZjhlOGQ4YjEzMTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyTgYcUzaiimd2kqSPrDlbcFwoyR
ybcgVyZ2we9X0HN4sfm3vbgrMbt9vWVfurcfmwAGIJnkd7okBbU5iyuRsX6n1oJE
zad4UTSffq9Kb2nOffO6ux5MdaDmLM0FMJfTl0o0T2FOyIEZT3MBOz1rQvt7R+Kx
OH2EA/dxmo4pcR5YVk9YiISpWYZgj25xIZyas7daEr46Y1h8KGwFJvTyzFJfJltd
Tmx3iVoVAc4bqykPkycDFrUu0NuEJiXOPQWL6Z6JAXmQkL6FMr9W6qRbSknjh+5k
qL/wWwFU+5trXb/uonyQJjK5XWgIiMzEGAUOSh/9FOi3MrInrpCtrar1MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOr3Y6kVt7Gc1jqd/cj+OjYsTGZMB8GA1UdIwQY
MBaAFBehZleiSXc3ygNiHMZo0gx2ITbVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjZGbVY2SkpkemZLQTJJY3htalNESFloTnRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80YWM4NWYtZTNmZi00YjUyLWI4OTgt
OTZjOGY0MzlhYjgxLzEvRjZGbVY2SkpkemZLQTJJY3htalNESFloTnRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni80YWM4NWYtZTNmZi00YjUyLWI4OTgtOTZjOGY0MzlhYjgx
LzEvRjZGbVY2SkpkemZLQTJJY3htalNESFloTnRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRNMZBka
D2GVwJ4PZQ47H22apB1Rn6yI3KSuevVuzggCxUzrmPql1PPKDNobwKPcaCQKMgCh
fX0xy1cq5n1Dp/Pcv5wHyHUT6lo/bNYdgo6Zs8pCzWOVaczA61SAPLnWUZewuiUJ
KFgCOrb63O+q+Cjl19hOQNNfpZBw89tMqBLw7vomeGFvp1QZ6he6bcC3z+dOVK3K
mT8uMQODv+bRDL+tMfFp3U+IbAKdi3QP8k+XL79+/1cqlurX/lsgkL1to31joqQw
VgAcvab7CcEt4WDk+dMaYXCMRJvSPH6IfE7ciav4Tb9B+OvXK+BHuL//4J5wmWLU
wTIZ7pwhzjaRVQ==
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:46:54 2024 by rpki-client on console-fra.rpki-client.org