Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
File:                     sQBtYOzMF8WGM3oONk176YAd6fE.mft (raw, json)
Hash identifier:          Rf+7ALRoLbZSaEEO1beku/9i71Bdp0Rj2G+5cKfVx8g=
Subject key identifier:   D3:10:81:42:5A:CC:29:51:63:8E:B5:8C:FE:CA:28:61:A3:AE:2A:D2
Authority key identifier: B1:00:6D:60:EC:CC:17:C5:86:33:7A:0E:36:4D:7B:E9:80:1D:E9:F1
Certificate issuer:       /CN=b1006d60eccc17c586337a0e364d7be9801de9f1
Certificate serial:       018F87ED21FA55984142C338EBBCF6088E5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
Manifest number:          1106
Signing time:             Fri 17 May 2024 19:00:15 +0000
Manifest this update:     Fri 17 May 2024 19:00:15 +0000
Manifest next update:     Sat 18 May 2024 19:00:15 +0000
Files and hashes:         1: sQBtYOzMF8WGM3oONk176YAd6fE.crl (hash: uPHKRgzRp6sc9tukpvM6acU/uC1vflEGQtSm0Cn7WXk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:21:fa:55:98:41:42:c3:38:eb:bc:f6:08:8e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1006d60eccc17c586337a0e364d7be9801de9f1
        Validity
            Not Before: May 17 19:00:15 2024 GMT
            Not After : May 18 19:00:15 2024 GMT
        Subject: CN=d31081425acc2951638eb58cfeca2861a3ae2ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:56:b9:ef:14:aa:49:21:d1:af:86:a7:c3:89:
                    93:cf:b8:4e:75:36:5a:74:a9:8c:67:19:5a:f8:c0:
                    cf:6e:22:18:ad:1a:d0:0e:5b:21:9e:41:e2:13:af:
                    e3:c5:8e:e5:36:9d:de:1c:69:01:fe:93:db:68:68:
                    e4:45:8a:7d:69:0e:a9:3d:13:3c:e5:d7:80:15:30:
                    5d:3d:a0:2f:74:16:40:5a:12:f6:12:f6:69:9a:97:
                    a5:95:d4:6a:43:3c:4a:e1:fc:5b:0c:0c:a9:bd:a0:
                    a3:5e:8d:d9:95:9d:af:ab:5f:83:74:23:6c:a3:4f:
                    1a:d3:12:54:9d:28:2a:2b:0b:2d:ba:80:b9:1f:84:
                    cd:73:a8:3f:34:ea:98:a9:a8:39:2c:8a:35:80:bb:
                    c4:97:d5:57:4c:a5:96:2e:e2:c9:bd:a5:9e:03:a0:
                    09:73:c3:68:71:95:e4:b3:69:c2:d5:4c:ef:7f:0d:
                    d5:5e:26:c7:d0:b1:66:fb:d8:d2:60:93:4b:41:98:
                    db:b6:13:74:d8:4d:cc:2e:f1:3b:af:17:85:cf:3b:
                    72:5f:f1:24:45:45:41:61:a3:af:30:b8:22:0e:09:
                    9b:9d:b5:1e:b1:18:22:3f:97:ba:89:1e:91:84:5b:
                    47:32:78:f4:f4:cc:f1:20:47:2a:0a:ab:1c:4e:a1:
                    ef:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:10:81:42:5A:CC:29:51:63:8E:B5:8C:FE:CA:28:61:A3:AE:2A:D2
            X509v3 Authority Key Identifier:
                keyid:B1:00:6D:60:EC:CC:17:C5:86:33:7A:0E:36:4D:7B:E9:80:1D:E9:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:12:34:c0:98:50:f4:b8:7f:30:c9:b2:71:66:78:06:4d:0f:
         f9:ef:c8:af:3a:b2:21:a4:62:26:7e:5a:d6:51:46:2b:40:9b:
         8b:e0:29:5f:cb:8e:2d:61:21:99:06:62:50:48:57:8e:5a:da:
         36:c6:00:44:6b:49:cf:6d:21:c5:6f:07:75:65:48:85:24:e8:
         ca:2c:ec:19:c0:d4:50:05:54:ae:3b:ab:86:cb:56:a4:be:bb:
         ad:dd:70:a5:4d:e4:84:b5:c2:58:6d:ab:eb:c7:48:90:ea:b9:
         7f:46:6d:ae:e5:48:3a:81:32:53:66:e0:09:5b:6f:0e:de:e3:
         95:bc:9f:37:c0:95:1c:73:e3:1b:a9:00:1a:9a:a5:31:1c:62:
         39:4c:7d:3a:99:2c:14:97:61:e0:17:2b:fe:9e:b7:7c:10:98:
         ce:f9:ac:70:d3:fb:25:20:46:c6:b2:a3:45:65:ae:74:2e:09:
         b2:5b:c8:13:aa:a5:d9:ec:6f:f0:2f:79:4a:e8:7e:7f:5c:c2:
         95:4a:36:90:69:e0:ee:71:f8:12:57:de:fb:6b:cb:b9:b2:88:
         eb:4c:5a:05:03:56:7b:73:38:c5:91:b4:88:b7:96:a0:ff:6f:
         65:c9:b2:ff:ad:66:ce:09:5c:97:14:2a:1f:65:e2:0d:38:09:
         86:f4:77:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7SH6VZhBQsM467z2CI5cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMDA2ZDYwZWNjYzE3YzU4NjMzN2EwZTM2NGQ3YmU5ODAx
ZGU5ZjEwHhcNMjQwNTE3MTkwMDE1WhcNMjQwNTE4MTkwMDE1WjAzMTEwLwYDVQQD
EyhkMzEwODE0MjVhY2MyOTUxNjM4ZWI1OGNmZWNhMjg2MWEzYWUyYWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0la57xSqSSHRr4anw4mTz7hOdTZa
dKmMZxla+MDPbiIYrRrQDlshnkHiE6/jxY7lNp3eHGkB/pPbaGjkRYp9aQ6pPRM8
5deAFTBdPaAvdBZAWhL2EvZpmpelldRqQzxK4fxbDAypvaCjXo3ZlZ2vq1+DdCNs
o08a0xJUnSgqKwstuoC5H4TNc6g/NOqYqag5LIo1gLvEl9VXTKWWLuLJvaWeA6AJ
c8NocZXks2nC1Uzvfw3VXibH0LFm+9jSYJNLQZjbthN02E3MLvE7rxeFzztyX/Ek
RUVBYaOvMLgiDgmbnbUesRgiP5e6iR6RhFtHMnj09MzxIEcqCqscTqHv5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMQgUJazClRY461jP7KKGGjrirSMB8GA1UdIwQY
MBaAFLEAbWDszBfFhjN6DjZNe+mAHenxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1FCdFlPek1GOFdHTTNvT05rMTc2WUFkNmZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9kNWQ5YTAtZTY1NS00NWRhLTk0NDIt
NTY1OTE1NzFkMTYxLzEvc1FCdFlPek1GOFdHTTNvT05rMTc2WUFkNmZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9kNWQ5YTAtZTY1NS00NWRhLTk0NDItNTY1OTE1NzFkMTYx
LzEvc1FCdFlPek1GOFdHTTNvT05rMTc2WUFkNmZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEBI0wJhQ
9Lh/MMmycWZ4Bk0P+e/IrzqyIaRiJn5a1lFGK0Cbi+ApX8uOLWEhmQZiUEhXjlra
NsYARGtJz20hxW8HdWVIhSToyizsGcDUUAVUrjurhstWpL67rd1wpU3khLXCWG2r
68dIkOq5f0ZtruVIOoEyU2bgCVtvDt7jlbyfN8CVHHPjG6kAGpqlMRxiOUx9Opks
FJdh4Bcr/p63fBCYzvmscNP7JSBGxrKjRWWudC4JslvIE6ql2exv8C95Suh+f1zC
lUo2kGng7nH4Elfe+2vLubKI60xaBQNWe3M4xZG0iLeWoP9vZcmy/61mzglclxQq
H2XiDTgJhvR3JQ==
-----END CERTIFICATE-----
Generated at Fri May 17 20:17:46 2024 by rpki-client on console-fra.rpki-client.org