Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
File:                     _yBr0QgxynN4dWteFhc4lqYLAZE.mft (raw, json)
Hash identifier:          9srmgHe5aMy5icpA20/TNAPFp8zcx2VReqP60bCiZCU=
Subject key identifier:   24:3A:1C:3D:AA:A9:30:1B:AA:05:A0:7B:08:34:E4:E2:98:93:84:00
Authority key identifier: FF:20:6B:D1:08:31:CA:73:78:75:6B:5E:16:17:38:96:A6:0B:01:91
Certificate issuer:       /CN=ff206bd10831ca7378756b5e16173896a60b0191
Certificate serial:       018F874894CC33DD6988DB475B6E38F2A3D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
Manifest number:          0937
Signing time:             Fri 17 May 2024 16:00:31 +0000
Manifest this update:     Fri 17 May 2024 16:00:31 +0000
Manifest next update:     Sat 18 May 2024 16:00:31 +0000
Files and hashes:         1: _yBr0QgxynN4dWteFhc4lqYLAZE.crl (hash: Q05mwLu9SDDdyPi/2FDz9xxshoQ7tBXrMxWE8mcR0uA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:94:cc:33:dd:69:88:db:47:5b:6e:38:f2:a3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff206bd10831ca7378756b5e16173896a60b0191
        Validity
            Not Before: May 17 16:00:31 2024 GMT
            Not After : May 18 16:00:31 2024 GMT
        Subject: CN=243a1c3daaa9301baa05a07b0834e4e298938400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ff:b7:78:76:e3:b4:a2:8a:d2:20:4d:85:cf:
                    49:57:8d:72:c0:5a:87:86:6f:67:3d:a2:d8:2c:03:
                    d3:10:88:34:76:52:bf:f9:a0:e8:8f:8d:a7:fd:0a:
                    30:c9:1b:50:5e:a5:f5:20:de:5c:31:a1:91:a9:58:
                    79:5f:02:bc:65:54:7e:64:f4:76:e7:c2:6b:4a:06:
                    c1:54:bb:28:eb:35:48:d5:4c:d2:dd:a7:92:b5:59:
                    2e:e5:4f:f1:7f:dc:ad:e0:98:04:13:a0:35:fd:28:
                    f1:33:5e:a5:1f:2f:56:48:be:07:ab:be:08:77:7f:
                    7f:5d:3d:f3:af:8f:03:db:2d:e0:4d:33:50:fe:b5:
                    49:e6:c7:25:65:62:44:d6:2e:29:93:df:5e:be:f3:
                    a6:74:3f:90:c8:a3:7b:a6:4c:d7:1f:ad:78:52:3e:
                    fb:d1:8d:b1:88:d2:0a:6b:6e:09:48:9f:ab:ad:ce:
                    07:4f:c2:7f:5e:61:1a:bf:e1:74:5d:b6:6a:20:a7:
                    58:fb:b9:83:ef:75:8a:ef:7f:e7:89:af:26:db:1b:
                    55:0e:45:e4:cc:33:cd:a1:35:a3:c2:03:51:28:6c:
                    77:ad:89:55:f4:4e:65:1c:a8:c8:63:2a:bd:29:7d:
                    2f:02:05:76:97:8a:2c:92:12:42:05:7a:58:61:f0:
                    37:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3A:1C:3D:AA:A9:30:1B:AA:05:A0:7B:08:34:E4:E2:98:93:84:00
            X509v3 Authority Key Identifier:
                keyid:FF:20:6B:D1:08:31:CA:73:78:75:6B:5E:16:17:38:96:A6:0B:01:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:be:5d:b6:a6:9a:de:1d:0f:00:f8:70:47:9d:9b:25:d5:c0:
         5d:52:d8:b9:04:59:f8:e8:6c:10:69:61:2e:17:bd:90:de:ee:
         93:05:94:cf:99:c3:16:de:59:b9:4f:bf:f2:bf:e0:45:e9:6b:
         21:58:6e:36:17:fd:70:86:9a:92:00:49:5b:b0:01:d5:18:5b:
         53:4c:c7:54:ca:87:37:15:ae:30:01:e3:23:d7:af:e7:85:e8:
         85:a4:87:35:82:3a:44:23:f2:39:9e:40:e2:9e:41:3f:78:f8:
         36:76:6d:ff:90:20:6d:77:f3:4b:e6:ae:a1:4c:d9:4d:cf:b4:
         f0:31:c0:5b:c0:d8:52:c3:dd:a2:17:fa:a3:b1:be:74:93:01:
         43:a7:a3:14:08:70:f3:2d:2f:34:05:33:ca:27:bd:b1:a8:a7:
         a6:b8:47:13:d3:15:9b:a3:96:19:56:2b:c3:a7:93:d0:56:82:
         81:b0:78:98:c8:2e:85:10:c5:bb:6a:c4:a1:94:55:46:56:0a:
         fe:a7:9c:91:1a:7d:a6:b8:c8:e7:f2:a2:19:65:5d:9a:9c:9c:
         0b:46:7f:02:cc:68:6e:7d:0d:01:30:fd:69:95:e1:0f:7a:2e:
         b4:76:18:db:98:50:4a:c4:ee:35:06:f3:f9:89:02:e6:34:f3:
         f4:c6:2a:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSJTMM91piNtHW2448qPQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMjA2YmQxMDgzMWNhNzM3ODc1NmI1ZTE2MTczODk2YTYw
YjAxOTEwHhcNMjQwNTE3MTYwMDMxWhcNMjQwNTE4MTYwMDMxWjAzMTEwLwYDVQQD
EygyNDNhMWMzZGFhYTkzMDFiYWEwNWEwN2IwODM0ZTRlMjk4OTM4NDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P+3eHbjtKKK0iBNhc9JV41ywFqH
hm9nPaLYLAPTEIg0dlK/+aDoj42n/QowyRtQXqX1IN5cMaGRqVh5XwK8ZVR+ZPR2
58JrSgbBVLso6zVI1UzS3aeStVku5U/xf9yt4JgEE6A1/SjxM16lHy9WSL4Hq74I
d39/XT3zr48D2y3gTTNQ/rVJ5sclZWJE1i4pk99evvOmdD+QyKN7pkzXH614Uj77
0Y2xiNIKa24JSJ+rrc4HT8J/XmEav+F0XbZqIKdY+7mD73WK73/nia8m2xtVDkXk
zDPNoTWjwgNRKGx3rYlV9E5lHKjIYyq9KX0vAgV2l4oskhJCBXpYYfA3EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQ6HD2qqTAbqgWgewg05OKYk4QAMB8GA1UdIwQY
MBaAFP8ga9EIMcpzeHVrXhYXOJamCwGRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3lCcjBRZ3h5bk40ZFd0ZUZoYzRscVlMQVpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hMzVkMzctNzQ0Ny00Y2Y0LTk4MmYt
NTBmMzk4YmIyNmU5LzEvX3lCcjBRZ3h5bk40ZFd0ZUZoYzRscVlMQVpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9hMzVkMzctNzQ0Ny00Y2Y0LTk4MmYtNTBmMzk4YmIyNmU5
LzEvX3lCcjBRZ3h5bk40ZFd0ZUZoYzRscVlMQVpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi75dtqaa
3h0PAPhwR52bJdXAXVLYuQRZ+OhsEGlhLhe9kN7ukwWUz5nDFt5ZuU+/8r/gRelr
IVhuNhf9cIaakgBJW7AB1RhbU0zHVMqHNxWuMAHjI9ev54XohaSHNYI6RCPyOZ5A
4p5BP3j4NnZt/5AgbXfzS+auoUzZTc+08DHAW8DYUsPdohf6o7G+dJMBQ6ejFAhw
8y0vNAUzyie9sainprhHE9MVm6OWGVYrw6eT0FaCgbB4mMguhRDFu2rEoZRVRlYK
/qeckRp9prjI5/KiGWVdmpycC0Z/Asxobn0NATD9aZXhD3outHYY25hQSsTuNQbz
+YkC5jTz9MYq9g==
-----END CERTIFICATE-----
Generated at Fri May 17 19:20:08 2024 by rpki-client on console-fra.rpki-client.org