Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/8df79e-dff4-4a30-be70-9f800621904a/1/Tgb93gU95YTiype-NjhKwCqcwV8.mft
File:                     Tgb93gU95YTiype-NjhKwCqcwV8.mft (raw, json)
Hash identifier:          4TRzRsCNPC8p0f1Fr4L+JH89qLyS/ciPhHBTPHbE9tU=
Subject key identifier:   FB:80:D4:90:2C:24:04:20:22:9A:50:D3:3B:AE:FC:37:FF:C3:B3:0F
Authority key identifier: 4E:06:FD:DE:05:3D:E5:84:E2:CA:97:BE:36:38:4A:C0:2A:9C:C1:5F
Certificate issuer:       /CN=4e06fdde053de584e2ca97be36384ac02a9cc15f
Certificate serial:       019074D2376AD5D6D7827BE4BBE1BE27F375
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tgb93gU95YTiype-NjhKwCqcwV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/8df79e-dff4-4a30-be70-9f800621904a/1/Tgb93gU95YTiype-NjhKwCqcwV8.mft
Manifest number:          0A36
Signing time:             Tue 02 Jul 2024 19:00:52 +0000
Manifest this update:     Tue 02 Jul 2024 19:00:52 +0000
Manifest next update:     Wed 03 Jul 2024 19:00:52 +0000
Files and hashes:         1: Tgb93gU95YTiype-NjhKwCqcwV8.crl (hash: /G3X18VzoauYCFXLsAtxJhtxnxEolSXx1aZRgS0z6C0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/8df79e-dff4-4a30-be70-9f800621904a/1/Tgb93gU95YTiype-NjhKwCqcwV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/8df79e-dff4-4a30-be70-9f800621904a/1/Tgb93gU95YTiype-NjhKwCqcwV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tgb93gU95YTiype-NjhKwCqcwV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 19:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:74:d2:37:6a:d5:d6:d7:82:7b:e4:bb:e1:be:27:f3:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06fdde053de584e2ca97be36384ac02a9cc15f
        Validity
            Not Before: Jul  2 19:00:52 2024 GMT
            Not After : Jul  3 19:00:52 2024 GMT
        Subject: CN=fb80d4902c240420229a50d33baefc37ffc3b30f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f1:bf:19:8b:6f:9a:fe:41:09:b1:cf:6a:05:
                    e4:16:88:a0:4a:b4:bf:cd:67:14:46:9a:f0:d7:8d:
                    24:7e:a4:a4:73:dc:f8:0c:da:e6:a5:fa:df:31:89:
                    5c:60:5c:75:28:74:b4:0c:8f:d4:99:ab:fb:95:73:
                    84:9a:91:e3:3b:eb:55:d9:fb:e4:78:9b:31:43:46:
                    a8:57:96:bf:13:33:af:ed:20:44:8d:55:b7:ee:a9:
                    92:98:f3:44:69:8c:37:0c:3c:df:d1:1a:12:00:19:
                    d2:d2:27:85:c8:d1:02:0c:60:f2:90:c0:d2:17:fc:
                    55:89:89:73:f1:72:2c:0a:a2:f0:de:bd:f7:8a:e3:
                    82:52:dd:0e:7c:2b:9c:b3:f9:b0:e1:9c:8e:5e:70:
                    c2:90:3d:9c:ee:76:5b:61:44:9b:fb:a1:98:07:6c:
                    b4:86:ea:98:de:96:c9:58:16:4e:0b:75:07:fa:0f:
                    e3:6e:5e:54:55:49:ab:8f:29:af:88:8f:b7:5b:02:
                    e3:f6:8f:85:72:a7:0a:b9:29:d4:d3:b8:2c:9d:be:
                    d2:9f:95:c0:59:47:9b:98:29:c6:88:90:fd:10:0e:
                    da:26:44:f7:20:78:28:0f:0d:7e:d4:cc:1f:13:a4:
                    c2:cb:67:28:e3:d2:5e:c2:7c:32:07:fe:f6:49:42:
                    99:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:80:D4:90:2C:24:04:20:22:9A:50:D3:3B:AE:FC:37:FF:C3:B3:0F
            X509v3 Authority Key Identifier:
                keyid:4E:06:FD:DE:05:3D:E5:84:E2:CA:97:BE:36:38:4A:C0:2A:9C:C1:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tgb93gU95YTiype-NjhKwCqcwV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/8df79e-dff4-4a30-be70-9f800621904a/1/Tgb93gU95YTiype-NjhKwCqcwV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/8df79e-dff4-4a30-be70-9f800621904a/1/Tgb93gU95YTiype-NjhKwCqcwV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:3d:51:c5:a7:ea:44:e7:7a:d4:b8:5b:47:9a:ff:03:85:ad:
         62:c9:9d:ba:c0:d9:d2:e3:43:b2:f6:30:08:95:1e:61:67:2c:
         6c:ff:cc:56:c0:1a:ee:d6:5e:aa:e6:79:b8:3f:10:b1:1a:cd:
         44:23:a8:ef:b0:6c:ea:7e:0b:13:b9:44:74:44:4e:4c:68:2e:
         70:30:72:7f:1a:c6:7b:90:96:83:98:0f:8a:f6:e7:61:69:08:
         69:bb:7b:22:0e:97:83:87:ed:3b:eb:da:47:c9:63:f1:a3:62:
         d8:8a:30:be:e6:ba:83:e5:10:67:e5:b5:52:bf:7a:53:29:27:
         ca:75:a4:0c:d7:09:96:22:32:38:2a:91:2c:be:62:80:e2:80:
         73:6e:cc:83:ce:51:5d:b4:1f:93:a3:3a:8c:d3:94:a4:d3:2c:
         9b:29:bb:e9:ea:c0:d9:07:5c:45:1f:f1:e6:4d:98:f8:48:f1:
         92:96:98:db:10:ed:3e:33:8b:9b:4c:02:cb:a7:b2:41:01:56:
         d0:bd:8f:88:72:40:2a:8a:ca:81:f5:c5:2b:f9:e5:d0:77:87:
         8f:81:3e:02:53:63:9e:58:0a:66:f9:92:88:de:0d:97:d2:5d:
         16:5a:71:15:cb:dc:cc:92:fb:49:96:08:6b:d9:ec:78:c8:72:
         10:00:1e:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZB00jdq1dbXgnvku+G+J/N1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMDZmZGRlMDUzZGU1ODRlMmNhOTdiZTM2Mzg0YWMwMmE5
Y2MxNWYwHhcNMjQwNzAyMTkwMDUyWhcNMjQwNzAzMTkwMDUyWjAzMTEwLwYDVQQD
EyhmYjgwZDQ5MDJjMjQwNDIwMjI5YTUwZDMzYmFlZmMzN2ZmYzNiMzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfG/GYtvmv5BCbHPagXkFoigSrS/
zWcURprw140kfqSkc9z4DNrmpfrfMYlcYFx1KHS0DI/Umav7lXOEmpHjO+tV2fvk
eJsxQ0aoV5a/EzOv7SBEjVW37qmSmPNEaYw3DDzf0RoSABnS0ieFyNECDGDykMDS
F/xViYlz8XIsCqLw3r33iuOCUt0OfCucs/mw4ZyOXnDCkD2c7nZbYUSb+6GYB2y0
huqY3pbJWBZOC3UH+g/jbl5UVUmrjymviI+3WwLj9o+FcqcKuSnU07gsnb7Sn5XA
WUebmCnGiJD9EA7aJkT3IHgoDw1+1MwfE6TCy2co49JewnwyB/72SUKZzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPuA1JAsJAQgIppQ0zuu/Df/w7MPMB8GA1UdIwQY
MBaAFE4G/d4FPeWE4sqXvjY4SsAqnMFfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGdiOTNnVTk1WVRpeXBlLU5qaEt3Q3Fjd1Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS84ZGY3OWUtZGZmNC00YTMwLWJlNzAt
OWY4MDA2MjE5MDRhLzEvVGdiOTNnVTk1WVRpeXBlLU5qaEt3Q3Fjd1Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS84ZGY3OWUtZGZmNC00YTMwLWJlNzAtOWY4MDA2MjE5MDRh
LzEvVGdiOTNnVTk1WVRpeXBlLU5qaEt3Q3Fjd1Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkz1Rxafq
ROd61LhbR5r/A4WtYsmdusDZ0uNDsvYwCJUeYWcsbP/MVsAa7tZequZ5uD8QsRrN
RCOo77Bs6n4LE7lEdEROTGgucDByfxrGe5CWg5gPivbnYWkIabt7Ig6Xg4ftO+va
R8lj8aNi2Iowvua6g+UQZ+W1Ur96UyknynWkDNcJliIyOCqRLL5igOKAc27Mg85R
XbQfk6M6jNOUpNMsmym76erA2QdcRR/x5k2Y+EjxkpaY2xDtPjOLm0wCy6eyQQFW
0L2PiHJAKorKgfXFK/nl0HeHj4E+AlNjnlgKZvmSiN4Nl9JdFlpxFcvczJL7SZYI
a9nseMhyEAAeYA==
-----END CERTIFICATE-----
Generated at Wed Jul 3 05:41:31 2024 by rpki-client on console.sobornost.net