Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft
File:                     obfHtAmGdKBPsXeELOxO65v4nh4.mft (raw, json)
Hash identifier:          Ih3VSehMP4S3xq3c+l5q8P7Z4jlyZYRrcWthf4FCwgY=
Subject key identifier:   AA:68:F1:1B:06:C9:2F:17:AF:25:47:A9:51:FA:8A:DC:0A:A7:A9:36
Authority key identifier: A1:B7:C7:B4:09:86:74:A0:4F:B1:77:84:2C:EC:4E:EB:9B:F8:9E:1E
Certificate issuer:       /CN=a1b7c7b4098674a04fb177842cec4eeb9bf89e1e
Certificate serial:       01901DED94E83E7ADB9D60290D552AB3E3E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obfHtAmGdKBPsXeELOxO65v4nh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 22:03:47 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:47 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:47 +0000
Files and hashes:         1: obfHtAmGdKBPsXeELOxO65v4nh4.crl (hash: SjgKharAe/XnKMlQ4pK4beHF4En58Hu7tLMNRt7ZIiA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/obfHtAmGdKBPsXeELOxO65v4nh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:94:e8:3e:7a:db:9d:60:29:0d:55:2a:b3:e3:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b7c7b4098674a04fb177842cec4eeb9bf89e1e
        Validity
            Not Before: Jun 15 22:03:47 2024 GMT
            Not After : Jun 16 22:03:47 2024 GMT
        Subject: CN=aa68f11b06c92f17af2547a951fa8adc0aa7a936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9c:21:80:41:92:8e:2a:7e:15:ec:88:9e:7f:
                    7a:08:24:1c:db:fe:02:19:23:e3:01:24:56:f1:69:
                    f3:42:bf:c4:c8:84:5b:9e:da:5b:79:6a:84:ea:d3:
                    c0:0d:c7:5c:a9:1a:d9:7a:c5:c4:a7:2f:fe:47:ab:
                    12:62:18:a7:86:10:76:a0:4a:f8:4e:dd:90:d9:3b:
                    2a:54:b7:b9:10:62:b3:af:16:3e:f3:bd:84:a7:65:
                    c7:fe:ad:34:0e:3a:63:2d:2a:ba:a3:e3:87:db:b0:
                    24:c2:db:71:86:20:39:cf:2b:1c:08:45:9f:10:d8:
                    3c:af:14:cd:ab:e6:e2:6a:b2:f0:d8:ed:dd:c6:53:
                    40:c0:05:c0:8d:3d:f0:c8:ec:1a:ac:aa:bf:08:16:
                    b6:f3:5b:5f:90:29:84:81:ae:ff:7a:c8:5a:53:16:
                    eb:3a:b1:d1:d1:1d:5a:dc:d8:85:66:83:e9:6a:67:
                    3c:54:f9:13:e3:6a:63:f2:11:97:cb:d1:44:28:0c:
                    71:b5:e3:28:46:d5:4f:87:d3:65:1a:2e:43:1d:3e:
                    0a:4d:a4:76:01:1b:07:90:11:07:58:7f:6f:d8:6a:
                    e6:da:c6:91:e7:a3:8e:1f:09:1e:38:3c:69:45:8f:
                    bc:1f:45:38:0b:8c:2a:56:73:ab:20:fb:9e:67:22:
                    02:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:68:F1:1B:06:C9:2F:17:AF:25:47:A9:51:FA:8A:DC:0A:A7:A9:36
            X509v3 Authority Key Identifier:
                keyid:A1:B7:C7:B4:09:86:74:A0:4F:B1:77:84:2C:EC:4E:EB:9B:F8:9E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obfHtAmGdKBPsXeELOxO65v4nh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:98:4d:e5:91:d5:e5:ce:2a:75:d8:37:e7:93:75:74:d6:bb:
         df:cd:fb:4d:fb:1b:d9:cd:46:ad:f0:57:5c:fd:4b:1c:bb:6c:
         4b:b2:d6:e1:03:79:f7:5a:6c:f3:43:c9:8d:ab:e6:24:bc:c2:
         f8:1d:ea:6d:60:6b:bc:e6:28:a0:21:60:55:fa:a6:4c:59:75:
         94:22:cd:f2:31:8d:76:c3:2f:ef:ba:59:31:c9:7f:4a:22:5a:
         ec:2e:3e:c2:04:44:39:ea:41:7c:fa:64:b5:43:7c:d2:45:28:
         c0:0b:c5:e5:51:b3:a8:94:5b:68:d9:e6:4b:87:9a:7a:e2:c8:
         64:bd:de:ac:c9:72:4e:51:0f:e8:04:08:0c:b6:7a:ac:e5:c9:
         f6:f7:c4:7d:3a:70:77:0b:ef:43:e9:2c:8c:2d:58:50:d6:49:
         5a:0f:1d:ee:49:76:94:62:58:23:c7:43:8c:df:58:97:43:fd:
         97:87:56:8e:75:9d:96:33:bf:64:33:4e:da:7f:bb:0c:d6:0e:
         cb:0f:b0:6d:8b:b4:0e:34:bb:08:61:77:e7:89:52:33:65:94:
         cf:ef:f9:1e:2f:4d:e0:ed:bc:19:71:b8:e3:11:4c:57:b9:c8:
         51:0d:c7:43:0f:bf:6a:c1:ea:95:5b:40:c1:73:86:97:07:8a:
         44:02:53:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:34:16 2024 by rpki-client on console-ams.rpki-client.org