Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
File:                     xmCFijitXhG3sYk5KIO8g-trNh0.mft (raw, json)
Hash identifier:          Z2emDBu2HXNuH2q39NApu0cYNnUhPHTaFFCLv/Wwq4s=
Subject key identifier:   C8:25:27:AE:90:C6:AE:2B:C7:31:C8:A7:FD:E9:B8:73:85:76:4A:3A
Authority key identifier: C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
Certificate issuer:       /CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Certificate serial:       0190448C586521E1F83EDE24826266F7AEAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
Manifest number:          11D8
Signing time:             Sun 23 Jun 2024 10:02:46 +0000
Manifest this update:     Sun 23 Jun 2024 10:02:46 +0000
Manifest next update:     Mon 24 Jun 2024 10:02:46 +0000
Files and hashes:         1: xmCFijitXhG3sYk5KIO8g-trNh0.crl (hash: otnxcGgXeUcBeJjDL+omR5VziBQ/IwqvYUX12JEYu0k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:58:65:21:e1:f8:3e:de:24:82:62:66:f7:ae:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c660858a38ad5e11b7b189392883bc83eb6b361d
        Validity
            Not Before: Jun 23 10:02:46 2024 GMT
            Not After : Jun 24 10:02:46 2024 GMT
        Subject: CN=c82527ae90c6ae2bc731c8a7fde9b87385764a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bb:d8:35:6d:f0:66:57:bf:5e:f5:d6:69:80:
                    ed:ea:32:c2:dd:d3:a2:7c:71:aa:c3:e7:40:b1:71:
                    6c:d6:a3:81:9f:e0:f7:c4:b6:3a:ca:8f:5b:79:17:
                    69:f5:0e:bd:98:c7:fa:2e:43:62:14:4d:e1:b3:a2:
                    4d:d2:bf:d1:c2:f2:68:99:e1:b1:84:ec:65:0c:46:
                    39:17:4e:55:b8:83:5b:78:ec:f2:5f:d5:8d:df:30:
                    5d:25:ed:d6:a1:f7:57:e8:7b:df:9e:eb:ea:c7:d4:
                    0a:10:61:46:69:bc:a0:91:a7:de:72:27:49:ee:b6:
                    ad:88:e7:c8:d3:28:e9:49:80:a6:9a:68:b0:b1:2d:
                    c1:f0:a2:b6:1c:de:7b:c3:3e:ed:12:e2:d5:f4:7e:
                    79:45:1f:ac:3b:c5:be:1d:08:32:f6:e4:05:31:a6:
                    da:2e:52:3f:c0:6f:c6:16:0f:f9:a9:1d:6f:92:43:
                    91:b4:79:87:1e:12:0c:6a:79:0c:4b:67:af:9a:d3:
                    6e:eb:07:8e:29:b2:ae:3b:3d:44:ad:8c:f8:b8:c2:
                    b6:37:f6:62:87:c1:b2:25:7f:31:c5:d0:eb:56:d8:
                    ba:4f:ad:85:37:52:f9:e2:da:28:d0:62:b8:8f:26:
                    b9:fa:d6:01:8f:79:e3:f8:2f:e4:43:54:ec:ce:21:
                    ca:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:25:27:AE:90:C6:AE:2B:C7:31:C8:A7:FD:E9:B8:73:85:76:4A:3A
            X509v3 Authority Key Identifier:
                keyid:C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:d3:7c:e0:af:1f:ea:6e:e8:19:95:fe:c7:a6:54:f5:b5:a8:
         7d:f5:5f:7c:97:e2:b6:a9:f3:1d:c3:66:13:c1:57:a4:c1:d1:
         88:14:e6:db:80:09:bf:54:bc:9e:f6:51:7d:ac:4e:49:de:b8:
         6d:80:41:a5:83:89:b0:92:0e:e9:73:fc:98:c6:1f:35:46:92:
         4e:83:af:26:53:38:d1:3d:d3:6d:20:ca:5e:a2:90:27:9a:c9:
         b8:9a:91:f1:42:c2:c3:16:bb:a3:5c:aa:0a:88:7b:07:87:c7:
         fe:b0:f1:31:5f:32:d4:ff:57:df:06:e6:57:56:9a:f2:ea:d2:
         90:13:65:5a:9f:59:3e:7e:52:60:cc:cc:2f:bc:e2:63:ed:15:
         db:22:69:80:95:77:70:c4:dd:d5:be:c7:a8:c5:3c:29:35:b3:
         0d:18:a1:b2:0b:00:55:03:06:26:9c:2b:ae:cb:41:a1:64:95:
         e8:c3:a1:68:c7:13:97:43:e1:25:3d:6f:1c:e8:b0:55:cc:bc:
         b0:9f:17:f5:bf:f9:a5:16:46:20:3b:fa:17:75:b3:8e:8f:47:
         9b:7c:c4:41:be:11:6c:8e:30:84:06:75:a0:e8:3e:fa:6f:d6:
         3e:f0:91:70:3c:02:d5:91:2f:d5:a6:22:29:07:30:d7:6f:25:
         8f:a1:bd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:24:01 2024 by rpki-client on console-ams.rpki-client.org