Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
File:                     fnogtIaCHWJ702CV56Ba-fqhUpw.mft (raw, json)
Hash identifier:          XyPz3zI9aLuuaYaGYkTR4BoLK0si22DSzyAnqjYAJI0=
Subject key identifier:   67:C7:C9:25:6B:C9:6C:B6:25:52:AC:86:A5:3A:AD:A4:98:A5:3F:01
Authority key identifier: 7E:7A:20:B4:86:82:1D:62:7B:D3:60:95:E7:A0:5A:F9:FA:A1:52:9C
Certificate issuer:       /CN=7e7a20b486821d627bd36095e7a05af9faa1529c
Certificate serial:       01901D0F70A10A73CA3B8AE36F4A0E5799DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
Manifest number:          0272
Signing time:             Sat 15 Jun 2024 18:01:09 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:09 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:09 +0000
Files and hashes:         1: fnogtIaCHWJ702CV56Ba-fqhUpw.crl (hash: WguemQWe9xqa7o23qaZB0mkWGqIU0tOoGgOsBmMP0EA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:70:a1:0a:73:ca:3b:8a:e3:6f:4a:0e:57:99:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e7a20b486821d627bd36095e7a05af9faa1529c
        Validity
            Not Before: Jun 15 18:01:09 2024 GMT
            Not After : Jun 16 18:01:09 2024 GMT
        Subject: CN=67c7c9256bc96cb62552ac86a53aada498a53f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:66:17:99:c4:98:b8:99:80:02:84:22:53:fa:
                    75:fc:62:a4:34:3d:bb:53:90:d7:bd:58:7a:55:ac:
                    69:8b:dd:f2:a2:74:38:c9:79:72:ea:7f:f7:ce:e8:
                    c2:84:fe:ef:f8:4c:d7:c1:84:7f:2b:bf:e9:76:50:
                    20:cf:6d:bf:61:50:23:3a:6e:8a:1c:c9:b4:95:e5:
                    dc:74:45:74:af:d0:23:6c:d2:98:8c:b1:7b:88:fd:
                    f7:9d:28:9b:b8:3a:60:db:83:ea:22:2a:46:6e:c4:
                    d2:e5:f5:94:f3:98:7f:0e:a3:65:b9:2b:84:9d:6d:
                    8f:70:2e:69:40:e6:a9:9e:0c:ae:9f:d1:73:63:f8:
                    3e:35:f1:85:36:ba:0a:08:cb:bf:39:16:aa:f8:49:
                    5b:53:2d:55:d9:71:2f:ef:96:ad:9a:f9:97:8d:8f:
                    4b:fe:03:d5:d6:48:b9:39:8f:41:3a:df:8f:0d:0f:
                    3e:ff:63:cc:68:2d:51:71:e1:4b:6a:ca:78:12:2e:
                    be:d5:34:ea:55:e9:3a:83:99:04:eb:7f:28:f6:30:
                    3b:f9:7d:a4:1e:5b:35:83:28:a2:d6:11:f1:88:21:
                    e4:2d:e4:0d:ec:44:ee:fd:19:95:23:ee:c8:f5:bc:
                    88:8a:39:af:3a:06:5e:55:28:4e:ca:65:cd:2c:0e:
                    67:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C7:C9:25:6B:C9:6C:B6:25:52:AC:86:A5:3A:AD:A4:98:A5:3F:01
            X509v3 Authority Key Identifier:
                keyid:7E:7A:20:B4:86:82:1D:62:7B:D3:60:95:E7:A0:5A:F9:FA:A1:52:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:d9:d9:60:c6:be:0b:df:a7:1f:3f:c2:a5:40:97:2b:54:2d:
         3b:71:9a:45:dd:96:dc:c0:a2:b8:08:b2:b1:13:1c:bd:e5:0f:
         f5:8d:89:40:9b:58:ff:4a:93:28:fc:57:9b:be:3b:e0:28:07:
         7d:e1:9c:29:2d:bf:65:35:a8:c0:5a:af:90:62:cd:98:41:0c:
         49:1c:91:50:b9:4c:c7:1b:ee:ea:c9:29:21:65:9b:fc:d6:99:
         e8:0b:f0:c1:45:89:6d:b5:e1:e0:97:7c:38:aa:99:93:de:c6:
         6c:3e:3d:75:64:f2:43:e6:c5:10:a4:53:7d:ca:bf:34:05:3b:
         c4:ce:3d:e5:e8:2b:9a:5a:a6:03:02:6f:ad:70:a6:92:4b:0a:
         3c:ee:12:65:80:9b:c6:bd:74:ab:db:53:5b:56:eb:4a:ee:b8:
         8a:de:ab:d2:f7:a7:d3:42:03:55:86:93:25:20:39:ae:e4:ed:
         58:38:24:24:1f:ec:aa:b2:f4:4d:b7:47:dd:94:d5:6d:2f:5f:
         24:9f:aa:1b:a5:54:d3:08:d0:6b:fa:1c:3b:db:eb:5d:33:cd:
         53:36:f9:46:af:26:a7:fc:7b:af:7f:26:88:e0:dc:7c:76:f4:
         ab:6e:03:9d:a8:dd:b0:aa:cc:63:46:5b:30:1b:08:3b:fb:92:
         40:2b:b0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:47:13 2024 by rpki-client on console-fra.rpki-client.org