Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
File:                     ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft (raw, json)
Hash identifier:          vzUhcvUkfhYWM8A9S9FxUS/wA3K0cU5gKJf4SL2zCrY=
Subject key identifier:   2B:C0:2F:37:CA:02:8D:43:1B:F7:96:0E:45:AC:D9:28:6C:E4:AB:D4
Authority key identifier: 66:6A:6F:43:2D:0C:31:FB:10:17:E2:AB:68:BB:1D:6E:EF:CC:F6:99
Certificate issuer:       /CN=666a6f432d0c31fb1017e2ab68bb1d6eefccf699
Certificate serial:       01901FD93E262668ACAA182D2FB801F39A50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
Manifest number:          0EA4
Signing time:             Sun 16 Jun 2024 07:00:49 +0000
Manifest this update:     Sun 16 Jun 2024 07:00:49 +0000
Manifest next update:     Mon 17 Jun 2024 07:00:49 +0000
Files and hashes:         1: ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl (hash: dYq4RRAioYnHBklgEj3vk5MlgpQVCbvqwwhd2oBD1wQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:d9:3e:26:26:68:ac:aa:18:2d:2f:b8:01:f3:9a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666a6f432d0c31fb1017e2ab68bb1d6eefccf699
        Validity
            Not Before: Jun 16 07:00:49 2024 GMT
            Not After : Jun 17 07:00:49 2024 GMT
        Subject: CN=2bc02f37ca028d431bf7960e45acd9286ce4abd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5d:2b:7a:6f:4a:bf:36:f8:a4:80:cc:f3:2b:
                    e5:9d:71:97:fe:27:d7:b0:bc:da:f5:b0:e1:de:b1:
                    b5:9e:8b:a7:a2:97:74:e8:0e:2a:2e:b5:4b:fd:d8:
                    2c:23:87:fb:9d:56:3e:f9:06:b3:4e:3d:f7:b6:08:
                    1c:25:a1:f9:af:bb:9a:0e:ce:ca:28:4b:df:92:1a:
                    ec:eb:fe:c4:b7:b3:68:56:3d:c7:9f:ab:7e:ea:32:
                    1e:cb:c2:43:a5:36:9f:0a:84:a2:90:27:f6:06:61:
                    ac:cb:7e:99:07:0b:a1:35:8e:ff:dd:85:4b:51:c0:
                    73:31:2c:21:2d:da:57:79:7c:06:f4:86:68:db:bf:
                    d5:0d:8f:91:f1:62:d6:b0:a3:1f:ad:2e:e5:d4:fc:
                    de:f0:fb:b3:6f:06:b4:d5:6b:e0:1e:4d:68:09:3c:
                    34:4a:1a:dd:e7:88:c5:4c:b2:6c:22:a8:11:70:74:
                    30:51:17:b1:74:b0:e1:66:66:fb:52:b4:6e:cc:d9:
                    5a:02:17:fa:cb:74:4d:0e:49:4b:cd:64:82:9d:e5:
                    9c:b2:50:5a:3c:ba:76:99:ee:66:db:1c:43:73:da:
                    7a:9b:57:ed:e8:91:72:c2:17:8a:0d:93:bd:1b:48:
                    7a:96:47:f3:f6:c7:36:0d:28:2c:af:6a:ac:ba:48:
                    ce:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C0:2F:37:CA:02:8D:43:1B:F7:96:0E:45:AC:D9:28:6C:E4:AB:D4
            X509v3 Authority Key Identifier:
                keyid:66:6A:6F:43:2D:0C:31:FB:10:17:E2:AB:68:BB:1D:6E:EF:CC:F6:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:a7:cc:dd:c6:2f:68:8f:1a:5a:08:16:a2:b8:cf:93:e5:1d:
         9f:14:68:9f:8c:9c:56:17:99:84:f4:a7:3e:d5:83:f0:2e:9f:
         16:b9:f8:11:ea:d4:1b:85:63:a4:be:50:87:4b:1c:f0:99:ed:
         5d:fc:e6:5d:8b:3a:8e:8e:d2:0a:58:b7:82:33:1d:19:9c:6b:
         77:bb:d3:cb:e1:44:d8:7e:ec:79:4e:a6:f8:51:6d:4d:2d:52:
         4a:6b:1e:64:ef:d5:c6:94:51:ea:24:bf:86:08:5d:75:87:7a:
         77:e0:7d:25:90:93:c5:29:e2:31:19:98:13:b9:04:f3:74:89:
         8a:af:34:14:e8:d2:7b:4f:0d:d4:84:e9:bb:81:92:09:90:cb:
         cf:7b:2c:90:4b:65:50:ab:a7:bf:8d:ab:bd:d5:18:dc:49:1e:
         29:a3:89:da:4b:31:a9:7e:3f:8d:01:34:29:50:91:ab:4b:97:
         76:82:85:a5:47:9b:ad:c6:97:bc:0b:b3:8a:d2:05:30:4d:62:
         83:5e:a7:17:37:9e:8d:51:a0:6b:32:21:4d:eb:dc:fc:d3:c0:
         ee:b2:7a:d1:13:a6:b2:e9:5e:f1:d0:11:ce:51:84:f1:90:38:
         d3:78:cf:8e:20:a9:62:06:2a:e4:ca:9f:b4:91:0e:0d:31:6a:
         05:5e:ac:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:50:47 2024 by rpki-client on console-ams.rpki-client.org