Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
File:                     7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft (raw, json)
Hash identifier:          +VsAq6yC+2yDuI8+pdWYSwokVqLXN3CKncoiqBA3WgU=
Subject key identifier:   D4:33:40:AB:E1:A6:72:5A:C5:05:AF:12:79:6F:BF:B8:9D:4C:34:91
Authority key identifier: ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95
Certificate issuer:       /CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95
Certificate serial:       01901D45FA1A66B86CCD55D07985BF2F979E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
Manifest number:          9C
Signing time:             Sat 15 Jun 2024 19:00:43 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:43 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:43 +0000
Files and hashes:         1: 7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl (hash: aPi8M9tlNpO4iNUNwU2IlWkZ67ID98Fll4ZLWLywh0A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:45:fa:1a:66:b8:6c:cd:55:d0:79:85:bf:2f:97:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95
        Validity
            Not Before: Jun 15 19:00:43 2024 GMT
            Not After : Jun 16 19:00:43 2024 GMT
        Subject: CN=d43340abe1a6725ac505af12796fbfb89d4c3491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:81:99:de:70:58:2c:b7:a1:fd:5c:58:6a:8b:
                    8c:ea:76:0e:39:fa:3f:58:45:4b:30:68:0a:e0:2c:
                    83:68:59:16:ce:c3:4d:ca:79:29:80:16:5d:16:8f:
                    a8:99:ea:0d:f2:e9:2c:86:d2:75:9a:36:56:9b:32:
                    35:f6:40:1a:ba:b3:7e:ab:3a:0f:fe:d5:58:95:70:
                    14:e0:38:90:c9:44:9b:37:bc:5f:a9:48:ae:31:f3:
                    28:01:d5:9d:ac:c8:dd:4b:e9:14:64:12:33:a8:62:
                    43:c9:67:df:e1:d6:3b:ec:7c:0d:14:1a:90:4d:f3:
                    d9:d7:2e:8a:07:55:b9:75:80:38:66:16:76:9e:d3:
                    9b:d2:5e:52:a7:4f:83:05:a6:ce:fc:04:86:6b:10:
                    fa:3e:75:25:1b:ef:39:83:9e:1b:a0:74:71:3f:ff:
                    cd:c6:f5:a1:79:11:c5:a5:e6:37:45:70:89:99:df:
                    f2:88:95:d9:bd:d7:0b:0b:f0:27:4a:d3:65:c8:29:
                    26:eb:ed:fc:d0:32:ea:75:80:30:c1:eb:60:c7:81:
                    87:b8:23:aa:31:c2:b7:35:05:4e:c3:27:fe:83:42:
                    97:c6:5c:00:fb:f6:bc:46:4b:50:03:5f:cc:23:c6:
                    b8:68:98:45:10:fd:69:ad:3c:39:3c:01:dd:1e:2f:
                    18:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:33:40:AB:E1:A6:72:5A:C5:05:AF:12:79:6F:BF:B8:9D:4C:34:91
            X509v3 Authority Key Identifier:
                keyid:ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:3e:92:53:ff:3c:50:27:68:55:fc:96:84:48:06:71:b8:c4:
         62:d5:7f:85:b7:5d:8d:97:81:89:a5:76:2d:4e:4e:46:54:cc:
         dc:b6:8f:d5:4d:54:3f:7f:4c:28:a4:15:85:2f:e7:17:05:44:
         3f:46:3f:6c:82:76:6a:96:f5:0b:55:68:29:fc:74:32:ad:36:
         49:4d:17:16:cf:41:42:c1:38:cf:7b:e6:62:e4:e9:e6:3b:09:
         3f:05:da:f0:d0:ee:f3:c0:f2:b6:f5:1c:6e:00:1b:79:97:57:
         7d:cc:6a:cd:4d:7d:65:5f:c3:8d:a8:2c:a0:04:9b:6e:8e:7a:
         5a:d1:39:8e:be:c2:17:d6:86:97:36:02:c8:9a:2c:c8:09:8c:
         54:18:9c:05:f7:fd:71:86:5e:fc:c1:99:45:e0:22:4a:ae:09:
         8a:ea:fa:9e:91:69:73:94:be:f5:ef:d1:90:2a:b8:68:63:f0:
         49:3b:ea:86:15:b9:8a:26:cd:7e:9f:71:a7:48:d5:d6:cd:29:
         b9:77:d1:a0:f9:d6:18:ce:e3:9e:95:25:57:4f:a9:7b:38:5c:
         a3:c4:a1:b6:bc:7a:e8:fd:d5:08:cb:5b:63:d9:b8:89:52:fa:
         0e:5d:6c:33:7b:5a:a7:cd:b1:d8:72:ca:54:db:eb:30:3a:5b:
         94:3e:c3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:39:22 2024 by rpki-client on console-fra.rpki-client.org