Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f8d3da-30e7-43b3-a9ed-43428a86f8e8/1/V9ChyazkChsBcJn_Y-Tgh-scvds.mft
File:                     V9ChyazkChsBcJn_Y-Tgh-scvds.mft (raw, json)
Hash identifier:          dRAXXmRiddfgcn7byqK+cCU2TsnnK3vxeAucC03r0/U=
Subject key identifier:   AC:4C:BF:F7:AC:BD:0F:43:5B:04:99:58:CC:0C:B7:FC:45:89:81:5E
Authority key identifier: 57:D0:A1:C9:AC:E4:0A:1B:01:70:99:FF:63:E4:E0:87:EB:1C:BD:DB
Certificate issuer:       /CN=57d0a1c9ace40a1b017099ff63e4e087eb1cbddb
Certificate serial:       01901D7CE488B04ACB572BB69EA8BFAF7C22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9ChyazkChsBcJn_Y-Tgh-scvds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/f8d3da-30e7-43b3-a9ed-43428a86f8e8/1/V9ChyazkChsBcJn_Y-Tgh-scvds.mft
Manifest number:          65
Signing time:             Sat 15 Jun 2024 20:00:42 +0000
Manifest this update:     Sat 15 Jun 2024 20:00:42 +0000
Manifest next update:     Sun 16 Jun 2024 20:00:42 +0000
Files and hashes:         1: V9ChyazkChsBcJn_Y-Tgh-scvds.crl (hash: Lb691ltx9e62E58+lW0iFulOriVfIX2k5JX+U3YUbPc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/f8d3da-30e7-43b3-a9ed-43428a86f8e8/1/V9ChyazkChsBcJn_Y-Tgh-scvds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/f8d3da-30e7-43b3-a9ed-43428a86f8e8/1/V9ChyazkChsBcJn_Y-Tgh-scvds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9ChyazkChsBcJn_Y-Tgh-scvds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:7c:e4:88:b0:4a:cb:57:2b:b6:9e:a8:bf:af:7c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d0a1c9ace40a1b017099ff63e4e087eb1cbddb
        Validity
            Not Before: Jun 15 20:00:42 2024 GMT
            Not After : Jun 16 20:00:42 2024 GMT
        Subject: CN=ac4cbff7acbd0f435b049958cc0cb7fc4589815e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:be:8d:98:04:dc:c9:10:77:fa:4f:b8:e0:6d:
                    9f:55:17:4d:39:7d:5c:21:f0:93:7c:7c:37:41:0b:
                    12:4f:07:c4:e4:6a:3d:25:43:f1:ce:8d:ec:6a:f7:
                    6a:59:60:75:34:bf:04:9a:b7:39:51:a5:88:e1:45:
                    91:96:e0:98:d8:bb:03:40:73:f4:48:b9:e4:e3:71:
                    40:c6:81:4d:93:b6:ce:f4:46:cd:df:74:35:47:35:
                    d5:3b:ce:2b:de:bb:d6:8f:54:66:4c:01:df:54:58:
                    6e:ec:79:d1:0b:f8:9b:06:cb:0c:c1:44:c4:24:81:
                    56:98:e7:3d:37:0d:bf:8c:0d:a6:35:ff:21:dc:1e:
                    b8:57:3d:19:06:2f:0c:a4:26:3b:6d:87:98:94:66:
                    7b:25:ad:19:9d:ff:e3:60:e6:77:58:c5:c7:1a:5f:
                    9b:81:19:43:78:c6:cb:91:7b:93:03:55:d0:04:3c:
                    27:8a:b3:84:37:00:99:81:b9:72:5b:cc:e4:51:a1:
                    c7:7e:d9:68:23:ef:e0:a2:56:bb:dc:6b:e7:61:48:
                    78:3d:02:66:6e:3f:72:e8:8e:17:42:c7:04:d5:f6:
                    81:79:77:71:db:14:3a:29:c3:f0:8c:53:37:72:ac:
                    bb:93:f6:4b:70:63:32:69:01:bb:b4:55:88:49:40:
                    ee:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4C:BF:F7:AC:BD:0F:43:5B:04:99:58:CC:0C:B7:FC:45:89:81:5E
            X509v3 Authority Key Identifier:
                keyid:57:D0:A1:C9:AC:E4:0A:1B:01:70:99:FF:63:E4:E0:87:EB:1C:BD:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9ChyazkChsBcJn_Y-Tgh-scvds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f8d3da-30e7-43b3-a9ed-43428a86f8e8/1/V9ChyazkChsBcJn_Y-Tgh-scvds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f8d3da-30e7-43b3-a9ed-43428a86f8e8/1/V9ChyazkChsBcJn_Y-Tgh-scvds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:67:8e:31:1d:d1:82:f5:8d:42:ca:1e:6f:33:07:89:b9:73:
         e5:84:eb:14:1e:55:93:4d:33:0e:58:97:92:3d:79:fe:d1:7e:
         92:17:75:c1:cb:d9:f6:09:b3:1d:35:c6:00:ca:ef:08:3f:97:
         0d:8a:fd:8c:31:cc:6e:e6:12:be:b4:7a:88:c3:f8:c8:94:0d:
         31:ea:dd:ca:84:a3:68:8b:dd:a9:0c:c2:78:51:b1:ae:ac:f7:
         53:12:39:34:57:f5:5e:cc:18:29:a3:46:54:fc:f0:f5:76:04:
         78:d5:ba:12:ce:28:cc:33:74:c9:da:91:16:38:db:d1:25:f4:
         5e:7f:3e:e0:73:6f:08:c5:6e:e7:31:5c:cf:45:5d:19:fe:32:
         3d:2c:d7:71:92:40:db:16:51:7c:7e:a1:c7:20:50:67:13:c6:
         bc:7c:88:74:b5:f8:2d:dd:e6:07:de:bc:a3:85:c9:e4:9b:5b:
         6f:74:0d:04:1e:6e:4e:84:1e:72:4a:c1:d2:06:dc:ca:dd:ba:
         7d:27:50:9b:52:7e:20:92:4e:59:27:cc:cc:41:3b:16:aa:fc:
         d2:9a:4a:42:f4:e9:8f:b8:b2:ba:11:1a:88:5b:0b:0c:ba:68:
         0f:9c:55:4e:77:4c:52:fe:65:d2:c1:49:cc:7e:69:b7:df:90:
         6d:27:ac:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:37:49 2024 by rpki-client on console-ams.rpki-client.org