Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
File:                     xBHDOVke38lmej55EY3SPEAr6H8.mft (raw, json)
Hash identifier:          9rlBDvgNqhUC9PGL/yyGilT///5nJGKJWUj7UpdQ8QU=
Subject key identifier:   A7:C6:A4:CF:6D:C6:69:D8:39:70:BB:A9:F1:9D:2B:9E:D7:40:A4:88
Authority key identifier: C4:11:C3:39:59:1E:DF:C9:66:7A:3E:79:11:8D:D2:3C:40:2B:E8:7F
Certificate issuer:       /CN=c411c339591edfc9667a3e79118dd23c402be87f
Certificate serial:       01901E8FDD3AC1DA26516307A3A619ABB8FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
Manifest number:          01C0
Signing time:             Sun 16 Jun 2024 01:01:03 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:03 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:03 +0000
Files and hashes:         1: xBHDOVke38lmej55EY3SPEAr6H8.crl (hash: dM1TYHUoHN8DW823GSz6GDsab7q1dlN+5XKA4zkKVs0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:dd:3a:c1:da:26:51:63:07:a3:a6:19:ab:b8:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c411c339591edfc9667a3e79118dd23c402be87f
        Validity
            Not Before: Jun 16 01:01:03 2024 GMT
            Not After : Jun 17 01:01:03 2024 GMT
        Subject: CN=a7c6a4cf6dc669d83970bba9f19d2b9ed740a488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ec:77:1e:c6:62:db:df:7a:33:6f:53:24:d9:
                    5e:de:99:69:5a:46:22:0b:44:d4:3d:38:c6:87:ee:
                    3e:6c:21:e7:a8:f5:c5:de:4d:8d:fc:df:53:a9:2b:
                    2a:e3:80:17:dc:64:fb:96:44:03:82:1c:83:51:c8:
                    81:fc:d5:45:a1:3d:70:1a:93:66:76:01:16:e0:26:
                    1d:5f:3a:e2:7c:40:e0:93:f0:ad:1f:65:86:4f:23:
                    73:1e:f0:4b:d8:56:d4:3f:59:89:37:b6:46:ec:e4:
                    b6:b3:47:ca:c3:9f:9b:1e:c6:c2:ec:66:8d:74:0a:
                    db:a9:c1:0b:1a:2f:a3:8e:c5:de:33:f0:88:79:93:
                    09:e6:c8:02:87:a3:e1:d0:13:13:0a:8f:b8:96:92:
                    df:89:ea:85:15:c3:28:05:76:7e:ec:03:b0:79:ae:
                    f7:90:6c:0c:71:fa:0c:b4:80:df:44:48:7c:07:6b:
                    02:2b:41:c2:74:ff:3e:b7:34:02:2e:08:5d:dd:f9:
                    8d:57:06:73:bf:d3:1d:dc:43:68:fa:35:10:93:71:
                    dc:e2:49:e1:f5:f9:b6:e0:01:ed:57:fd:80:80:a5:
                    c9:5e:7d:1d:25:e6:f8:57:ef:f3:b4:a2:12:01:9f:
                    fe:4b:84:5a:4d:02:cd:7b:7a:af:4c:ab:f6:2c:11:
                    85:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C6:A4:CF:6D:C6:69:D8:39:70:BB:A9:F1:9D:2B:9E:D7:40:A4:88
            X509v3 Authority Key Identifier:
                keyid:C4:11:C3:39:59:1E:DF:C9:66:7A:3E:79:11:8D:D2:3C:40:2B:E8:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:aa:00:a9:86:69:6c:a5:41:06:86:6d:0c:a6:14:61:47:5a:
         96:e9:aa:20:e4:6d:53:d6:9c:5b:81:47:ee:dc:b9:7a:4a:bc:
         1a:74:58:39:3b:26:fc:0a:7f:3c:f4:3a:48:38:46:14:51:51:
         2b:7a:88:97:d3:df:84:08:81:5d:91:5f:8e:22:f1:d2:2d:11:
         c1:5a:ff:46:f0:e6:c9:b2:ca:86:a0:fe:ae:73:f5:e5:ad:e2:
         36:02:ab:30:2d:be:45:19:58:15:c9:33:a4:9d:fa:0b:a1:ab:
         55:2b:7e:4a:56:2a:ed:af:43:27:c4:a5:77:52:7c:6d:e2:52:
         49:7b:22:d4:2e:90:98:7c:a2:14:3f:aa:0e:f1:be:df:bc:76:
         9d:0b:97:8a:16:09:02:29:31:04:46:99:f4:4e:ee:0c:55:50:
         8a:24:47:5c:e5:52:83:26:80:ea:e0:53:f1:99:ca:73:83:9b:
         05:3b:77:75:f8:68:39:3c:45:f4:21:ca:a7:b1:ab:9a:36:65:
         db:ed:c3:0b:05:6d:9f:01:d7:a9:29:d5:1b:fc:94:ac:50:61:
         bc:31:35:0c:13:c3:16:27:6e:7f:de:e9:dc:1f:8c:58:f9:a8:
         fd:8e:75:30:29:52:23:2f:5c:25:14:58:15:c3:69:33:24:79:
         22:79:e8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:41:33 2024 by rpki-client on console-ams.rpki-client.org