Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/304ab8-3d33-4dbe-8ce7-892a35358b4d/1/1LmNSM0jYfug0-z_7cDiLfp88hk.mft
File:                     1LmNSM0jYfug0-z_7cDiLfp88hk.mft (raw, json)
Hash identifier:          nZs5i5pCGDsmg1ckUYc6JcUhQa/M263gHq4I/5XBQGk=
Subject key identifier:   5B:E5:15:1D:B9:A4:3C:32:4D:BC:EC:CE:25:08:39:FD:E8:0C:E3:5C
Authority key identifier: D4:B9:8D:48:CD:23:61:FB:A0:D3:EC:FF:ED:C0:E2:2D:FA:7C:F2:19
Certificate issuer:       /CN=d4b98d48cd2361fba0d3ecffedc0e22dfa7cf219
Certificate serial:       01901FDA345861B30E0436B89F1B535E33C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1LmNSM0jYfug0-z_7cDiLfp88hk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/304ab8-3d33-4dbe-8ce7-892a35358b4d/1/1LmNSM0jYfug0-z_7cDiLfp88hk.mft
Manifest number:          088F
Signing time:             Sun 16 Jun 2024 07:01:52 +0000
Manifest this update:     Sun 16 Jun 2024 07:01:52 +0000
Manifest next update:     Mon 17 Jun 2024 07:01:52 +0000
Files and hashes:         1: 1LmNSM0jYfug0-z_7cDiLfp88hk.crl (hash: 0tCMaCS3n/dG7PyacB0lVKiJkvV14TMQ9p6uo6vMsJs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/304ab8-3d33-4dbe-8ce7-892a35358b4d/1/1LmNSM0jYfug0-z_7cDiLfp88hk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/304ab8-3d33-4dbe-8ce7-892a35358b4d/1/1LmNSM0jYfug0-z_7cDiLfp88hk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1LmNSM0jYfug0-z_7cDiLfp88hk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:da:34:58:61:b3:0e:04:36:b8:9f:1b:53:5e:33:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4b98d48cd2361fba0d3ecffedc0e22dfa7cf219
        Validity
            Not Before: Jun 16 07:01:52 2024 GMT
            Not After : Jun 17 07:01:52 2024 GMT
        Subject: CN=5be5151db9a43c324dbcecce250839fde80ce35c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b9:7c:b1:65:e0:9d:6b:0e:63:ea:df:25:d7:
                    c4:a9:d0:16:3c:01:59:6c:ce:3c:dc:ec:48:4d:fc:
                    7d:ba:ef:fe:3f:7b:bd:c3:9f:10:7a:10:dd:c5:de:
                    44:89:f0:6d:e1:4d:c0:f7:87:00:8a:67:c4:92:23:
                    43:1c:c7:a6:ef:0b:0d:08:82:ce:64:4d:87:a5:76:
                    fe:7b:69:45:09:9e:5c:d8:c3:32:44:8b:44:07:37:
                    c6:1d:18:d2:97:f6:96:8d:de:98:1d:11:b8:74:13:
                    8f:1c:a8:6b:a0:47:f5:0d:2a:c6:e8:2c:de:be:22:
                    68:bd:80:fb:d4:df:44:99:45:30:02:a7:88:39:f7:
                    dc:62:e4:79:3b:a0:e4:60:30:89:e9:73:14:05:40:
                    c8:bc:5e:48:d6:09:46:1a:91:84:60:56:9f:bf:85:
                    ee:a0:1a:0f:30:c6:af:67:5f:ef:00:68:a3:51:ef:
                    70:7e:c2:d7:68:79:f2:7f:b7:3c:65:c2:85:37:62:
                    e4:c4:d6:b1:cc:05:67:9b:74:15:07:9c:96:99:37:
                    bb:0b:a9:4b:1f:c3:b0:85:03:f1:2e:e8:06:b2:65:
                    ab:6a:be:96:61:3b:62:69:79:5c:2c:0c:2b:21:69:
                    c7:4f:68:32:9a:48:5b:f2:76:d4:bb:7d:25:3b:6e:
                    3a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E5:15:1D:B9:A4:3C:32:4D:BC:EC:CE:25:08:39:FD:E8:0C:E3:5C
            X509v3 Authority Key Identifier:
                keyid:D4:B9:8D:48:CD:23:61:FB:A0:D3:EC:FF:ED:C0:E2:2D:FA:7C:F2:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LmNSM0jYfug0-z_7cDiLfp88hk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/304ab8-3d33-4dbe-8ce7-892a35358b4d/1/1LmNSM0jYfug0-z_7cDiLfp88hk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/304ab8-3d33-4dbe-8ce7-892a35358b4d/1/1LmNSM0jYfug0-z_7cDiLfp88hk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:03:75:5d:fd:a9:a7:66:95:96:9a:b0:2c:e5:ce:b7:29:01:
         ad:b0:4f:00:c9:bd:47:31:eb:4d:fb:69:89:1e:bf:7e:46:0e:
         18:6d:bf:e6:d6:95:78:da:dc:da:61:82:17:7f:2d:ae:15:6c:
         f0:ca:93:9b:ab:51:1f:ce:9e:b9:de:c7:fe:ef:8c:0f:14:44:
         dc:17:8c:05:21:fd:89:73:d0:8d:c8:7a:49:21:97:fb:e4:ce:
         cb:cf:b8:1b:22:1f:7c:55:fe:63:28:75:2b:82:82:91:f5:3e:
         56:65:c3:5e:d8:7c:7a:33:3c:bb:6f:ae:19:7a:b2:03:61:7b:
         e2:97:18:11:32:38:af:01:04:9c:55:18:47:00:23:57:70:c8:
         ce:c7:93:06:1b:3b:04:53:83:c6:3c:6d:dd:89:a3:73:7a:13:
         d6:6c:b1:b5:84:4b:a6:ce:bc:53:ac:4e:96:94:86:c5:55:f5:
         0d:83:c5:1f:84:7f:3e:a8:b1:d8:12:10:b7:ea:e2:2e:45:ed:
         57:04:ea:6f:ff:21:c2:d8:32:93:d0:7d:5d:23:50:d5:73:d2:
         47:ce:6b:17:da:0b:fb:f9:c2:25:6c:e6:58:4c:99:7d:26:26:
         33:3e:68:cf:77:8a:b8:8c:3d:2a:80:54:d8:2b:62:2a:9f:ac:
         37:f0:4a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 08:02:59 2024 by rpki-client on console-fra.rpki-client.org