Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/aUSJSM9NjazkdxjA9yWe3usJPns.mft
File:                     aUSJSM9NjazkdxjA9yWe3usJPns.mft (raw, json)
Hash identifier:          xp8T03sUFPc0l9mgPioXZaUON7GhqvtEKP5fLjt3WFM=
Subject key identifier:   10:34:C1:B0:FC:8B:7E:A1:14:58:3F:9D:03:AA:67:A7:36:D4:F9:C1
Authority key identifier: 69:44:89:48:CF:4D:8D:AC:E4:77:18:C0:F7:25:9E:DE:EB:09:3E:7B
Certificate issuer:       /CN=69448948cf4d8dace47718c0f7259edeeb093e7b
Certificate serial:       01901F34817D6454A1EBD32C0363596A24BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aUSJSM9NjazkdxjA9yWe3usJPns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/aUSJSM9NjazkdxjA9yWe3usJPns.mft
Manifest number:          11C4
Signing time:             Sun 16 Jun 2024 04:00:52 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:52 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:52 +0000
Files and hashes:         1: aUSJSM9NjazkdxjA9yWe3usJPns.crl (hash: irVkWPEPembNOnztgxz/25Cs2gBZNkILVjQ8H0tATVk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/aUSJSM9NjazkdxjA9yWe3usJPns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/aUSJSM9NjazkdxjA9yWe3usJPns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aUSJSM9NjazkdxjA9yWe3usJPns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:81:7d:64:54:a1:eb:d3:2c:03:63:59:6a:24:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69448948cf4d8dace47718c0f7259edeeb093e7b
        Validity
            Not Before: Jun 16 04:00:52 2024 GMT
            Not After : Jun 17 04:00:52 2024 GMT
        Subject: CN=1034c1b0fc8b7ea114583f9d03aa67a736d4f9c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7d:3d:99:44:52:20:4d:92:6d:46:e2:c5:f5:
                    ae:b2:af:3e:14:0b:a2:6d:76:c7:aa:7c:86:fd:7c:
                    e0:e2:1e:d5:8a:d9:4d:4e:c4:99:65:44:14:00:d8:
                    1d:49:04:58:98:c6:2a:c0:30:27:37:9f:9c:fd:73:
                    f0:26:bb:94:a3:28:76:34:10:10:e4:41:dd:64:ca:
                    aa:ef:2d:96:92:7c:fc:b1:e0:e3:b8:da:0a:2f:cd:
                    cf:f0:ce:84:25:1c:94:39:15:22:79:5b:7c:aa:a1:
                    10:9c:12:33:1a:bb:ff:16:b0:84:a0:77:f7:c1:7e:
                    ee:58:4a:f8:72:13:60:a6:a3:71:25:b8:ae:43:d8:
                    f0:ec:98:4b:75:f7:3a:ef:b0:de:ac:dd:df:b5:a4:
                    fb:e0:df:65:4d:61:e5:9b:ed:25:95:2d:d8:2b:a3:
                    59:20:3d:9c:7e:95:ba:5f:91:e2:b4:86:59:23:3d:
                    1c:c5:20:c0:b6:63:3b:f1:b4:0e:0f:88:96:c8:db:
                    c8:ac:33:3b:a3:b8:c5:b5:30:d1:bf:9e:80:5d:d3:
                    bc:df:21:e4:ca:6f:cb:af:27:6c:64:1b:fa:5b:92:
                    4b:c4:66:df:27:11:dd:6a:6a:36:34:d1:6b:2d:2e:
                    48:46:2d:a2:03:a6:6a:f1:8b:45:fa:93:09:79:a0:
                    2d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:34:C1:B0:FC:8B:7E:A1:14:58:3F:9D:03:AA:67:A7:36:D4:F9:C1
            X509v3 Authority Key Identifier:
                keyid:69:44:89:48:CF:4D:8D:AC:E4:77:18:C0:F7:25:9E:DE:EB:09:3E:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUSJSM9NjazkdxjA9yWe3usJPns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/aUSJSM9NjazkdxjA9yWe3usJPns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/aUSJSM9NjazkdxjA9yWe3usJPns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:89:2e:bf:74:15:2b:f6:6e:f2:b3:ec:37:a0:df:4c:d7:f2:
         b3:85:ab:8c:65:29:1d:f3:3f:c2:4d:db:88:f6:1a:03:3e:0a:
         3a:fb:11:27:71:53:c0:a4:46:0f:e4:bb:bf:0b:b4:00:b4:d3:
         77:76:29:5e:2f:33:69:ab:bf:04:2a:3b:d5:23:d4:a9:09:8c:
         92:68:9d:5c:e9:8e:c6:f6:b8:51:4f:82:24:e5:18:3d:dd:75:
         9d:1e:ef:09:4b:29:6a:b6:c4:79:e5:66:66:57:2b:5e:30:fa:
         5a:f0:12:77:23:0a:3a:33:96:58:a3:fa:47:46:07:06:3c:1f:
         ea:dd:c0:6f:a4:8f:2b:61:00:96:96:f8:b2:8d:c4:5b:ab:4c:
         19:8d:42:2c:f5:38:0d:3d:3b:21:0b:e0:d2:87:50:74:63:eb:
         09:ce:f6:6d:14:d3:94:a0:e4:ee:3b:e4:ca:ba:2d:41:cf:73:
         63:3c:72:b1:04:4c:71:21:d3:f5:fe:1e:7b:df:48:04:3b:0a:
         1c:d3:01:45:09:8d:b1:b8:08:57:be:12:8c:d1:23:7d:0c:3f:
         43:c5:fc:7e:c8:f5:da:ae:28:7c:7b:61:db:6e:d6:db:cf:8d:
         8f:cf:e0:d4:43:62:5b:fe:38:86:ce:6c:85:9e:1a:b5:2e:33:
         68:fb:a5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:45:43 2024 by rpki-client on console-fra.rpki-client.org