Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.mft
File:                     3JXMdjEwknpvvB6y_XRD-s-hGh8.mft (raw, json)
Hash identifier:          MYJ5Kgt+wRMt2h6YLDnb6D4RY6pE0Y4ts+IRCL2bm1o=
Subject key identifier:   54:4F:01:39:AF:B2:90:5E:C8:9F:C0:07:7C:2A:69:11:FE:30:7B:C4
Authority key identifier: DC:95:CC:76:31:30:92:7A:6F:BC:1E:B2:FD:74:43:FA:CF:A1:1A:1F
Certificate issuer:       /CN=dc95cc763130927a6fbc1eb2fd7443facfa11a1f
Certificate serial:       01904943002F0358489897AE1C4A76246EFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3JXMdjEwknpvvB6y_XRD-s-hGh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.mft
Manifest number:          7E
Signing time:             Mon 24 Jun 2024 08:00:45 +0000
Manifest this update:     Mon 24 Jun 2024 08:00:45 +0000
Manifest next update:     Tue 25 Jun 2024 08:00:45 +0000
Files and hashes:         1: 3JXMdjEwknpvvB6y_XRD-s-hGh8.crl (hash: 6ubKe4ob4hqL19mobWoD+/78ZTAzAfa4PfzAP+qj0fA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3JXMdjEwknpvvB6y_XRD-s-hGh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 08:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:49:43:00:2f:03:58:48:98:97:ae:1c:4a:76:24:6e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc95cc763130927a6fbc1eb2fd7443facfa11a1f
        Validity
            Not Before: Jun 24 08:00:45 2024 GMT
            Not After : Jun 25 08:00:45 2024 GMT
        Subject: CN=544f0139afb2905ec89fc0077c2a6911fe307bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a4:3e:54:29:0e:ae:b1:00:4f:e6:72:87:41:
                    b3:a6:33:b8:3e:34:95:aa:f1:36:f0:65:03:67:58:
                    a9:c0:35:04:13:44:9c:3b:ab:81:28:04:c9:02:69:
                    d1:c7:09:26:4a:3b:43:0e:01:c3:59:a5:f4:80:cd:
                    52:9c:e6:4c:e2:e2:68:c1:4d:02:1d:8a:d7:42:47:
                    6b:d0:df:f2:0d:0f:a6:23:8f:04:05:72:6e:28:de:
                    d4:a0:c6:b2:6e:fe:74:64:2a:3f:0e:6f:01:bc:d6:
                    76:50:eb:25:e0:5e:5c:05:66:38:13:f5:c4:43:a8:
                    eb:8c:df:f7:69:9e:3f:b2:57:6a:36:07:21:1b:9c:
                    41:13:c6:f9:ff:42:8b:0d:0f:db:ff:a5:d7:3d:b9:
                    f3:98:8b:70:b1:e2:ba:c4:e2:55:65:d2:c3:1f:5b:
                    51:0d:58:85:65:3a:d5:ea:91:f0:8e:d4:e9:d6:50:
                    5a:bc:1d:26:b5:8a:bb:86:21:3d:23:7b:f4:81:e6:
                    23:44:cc:68:06:8b:b4:18:05:1f:df:68:26:13:5c:
                    96:6e:6e:0b:b4:08:48:69:80:1f:86:c7:5f:98:32:
                    b1:27:8e:ba:a0:02:ca:a5:57:3f:7c:a7:fa:8b:a2:
                    1f:b8:24:f1:84:7d:04:7e:f9:43:f5:e0:c0:b9:4f:
                    62:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4F:01:39:AF:B2:90:5E:C8:9F:C0:07:7C:2A:69:11:FE:30:7B:C4
            X509v3 Authority Key Identifier:
                keyid:DC:95:CC:76:31:30:92:7A:6F:BC:1E:B2:FD:74:43:FA:CF:A1:1A:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JXMdjEwknpvvB6y_XRD-s-hGh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:e7:1d:76:00:b1:8e:87:d5:12:d7:0a:df:92:88:8d:c4:68:
         64:c6:b6:a6:57:3f:13:21:93:ed:13:d2:05:df:48:69:b1:7f:
         77:45:e1:ce:8b:b8:5f:80:06:22:44:f3:45:bb:60:b2:0f:71:
         fa:8b:95:5f:86:41:90:4d:71:d5:02:c8:62:de:9b:3d:44:c5:
         cf:5d:2e:0f:0c:ff:ea:80:1a:cf:fd:8b:5a:d9:0e:ad:73:9a:
         77:c4:a0:9a:9c:70:e9:1b:a8:07:e2:62:db:3d:63:5e:4f:ff:
         56:61:74:30:22:93:6f:b5:3d:3f:54:ab:9a:0a:ab:84:44:f2:
         43:7b:4c:de:af:1c:16:1a:41:e3:02:ae:de:88:b3:51:5e:f3:
         1a:89:20:cc:db:85:aa:b9:77:26:41:c4:3e:22:91:12:73:69:
         1c:b0:0e:6b:04:aa:62:4c:81:28:db:82:5c:c0:1e:51:59:6d:
         f9:d0:5f:8d:f5:d6:52:e1:1a:dd:89:79:c3:8c:54:c1:8b:16:
         ee:56:2f:96:af:a2:09:1b:48:02:43:52:0e:5d:c3:5b:a8:98:
         e0:58:76:83:23:ec:2e:6f:d5:d5:18:e4:a0:f3:0c:22:e0:6b:
         ac:09:d0:30:c2:c4:17:7d:e7:7b:98:03:5e:39:ca:dc:6d:cb:
         05:c4:b5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:04:21 2024 by rpki-client on console-ams.rpki-client.org