Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
File:                     kO4Jv_TXomLQaTBzsll1WOSAdRg.mft (raw, json)
Hash identifier:          2rzY7Gta7d8m1VBeK9XBJguBTibXQ3bHvnmLM7iAIH0=
Subject key identifier:   03:8B:FC:A0:3F:39:19:76:24:7E:BF:24:1B:20:37:6C:F6:58:00:46
Authority key identifier: 90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18
Certificate issuer:       /CN=90ee09bff4d7a262d0693073b2597558e4807518
Certificate serial:       01901F34CAA61E06F8415D23F97628ED868F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
Manifest number:          1154
Signing time:             Sun 16 Jun 2024 04:01:11 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:11 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:11 +0000
Files and hashes:         1: kO4Jv_TXomLQaTBzsll1WOSAdRg.crl (hash: LjFwwRQqMoWYcEepxu6/c13numH64HbnXMb8JtKa5GM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:ca:a6:1e:06:f8:41:5d:23:f9:76:28:ed:86:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90ee09bff4d7a262d0693073b2597558e4807518
        Validity
            Not Before: Jun 16 04:01:11 2024 GMT
            Not After : Jun 17 04:01:11 2024 GMT
        Subject: CN=038bfca03f391976247ebf241b20376cf6580046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:22:46:36:79:08:31:64:be:b5:97:d6:5e:ad:
                    a2:08:38:bc:2a:a1:c6:a8:47:40:f2:c9:3f:a8:5e:
                    60:04:be:e5:9a:6e:45:81:38:f7:e8:ac:37:43:78:
                    7d:44:4e:6e:cb:d1:71:14:26:1d:2f:d4:d3:78:0d:
                    0c:14:b6:68:38:6b:a0:53:92:f2:5b:c0:1f:f7:08:
                    1c:dc:c0:4e:ab:d3:9f:52:17:57:62:fd:7c:46:b5:
                    8c:fd:33:46:bc:19:8b:12:00:2f:33:82:63:62:ee:
                    72:54:46:f3:b6:e0:ef:42:63:99:27:8d:a0:ca:d5:
                    b7:81:f4:7d:29:df:5a:5f:e1:a9:8f:32:08:57:48:
                    6f:bf:bd:7b:03:e4:31:df:1f:d3:71:a9:cc:79:42:
                    bb:a7:d1:38:4d:58:c6:00:a9:26:45:26:a1:2b:fe:
                    7f:89:d1:07:18:09:78:f6:6c:ae:b1:9f:b7:df:e1:
                    10:35:91:0e:42:3c:75:19:0a:e4:05:f7:59:bb:8e:
                    10:dc:fa:33:bb:c6:f3:0b:f3:ba:2f:ad:a3:de:b2:
                    7a:00:86:29:b5:88:2e:b0:4a:86:33:4c:f2:5c:fc:
                    be:f9:da:3a:d8:ab:fc:65:92:d5:c1:d8:ce:bb:99:
                    a1:a1:c1:e2:46:01:c7:3b:e3:04:f7:df:71:7b:a8:
                    a5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8B:FC:A0:3F:39:19:76:24:7E:BF:24:1B:20:37:6C:F6:58:00:46
            X509v3 Authority Key Identifier:
                keyid:90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e1:54:8f:25:35:78:e5:d1:a3:ad:31:7f:ac:5e:0b:36:95:
         1a:fd:62:aa:ef:8d:ff:95:c4:89:0c:a8:73:75:54:9b:58:fc:
         4b:dc:00:7e:98:a0:a8:cf:c3:bd:c1:3d:5a:62:73:50:31:29:
         e5:96:99:70:b0:39:ee:25:f1:c3:d9:b1:24:96:28:76:56:cf:
         dc:fc:d4:dc:89:ea:21:e6:4e:4a:db:f6:bf:aa:f9:53:6b:13:
         b7:6a:af:d3:d7:da:d1:bd:6a:73:07:3c:63:dd:dd:a3:46:1a:
         0d:3b:64:33:ba:85:bc:d6:04:3a:e5:fa:df:aa:2b:08:7f:8c:
         75:55:ee:b4:a5:8f:f7:e0:ef:da:44:43:ad:d0:00:98:af:04:
         ff:f9:01:7f:d7:2b:b1:fd:bc:72:ec:3a:0e:6f:1e:cb:5e:a3:
         df:59:e5:a6:ee:c0:74:f4:da:03:8c:98:aa:85:39:be:50:53:
         74:ed:0f:99:d8:54:c7:d9:56:60:21:39:8e:76:63:3d:a5:23:
         88:cd:87:33:4f:db:56:02:5f:ee:99:38:e7:3e:4c:0c:1e:d5:
         27:72:2a:21:4f:9f:18:f6:f6:47:7c:df:da:19:37:d7:a5:ae:
         06:38:d8:16:66:c1:c2:42:26:2b:f2:2c:6c:09:86:a1:df:c1:
         04:74:4b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:30:35 2024 by rpki-client on console-ams.rpki-client.org