Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.mft
File:                     s9nxe5jDqWQThWY7jNW3X-HwpJg.mft (raw, json)
Hash identifier:          kx18n42RjdHUDGHCUeOVI2iqI/J57ZoionncFz/13bI=
Subject key identifier:   04:3D:41:36:C1:72:01:69:87:56:F5:6E:10:D5:63:70:B7:75:06:B4
Authority key identifier: B3:D9:F1:7B:98:C3:A9:64:13:85:66:3B:8C:D5:B7:5F:E1:F0:A4:98
Certificate issuer:       /CN=b3d9f17b98c3a9641385663b8cd5b75fe1f0a498
Certificate serial:       01901BFE311EE0DD11BC167017BA3C30A11F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9nxe5jDqWQThWY7jNW3X-HwpJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.mft
Manifest number:          11C0
Signing time:             Sat 15 Jun 2024 13:02:41 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:41 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:41 +0000
Files and hashes:         1: s9nxe5jDqWQThWY7jNW3X-HwpJg.crl (hash: nasv8UHkAOuzG1JbrTsZ7EXc/Kf0rhO9+aEIrf6MqbQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9nxe5jDqWQThWY7jNW3X-HwpJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:31:1e:e0:dd:11:bc:16:70:17:ba:3c:30:a1:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d9f17b98c3a9641385663b8cd5b75fe1f0a498
        Validity
            Not Before: Jun 15 13:02:41 2024 GMT
            Not After : Jun 16 13:02:41 2024 GMT
        Subject: CN=043d4136c17201698756f56e10d56370b77506b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e2:1a:1c:36:3d:81:04:99:b6:03:88:48:a1:
                    3d:c3:95:29:bf:09:50:69:06:50:a7:bd:84:0e:2d:
                    1b:63:8c:c9:cf:9e:5f:21:b6:ec:17:87:25:4f:2d:
                    84:2b:dc:ca:a6:a2:e0:e9:7e:53:94:80:ea:d4:96:
                    d7:c0:70:a4:9e:87:81:33:ae:3a:b7:b3:e5:ef:ac:
                    4f:8e:3b:c2:fa:c2:8d:0d:51:9f:4e:fb:b3:c3:ab:
                    03:f6:59:1c:75:32:c9:66:e8:ff:e2:20:a6:83:78:
                    bc:eb:f5:a3:5b:eb:24:6d:e1:b0:b6:d0:a3:75:5e:
                    15:5d:01:c8:be:d0:22:44:db:fc:3d:73:da:9d:9d:
                    36:1d:26:a6:a1:3e:62:1f:9f:9c:71:f5:df:fb:89:
                    b6:af:d9:a4:6a:c2:5b:8f:b8:f4:c0:a8:ba:9b:61:
                    d4:d6:e6:b7:73:b8:51:47:b8:31:a1:5a:c5:3b:0f:
                    f1:b3:65:bf:cb:6c:d4:b3:5c:80:51:ec:28:9f:db:
                    d8:b8:7c:ea:2e:47:bd:53:89:91:15:b0:67:dc:1f:
                    72:54:41:b3:27:d0:b0:71:b2:03:c5:ba:93:51:9f:
                    ca:3a:3f:29:15:b0:ba:ae:0e:0f:51:ba:9c:38:bd:
                    2d:f2:46:7c:09:32:d1:37:d7:10:81:f2:51:f2:80:
                    36:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3D:41:36:C1:72:01:69:87:56:F5:6E:10:D5:63:70:B7:75:06:B4
            X509v3 Authority Key Identifier:
                keyid:B3:D9:F1:7B:98:C3:A9:64:13:85:66:3B:8C:D5:B7:5F:E1:F0:A4:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9nxe5jDqWQThWY7jNW3X-HwpJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:9a:76:02:43:77:6e:d0:75:47:13:33:fd:f7:1f:4c:0a:a6:
         be:59:7f:28:ae:bc:36:83:8a:a0:ac:1f:c8:4d:47:d1:cb:b5:
         f2:d3:13:64:20:06:49:c3:d6:80:6f:7b:07:28:bc:45:8a:65:
         d0:09:d5:ba:4a:fb:83:b8:a9:90:24:a6:1b:e3:7a:f1:63:5f:
         31:c5:4d:b5:dd:3b:94:3d:44:ce:d5:d8:60:31:d9:80:60:7d:
         58:40:2b:a2:61:95:13:53:c2:12:65:21:a3:67:36:75:20:c1:
         fd:b2:04:bb:51:49:bb:03:9f:c2:fb:48:f7:3c:23:1c:43:d5:
         5f:c6:49:e9:a3:d0:71:8d:6d:3f:4c:dc:10:c8:45:39:ab:b3:
         f5:47:6e:86:7f:35:bc:a4:d0:09:86:7a:c0:25:94:66:ea:04:
         3c:5d:2e:08:06:97:88:67:d1:38:ba:46:25:59:c2:35:49:9c:
         c3:da:5f:26:e0:83:95:6b:0d:45:77:9c:d5:ea:83:fd:cc:f5:
         34:4a:33:5c:82:51:f6:da:8c:37:c5:10:42:21:2c:eb:b3:d6:
         83:a1:3f:7b:c7:a6:aa:9f:a3:bf:ac:57:a9:25:26:ef:0e:c2:
         0e:5a:6d:2f:b7:18:a4:9e:6c:6d:21:6e:cb:e4:52:40:33:3d:
         8d:7e:fa:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:44:04 2024 by rpki-client on console-fra.rpki-client.org