Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
File:                     cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft (raw, json)
Hash identifier:          vOWPtrT0b9vjoRcJeN++q80DwZ8DS+dEGZKSHY2a4YA=
Subject key identifier:   41:52:E5:12:FE:0B:C8:77:C0:0C:40:C2:2E:89:F4:A2:25:93:11:B0
Authority key identifier: 70:37:9A:67:13:E7:9E:59:8D:9F:EA:A6:6D:CA:16:91:88:E0:21:8D
Certificate issuer:       /CN=70379a6713e79e598d9feaa66dca169188e0218d
Certificate serial:       01901B585395ED5654A7B17F7F603DC8835D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
Manifest number:          09C9
Signing time:             Sat 15 Jun 2024 10:01:31 +0000
Manifest this update:     Sat 15 Jun 2024 10:01:31 +0000
Manifest next update:     Sun 16 Jun 2024 10:01:31 +0000
Files and hashes:         1: cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl (hash: 6IAlpjFMREfmfRiKtp9/R4FiWzOSOfSQN8qV9Uc3UOY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:58:53:95:ed:56:54:a7:b1:7f:7f:60:3d:c8:83:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70379a6713e79e598d9feaa66dca169188e0218d
        Validity
            Not Before: Jun 15 10:01:31 2024 GMT
            Not After : Jun 16 10:01:31 2024 GMT
        Subject: CN=4152e512fe0bc877c00c40c22e89f4a2259311b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:53:89:38:21:ec:2b:03:80:37:75:74:5a:0e:
                    a8:a3:fa:ac:9b:51:78:88:4d:54:e9:00:bf:22:b6:
                    35:54:b9:5d:24:f1:76:ee:6a:60:3d:19:b3:9b:98:
                    9c:15:5d:0b:b9:89:fe:23:97:d8:4d:e1:64:8f:bc:
                    f1:7c:02:e0:e5:dc:9a:68:b4:de:4a:bf:fd:fc:88:
                    5d:e4:f8:f6:b2:e0:c2:fb:d4:37:62:5b:43:70:87:
                    f6:3a:c8:ef:d2:29:54:eb:9c:b6:7b:09:fe:b9:6e:
                    ba:95:16:ad:bd:d9:a3:cb:41:42:8c:6b:35:9a:72:
                    8d:b4:f9:34:56:b1:2d:7e:79:2b:9f:da:d7:9d:94:
                    5e:e5:ff:13:a4:b1:bf:ab:ae:83:b5:a8:ba:38:7e:
                    63:e1:58:7e:33:e9:c6:f2:39:bb:92:40:14:48:77:
                    59:ed:3c:a7:ae:c3:85:10:52:0c:6f:cb:38:3e:6c:
                    d7:b9:15:48:42:4d:73:9c:97:67:20:1d:e6:04:dc:
                    a0:e7:25:87:9e:d9:45:5f:3b:4b:ed:4c:e5:2d:d1:
                    31:3e:cd:d9:4d:e1:db:90:0c:ff:6f:0c:57:82:c7:
                    d2:a9:78:22:8a:c8:fa:41:71:9a:56:d0:75:6e:34:
                    66:67:83:d7:17:8e:0f:1c:e5:41:0d:e7:aa:28:b9:
                    d1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:52:E5:12:FE:0B:C8:77:C0:0C:40:C2:2E:89:F4:A2:25:93:11:B0
            X509v3 Authority Key Identifier:
                keyid:70:37:9A:67:13:E7:9E:59:8D:9F:EA:A6:6D:CA:16:91:88:E0:21:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:68:1a:d9:3a:70:4c:7b:f7:94:e2:c0:06:70:80:c4:30:3d:
         59:af:f2:ec:55:a5:96:51:1c:a1:71:55:86:74:5a:f6:81:44:
         b7:df:57:93:2b:f9:5d:d7:a2:07:c4:0f:f1:2d:d1:44:ff:56:
         7e:e2:6f:ad:ed:90:f9:8f:09:92:47:2a:27:9f:60:47:2d:6e:
         e9:87:38:9c:7c:47:83:7f:61:19:fc:b1:ce:c7:f3:9f:b7:aa:
         d4:0a:d7:21:fe:ff:0d:0e:47:a1:70:bf:0d:dc:23:8b:0d:e2:
         d5:44:d9:a7:45:a9:33:c4:63:40:54:6a:80:30:11:df:bd:15:
         10:44:2b:67:e5:4c:7c:70:34:18:13:64:e8:99:15:a6:2b:c4:
         c2:fd:bc:b7:af:96:a2:0e:ed:4a:ea:d9:32:23:62:48:6c:35:
         c5:bf:1e:5f:1d:a5:aa:15:90:8a:24:e6:b9:61:7c:22:94:23:
         a1:66:65:f2:92:37:54:db:ca:83:a8:aa:d2:82:4d:fe:73:7b:
         e0:c9:13:6c:dc:c5:e6:ae:d0:b4:0a:65:c8:9c:31:82:d6:15:
         3f:36:e4:f7:fb:d4:49:12:3f:e2:d2:aa:93:dc:9e:25:ae:a9:
         0e:d6:ad:06:86:b3:c8:db:77:39:ef:a6:f9:2b:dc:c4:cf:b4:
         f9:fd:99:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:29:50 2024 by rpki-client on console-fra.rpki-client.org