Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
File:                     4imzfrYwaGsTKDOEcbUtqV0gSRE.mft (raw, json)
Hash identifier:          +VuKIslV51wwC68Ts6gFVpdWCuaJTxA6ffXnAYgiIgM=
Subject key identifier:   DC:CF:BB:27:88:74:F9:9E:6D:47:4B:BA:9E:D7:36:B1:F7:28:BA:3A
Authority key identifier: E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
Certificate issuer:       /CN=e229b37eb630686b1328338471b52da95d204911
Certificate serial:       01901DEAF0F2AD6C135B6B4E1E5500BE4C2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
Manifest number:          06D7
Signing time:             Sat 15 Jun 2024 22:00:54 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:54 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:54 +0000
Files and hashes:         1: 4imzfrYwaGsTKDOEcbUtqV0gSRE.crl (hash: Y68Zz3f6bp8rKFRbZgUz7bY3Yu8gW+o7dIWLNe7zVHI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:f0:f2:ad:6c:13:5b:6b:4e:1e:55:00:be:4c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e229b37eb630686b1328338471b52da95d204911
        Validity
            Not Before: Jun 15 22:00:54 2024 GMT
            Not After : Jun 16 22:00:54 2024 GMT
        Subject: CN=dccfbb278874f99e6d474bba9ed736b1f728ba3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:20:e0:4c:b4:59:a5:c8:fc:57:d8:8a:2e:f7:
                    1e:90:0a:82:72:86:1b:ab:13:df:fc:f5:f5:a8:a9:
                    bf:04:b3:89:c4:68:7d:33:19:14:58:5b:ff:37:a5:
                    29:55:88:c2:ff:39:1c:05:3d:02:f1:4c:d6:b3:dd:
                    6a:77:66:b2:ee:f9:4a:ce:bf:e8:4c:04:ae:5c:39:
                    3d:69:89:d3:82:7a:0b:b4:12:95:c9:76:6d:74:fd:
                    61:66:26:b7:d2:20:06:77:96:cd:28:97:51:55:fe:
                    a4:17:e2:34:7a:4a:ab:9c:1a:73:7e:5d:f2:cc:67:
                    ad:24:39:58:fc:e2:5b:65:36:22:ad:cb:77:cc:e9:
                    0d:c9:ce:73:8d:5c:fb:b2:50:0d:25:bf:fc:0d:d7:
                    e0:1c:fb:bc:e3:9d:3d:82:3d:5e:81:15:b5:ce:99:
                    4d:4a:d4:b7:00:b3:40:b1:0a:d7:c4:04:6c:be:ce:
                    17:21:43:d9:e5:52:1d:5a:9b:ae:9f:d0:31:d0:41:
                    74:02:4e:65:dc:56:da:d3:f5:07:6d:87:91:e7:e3:
                    e2:a1:c0:e9:d1:74:70:aa:88:67:dd:3e:d3:f8:34:
                    01:20:44:50:c3:a0:d6:f6:f2:dc:78:34:82:44:c7:
                    1a:f7:f3:b6:0f:b5:73:5a:d1:72:f4:c4:76:32:40:
                    e4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CF:BB:27:88:74:F9:9E:6D:47:4B:BA:9E:D7:36:B1:F7:28:BA:3A
            X509v3 Authority Key Identifier:
                keyid:E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:86:ec:5b:2c:1f:5a:98:a3:93:b0:4c:92:d2:76:f3:b2:8e:
         bc:8f:f7:b2:74:50:01:b2:ee:08:38:a2:0e:aa:7e:19:81:0d:
         1a:0b:42:05:ce:77:bb:2a:85:9f:2e:62:a0:c5:a6:6b:4f:02:
         06:0a:8c:89:9a:e1:14:05:9d:49:70:67:e4:a1:60:47:3c:2b:
         55:8a:1b:e4:6f:e3:a6:db:a9:2a:78:63:9b:97:a3:be:7f:e9:
         cb:d8:ac:a4:6c:5c:a1:42:e9:71:e5:d7:c4:fa:53:ea:cb:13:
         49:21:28:6a:55:4b:a4:26:0e:6b:da:12:c8:c5:27:52:b8:41:
         1c:41:b1:b3:ad:1a:c0:05:84:3d:ca:c8:7e:72:1c:f6:bb:d5:
         14:01:62:0e:2b:65:84:34:b3:78:e7:d4:e2:4c:29:f1:6d:3a:
         4d:d4:4a:4e:5d:10:8d:ff:2b:22:a4:56:01:58:b3:76:73:86:
         6f:5e:f1:ac:6b:c4:28:58:0a:d5:6e:99:c2:64:ae:2d:af:ce:
         0f:e2:b4:59:4a:74:f6:53:81:92:ac:ff:8d:82:78:f9:e0:16:
         7e:e3:b1:43:79:63:18:23:74:01:c0:62:07:63:4c:87:27:d6:
         dc:3a:f0:03:d5:15:d6:d0:0b:7e:ee:3b:15:4e:c7:0c:26:28:
         3e:1d:3d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:54:35 2024 by rpki-client on console-fra.rpki-client.org