Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft
File:                     T7murXluvL6SUPqiksQOioWIx50.mft (raw, json)
Hash identifier:          uXE9XFqrTsw2TBhxBNSDycYL75phLsfP7cGumHiLjeg=
Subject key identifier:   AD:7F:8A:48:9F:57:7B:40:07:03:AD:34:E3:BA:25:9D:B4:37:BC:83
Authority key identifier: 4F:B9:AE:AD:79:6E:BC:BE:92:50:FA:A2:92:C4:0E:8A:85:88:C7:9D
Certificate issuer:       /CN=4fb9aead796ebcbe9250faa292c40e8a8588c79d
Certificate serial:       01901DEC427613425746B6FAD6C73E44E939
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T7murXluvL6SUPqiksQOioWIx50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft
Manifest number:          0CAA
Signing time:             Sat 15 Jun 2024 22:02:21 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:21 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:21 +0000
Files and hashes:         1: T7murXluvL6SUPqiksQOioWIx50.crl (hash: N0H6FmfxIPqdANxTv6IwkygdfKXnKbtW1Cd6lKSzCb4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T7murXluvL6SUPqiksQOioWIx50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:42:76:13:42:57:46:b6:fa:d6:c7:3e:44:e9:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fb9aead796ebcbe9250faa292c40e8a8588c79d
        Validity
            Not Before: Jun 15 22:02:21 2024 GMT
            Not After : Jun 16 22:02:21 2024 GMT
        Subject: CN=ad7f8a489f577b400703ad34e3ba259db437bc83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:41:f9:94:5a:67:bc:1a:31:c9:66:2e:c8:b0:
                    1d:11:44:4c:2a:76:7f:a0:aa:8a:fa:27:d0:ef:ed:
                    54:59:2d:21:4f:24:61:32:62:60:6e:2d:96:45:0d:
                    eb:46:9e:e6:46:fc:2e:4e:0c:2b:16:29:80:01:ca:
                    b8:05:c5:11:6c:e8:c4:e9:90:e6:67:1a:28:97:78:
                    28:a9:8f:ee:32:d1:24:d9:f4:93:ed:a7:f5:d6:a6:
                    c7:f9:a5:d3:74:29:11:c7:93:1d:e5:9a:62:a3:c4:
                    4b:ad:38:8a:81:53:ae:15:b3:04:9f:52:45:4b:d8:
                    94:af:29:a3:94:eb:ec:b2:24:87:f4:37:85:51:9d:
                    6f:9f:1d:1e:5c:86:13:dd:3b:d2:5a:e7:2c:b9:e6:
                    33:7f:0b:34:b4:57:69:16:6f:e4:30:c0:1a:33:73:
                    bc:20:c8:1b:79:ee:76:6a:ae:cc:35:6a:ef:33:7b:
                    07:6f:1d:ee:09:0d:4f:41:19:9c:54:5d:f0:61:d5:
                    d9:20:5a:2c:03:a7:43:d0:2a:f0:79:7a:78:06:07:
                    4f:cd:c5:db:7d:03:f5:9c:c1:64:67:61:5d:9d:7d:
                    aa:b1:3e:b3:2a:5d:86:95:84:c2:70:2c:5a:44:4d:
                    6a:c3:bd:c1:2e:f2:bc:51:d9:4c:28:54:e8:8a:1c:
                    eb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7F:8A:48:9F:57:7B:40:07:03:AD:34:E3:BA:25:9D:B4:37:BC:83
            X509v3 Authority Key Identifier:
                keyid:4F:B9:AE:AD:79:6E:BC:BE:92:50:FA:A2:92:C4:0E:8A:85:88:C7:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7murXluvL6SUPqiksQOioWIx50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:86:2a:40:1b:d2:9f:3b:df:9a:b0:81:5b:aa:09:27:b4:c7:
         9a:91:37:d8:8b:bc:4a:92:37:48:cf:8c:6b:c2:1e:6a:9e:68:
         76:22:76:41:15:ba:4e:e1:b4:a3:34:46:22:1d:3d:bd:ad:92:
         e1:65:cd:6b:60:5a:0a:4c:f0:65:4e:02:ab:c3:de:54:71:0e:
         10:ab:f9:e2:fa:6c:aa:e0:89:2a:2a:04:53:23:08:a4:f8:62:
         18:76:ed:88:48:02:94:91:cd:d7:f7:d1:32:a5:4c:5f:17:d8:
         0f:d7:87:3e:75:84:1d:c4:84:9e:fe:d3:3c:c3:20:b3:3c:f0:
         e8:67:8a:d2:dd:dd:c5:37:c8:d4:cb:c1:0e:2e:ce:eb:01:d4:
         6e:91:3c:f6:7d:18:47:8d:dc:dc:72:5e:e0:2c:3c:1d:22:84:
         8b:8e:e4:ce:54:80:91:1f:01:42:00:82:61:7d:a5:5e:93:2a:
         ec:61:b7:58:c1:ed:d5:7f:bf:f3:d1:93:d6:6c:1d:f7:8a:d9:
         8b:16:73:cd:e3:af:7f:68:c0:78:f7:ce:e8:cc:f6:91:7b:d6:
         91:a9:44:34:c0:b6:f8:12:42:47:00:b1:9b:96:7e:cb:61:ee:
         f5:4a:0a:17:16:f4:a0:00:f8:89:9a:f7:ae:d1:12:04:d9:7d:
         cb:3d:c5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:55:20 2024 by rpki-client on console-fra.rpki-client.org