Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
File:                     JY8HU8Azwa8JGGbQlCZFEmlspos.mft (raw, json)
Hash identifier:          jjCAqbVi0m6N8ZGIWeLJaNjfDMXDwyQ48pxpofUbp6g=
Subject key identifier:   CB:E2:C1:07:75:F0:92:C9:B8:61:7F:83:5B:2B:18:A8:63:DC:91:78
Authority key identifier: 25:8F:07:53:C0:33:C1:AF:09:18:66:D0:94:26:45:12:69:6C:A6:8B
Certificate issuer:       /CN=258f0753c033c1af091866d094264512696ca68b
Certificate serial:       01901DED6FFCB3EEA005D6044A7573DDA091
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
Manifest number:          0510
Signing time:             Sat 15 Jun 2024 22:03:38 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:38 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:38 +0000
Files and hashes:         1: JY8HU8Azwa8JGGbQlCZFEmlspos.crl (hash: lVfNocsQ04mshiok2rZJI29hsGPEwYuG8oxd6TTVw4A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:6f:fc:b3:ee:a0:05:d6:04:4a:75:73:dd:a0:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258f0753c033c1af091866d094264512696ca68b
        Validity
            Not Before: Jun 15 22:03:38 2024 GMT
            Not After : Jun 16 22:03:38 2024 GMT
        Subject: CN=cbe2c10775f092c9b8617f835b2b18a863dc9178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:64:f5:17:0c:3e:c7:3d:e2:44:a3:68:67:45:
                    ea:01:8f:bd:9a:28:d2:72:75:61:be:c4:2c:68:4c:
                    cc:ff:90:90:94:3b:ec:58:d9:9c:b8:d6:56:31:05:
                    3d:f3:c1:85:91:4f:a6:14:e3:c0:0e:41:51:4a:a6:
                    28:f6:da:2d:56:a0:4d:e5:25:42:44:24:e9:c5:20:
                    46:fb:26:72:d6:b2:2b:38:2c:f3:c7:d7:92:4f:0e:
                    8e:40:92:2c:64:70:49:ed:ed:6d:8f:05:80:a6:59:
                    b0:2a:76:3b:fe:d0:cb:70:84:26:12:9a:88:27:b4:
                    85:dd:56:fc:3e:d2:f2:82:fc:7c:8d:c8:f8:82:d5:
                    1e:a1:cd:ac:a7:34:95:36:7a:f5:1d:8d:06:0b:47:
                    e8:00:06:6f:88:a6:e7:04:29:6a:b9:51:86:c5:30:
                    c7:43:0c:95:b0:4e:28:50:5e:41:50:98:52:c2:81:
                    c8:07:35:d0:15:c6:8c:75:c0:a1:af:9b:0c:a1:26:
                    69:e4:6c:74:f8:e9:be:62:82:fd:fb:b2:8c:43:64:
                    a7:01:d6:1d:1b:b1:c1:b2:07:4c:fc:00:33:d5:5e:
                    76:e0:32:e5:d4:05:01:7f:bb:e4:e3:ee:e7:46:cc:
                    e8:ce:a2:db:19:ea:a3:aa:30:66:82:a2:5e:2d:d6:
                    ff:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E2:C1:07:75:F0:92:C9:B8:61:7F:83:5B:2B:18:A8:63:DC:91:78
            X509v3 Authority Key Identifier:
                keyid:25:8F:07:53:C0:33:C1:AF:09:18:66:D0:94:26:45:12:69:6C:A6:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:10:53:d5:88:2a:0e:95:8a:61:90:3a:44:1f:30:c7:9b:56:
         4c:6a:f8:69:eb:9d:de:e3:de:cf:bc:a4:19:7e:96:0c:44:f6:
         8b:56:ef:0c:38:b7:97:dc:ab:b3:a7:1a:a4:56:e6:df:23:74:
         8c:8c:48:ec:b5:ab:c0:82:8d:78:67:27:18:03:39:51:aa:d8:
         0b:d0:b8:9b:35:05:ee:87:82:36:dc:d1:b9:7d:16:6a:37:45:
         69:95:02:78:24:ed:d9:d7:2a:aa:ec:4e:2f:f7:1a:6a:18:ca:
         b9:94:01:68:ca:a5:dc:ba:f5:71:90:95:f5:b4:f7:51:5e:f7:
         c0:44:d2:48:24:03:d3:f6:07:01:8d:e4:99:4e:fd:0c:ea:01:
         bf:5c:bd:f8:62:f9:48:6f:cb:71:ef:0d:12:fc:e0:a8:97:51:
         b4:a3:26:d5:dc:06:84:3f:d0:d8:93:f7:a2:42:6c:f2:a6:cd:
         d1:21:f3:ac:92:ab:9d:e1:45:8d:40:93:01:0c:0b:2c:ba:ce:
         da:05:66:ce:40:5e:59:e6:25:97:6d:2c:29:50:91:96:3a:5f:
         ea:e6:a1:39:dc:27:92:df:8a:db:cf:48:2a:d7:62:b1:a7:1e:
         7a:3f:e5:67:0a:3c:05:77:93:94:5c:cb:be:06:3e:c7:64:aa:
         d2:92:e2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:47:50 2024 by rpki-client on console-ams.rpki-client.org