Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a98852-77b3-4615-90af-5ee29b6fe2bb/1/hRCC0x-v2sqh3oSWhXwMxS1RZrc.mft
File:                     hRCC0x-v2sqh3oSWhXwMxS1RZrc.mft (raw, json)
Hash identifier:          xVTf4i31HaktzGFhgXq/F6+qW89G6CTOf4/3ytyIYRc=
Subject key identifier:   C2:71:5E:9A:F7:D1:F1:2E:16:94:23:93:3B:BD:35:00:5A:71:A6:83
Authority key identifier: 85:10:82:D3:1F:AF:DA:CA:A1:DE:84:96:85:7C:0C:C5:2D:51:66:B7
Certificate issuer:       /CN=851082d31fafdacaa1de8496857c0cc52d5166b7
Certificate serial:       01901E9000C49A5AD7A26799F3CEE2B40AAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hRCC0x-v2sqh3oSWhXwMxS1RZrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/a98852-77b3-4615-90af-5ee29b6fe2bb/1/hRCC0x-v2sqh3oSWhXwMxS1RZrc.mft
Manifest number:          0582
Signing time:             Sun 16 Jun 2024 01:01:12 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:12 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:12 +0000
Files and hashes:         1: hRCC0x-v2sqh3oSWhXwMxS1RZrc.crl (hash: rh8/BQJrhc6OYQhv8tdMzwDbcQfytRjBI27zw7ThZk8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/a98852-77b3-4615-90af-5ee29b6fe2bb/1/hRCC0x-v2sqh3oSWhXwMxS1RZrc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/a98852-77b3-4615-90af-5ee29b6fe2bb/1/hRCC0x-v2sqh3oSWhXwMxS1RZrc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hRCC0x-v2sqh3oSWhXwMxS1RZrc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:00:c4:9a:5a:d7:a2:67:99:f3:ce:e2:b4:0a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851082d31fafdacaa1de8496857c0cc52d5166b7
        Validity
            Not Before: Jun 16 01:01:12 2024 GMT
            Not After : Jun 17 01:01:12 2024 GMT
        Subject: CN=c2715e9af7d1f12e169423933bbd35005a71a683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a4:b2:33:ad:78:7a:a5:06:b3:d5:8d:2f:06:
                    ee:ff:7f:6c:e3:99:c8:d8:82:0d:91:e6:11:fb:3b:
                    c8:4f:36:bb:25:02:79:41:ab:4b:de:de:22:4f:77:
                    0d:7b:9a:22:33:64:64:34:1d:47:f5:9d:7d:8a:19:
                    be:a4:66:01:d6:1a:33:11:5a:cc:9e:0c:8b:cf:ad:
                    bf:50:e5:c0:db:9d:ce:07:fd:28:02:7a:18:f1:13:
                    1a:7a:02:00:a4:1d:f2:20:cd:4e:ed:41:66:aa:37:
                    0d:27:bd:98:1b:1b:aa:b6:31:df:38:42:08:70:73:
                    17:5b:e1:f5:ae:38:fd:64:9b:e3:4d:93:f8:21:6d:
                    9e:43:53:88:3b:eb:d8:fb:fa:d9:92:53:44:9e:ec:
                    f3:ea:c5:cd:4c:e6:24:ce:92:4c:bf:fe:aa:b4:1c:
                    0c:ea:bf:2e:fb:4d:8a:6f:eb:2b:0f:fe:bb:59:f1:
                    f8:8b:dd:a6:fd:d0:34:5e:a4:d2:ee:b7:cf:b4:ed:
                    c9:57:cc:9b:24:12:22:c9:64:e3:30:7b:75:f0:89:
                    fd:b1:89:ac:0f:20:1c:97:18:8d:11:3d:12:da:83:
                    d3:34:27:a5:03:ff:bd:87:c1:8b:43:07:26:7d:b4:
                    35:d2:86:16:cf:66:e9:14:87:94:12:87:43:7a:bc:
                    8a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:71:5E:9A:F7:D1:F1:2E:16:94:23:93:3B:BD:35:00:5A:71:A6:83
            X509v3 Authority Key Identifier:
                keyid:85:10:82:D3:1F:AF:DA:CA:A1:DE:84:96:85:7C:0C:C5:2D:51:66:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRCC0x-v2sqh3oSWhXwMxS1RZrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a98852-77b3-4615-90af-5ee29b6fe2bb/1/hRCC0x-v2sqh3oSWhXwMxS1RZrc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a98852-77b3-4615-90af-5ee29b6fe2bb/1/hRCC0x-v2sqh3oSWhXwMxS1RZrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:f1:ca:ed:0d:90:f6:3b:c1:a7:2f:d9:b8:93:72:3f:6f:14:
         ef:7e:9a:41:f6:21:18:49:e6:f2:c2:42:22:c3:41:0d:f7:8f:
         4a:52:04:33:00:a0:aa:95:c2:0b:9b:fb:3c:58:c9:8d:04:65:
         8e:a4:70:b4:11:82:2a:6a:83:12:14:df:2d:93:88:4c:ee:32:
         9e:59:0b:93:7e:97:c0:96:bc:30:80:e2:0b:0f:e7:6b:7e:49:
         00:9f:51:3f:d5:49:0d:78:05:55:94:8f:b3:c2:ec:24:02:97:
         d1:11:9e:54:6a:b6:d8:40:e4:fa:6d:b0:91:a5:e6:ad:18:79:
         93:5a:26:3a:08:1a:8e:6c:4b:82:32:1c:5a:83:79:26:e0:f5:
         09:da:b6:89:49:8e:82:b3:9f:cb:a4:3d:2b:e5:39:a1:37:ef:
         4f:ab:05:b5:33:60:91:35:7a:26:79:d5:89:b0:69:65:d8:1b:
         be:5b:f5:0b:52:4d:95:82:5a:81:8f:da:5b:a4:23:0b:9e:02:
         1e:14:69:af:9f:ab:7c:e1:b2:7c:d6:5f:ec:fb:94:06:1c:30:
         d4:59:36:fb:0d:4b:f6:52:ee:dc:e5:69:48:8e:20:cb:a9:62:
         2c:19:99:3d:f4:14:e2:21:bd:9d:50:c3:08:54:f1:33:9e:f7:
         ad:40:52:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:49:14 2024 by rpki-client on console-ams.rpki-client.org