Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
File:                     L8VFWRk_6APSh01pjzQpKPdjKgU.mft (raw, json)
Hash identifier:          RIZFAnCEK6k2vJ7FfpsnkYnON7sRz9Nbt4xDzar1/ZY=
Subject key identifier:   81:E2:3C:8D:1C:C8:83:CD:A0:88:C7:B1:39:54:85:84:38:AF:EF:44
Authority key identifier: 2F:C5:45:59:19:3F:E8:03:D2:87:4D:69:8F:34:29:28:F7:63:2A:05
Certificate issuer:       /CN=2fc54559193fe803d2874d698f342928f7632a05
Certificate serial:       01901E8F9B1B072A0DC5E25578C212CA16B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
Manifest number:          11C2
Signing time:             Sun 16 Jun 2024 01:00:46 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:46 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:46 +0000
Files and hashes:         1: L8VFWRk_6APSh01pjzQpKPdjKgU.crl (hash: 1W95T1Z+32xDmmhmDZBz3irubPHdpW/kg+1U2wF7cOw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:9b:1b:07:2a:0d:c5:e2:55:78:c2:12:ca:16:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fc54559193fe803d2874d698f342928f7632a05
        Validity
            Not Before: Jun 16 01:00:46 2024 GMT
            Not After : Jun 17 01:00:46 2024 GMT
        Subject: CN=81e23c8d1cc883cda088c7b13954858438afef44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:21:ce:bc:72:78:b0:c9:2c:6e:a4:d8:5e:e8:
                    f3:68:c6:a7:04:3f:77:e4:f4:ab:c8:47:3f:25:cd:
                    08:34:40:d7:ef:b7:c3:90:30:0f:e8:a3:e1:81:4f:
                    9c:97:ef:0a:bc:fc:e7:db:f5:99:50:e7:d7:78:5e:
                    33:63:79:47:a7:f2:c7:28:42:c1:8d:ab:8d:8b:10:
                    51:44:58:92:72:4c:8a:2a:38:d3:df:46:f7:3d:9b:
                    44:0d:ee:32:1d:77:ff:a1:5d:36:ed:bb:b7:7c:e4:
                    2f:1a:37:c4:c9:7a:54:d3:8b:32:15:73:5d:e4:51:
                    fd:de:d6:34:d9:4b:15:28:71:83:43:d5:84:68:b6:
                    99:7d:14:b3:cc:fc:1f:bb:06:e6:7b:f4:92:d4:4e:
                    49:fd:55:a7:bc:e2:2b:de:84:b9:d0:0a:04:0c:bc:
                    15:e5:86:ab:c5:68:23:87:96:20:e8:77:aa:30:36:
                    29:16:e2:44:c4:cd:0e:5c:24:e1:e9:96:ca:f2:9d:
                    78:68:68:38:f8:27:f6:b4:04:9f:25:f6:d4:11:65:
                    e0:8d:04:79:b3:9f:a7:86:46:21:47:d0:0d:80:29:
                    33:61:80:c4:d8:01:ad:6f:38:d2:66:80:f4:e8:a5:
                    01:4b:77:cb:72:e5:66:26:d0:dd:36:72:ea:8a:90:
                    99:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E2:3C:8D:1C:C8:83:CD:A0:88:C7:B1:39:54:85:84:38:AF:EF:44
            X509v3 Authority Key Identifier:
                keyid:2F:C5:45:59:19:3F:E8:03:D2:87:4D:69:8F:34:29:28:F7:63:2A:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ca:f0:e6:06:2e:3c:16:49:fb:5e:5c:41:9f:67:aa:e7:e5:
         d3:e5:e0:94:e0:b9:c7:15:a3:1d:31:3b:4d:9b:1e:ca:72:fe:
         2c:b1:bb:d2:95:ba:04:ce:32:b9:ae:2f:43:60:eb:eb:81:9f:
         3a:7b:c0:69:1a:a7:17:92:d9:fc:40:86:e4:e0:20:4a:e3:fb:
         e9:78:71:09:64:07:b1:2b:05:8e:3d:0d:69:61:fc:ae:72:3a:
         12:6c:33:c3:4d:57:9d:43:ea:c7:77:c8:ca:06:18:59:73:11:
         aa:f8:ae:07:c4:8a:9b:70:58:5e:fd:54:c1:00:62:30:1f:30:
         5c:c2:ab:9d:a2:52:af:bc:7a:ed:50:d1:74:9b:e7:2e:b7:5c:
         6d:cc:91:60:e0:30:37:6d:f1:48:30:74:f3:83:b8:9a:d8:c5:
         26:b5:ac:8b:92:12:11:95:32:a6:b5:d6:9e:10:b2:be:2f:11:
         5c:e4:da:7e:bb:0c:8e:bb:72:57:95:3a:70:27:f2:e4:70:83:
         72:58:49:15:42:64:09:26:98:f2:c9:2d:5b:c0:18:5e:9f:3e:
         19:3a:0d:66:4d:6f:0a:97:09:87:d6:8d:8e:9c:59:1a:20:b8:
         9c:de:ea:ed:08:7c:26:b0:ae:32:45:18:13:b6:f2:e8:58:ce:
         b3:ea:33:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:49:35 2024 by rpki-client on console-ams.rpki-client.org