Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
File:                     imo0EVg-JhQzSS5QR88xxGw9LB0.mft (raw, json)
Hash identifier:          E4okwKDTWOLz5IVhQ/MBVGotQdKIui5mFMa0NjlNEc0=
Subject key identifier:   98:B8:DC:DF:B3:0B:BD:A6:7F:EF:86:B9:30:4B:8A:C8:4A:3F:76:52
Authority key identifier: 8A:6A:34:11:58:3E:26:14:33:49:2E:50:47:CF:31:C4:6C:3D:2C:1D
Certificate issuer:       /CN=8a6a3411583e261433492e5047cf31c46c3d2c1d
Certificate serial:       019045D448204F42A4635ACB887B129CA4F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
Manifest number:          11D8
Signing time:             Sun 23 Jun 2024 16:00:58 +0000
Manifest this update:     Sun 23 Jun 2024 16:00:58 +0000
Manifest next update:     Mon 24 Jun 2024 16:00:58 +0000
Files and hashes:         1: imo0EVg-JhQzSS5QR88xxGw9LB0.crl (hash: FvfoaurkJvqxeGXNZlkWU8BhaS9PbYRvkJyMSH6l6rA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:d4:48:20:4f:42:a4:63:5a:cb:88:7b:12:9c:a4:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6a3411583e261433492e5047cf31c46c3d2c1d
        Validity
            Not Before: Jun 23 16:00:58 2024 GMT
            Not After : Jun 24 16:00:58 2024 GMT
        Subject: CN=98b8dcdfb30bbda67fef86b9304b8ac84a3f7652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5f:82:ca:d1:75:0f:bd:04:b5:06:76:d1:f3:
                    f5:c8:29:aa:01:84:57:90:9c:7d:38:46:31:e2:03:
                    49:0a:13:ef:b5:bf:0a:17:55:39:15:f8:e1:79:ef:
                    ec:8b:6f:e8:7e:ce:e9:99:88:c0:ad:e7:e6:aa:7c:
                    3e:9c:34:ec:40:81:44:84:1b:f7:96:f0:59:fa:c8:
                    01:ea:e2:24:18:66:e0:70:41:5b:ab:7c:83:e3:b1:
                    72:63:dc:9c:b8:db:4a:36:ff:b0:3d:98:91:d4:2e:
                    0f:51:3a:9d:4d:e5:09:b0:c1:de:f6:3a:03:f2:1e:
                    82:0e:1a:fe:84:15:ec:de:43:73:76:6d:50:77:6d:
                    2e:31:15:63:b8:45:81:f3:a4:be:a1:d9:c4:52:58:
                    f2:07:17:f4:86:ec:f5:51:9b:74:e1:99:34:11:40:
                    d5:41:c2:c6:91:ea:a2:67:bb:1a:c8:04:d1:82:10:
                    8c:6a:38:32:8b:fb:37:78:d7:9d:76:01:21:b8:98:
                    02:6a:e2:2f:26:e2:28:03:a7:db:82:b9:77:aa:ea:
                    62:80:78:28:8c:6d:e0:f7:dc:ce:ba:5b:35:15:40:
                    dc:62:b5:bf:96:43:45:99:bf:e2:17:eb:54:11:f3:
                    df:fc:b6:84:bd:70:0b:fe:e1:d4:5c:fa:0a:92:aa:
                    50:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B8:DC:DF:B3:0B:BD:A6:7F:EF:86:B9:30:4B:8A:C8:4A:3F:76:52
            X509v3 Authority Key Identifier:
                keyid:8A:6A:34:11:58:3E:26:14:33:49:2E:50:47:CF:31:C4:6C:3D:2C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:e8:dd:f1:ca:01:91:f7:9f:f6:9e:03:4c:f9:cc:c3:b4:1c:
         03:9b:32:ca:1e:a8:fa:21:ca:12:1b:40:b8:e4:6f:86:24:1d:
         d7:f2:37:14:10:05:ba:0e:c4:11:b8:9d:4b:6f:32:d9:05:79:
         17:17:c3:82:f7:17:2e:01:cb:51:22:eb:ef:c7:ce:e7:46:fc:
         9c:76:ff:06:ed:5e:b8:d7:0c:2a:35:31:f5:b9:d4:e5:0f:dd:
         c8:5d:af:d8:9b:4c:e0:9e:67:5e:2e:ec:30:e6:a3:8f:5a:e7:
         f9:f4:31:8f:db:7c:be:b6:26:d4:2b:b4:be:bb:5a:ae:d7:33:
         5f:1d:9b:ca:22:b5:21:2b:f7:66:47:dc:c3:b8:a8:14:3b:e1:
         19:c1:4d:4e:3a:39:99:e9:f2:74:e9:1c:c3:24:85:34:28:ce:
         9e:18:53:6a:88:69:7f:41:99:d7:36:67:09:b6:27:9a:1e:03:
         db:b6:64:8d:79:a2:5f:48:01:a0:53:e8:3e:e4:3b:10:fc:7f:
         43:f4:24:d0:7e:14:4f:83:a5:11:00:fa:75:7b:04:0f:d8:0d:
         01:18:ba:3f:05:f5:eb:1e:7a:55:a9:9c:e3:66:e9:78:25:cb:
         ee:bc:6e:43:ca:73:23:de:42:b9:99:8d:95:54:40:b7:8a:cd:
         0d:ac:37:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:39:44 2024 by rpki-client on console-ams.rpki-client.org