Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
File:                     Jo42omah9d-VuWprWNoRwjVNtV0.mft (raw, json)
Hash identifier:          tzHzfEoKcQo4haIB6XcHRowTdHBReotdcL+fLnBArhI=
Subject key identifier:   C2:32:AC:14:93:EA:34:56:99:0B:C1:C9:EE:79:CC:28:9D:55:E5:61
Authority key identifier: 26:8E:36:A2:66:A1:F5:DF:95:B9:6A:6B:58:DA:11:C2:35:4D:B5:5D
Certificate issuer:       /CN=268e36a266a1f5df95b96a6b58da11c2354db55d
Certificate serial:       0190370872C601FE82523AB66ABE0E10607F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
Manifest number:          0578
Signing time:             Thu 20 Jun 2024 19:03:38 +0000
Manifest this update:     Thu 20 Jun 2024 19:03:38 +0000
Manifest next update:     Fri 21 Jun 2024 19:03:38 +0000
Files and hashes:         1: Jo42omah9d-VuWprWNoRwjVNtV0.crl (hash: BluRgi35aUSpYUUu5ejfMe2wwCi7DhJ8chbNvdQEEP8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 19:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:08:72:c6:01:fe:82:52:3a:b6:6a:be:0e:10:60:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=268e36a266a1f5df95b96a6b58da11c2354db55d
        Validity
            Not Before: Jun 20 19:03:38 2024 GMT
            Not After : Jun 21 19:03:38 2024 GMT
        Subject: CN=c232ac1493ea3456990bc1c9ee79cc289d55e561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0a:6a:f9:8a:b9:84:68:47:eb:a6:78:d0:61:
                    d3:25:0f:4b:d3:dd:09:3a:34:c2:33:25:53:9d:6f:
                    de:ab:a8:f5:89:4f:91:76:a6:97:a4:c0:fc:80:23:
                    d5:7c:e4:92:d8:68:75:59:5c:0c:03:0d:81:1f:54:
                    ad:a7:7e:3a:80:89:14:93:4a:c1:14:c6:09:a8:d6:
                    1a:2f:1d:f2:b3:28:79:d4:02:4c:4e:3e:94:ce:73:
                    e2:53:a1:40:4d:6c:ef:92:b0:ca:0f:5a:5b:81:b1:
                    54:80:c1:24:38:c2:1e:22:9a:30:3d:c4:12:ce:8b:
                    5b:09:b8:cf:5f:7e:e3:64:59:38:76:f5:3a:c6:89:
                    f0:de:1f:e0:c1:2b:6b:1d:54:b4:6d:bd:e1:48:b0:
                    25:7d:90:8b:a5:17:8d:dd:a5:07:90:4c:81:66:6a:
                    c1:16:59:c8:9f:e7:85:a1:dd:ce:df:6e:44:3e:52:
                    78:1e:f5:83:a4:35:d7:98:f4:db:03:08:68:18:4b:
                    d4:42:71:fd:0d:3a:0d:ac:1e:0a:c8:00:21:48:34:
                    61:c4:0b:9f:a8:7a:18:27:f7:f0:f4:c2:82:2c:39:
                    11:3d:be:82:a2:6b:d3:30:39:3b:c9:b2:de:54:2d:
                    19:5f:1a:83:9a:4f:0a:38:f6:ed:b8:57:b6:78:db:
                    de:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:32:AC:14:93:EA:34:56:99:0B:C1:C9:EE:79:CC:28:9D:55:E5:61
            X509v3 Authority Key Identifier:
                keyid:26:8E:36:A2:66:A1:F5:DF:95:B9:6A:6B:58:DA:11:C2:35:4D:B5:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:1d:e1:c7:64:5e:b1:a0:15:63:02:1b:27:03:99:65:f7:d0:
         b0:c2:e6:b2:b3:41:46:47:af:44:4a:0c:99:88:46:64:8e:5c:
         9d:eb:6c:62:9a:55:8d:11:59:3e:1c:d3:fd:0b:a4:6e:2b:10:
         22:14:b8:1e:c7:a7:d9:3d:d0:f1:16:a7:63:f3:c6:74:f1:d2:
         5b:f6:c8:33:9e:f7:7a:12:db:a3:86:3f:76:bf:eb:fe:8d:9d:
         12:76:7a:ca:cb:b6:29:44:60:1f:47:3f:5a:24:bf:4f:c1:37:
         ae:e3:62:b5:8f:dc:05:a3:6b:28:02:f2:22:4d:8e:0a:35:44:
         97:74:09:f2:f4:98:17:b6:ed:ea:81:62:2d:02:41:46:9b:87:
         96:f4:fe:34:08:f3:1c:dd:b9:6a:12:06:0c:77:58:91:23:c7:
         d0:cd:ed:aa:d6:ee:42:c5:bd:27:ab:86:63:95:44:e2:da:b9:
         43:32:b2:42:f3:9a:d1:a1:72:e9:e5:94:99:03:a6:11:3b:06:
         7e:d0:91:9e:e7:e8:f8:bf:de:ed:06:fa:a6:11:5e:61:6f:02:
         74:5c:dd:47:a6:35:b8:5e:25:5a:b6:43:7a:45:41:82:d2:ce:
         73:e3:cb:b1:90:e0:6b:0a:0e:17:8a:4e:3a:ab:23:d5:bf:c3:
         50:95:45:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:21:41 2024 by rpki-client on console-fra.rpki-client.org