Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4946d9-bdb6-45b4-9a9c-4abe6550920a/1/C8cxNTcx0n2JxXgoVGnGjF1XrQk.mft
File:                     C8cxNTcx0n2JxXgoVGnGjF1XrQk.mft (raw, json)
Hash identifier:          iy++JdxhHQgwkmh4H8YWbUrU/lnUyYXy5k7FmQiUqY0=
Subject key identifier:   43:75:95:A2:9B:FD:22:3F:14:6D:91:34:32:1C:AB:EB:B7:AA:E1:0C
Authority key identifier: 0B:C7:31:35:37:31:D2:7D:89:C5:78:28:54:69:C6:8C:5D:57:AD:09
Certificate issuer:       /CN=0bc731353731d27d89c578285469c68c5d57ad09
Certificate serial:       01901E591D45047F2D102335F197EBF62332
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C8cxNTcx0n2JxXgoVGnGjF1XrQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/4946d9-bdb6-45b4-9a9c-4abe6550920a/1/C8cxNTcx0n2JxXgoVGnGjF1XrQk.mft
Manifest number:          0355
Signing time:             Sun 16 Jun 2024 00:01:14 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:14 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:14 +0000
Files and hashes:         1: C8cxNTcx0n2JxXgoVGnGjF1XrQk.crl (hash: YV5P1RIHxW8Eiziw981mNixw46QM/IgJl3PjMiihqaI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/4946d9-bdb6-45b4-9a9c-4abe6550920a/1/C8cxNTcx0n2JxXgoVGnGjF1XrQk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/4946d9-bdb6-45b4-9a9c-4abe6550920a/1/C8cxNTcx0n2JxXgoVGnGjF1XrQk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C8cxNTcx0n2JxXgoVGnGjF1XrQk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:1d:45:04:7f:2d:10:23:35:f1:97:eb:f6:23:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bc731353731d27d89c578285469c68c5d57ad09
        Validity
            Not Before: Jun 16 00:01:14 2024 GMT
            Not After : Jun 17 00:01:14 2024 GMT
        Subject: CN=437595a29bfd223f146d9134321cabebb7aae10c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:98:05:59:55:14:a9:33:ad:68:5f:13:8b:5e:
                    ad:95:bc:5d:77:a2:c2:8d:44:36:5a:19:af:d4:29:
                    b4:4f:ab:65:b1:d9:81:e2:70:12:50:65:dc:6c:df:
                    9b:18:b2:0d:ed:b4:2f:e3:b9:b8:7b:b1:c3:0a:51:
                    92:7f:43:2b:58:a5:a4:21:dc:19:e9:73:af:14:36:
                    2f:38:ab:f8:94:53:39:b2:97:5a:cc:b6:b1:f8:65:
                    64:97:e6:bf:2b:4c:35:0c:1d:e5:d5:af:cf:05:1d:
                    28:c6:f7:12:ec:f2:82:26:49:6c:a2:cb:b2:7f:84:
                    30:42:fd:6b:57:24:dc:b7:ec:63:4a:4b:c0:a6:eb:
                    cc:e1:8e:00:9b:d8:b4:d2:db:80:a0:9d:01:89:49:
                    e4:26:7d:cb:db:96:55:31:90:92:30:98:93:84:44:
                    8d:7d:9b:eb:bb:ad:f5:da:99:74:a7:a6:c8:46:98:
                    44:5a:18:af:84:a9:03:e4:c1:38:b7:5d:c0:38:27:
                    97:43:4b:1d:95:af:eb:2a:e4:3c:a1:af:3f:26:82:
                    6e:11:08:75:e2:07:53:89:41:ab:c1:13:bd:4b:a3:
                    2a:76:ce:ee:6b:3a:4e:c8:cb:4a:47:3e:4c:99:c5:
                    3a:3f:4f:e0:76:12:6a:70:dd:69:87:38:c7:e0:62:
                    b2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:75:95:A2:9B:FD:22:3F:14:6D:91:34:32:1C:AB:EB:B7:AA:E1:0C
            X509v3 Authority Key Identifier:
                keyid:0B:C7:31:35:37:31:D2:7D:89:C5:78:28:54:69:C6:8C:5D:57:AD:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cxNTcx0n2JxXgoVGnGjF1XrQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4946d9-bdb6-45b4-9a9c-4abe6550920a/1/C8cxNTcx0n2JxXgoVGnGjF1XrQk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4946d9-bdb6-45b4-9a9c-4abe6550920a/1/C8cxNTcx0n2JxXgoVGnGjF1XrQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:21:3e:01:ff:e2:cb:bc:f5:d5:98:0e:e1:92:4d:df:d0:20:
         d2:51:de:37:9a:d1:13:b9:0e:f5:eb:9c:6a:fc:d9:bf:c1:c3:
         6b:15:c4:c6:3f:f3:91:29:d3:0e:26:94:34:d7:a9:4e:ac:8a:
         3c:be:f6:e0:5d:c8:7b:89:f7:fc:58:57:78:0b:a3:e2:72:73:
         32:0b:9c:5e:28:2d:6f:3f:62:d4:e2:d6:8a:61:80:eb:38:52:
         85:c7:3b:0e:fc:d2:7c:70:e5:be:8b:aa:c3:47:f8:52:48:75:
         a9:00:60:13:11:f5:bd:56:8f:73:aa:f2:de:a6:bd:2f:2a:56:
         eb:84:e9:95:6e:a2:ea:54:ea:fd:63:a5:9f:22:ea:2c:7e:ca:
         87:cc:63:a7:0c:d7:bd:de:f3:37:9d:b2:5b:09:bb:9c:d9:f2:
         c8:ea:8e:5c:32:fc:41:8d:36:a6:12:fa:b7:31:7b:f5:97:c4:
         ab:d4:ef:de:be:f6:8c:dc:b4:50:0c:41:51:2d:4d:79:c5:3f:
         c2:95:5a:4b:c4:eb:32:79:c1:fc:36:17:19:9e:78:ff:54:69:
         fd:78:ed:46:99:d0:38:73:b3:32:7a:20:38:5f:de:23:98:27:
         6c:c5:eb:e9:fc:4f:61:80:8b:f9:47:d0:19:7a:09:72:16:d9:
         c6:fe:bd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:54:19 2024 by rpki-client on console-ams.rpki-client.org