Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
File:                     hxv5w80rNkB9-9l2-4SiEZeg6qE.mft (raw, json)
Hash identifier:          XnoiIUgjmy6uw1BL7lr3VayRSE2q5zWRWtgmQKzIqUk=
Subject key identifier:   F4:8B:D2:35:C0:D8:31:F3:1F:9B:A6:9C:32:0A:D4:88:61:0A:4F:17
Authority key identifier: 87:1B:F9:C3:CD:2B:36:40:7D:FB:D9:76:FB:84:A2:11:97:A0:EA:A1
Certificate issuer:       /CN=871bf9c3cd2b36407dfbd976fb84a21197a0eaa1
Certificate serial:       01901E593873AB4DE0881E6A640437F7F283
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
Manifest number:          11C3
Signing time:             Sun 16 Jun 2024 00:01:21 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:21 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:21 +0000
Files and hashes:         1: hxv5w80rNkB9-9l2-4SiEZeg6qE.crl (hash: Qm8NhLyZEjYfvaHKzUXdI4rulmbTMtYITzm+HUDAxus=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:38:73:ab:4d:e0:88:1e:6a:64:04:37:f7:f2:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871bf9c3cd2b36407dfbd976fb84a21197a0eaa1
        Validity
            Not Before: Jun 16 00:01:21 2024 GMT
            Not After : Jun 17 00:01:21 2024 GMT
        Subject: CN=f48bd235c0d831f31f9ba69c320ad488610a4f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e5:74:82:02:a0:3b:f1:dd:2e:55:09:26:de:
                    bb:5a:0f:3c:bb:48:46:35:96:f7:e9:70:11:fe:b7:
                    b6:e5:ee:a1:83:fc:48:b4:b4:60:d3:6a:23:02:89:
                    cc:7b:e1:a8:b9:ab:19:16:56:dd:fc:bd:ef:67:5e:
                    24:d3:22:28:ab:33:a8:93:9a:db:f2:9d:3d:fe:eb:
                    e9:02:11:3c:26:20:b3:8a:f6:36:76:ef:8b:f3:7b:
                    0e:59:80:ac:dc:fa:aa:ce:d3:d2:a6:30:73:b8:00:
                    5f:ec:a7:8f:97:ce:f3:f1:4a:4f:1f:a6:93:a3:a3:
                    c6:04:00:66:e7:cc:10:4c:d5:2c:06:6c:58:2d:39:
                    6b:8f:d9:ae:ad:5a:cd:7c:50:ff:eb:95:cc:50:81:
                    08:e4:12:b5:da:7b:00:50:82:9e:a6:72:91:66:68:
                    03:70:0b:91:67:42:bc:b6:e3:8e:9a:54:e1:5b:c4:
                    95:37:1b:7f:40:6d:4f:73:41:0c:bf:bf:f9:07:26:
                    0f:68:c9:2a:ee:40:e3:6c:a8:ae:db:73:78:cd:79:
                    5a:f0:54:69:f1:6b:12:12:7f:dc:80:ca:39:67:42:
                    00:ce:9b:78:95:98:f8:67:22:1e:4b:43:0f:80:29:
                    9e:2b:f0:7f:7f:c2:5e:55:8f:25:7a:3e:af:c9:f8:
                    03:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8B:D2:35:C0:D8:31:F3:1F:9B:A6:9C:32:0A:D4:88:61:0A:4F:17
            X509v3 Authority Key Identifier:
                keyid:87:1B:F9:C3:CD:2B:36:40:7D:FB:D9:76:FB:84:A2:11:97:A0:EA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:9a:ef:dc:07:40:2a:24:4e:18:94:33:f7:c9:da:f5:17:28:
         0b:dd:3a:94:fe:4d:4e:12:7c:4b:26:8b:38:d4:57:fb:46:d9:
         6f:26:62:e2:a8:ce:6c:95:08:8d:ac:cf:ef:0c:f2:fb:1a:9c:
         13:76:a7:77:e7:f1:5e:3b:55:54:43:d5:94:bb:12:d0:8a:5b:
         f7:7f:96:cf:e4:ce:7c:4c:bb:34:77:13:f0:e2:43:d4:19:f1:
         9c:3c:37:d7:6c:e1:a1:e5:3c:f8:77:bd:31:c1:e8:7e:cb:02:
         81:b7:67:c8:63:2a:42:54:80:43:08:c9:99:37:84:a2:27:49:
         82:24:43:db:56:3f:f8:bf:cc:ce:c2:01:da:fb:3a:38:6e:1e:
         16:1c:67:f1:70:ad:5d:dc:27:e3:0f:fe:58:ae:f1:14:ff:82:
         af:aa:cc:50:ee:bb:6e:31:69:ff:cd:0f:22:79:27:c3:7d:7f:
         48:36:eb:d9:95:b3:76:e7:38:f5:bc:a1:eb:b1:48:6d:5c:7f:
         8c:ad:ed:de:dd:52:8e:93:09:ef:3e:b0:c0:08:c5:b3:2a:28:
         80:24:f8:54:f8:22:1f:19:09:43:29:69:69:df:da:9f:24:89:
         5e:87:26:aa:8f:38:ca:6b:42:b6:11:10:7e:41:e8:d4:65:5a:
         f1:d7:17:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:54:57 2024 by rpki-client on console-ams.rpki-client.org