Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/0J8gULc6LOfoLIPUdPvWHl83I1k.mft
File:                     0J8gULc6LOfoLIPUdPvWHl83I1k.mft (raw, json)
Hash identifier:          KDv0G5Rm9CszBonFakUi6J3wX/QHDs7CWa8sNUbS4y4=
Subject key identifier:   E0:C3:ED:92:FD:43:04:8A:56:A2:E9:8E:F7:AE:A8:D5:5F:C6:C1:B0
Authority key identifier: D0:9F:20:50:B7:3A:2C:E7:E8:2C:83:D4:74:FB:D6:1E:5F:37:23:59
Certificate issuer:       /CN=d09f2050b73a2ce7e82c83d474fbd61e5f372359
Certificate serial:       01901EC6E9BA0B0F39791A8FDEE1560EA2C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0J8gULc6LOfoLIPUdPvWHl83I1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/0J8gULc6LOfoLIPUdPvWHl83I1k.mft
Manifest number:          06B3
Signing time:             Sun 16 Jun 2024 02:01:10 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:10 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:10 +0000
Files and hashes:         1: 0J8gULc6LOfoLIPUdPvWHl83I1k.crl (hash: ddtD4Fa1krfPmnuTIyrwV+i9TEyOqGHA1uqhiLpJA6Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/0J8gULc6LOfoLIPUdPvWHl83I1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/0J8gULc6LOfoLIPUdPvWHl83I1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0J8gULc6LOfoLIPUdPvWHl83I1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:e9:ba:0b:0f:39:79:1a:8f:de:e1:56:0e:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d09f2050b73a2ce7e82c83d474fbd61e5f372359
        Validity
            Not Before: Jun 16 02:01:10 2024 GMT
            Not After : Jun 17 02:01:10 2024 GMT
        Subject: CN=e0c3ed92fd43048a56a2e98ef7aea8d55fc6c1b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:dc:d1:73:ab:e2:4b:0b:32:35:15:6b:45:ea:
                    67:97:4c:83:cb:39:76:f9:bf:e5:f6:13:47:8f:2a:
                    62:9f:e4:4d:c3:b9:94:98:fb:a7:e7:c7:e1:2c:c6:
                    f4:45:bc:39:2d:d2:89:94:2d:a7:bb:c1:12:fd:4d:
                    8d:f8:0c:37:2b:a3:c0:27:c8:6c:46:9f:a4:79:3e:
                    a1:d4:d5:b4:67:b1:82:21:3d:1f:77:85:0b:c9:cf:
                    07:ba:48:90:d4:7d:45:05:a4:c5:c7:9c:b9:1f:36:
                    64:64:4c:70:fc:e1:de:c6:a1:43:a2:87:89:a1:1b:
                    ad:3c:c2:b6:7b:6d:cc:07:61:cb:77:99:68:82:bb:
                    db:08:8f:2b:fd:91:99:14:75:c8:6c:7d:fa:9d:86:
                    92:ca:46:ab:93:bc:f7:0d:5c:d1:f9:c3:6b:6a:c2:
                    8c:ea:ab:38:d0:71:23:8c:66:ab:1e:52:03:74:29:
                    93:dd:ff:45:a3:b8:46:fd:2c:12:9f:0a:da:34:bd:
                    b8:d5:61:15:d0:79:8c:de:0b:92:03:5b:51:a3:64:
                    99:a2:97:13:77:d7:ea:4e:05:62:13:eb:61:3e:5c:
                    67:45:1a:7a:9e:9e:98:bb:84:b9:9c:08:98:bf:7b:
                    5b:5a:31:aa:8e:14:ed:e7:da:af:78:8b:fd:3f:5b:
                    89:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C3:ED:92:FD:43:04:8A:56:A2:E9:8E:F7:AE:A8:D5:5F:C6:C1:B0
            X509v3 Authority Key Identifier:
                keyid:D0:9F:20:50:B7:3A:2C:E7:E8:2C:83:D4:74:FB:D6:1E:5F:37:23:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J8gULc6LOfoLIPUdPvWHl83I1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/0J8gULc6LOfoLIPUdPvWHl83I1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/0J8gULc6LOfoLIPUdPvWHl83I1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:89:e3:d5:f5:2e:3f:fc:98:82:cf:1a:70:13:b8:c5:0a:75:
         c9:2b:f9:af:f9:8d:05:35:b8:0f:40:1a:b7:a3:c1:7c:f7:19:
         e4:d8:10:d8:2e:04:e2:08:19:86:3c:0a:a2:5f:54:d7:36:90:
         ff:df:22:0e:06:12:44:07:86:17:89:27:a3:09:f2:05:82:91:
         99:3c:7c:cb:d4:71:3e:0d:3e:8d:4a:e5:8c:f5:9c:b1:db:ff:
         7f:9a:88:78:5f:aa:3c:ab:29:c5:34:11:99:31:14:ef:8a:79:
         73:8c:1c:2f:b1:6a:8f:60:42:6a:dd:c0:2f:54:c4:9f:11:ce:
         3e:0a:73:f2:b5:f2:4b:2b:bc:8e:fb:0b:dc:0c:92:83:5b:5a:
         14:dd:f6:ea:a0:24:18:2a:dc:a5:26:0c:1b:cc:f6:14:e3:8e:
         cd:de:f0:e3:8b:ad:ae:ee:d5:43:7d:18:dd:7c:9d:53:11:3e:
         a5:aa:cc:8d:cc:d8:3c:6b:94:9f:3a:a1:2c:ca:80:db:c2:60:
         66:65:20:9f:69:a3:cf:91:cf:47:87:87:63:3c:cb:a8:31:56:
         d2:64:66:9f:c0:ac:80:99:52:70:f9:dc:57:f8:04:0f:2e:96:
         7a:a3:11:02:e7:6c:ee:cf:a8:fe:fd:05:9e:d8:5b:ee:96:05:
         e4:5d:f3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:55:22 2024 by rpki-client on console-ams.rpki-client.org