Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
File:                     NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft (raw, json)
Hash identifier:          pmaIQF9Yvl6zKRmTpTRRnojDSqzvJ0/rm8l+0dVh1Rk=
Subject key identifier:   3D:66:06:D7:43:85:A1:80:B1:3A:57:D2:D7:94:EC:99:EE:84:74:7E
Authority key identifier: 36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57
Certificate issuer:       /CN=36d8c1a73b1595109d26067b4291f71dc1db9957
Certificate serial:       01901EC7110E5FCE4AEB853EA42804A68470
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
Manifest number:          0BD2
Signing time:             Sun 16 Jun 2024 02:01:20 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:20 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:20 +0000
Files and hashes:         1: NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl (hash: V8rPuTu9OTvVg7nLQ33eotihMJXt9iyvAZr9euskQaQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c7:11:0e:5f:ce:4a:eb:85:3e:a4:28:04:a6:84:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36d8c1a73b1595109d26067b4291f71dc1db9957
        Validity
            Not Before: Jun 16 02:01:20 2024 GMT
            Not After : Jun 17 02:01:20 2024 GMT
        Subject: CN=3d6606d74385a180b13a57d2d794ec99ee84747e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cb:7e:4e:a6:93:8c:d5:da:cf:1a:34:98:78:
                    25:5a:00:59:da:f2:16:74:f1:46:55:20:82:bb:bf:
                    fc:f7:8c:f6:42:03:e8:55:1d:e1:a0:50:dd:bb:2e:
                    65:94:f5:6e:da:1c:71:ef:35:2c:4d:69:39:82:1c:
                    79:3a:76:4b:45:49:14:63:21:c7:60:54:6b:28:ff:
                    22:b0:ec:d5:dc:ef:92:4c:44:50:0f:8e:7e:1e:1c:
                    e0:64:b8:c9:0c:79:04:73:57:38:28:2d:42:a1:95:
                    c6:bf:66:61:17:6f:c1:57:b0:41:f5:7a:10:7f:43:
                    df:c0:46:ef:f6:0d:c1:d0:61:6e:6a:6a:59:c9:da:
                    97:e0:2f:bc:d9:64:cf:36:0a:30:8e:a5:db:61:42:
                    a1:e2:e2:b1:c2:17:88:72:04:70:33:59:02:f3:a9:
                    d2:5f:ae:7d:7f:2e:c0:72:0b:10:4f:54:5d:c7:a2:
                    8b:9c:a6:2c:c8:a2:df:f9:4c:43:ba:52:3f:68:5b:
                    e0:1f:8a:ee:85:ec:74:9f:d2:93:23:88:5f:12:aa:
                    0d:ba:b1:49:6c:1a:a1:bf:c6:4b:2f:e0:f1:d7:7a:
                    5e:4b:ef:f1:a8:7a:6f:1d:2c:66:1c:06:d5:c7:16:
                    fd:de:11:e2:cf:e9:e7:e5:1f:12:4e:0e:cb:01:41:
                    02:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:66:06:D7:43:85:A1:80:B1:3A:57:D2:D7:94:EC:99:EE:84:74:7E
            X509v3 Authority Key Identifier:
                keyid:36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ae:bb:23:68:4b:94:29:50:fa:1e:ab:db:0e:f8:b4:6b:97:
         73:6a:52:94:af:0f:78:ec:6c:a6:e8:ad:40:71:da:a0:10:1f:
         73:ed:d4:75:bf:af:d9:63:12:c5:7e:be:d4:6b:0f:fe:65:e6:
         7d:8f:ce:ed:d2:dd:03:f2:71:0f:a0:83:20:43:c4:98:58:4e:
         e7:b2:39:53:04:f8:c8:7a:49:71:47:6b:dd:83:f5:a6:86:a5:
         67:cc:91:8e:9d:a1:a7:48:00:55:db:fa:86:a1:b3:10:2d:48:
         a4:5b:a5:3e:91:e3:88:ed:d1:10:24:5d:01:26:4c:55:a1:95:
         2d:9a:de:12:57:a5:a2:ea:f5:48:68:91:b5:d8:99:9c:d0:5e:
         f9:41:b6:16:69:d4:da:40:b1:74:56:8e:66:25:2d:fd:62:e1:
         5d:35:c2:ec:27:6c:fe:e9:44:2a:d4:ab:77:04:7c:d5:b2:7e:
         a0:28:a2:70:56:a7:fb:8d:61:8c:bb:ad:55:a6:9d:51:41:d0:
         98:21:cb:3e:b4:42:99:64:9f:c1:19:47:5e:58:15:61:29:01:
         6d:b5:95:a8:6a:cf:71:d2:3e:8f:05:14:13:05:98:32:63:df:
         0f:11:ec:0c:18:71:25:96:93:dd:39:f3:31:de:1b:a8:3a:85:
         2d:20:22:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:00:39 2024 by rpki-client on console-fra.rpki-client.org