Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft
File:                     xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft (raw, json)
Hash identifier:          fUSw2BqPPV75NRXyH1YyJ+I+A791JAb56W+RTpFO42E=
Subject key identifier:   17:61:AC:14:89:3F:DE:FD:7D:2C:9B:DA:19:03:8F:F2:C5:72:FE:F4
Authority key identifier: C5:96:78:54:76:EF:BA:E7:7F:96:1D:23:05:70:57:FA:03:6F:B2:7F
Certificate issuer:       /CN=c596785476efbae77f961d23057057fa036fb27f
Certificate serial:       01904566B3E1FF706C08E21D3A5FA45C3EF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xZZ4VHbvuud_lh0jBXBX-gNvsn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft
Manifest number:          1086
Signing time:             Sun 23 Jun 2024 14:01:16 +0000
Manifest this update:     Sun 23 Jun 2024 14:01:16 +0000
Manifest next update:     Mon 24 Jun 2024 14:01:16 +0000
Files and hashes:         1: xZZ4VHbvuud_lh0jBXBX-gNvsn8.crl (hash: 2I+aZIRrDxGmbHEU1RUsNlGhcwqOpV+EIGhChG6i2WQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xZZ4VHbvuud_lh0jBXBX-gNvsn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:66:b3:e1:ff:70:6c:08:e2:1d:3a:5f:a4:5c:3e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c596785476efbae77f961d23057057fa036fb27f
        Validity
            Not Before: Jun 23 14:01:16 2024 GMT
            Not After : Jun 24 14:01:16 2024 GMT
        Subject: CN=1761ac14893fdefd7d2c9bda19038ff2c572fef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5f:92:56:e6:2b:5a:ee:8b:99:4e:1b:33:99:
                    1e:ce:a6:9f:4b:f9:cd:d3:88:06:0f:9d:ed:c9:65:
                    59:55:f0:a8:e7:c1:64:62:54:fb:14:31:db:04:28:
                    18:63:74:19:80:0d:d9:71:89:a8:80:e2:65:76:02:
                    1a:4b:01:29:ca:bc:ab:32:37:bc:d1:ad:f2:d4:fd:
                    3a:ae:5c:90:f1:f8:7d:3d:79:bc:d3:52:c1:07:e8:
                    94:cb:f1:3f:de:43:18:78:99:3b:fc:b4:64:d6:47:
                    c6:f7:68:89:66:06:9f:cf:5b:71:37:28:ff:66:08:
                    ea:ff:7c:3b:b9:a4:84:5b:96:44:27:eb:c1:5f:3d:
                    a8:5c:fa:7a:d8:35:a2:43:4b:29:e6:62:07:04:16:
                    b5:f8:db:ad:8a:3a:a7:93:4c:86:35:5e:17:21:ea:
                    7b:76:66:8f:53:37:4f:38:fb:f9:17:17:2a:5d:ed:
                    c2:62:29:72:be:d2:b6:fc:61:09:ca:8e:e8:f1:b3:
                    1b:54:59:e5:0c:6a:f4:c8:ee:71:ce:db:55:bb:b6:
                    31:d5:69:f1:56:46:78:27:08:8e:dd:b8:1a:a6:c1:
                    b5:ee:3f:33:3d:1c:20:db:bd:b2:58:c3:0a:7b:c3:
                    e2:46:75:76:0e:8e:96:1e:cd:ac:a2:c2:09:37:d4:
                    e1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:61:AC:14:89:3F:DE:FD:7D:2C:9B:DA:19:03:8F:F2:C5:72:FE:F4
            X509v3 Authority Key Identifier:
                keyid:C5:96:78:54:76:EF:BA:E7:7F:96:1D:23:05:70:57:FA:03:6F:B2:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZZ4VHbvuud_lh0jBXBX-gNvsn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:aa:4e:ff:30:ac:a1:a9:f2:19:55:dc:36:e9:d0:61:a3:54:
         ec:23:db:c1:c6:f1:54:07:2a:0b:31:6f:a6:4f:5c:fc:de:8b:
         0d:ff:3e:24:d1:cc:32:86:d6:47:4b:3d:9a:5c:78:8f:82:f4:
         9a:c3:05:79:fe:49:ce:fd:1b:3d:33:fe:60:0c:9e:8d:92:6f:
         76:03:3d:63:9d:69:3c:91:f5:ae:e0:21:1f:f6:c9:76:d9:ce:
         66:0c:78:ad:29:ec:7b:f7:3c:1e:39:2a:1c:69:0a:f7:2f:00:
         82:ad:2c:69:32:ec:4d:b5:ba:d6:e6:df:f1:76:e9:5e:80:38:
         aa:ec:c6:c6:38:1a:00:b2:db:35:3e:34:69:4a:3b:49:8c:ce:
         aa:19:8a:7e:58:e8:1d:df:0e:9f:6d:52:ba:af:3e:3e:15:8c:
         75:15:ef:2a:33:e3:2e:cb:9c:5b:1a:70:f3:3e:9c:91:95:16:
         a2:a6:d8:2a:c2:8f:08:09:80:21:52:6b:ad:a4:76:9c:4f:e7:
         2a:4b:2e:d5:78:31:37:aa:0e:ba:65:67:fa:a6:c1:54:17:db:
         63:a1:d7:2f:f4:6d:06:f6:08:b7:27:23:e9:b2:de:1f:e3:3d:
         07:cd:ae:2a:2b:19:ae:a9:51:c7:1e:84:1b:aa:9a:86:9e:31:
         94:bf:9b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:16:47 2024 by rpki-client on console-fra.rpki-client.org