Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
File:                     t6K9aUc7So6Fp2r72OW77ptLs0s.mft (raw, json)
Hash identifier:          f0kGabZSEKF7r8UMI+1BbtIJV89+HYHX400UGE/Cg2w=
Subject key identifier:   7D:5A:0B:D5:01:44:E5:25:89:5C:8F:AC:ED:3B:AD:D0:DB:B2:48:0E
Authority key identifier: B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B
Certificate issuer:       /CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b
Certificate serial:       01901DEBBD04E6965602B607EDB94B3608BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
Manifest number:          0B2A
Signing time:             Sat 15 Jun 2024 22:01:46 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:46 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:46 +0000
Files and hashes:         1: t6K9aUc7So6Fp2r72OW77ptLs0s.crl (hash: HyxeZNQ9yR6GfmzPTcMPZOSsVFHhGMhD+vmepL0VlD4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:bd:04:e6:96:56:02:b6:07:ed:b9:4b:36:08:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b
        Validity
            Not Before: Jun 15 22:01:46 2024 GMT
            Not After : Jun 16 22:01:46 2024 GMT
        Subject: CN=7d5a0bd50144e525895c8faced3badd0dbb2480e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:85:97:30:72:c4:61:c9:41:cc:b4:ac:f8:c3:
                    c8:29:5f:e6:18:da:5b:21:a3:89:76:81:ef:4a:a0:
                    50:66:1c:ba:5d:6a:f6:1c:34:da:80:c8:8e:92:0d:
                    c7:ef:cb:58:1e:85:ae:a4:83:41:4b:84:34:c9:8d:
                    c7:db:4f:4f:77:64:76:14:da:8a:4e:01:a0:e5:5f:
                    2e:6c:4d:fd:8f:11:ab:94:7e:f9:eb:43:11:ca:48:
                    bf:eb:fe:af:df:35:15:84:5f:14:b1:d8:4e:0b:06:
                    f8:9b:b5:43:7b:2d:27:e3:b3:6a:15:2f:77:fd:7c:
                    6a:c4:4c:4d:ed:24:98:85:19:c7:66:e1:8b:9d:1f:
                    9e:f6:70:a8:6d:b7:c3:50:7b:fa:56:d2:ef:0c:6d:
                    25:b8:53:b8:3d:21:19:22:b7:ed:54:a6:07:2c:8e:
                    51:17:6e:e4:78:ca:0c:f8:b0:9a:48:5b:ae:cd:97:
                    c6:dc:e0:c2:cd:a6:7c:36:86:a4:1d:10:4d:86:7d:
                    42:fa:88:2e:a9:a3:14:28:b9:d5:24:ff:72:c9:b7:
                    34:b4:ce:15:8d:75:45:e7:3e:56:d6:d3:51:7a:67:
                    ff:fd:1c:f4:f7:a9:db:ba:6d:38:cc:2a:10:56:14:
                    a3:e0:c9:df:d6:f5:72:e0:1d:67:ef:1d:1c:94:da:
                    96:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5A:0B:D5:01:44:E5:25:89:5C:8F:AC:ED:3B:AD:D0:DB:B2:48:0E
            X509v3 Authority Key Identifier:
                keyid:B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:02:77:17:0d:55:08:b1:22:df:3b:24:72:32:c7:1e:48:82:
         f1:bc:ab:0e:b0:af:29:ce:3d:ef:a7:11:4e:bf:90:a3:9b:d4:
         29:22:ed:71:0a:53:ff:d9:62:66:a5:81:a0:d1:97:07:63:b7:
         4a:41:c6:40:08:c8:c6:75:3b:8c:5e:77:66:2c:a9:50:48:44:
         9f:fb:da:47:91:ba:cf:48:ec:7b:51:ae:60:f0:49:97:d2:c2:
         19:cc:46:96:c0:e6:ab:25:88:be:60:64:53:ab:dc:59:77:88:
         9d:34:16:c1:4d:6f:ef:4d:59:0d:42:09:49:3a:be:9a:37:92:
         01:58:70:56:42:af:b7:39:77:0f:1b:48:62:a1:6d:29:b3:a3:
         6f:37:8e:10:db:6f:11:76:de:9d:b9:e8:23:75:89:1f:8d:10:
         46:92:f9:0b:3c:e7:15:32:f3:2e:d6:60:29:dd:59:33:f2:ab:
         fe:7a:c4:08:fb:ce:81:f0:3a:8d:08:99:7f:0d:fb:f4:48:01:
         92:20:49:f6:87:f4:b3:3b:bc:59:31:80:b7:6d:4a:1c:28:7d:
         06:87:df:4d:f6:99:f7:85:e1:fc:6c:bd:8d:ac:09:52:c4:f6:
         d2:71:73:ce:dd:57:90:3c:ea:53:64:9e:88:89:e2:74:5d:e8:
         7c:15:84:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:01:18 2024 by rpki-client on console-fra.rpki-client.org