Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft
File:                     r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft (raw, json)
Hash identifier:          3fCrG1VFv5GAz42yJKiOcP0P5dlCeor5G+FanUQeHlE=
Subject key identifier:   8B:92:6E:AA:D1:3F:E5:4F:A6:8F:84:2F:05:30:FB:AC:74:B6:04:A5
Authority key identifier: AF:FF:13:A6:7F:22:5C:3C:2A:60:66:58:C2:39:65:B8:19:1D:40:08
Certificate issuer:       /CN=afff13a67f225c3c2a606658c23965b8191d4008
Certificate serial:       01901DEBD4069ECAE85D1235FD6056F53791
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r_8Tpn8iXDwqYGZYwjlluBkdQAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft
Manifest number:          07EB
Signing time:             Sat 15 Jun 2024 22:01:52 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:52 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:52 +0000
Files and hashes:         1: r_8Tpn8iXDwqYGZYwjlluBkdQAg.crl (hash: ExjaY6YL/pkbJKzZ3qm4zD9xRS2l8X+CsRR6y+heEp8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r_8Tpn8iXDwqYGZYwjlluBkdQAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:d4:06:9e:ca:e8:5d:12:35:fd:60:56:f5:37:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afff13a67f225c3c2a606658c23965b8191d4008
        Validity
            Not Before: Jun 15 22:01:52 2024 GMT
            Not After : Jun 16 22:01:52 2024 GMT
        Subject: CN=8b926eaad13fe54fa68f842f0530fbac74b604a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a0:3c:6d:07:96:1f:13:ea:51:a2:dc:c1:99:
                    47:2e:57:e8:cd:f0:31:0b:d3:1f:d0:c0:ef:ed:c9:
                    81:3a:c0:70:c9:95:ee:90:0f:8b:50:2f:a5:2b:06:
                    9d:3f:ad:39:59:c9:83:5e:b4:2a:27:40:2d:0a:88:
                    28:af:e3:5a:f1:1a:0b:f2:4c:25:b9:8e:7d:79:5a:
                    b1:bf:e2:41:94:34:8d:e3:96:58:5a:3d:7d:3b:4c:
                    1b:14:2f:4e:02:76:f4:0c:fd:a8:56:49:00:08:50:
                    ee:5a:6d:6b:d7:6d:59:10:94:a9:1d:a8:72:c1:af:
                    16:c6:d1:89:0c:2a:d1:66:ee:10:56:44:90:a8:4b:
                    20:f4:ce:f8:54:81:70:7e:d6:17:f8:1a:56:73:d7:
                    5e:e1:26:f4:0b:94:ae:44:ff:5d:5a:35:f6:3f:6e:
                    d7:9c:98:c0:d5:09:67:0f:83:47:5c:55:c1:88:97:
                    dc:2f:f9:83:5a:87:07:8b:43:2a:99:ef:30:3e:96:
                    82:00:2e:35:fb:2b:c9:67:ca:c9:cd:08:3e:5e:1a:
                    37:4d:c8:14:9d:80:a1:34:be:46:17:fd:47:a4:67:
                    14:c3:87:4e:b4:97:45:07:4d:ac:89:c9:79:d5:15:
                    fd:56:22:2c:cf:3f:6c:88:17:0a:90:8a:8f:d8:32:
                    40:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:92:6E:AA:D1:3F:E5:4F:A6:8F:84:2F:05:30:FB:AC:74:B6:04:A5
            X509v3 Authority Key Identifier:
                keyid:AF:FF:13:A6:7F:22:5C:3C:2A:60:66:58:C2:39:65:B8:19:1D:40:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_8Tpn8iXDwqYGZYwjlluBkdQAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ac:a9:9e:93:31:71:b1:eb:31:14:ed:e1:0b:70:d5:19:e0:
         42:85:82:41:39:8a:ec:68:f1:c3:3d:38:f6:25:9d:a5:3a:29:
         d3:09:46:7f:c3:1b:23:3d:b9:b8:0a:73:84:68:51:ea:8a:37:
         43:a6:b6:11:d7:3b:78:19:5b:aa:46:8a:4b:33:51:06:bd:03:
         e3:b1:4a:70:0e:45:b3:c2:fb:80:ab:4a:82:bb:81:02:da:b6:
         df:15:1d:00:9a:b8:8c:dc:c5:9b:0f:b7:20:ce:17:b1:68:01:
         44:b1:3a:16:ed:0a:9a:3c:32:ea:24:0f:e5:c8:d7:65:12:d7:
         6a:76:76:b4:6b:b6:bd:12:84:16:cf:1c:81:16:f6:ca:cb:35:
         57:ed:ab:ed:9e:7d:1a:6b:65:0e:77:6d:80:a5:43:3d:65:e8:
         e3:ab:73:2f:9a:87:1a:b0:98:d5:36:65:7f:02:27:41:fb:c2:
         ab:79:84:d4:85:02:de:51:3d:29:e6:6b:46:f0:11:3b:af:43:
         72:8a:ce:76:22:37:58:3e:a3:3f:aa:d0:45:9a:d7:cd:da:3d:
         de:b8:db:4e:ba:59:76:dc:88:1e:3e:c7:34:db:09:b7:8e:95:
         a0:88:f5:ef:08:e0:74:cf:e6:54:fb:67:5d:40:d9:ac:ef:e7:
         ef:b5:c7:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd69QGnsroXRI1/WBW9TeRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZmYxM2E2N2YyMjVjM2MyYTYwNjY1OGMyMzk2NWI4MTkx
ZDQwMDgwHhcNMjQwNjE1MjIwMTUyWhcNMjQwNjE2MjIwMTUyWjAzMTEwLwYDVQQD
Eyg4YjkyNmVhYWQxM2ZlNTRmYTY4Zjg0MmYwNTMwZmJhYzc0YjYwNGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaA8bQeWHxPqUaLcwZlHLlfozfAx
C9Mf0MDv7cmBOsBwyZXukA+LUC+lKwadP605WcmDXrQqJ0AtCogor+Na8RoL8kwl
uY59eVqxv+JBlDSN45ZYWj19O0wbFC9OAnb0DP2oVkkACFDuWm1r121ZEJSpHahy
wa8WxtGJDCrRZu4QVkSQqEsg9M74VIFwftYX+BpWc9de4Sb0C5SuRP9dWjX2P27X
nJjA1QlnD4NHXFXBiJfcL/mDWocHi0Mqme8wPpaCAC41+yvJZ8rJzQg+Xho3TcgU
nYChNL5GF/1HpGcUw4dOtJdFB02sicl51RX9ViIszz9siBcKkIqP2DJAQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuSbqrRP+VPpo+ELwUw+6x0tgSlMB8GA1UdIwQY
MBaAFK//E6Z/Ilw8KmBmWMI5ZbgZHUAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl84VHBuOGlYRHdxWUdaWXdqbGx1QmtkUUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84ZjA2M2MtMTE5YS00N2EwLThiMGQt
NmQyYjJiYTJhODhhLzEvcl84VHBuOGlYRHdxWUdaWXdqbGx1QmtkUUFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS84ZjA2M2MtMTE5YS00N2EwLThiMGQtNmQyYjJiYTJhODhh
LzEvcl84VHBuOGlYRHdxWUdaWXdqbGx1QmtkUUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACqypnpMx
cbHrMRTt4Qtw1RngQoWCQTmK7Gjxwz049iWdpTop0wlGf8MbIz25uApzhGhR6oo3
Q6a2Edc7eBlbqkaKSzNRBr0D47FKcA5Fs8L7gKtKgruBAtq23xUdAJq4jNzFmw+3
IM4XsWgBRLE6Fu0Kmjwy6iQP5cjXZRLXanZ2tGu2vRKEFs8cgRb2yss1V+2r7Z59
GmtlDndtgKVDPWXo46tzL5qHGrCY1TZlfwInQfvCq3mE1IUC3lE9KeZrRvARO69D
corOdiI3WD6jP6rQRZrXzdo93rjbTrpZdtyIHj7HNNsJt46VoIj17wjgdM/mVPtn
XUDZrO/n77XHzg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:56:25 2024 by rpki-client on console-ams.rpki-client.org