Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
File:                     n9e3i11VWv7XZxyRbCbrf_x-LJo.mft (raw, json)
Hash identifier:          V+fXX52Em3amPK9i63ulbePkOUZ42lh+N+6eb2aoSYQ=
Subject key identifier:   C8:1A:54:2E:C9:3B:F4:78:63:30:15:9A:37:96:31:69:33:9B:12:FB
Authority key identifier: 9F:D7:B7:8B:5D:55:5A:FE:D7:67:1C:91:6C:26:EB:7F:FC:7E:2C:9A
Certificate issuer:       /CN=9fd7b78b5d555afed7671c916c26eb7ffc7e2c9a
Certificate serial:       01901EC69F7F7766C7C384013C29F5822C7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
Manifest number:          C2
Signing time:             Sun 16 Jun 2024 02:00:51 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:51 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:51 +0000
Files and hashes:         1: n9e3i11VWv7XZxyRbCbrf_x-LJo.crl (hash: 1XHRPLTNcW2EvjAkrNQ7+0VOWlZpGBhDBWnDkTUqC6k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:9f:7f:77:66:c7:c3:84:01:3c:29:f5:82:2c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fd7b78b5d555afed7671c916c26eb7ffc7e2c9a
        Validity
            Not Before: Jun 16 02:00:51 2024 GMT
            Not After : Jun 17 02:00:51 2024 GMT
        Subject: CN=c81a542ec93bf4786330159a37963169339b12fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:8c:45:d1:0f:fc:fb:e7:b1:6d:48:88:65:55:
                    6a:4f:99:04:2f:70:18:5b:3b:76:00:38:3e:82:41:
                    81:d3:ca:3b:29:3e:c6:54:af:d7:bf:f9:dc:03:c0:
                    ed:49:0c:ca:0d:8a:41:a9:a1:55:87:cc:58:65:78:
                    c9:0a:71:05:d4:5f:d3:b3:38:d0:8b:b3:64:5b:c7:
                    f9:26:60:54:35:1f:2b:38:24:69:fe:9c:19:9d:fa:
                    34:11:cb:3b:9a:db:15:20:f5:4f:78:e5:dd:fe:aa:
                    22:a1:80:6c:b4:14:07:5c:ad:e7:15:d9:ee:ff:0e:
                    25:d5:52:a2:25:30:b5:b3:52:55:98:03:db:98:0b:
                    bc:60:df:d8:07:e3:31:6a:fb:cd:c9:47:d6:b3:d6:
                    33:7f:b4:5f:c3:f5:0b:d8:e4:a9:38:cb:6b:cd:36:
                    81:39:36:a5:b4:0e:b9:50:bb:9d:38:e0:c4:bb:67:
                    98:19:95:df:8a:88:8e:e5:87:8e:db:db:2a:fd:18:
                    4b:d0:66:c3:fd:a5:0a:d3:db:a8:c6:3f:4f:17:b5:
                    e7:c5:e0:82:7d:43:70:77:f6:d4:ac:60:45:fd:4d:
                    05:1c:25:43:d8:ad:c6:03:c0:8c:dd:e8:71:a2:27:
                    7b:53:70:b6:ed:a4:bd:84:89:5a:3c:02:a9:dc:c3:
                    65:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1A:54:2E:C9:3B:F4:78:63:30:15:9A:37:96:31:69:33:9B:12:FB
            X509v3 Authority Key Identifier:
                keyid:9F:D7:B7:8B:5D:55:5A:FE:D7:67:1C:91:6C:26:EB:7F:FC:7E:2C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:50:a6:85:c9:ab:3b:74:31:46:5f:84:bc:84:80:bc:f7:18:
         06:04:f0:e9:ac:36:52:5e:d0:c1:cd:6c:67:87:35:38:cf:da:
         9c:7d:c1:ce:9f:50:87:67:43:bf:ae:ed:38:10:d6:5f:55:a4:
         cb:71:1c:26:f1:a7:2d:c3:4c:10:69:4d:df:1a:3a:29:b0:b4:
         32:51:c4:cd:3a:03:e5:94:72:d1:5b:19:1c:7d:4b:1a:2f:7a:
         4d:d8:62:38:fb:a4:67:30:5e:56:b3:ed:32:02:c7:d9:ea:ec:
         a6:08:07:ab:14:b2:f3:e4:d8:85:8b:d6:98:c3:19:06:45:a7:
         46:73:20:c9:de:3a:ab:58:57:0b:f6:8a:4c:ce:fb:32:a7:98:
         80:34:ac:98:62:fa:1c:9e:21:a0:be:64:b6:5e:c2:9c:87:22:
         ab:ae:35:c4:50:1d:29:bd:98:6a:cf:37:25:83:89:a5:c8:56:
         62:f3:84:eb:18:14:f2:f4:26:c8:66:e3:7f:51:ff:de:37:42:
         44:97:b0:e9:8f:a7:e2:38:b0:9a:3c:bd:74:3f:71:f1:84:cb:
         c8:bb:9b:6e:bd:9b:0c:05:4b:fd:75:26:a2:6b:7f:4e:29:68:
         dd:8d:7b:32:80:d2:3f:a5:e8:64:0d:94:7c:81:79:e2:e5:0d:
         aa:02:9b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:56:59 2024 by rpki-client on console-ams.rpki-client.org