Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
File:                     qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft (raw, json)
Hash identifier:          rfHCiC4MLTg65EDQF2YeHeY6JahsLQipUYsbEMONB4k=
Subject key identifier:   81:2E:42:89:B4:0F:F9:09:E4:03:84:B9:93:FD:3D:35:68:F1:8A:99
Authority key identifier: A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A
Certificate issuer:       /CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a
Certificate serial:       01901DECAA522A64F7B1F82A1288A3F48C23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
Manifest number:          1156
Signing time:             Sat 15 Jun 2024 22:02:47 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:47 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:47 +0000
Files and hashes:         1: qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl (hash: pFe5SvbywI99JE6lUwy0f/r6ufezVja64sMEDV9EwNc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:aa:52:2a:64:f7:b1:f8:2a:12:88:a3:f4:8c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a
        Validity
            Not Before: Jun 15 22:02:47 2024 GMT
            Not After : Jun 16 22:02:47 2024 GMT
        Subject: CN=812e4289b40ff909e40384b993fd3d3568f18a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:50:63:b3:41:b7:f9:5f:b2:70:bb:22:f4:95:
                    4a:0c:75:13:b2:54:c8:00:be:8c:58:58:5c:a1:80:
                    5c:47:60:a4:b4:16:a1:57:15:e5:5e:74:1a:b9:89:
                    2d:fc:fc:2d:a5:dd:f3:fa:bc:31:01:17:84:a7:bf:
                    fd:38:ce:51:66:a7:a3:70:9f:ff:91:ab:3a:6b:ec:
                    90:cf:56:20:9c:10:36:8d:1e:f4:9a:d6:c2:28:34:
                    c0:01:5b:2e:d8:61:42:77:a7:e7:27:6b:f7:34:38:
                    18:cd:db:89:cb:48:34:98:1d:e9:ed:72:1b:54:3f:
                    f2:eb:de:2e:1e:5f:a9:ee:21:10:de:b9:12:21:8c:
                    84:b4:3b:43:e4:76:b5:6f:26:5f:52:72:86:57:fb:
                    5d:d9:05:4e:f2:24:55:35:cb:90:55:d4:6d:fc:fc:
                    a1:78:54:78:a2:fc:74:9a:6b:b4:a7:21:d3:07:c5:
                    7e:7a:cf:dc:b8:c2:7b:cc:50:4a:78:53:15:f7:59:
                    18:b0:f8:2e:b6:50:37:c4:c5:35:56:2a:88:f8:9d:
                    22:b0:b8:04:b6:7f:49:7f:64:b4:0c:68:44:ae:1a:
                    4b:0a:cd:c8:a2:d6:0a:cb:7a:bb:ee:82:c6:ba:90:
                    85:f5:da:ba:1e:2c:f1:5c:61:41:8e:73:07:9c:e8:
                    54:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2E:42:89:B4:0F:F9:09:E4:03:84:B9:93:FD:3D:35:68:F1:8A:99
            X509v3 Authority Key Identifier:
                keyid:A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:26:2f:2d:b1:7a:8e:84:0d:39:73:a5:4b:1a:41:1b:3f:73:
         30:51:a1:9a:b4:b4:1e:1f:c5:b7:ab:b9:f3:ad:2c:64:47:8a:
         0c:db:fb:99:55:40:11:c0:51:dd:a1:67:a1:37:25:61:14:e2:
         90:7b:91:6d:5a:5a:d5:67:e4:56:b7:64:b3:09:d6:80:97:f6:
         af:46:3a:0a:47:b1:fb:de:9b:06:ab:04:ca:a7:2e:25:24:96:
         f1:a6:49:db:5e:65:41:b1:d1:bc:a9:d5:aa:8f:0f:33:2d:59:
         5b:c8:a7:39:02:d7:f6:1d:0d:d7:bf:1f:48:05:a6:2f:da:9e:
         89:17:c4:64:f6:4a:40:2f:18:54:8e:81:07:35:f6:92:3e:a0:
         3d:88:71:cd:47:fb:d3:48:b2:ab:f7:1e:2e:c8:c4:c4:fa:cd:
         3c:e1:80:4f:b6:e0:60:59:28:66:96:34:d3:bf:af:6f:36:af:
         da:c4:f2:7d:40:82:af:7b:6b:04:c3:ba:b2:33:78:1a:71:3a:
         d9:94:e7:21:1e:d1:24:89:7f:d2:ac:26:8a:cf:7a:a2:1d:34:
         e4:10:d0:01:52:93:88:55:97:54:af:35:4a:26:d3:b1:f0:ff:
         9e:9a:7a:26:39:64:d4:2e:9b:7f:17:9a:cd:52:cc:05:59:63:
         61:31:a6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:57:01 2024 by rpki-client on console-ams.rpki-client.org