Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
File:                     _tPwXKP9-ef5nGXMagpnJPWTGnA.mft (raw, json)
Hash identifier:          OoiPfPVbx4D7zVcgL0T+OCQjHOc6R9fbPeWj8Zh9UwU=
Subject key identifier:   A4:00:98:59:88:3D:76:2B:6A:CC:84:F7:0B:A7:05:E9:7A:DF:CA:37
Authority key identifier: FE:D3:F0:5C:A3:FD:F9:E7:F9:9C:65:CC:6A:0A:67:24:F5:93:1A:70
Certificate issuer:       /CN=fed3f05ca3fdf9e7f99c65cc6a0a6724f5931a70
Certificate serial:       01901DEBE3CF4E22C1836F90928D8F662CA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_tPwXKP9-ef5nGXMagpnJPWTGnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
Manifest number:          11C1
Signing time:             Sat 15 Jun 2024 22:01:56 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:56 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:56 +0000
Files and hashes:         1: _tPwXKP9-ef5nGXMagpnJPWTGnA.crl (hash: /BKVlC1geEYZVXJp37MG6uV/ZP1Uc4GrUcXvvOK3jlA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_tPwXKP9-ef5nGXMagpnJPWTGnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:e3:cf:4e:22:c1:83:6f:90:92:8d:8f:66:2c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fed3f05ca3fdf9e7f99c65cc6a0a6724f5931a70
        Validity
            Not Before: Jun 15 22:01:56 2024 GMT
            Not After : Jun 16 22:01:56 2024 GMT
        Subject: CN=a4009859883d762b6acc84f70ba705e97adfca37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3f:c3:49:71:b6:da:e7:5f:9c:ec:6b:e7:91:
                    53:4d:9a:7a:43:36:bb:79:aa:27:cc:39:23:4e:e7:
                    f1:d1:04:e2:ab:0b:1b:e6:8f:87:c4:e9:84:8e:0a:
                    65:3a:8d:86:2a:8a:e6:cb:62:31:27:bd:ad:07:c9:
                    a3:bf:ae:e1:b5:ec:03:c3:9c:f8:7a:7c:a1:21:ac:
                    ff:80:60:d6:e6:6b:1c:57:57:83:a9:ec:f0:9f:d0:
                    56:11:76:8c:6d:88:20:33:ef:e5:bb:46:fc:75:bf:
                    82:10:da:47:25:37:c6:d3:e9:b8:77:25:44:98:f6:
                    0f:98:09:9d:59:22:e1:11:e3:ba:e6:7c:64:21:94:
                    9f:0d:48:16:cc:c8:63:1d:0e:79:6e:77:f8:20:97:
                    6f:ad:d3:a5:78:8e:90:1c:a6:60:3f:bd:39:72:2f:
                    c0:32:7f:ed:63:f5:91:34:de:84:42:f1:89:f1:81:
                    d2:e5:3f:68:13:c9:27:89:ff:fc:ac:16:9c:ba:a4:
                    85:3a:f3:c1:4f:1b:6e:15:83:9d:ed:a2:b3:dd:50:
                    0d:c8:e8:32:41:71:56:e9:47:b4:ab:ea:65:a3:57:
                    26:0e:15:b7:27:c4:e0:7a:98:ed:aa:1d:02:1a:c2:
                    c4:0d:c0:c0:f4:ec:07:cf:d9:4e:aa:89:13:9a:4f:
                    59:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:00:98:59:88:3D:76:2B:6A:CC:84:F7:0B:A7:05:E9:7A:DF:CA:37
            X509v3 Authority Key Identifier:
                keyid:FE:D3:F0:5C:A3:FD:F9:E7:F9:9C:65:CC:6A:0A:67:24:F5:93:1A:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tPwXKP9-ef5nGXMagpnJPWTGnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:ac:60:92:a6:95:80:ec:a4:82:6a:d6:0c:78:26:e1:e3:35:
         a0:24:b1:c2:9e:2c:6b:d0:fa:17:e3:14:91:44:b0:c4:88:99:
         e9:aa:02:c5:dd:f2:60:b5:a0:ef:9a:2f:2e:ae:84:9f:76:6d:
         45:0f:aa:1e:7d:5d:9b:b0:10:68:14:d7:b2:64:c0:ac:01:2a:
         e5:57:e9:59:a2:7a:08:f2:e7:9a:95:e0:07:8d:fa:2c:b4:88:
         1c:e7:e4:6b:a5:6a:be:e3:1c:cb:1c:b5:7d:be:8c:5f:44:ad:
         ec:c9:1e:7a:30:5b:54:5f:83:84:cb:6a:82:e3:79:b6:35:8b:
         97:40:ce:5d:c1:b8:de:2a:1a:f1:49:39:64:de:cd:8a:7a:6d:
         ab:63:ad:12:44:75:b9:ac:71:da:cf:a2:fd:75:c8:a5:85:6e:
         76:8a:75:07:d4:49:c3:84:b2:b2:bf:c7:88:3f:20:0c:9b:b3:
         f1:c7:10:00:54:8a:3f:d5:26:9a:6d:74:40:8b:23:d3:c1:19:
         58:c1:a6:ab:6a:22:4f:f9:4d:39:f2:e9:1d:ae:30:e7:47:20:
         eb:ab:d7:84:0e:9b:72:4d:87:1b:b9:3d:b3:e6:93:54:8f:f0:
         b9:b8:dc:72:eb:27:4b:78:61:ac:b0:76:fd:01:cd:ba:aa:b0:
         77:40:3b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:36:42 2024 by rpki-client on console-ams.rpki-client.org