Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/24863f-a57f-40bd-bd42-736e03651a7f/1/G6n4fDCeO03sinEM5OsJKTh4tQA.mft
File:                     G6n4fDCeO03sinEM5OsJKTh4tQA.mft (raw, json)
Hash identifier:          j4TbqFkCFiIyj4B9q5MbklbwM+faqfYlprpAJGMccm0=
Subject key identifier:   E7:8B:1A:C7:2D:81:8A:DB:1A:16:F1:FF:92:06:EF:3E:F0:9F:E6:30
Authority key identifier: 1B:A9:F8:7C:30:9E:3B:4D:EC:8A:71:0C:E4:EB:09:29:38:78:B5:00
Certificate issuer:       /CN=1ba9f87c309e3b4dec8a710ce4eb09293878b500
Certificate serial:       01901F35004FF6B18A9D815B9254D61A546C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6n4fDCeO03sinEM5OsJKTh4tQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/24863f-a57f-40bd-bd42-736e03651a7f/1/G6n4fDCeO03sinEM5OsJKTh4tQA.mft
Manifest number:          1155
Signing time:             Sun 16 Jun 2024 04:01:25 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:25 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:25 +0000
Files and hashes:         1: G6n4fDCeO03sinEM5OsJKTh4tQA.crl (hash: 2scItnj1Cem4fv3AcwvyyB55Y2lL8u/AJaqq0DMiHBg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/24863f-a57f-40bd-bd42-736e03651a7f/1/G6n4fDCeO03sinEM5OsJKTh4tQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/24863f-a57f-40bd-bd42-736e03651a7f/1/G6n4fDCeO03sinEM5OsJKTh4tQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G6n4fDCeO03sinEM5OsJKTh4tQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:35:00:4f:f6:b1:8a:9d:81:5b:92:54:d6:1a:54:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba9f87c309e3b4dec8a710ce4eb09293878b500
        Validity
            Not Before: Jun 16 04:01:25 2024 GMT
            Not After : Jun 17 04:01:25 2024 GMT
        Subject: CN=e78b1ac72d818adb1a16f1ff9206ef3ef09fe630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9d:3a:2d:f5:63:fc:4f:d6:91:64:e4:1e:de:
                    06:97:cf:96:3d:aa:67:cb:19:28:1f:17:41:28:35:
                    68:6a:c8:5d:67:15:9a:c9:31:26:08:78:0b:e8:c1:
                    27:f6:15:12:25:2f:40:42:03:aa:3a:60:7e:42:2c:
                    76:ec:9d:f0:39:ec:fd:cc:5d:08:dc:4e:d7:27:66:
                    c7:40:1f:f9:8b:f0:63:47:2f:1c:e0:69:ec:fc:a1:
                    5a:3e:f3:77:de:49:e6:ce:5d:62:43:4e:f3:79:f7:
                    b0:a2:c9:13:0b:35:0d:0f:b4:f8:c6:6a:01:12:27:
                    c2:53:e2:63:d6:a9:b7:79:14:81:9a:3e:fc:b9:d7:
                    1e:b1:07:96:08:fc:fa:20:1d:de:66:47:30:3c:4c:
                    f6:6b:52:d3:5f:dd:27:9b:15:62:29:10:e9:ec:b8:
                    e2:ad:65:05:e1:2e:bf:36:20:bf:fe:61:04:28:5f:
                    1a:37:15:ea:c1:f4:0c:8e:ff:77:97:7b:66:45:ab:
                    bc:d5:07:4b:9f:4b:5e:f7:73:83:e5:26:f0:3a:c7:
                    a2:f2:a9:59:2f:1d:66:8c:04:af:2a:ce:08:9d:f0:
                    3e:64:c5:13:93:27:79:81:d3:85:39:97:06:8e:69:
                    b3:3b:c7:9e:7a:80:0e:21:50:6e:35:19:e2:0c:71:
                    7f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8B:1A:C7:2D:81:8A:DB:1A:16:F1:FF:92:06:EF:3E:F0:9F:E6:30
            X509v3 Authority Key Identifier:
                keyid:1B:A9:F8:7C:30:9E:3B:4D:EC:8A:71:0C:E4:EB:09:29:38:78:B5:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6n4fDCeO03sinEM5OsJKTh4tQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/24863f-a57f-40bd-bd42-736e03651a7f/1/G6n4fDCeO03sinEM5OsJKTh4tQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/24863f-a57f-40bd-bd42-736e03651a7f/1/G6n4fDCeO03sinEM5OsJKTh4tQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:c4:43:f8:db:d5:0d:2c:51:ce:e7:1c:42:18:93:6a:32:58:
         4d:90:6f:2d:1f:b8:cb:e6:f1:2b:b6:92:ab:a7:20:4e:58:99:
         21:66:64:4f:99:0d:cb:67:cf:73:82:43:31:37:44:09:6e:c4:
         f1:e7:25:02:4c:66:b3:84:93:33:3a:d8:d7:58:37:34:06:b9:
         85:bb:1d:52:69:18:a8:6f:b2:50:30:38:4c:2e:4d:9b:bc:b1:
         0c:4e:88:ce:4c:b5:c7:8b:cf:89:47:41:ab:1f:e5:07:c3:94:
         bd:77:0a:81:18:d7:ef:ce:18:ed:be:2a:19:f9:f2:0a:25:0b:
         d3:fe:5c:5a:bd:1a:16:c0:26:2e:6f:0b:5d:dd:5b:98:74:d2:
         5e:86:97:7c:06:3c:39:7c:24:ca:53:82:39:b9:db:b0:cd:ab:
         c4:99:db:4c:ed:10:a1:c2:37:da:da:cd:2e:c4:54:55:61:75:
         03:10:27:f7:f9:05:63:c9:d4:96:b9:8d:08:f5:02:e1:89:e7:
         92:e9:37:a1:20:a7:30:8f:64:d4:8d:79:92:4b:9e:20:e3:7d:
         09:91:4a:6f:90:c0:04:73:27:9a:f4:9d:20:b3:b1:28:a9:8d:
         7a:ef:6d:b0:f4:41:08:c2:f8:fc:cc:13:5c:b4:65:1a:a6:57:
         52:3b:89:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:33:10 2024 by rpki-client on console-ams.rpki-client.org