Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
File:                     oVJWhcluMm8grjcpwDD0T9FJmwU.mft (raw, json)
Hash identifier:          RYUbk9wqwB3syRhe8hGWFfBW8gMNb2Wy2R588dFBK0A=
Subject key identifier:   B9:F0:09:72:94:A7:31:49:17:EF:6D:D6:B7:42:BE:A4:F5:CA:A8:BA
Authority key identifier: A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05
Certificate issuer:       /CN=a1525685c96e326f20ae3729c030f44fd1499b05
Certificate serial:       01901E591481D137CDEC70B95C4F77075E7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
Manifest number:          03D2
Signing time:             Sun 16 Jun 2024 00:01:12 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:12 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:12 +0000
Files and hashes:         1: oVJWhcluMm8grjcpwDD0T9FJmwU.crl (hash: 0Ynpeklkxic2oURwAE6leP5FGWwvS9DS6rqRmCHuHA0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:14:81:d1:37:cd:ec:70:b9:5c:4f:77:07:5e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1525685c96e326f20ae3729c030f44fd1499b05
        Validity
            Not Before: Jun 16 00:01:12 2024 GMT
            Not After : Jun 17 00:01:12 2024 GMT
        Subject: CN=b9f0097294a7314917ef6dd6b742bea4f5caa8ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:94:e5:ea:98:39:2a:31:29:f5:31:e8:d2:22:
                    56:e6:1f:44:b5:93:09:80:23:6c:8f:0c:3f:55:27:
                    2e:3b:87:f0:a9:73:12:df:74:58:ea:52:6e:e7:bd:
                    ff:5a:14:3d:0e:c4:9b:75:2f:87:8a:c6:1c:29:a9:
                    b2:f9:c6:40:3c:2b:76:c6:52:a3:2c:c0:5a:dd:17:
                    c4:5e:36:3e:15:17:7e:0d:20:dc:be:c9:e2:ce:22:
                    11:bf:21:b3:6c:d4:c1:10:b2:c1:95:d2:88:af:43:
                    f5:17:30:b1:1c:76:a3:7c:ce:01:12:cb:2c:3e:2e:
                    53:01:c3:4a:77:2e:e2:79:e9:4e:24:00:d0:34:6a:
                    11:69:77:fe:35:f7:47:be:8c:65:0a:7f:d5:98:1a:
                    e2:7a:fb:26:9d:bd:9b:6c:47:50:59:81:d9:f3:36:
                    67:33:39:f3:60:49:48:82:74:7c:53:b4:53:c9:b8:
                    e4:10:f7:53:29:e8:e2:96:b9:55:60:f6:d1:fc:23:
                    67:04:e7:58:61:7e:0b:30:ba:3e:cf:f7:4f:96:e1:
                    58:0c:2d:4b:2d:cf:ec:40:72:2c:bf:f4:a4:d8:ca:
                    e2:3e:12:cc:a7:a2:5a:d5:cd:3f:1a:9b:21:98:55:
                    13:95:52:11:67:86:58:ef:24:21:3d:14:fe:4e:6c:
                    38:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F0:09:72:94:A7:31:49:17:EF:6D:D6:B7:42:BE:A4:F5:CA:A8:BA
            X509v3 Authority Key Identifier:
                keyid:A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:33:8d:c2:06:1e:8f:fd:f8:9b:b0:9c:bc:5e:64:b1:68:6b:
         4b:03:03:81:40:4d:08:4f:16:1c:5f:0a:e0:85:b0:d6:d6:ec:
         81:ba:ca:93:e1:0c:43:04:46:c8:03:24:18:1f:57:c8:40:b8:
         0e:c2:f1:e8:09:f0:8b:5c:66:5b:42:ca:ea:dd:21:9f:e4:3f:
         19:03:c0:d5:29:b9:17:e6:17:0c:b9:7d:2d:0c:2c:84:2c:83:
         e1:ae:9d:e0:08:8f:19:c0:91:f9:66:a6:32:f5:0f:8e:a8:e1:
         fa:c0:3c:d5:79:31:f5:59:59:bb:78:41:2c:13:2e:03:27:b3:
         ff:0d:53:4a:04:29:78:32:c2:f3:54:be:64:23:9d:31:62:08:
         e6:ba:86:ac:60:23:f4:de:22:50:c6:a1:e6:0c:b4:7b:a4:71:
         8a:d6:62:af:f6:4a:d3:81:6d:89:d5:d7:1e:84:c1:2e:ed:b7:
         d5:59:3d:9b:9d:3a:21:d8:26:97:e7:ec:be:4d:d4:fe:62:f9:
         51:59:55:e6:6c:bb:41:5d:af:1f:ac:33:d6:1d:bb:e6:82:88:
         6d:11:32:66:27:16:79:8d:69:58:13:d5:ea:86:89:b4:10:96:
         95:f6:10:a2:71:fe:cd:ee:cb:ba:dd:35:e2:05:cd:6c:59:86:
         f8:70:9a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:03:09 2024 by rpki-client on console-fra.rpki-client.org