Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
File:                     44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft (raw, json)
Hash identifier:          QitphaVYEaMlDWGHCrahOX9xlwRrpMZXy2JsrMKGsAs=
Subject key identifier:   0A:F2:17:20:BC:12:B2:56:5E:51:10:2A:2C:D9:7A:55:30:F5:0B:F5
Authority key identifier: E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
Certificate issuer:       /CN=e385733213b34236019a140ff19c5398ed71730e
Certificate serial:       01901CD8A0E1CE57CA3EB43455A5E77491CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
Manifest number:          0897
Signing time:             Sat 15 Jun 2024 17:01:17 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:17 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:17 +0000
Files and hashes:         1: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl (hash: hxomT5Gss2bkcGClMSOz3vPJLuli/UEp2tewEr+b8Lo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:a0:e1:ce:57:ca:3e:b4:34:55:a5:e7:74:91:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e385733213b34236019a140ff19c5398ed71730e
        Validity
            Not Before: Jun 15 17:01:17 2024 GMT
            Not After : Jun 16 17:01:17 2024 GMT
        Subject: CN=0af21720bc12b2565e51102a2cd97a5530f50bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:28:b4:f4:65:48:aa:51:e2:22:31:52:74:ad:
                    22:40:77:73:f6:0b:a2:ed:f3:45:35:1b:a8:28:39:
                    cb:b1:74:d4:a7:56:d3:f2:b1:d2:46:9e:75:a0:1c:
                    74:a4:fc:ac:7d:93:5a:ca:b4:b1:2d:8f:76:6d:82:
                    a4:9f:68:dc:ec:2e:90:bd:e4:5c:f6:cd:ec:9e:f2:
                    a2:b1:2e:29:56:17:2d:ad:c9:a8:6d:4b:45:10:a6:
                    81:df:7d:10:18:5e:2a:d7:96:3b:17:f9:e6:d4:80:
                    c3:88:5e:0f:b1:14:f5:6e:49:7f:f9:63:4f:d0:7f:
                    0a:14:b3:d3:9b:48:f9:df:6f:d1:18:13:f2:70:c8:
                    ba:d3:32:e4:9c:b1:fb:9a:3e:e4:2f:16:eb:ce:49:
                    f8:ed:0c:76:c8:0a:9c:97:6a:e5:d3:65:b4:f3:86:
                    8d:89:3b:4f:0f:c6:9c:55:4d:04:3b:4b:b9:4b:56:
                    23:08:63:75:8a:df:1b:90:ea:04:da:37:3f:4f:e9:
                    1b:e5:10:1c:35:1d:25:cf:6a:c8:4b:ee:0d:f3:3f:
                    2a:ea:59:45:92:bc:c9:1e:83:c4:33:d4:14:77:45:
                    d0:f0:07:0b:51:c4:bb:a3:d1:b6:46:23:87:41:30:
                    d5:f7:4c:47:bd:08:b6:bf:fd:f1:1d:5e:1b:3e:d6:
                    2e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F2:17:20:BC:12:B2:56:5E:51:10:2A:2C:D9:7A:55:30:F5:0B:F5
            X509v3 Authority Key Identifier:
                keyid:E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:4f:da:35:bc:bd:10:bb:ee:59:f8:5d:4b:68:ca:62:7e:04:
         0b:bc:33:1d:00:bb:fe:14:eb:8c:1b:0f:79:d5:19:c5:bc:09:
         6b:a3:9a:5d:68:1e:42:38:9b:e9:46:e4:14:cb:9d:ac:6f:2f:
         35:29:64:71:e2:dd:f4:08:b8:f2:8f:34:33:51:48:23:26:6f:
         eb:0c:35:02:6b:d8:58:74:c1:7e:0b:89:56:a7:53:98:04:ed:
         c6:55:6f:6e:07:4b:0a:bb:57:1b:01:0a:50:8d:3d:12:45:0e:
         a3:a2:c6:7f:dd:16:eb:9f:4b:6d:f4:d3:08:cd:4f:a1:46:e3:
         ce:f4:f8:74:71:12:2b:2b:4b:21:63:1c:37:2a:9f:ee:18:a6:
         eb:68:fe:75:31:21:0d:25:aa:c1:d4:eb:4a:72:4c:4d:67:a2:
         d6:a7:a7:74:9d:58:6d:5d:07:9b:91:82:4b:1f:e6:19:34:4c:
         8f:99:d1:cc:14:62:78:a5:2e:c8:f8:d5:06:de:9a:90:00:f7:
         4e:03:bd:0b:8c:75:db:f8:12:68:8a:2d:7d:6e:f5:48:71:86:
         91:bd:24:18:bf:0f:b9:5c:ed:a7:81:f8:1c:00:9f:95:52:83:
         c7:ed:68:07:57:da:fe:fb:4a:c1:b0:40:62:f1:aa:f8:f9:c7:
         ee:7e:23:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:11:47 2024 by rpki-client on console-ams.rpki-client.org