Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
File:                     bxfKsp3wkGVUwRzpqynGDR56Z1w.mft (raw, json)
Hash identifier:          5qD7OUWS1lOLbanAHg8dwDqJ1NnPN6AkVFJWqk/Yvyg=
Subject key identifier:   30:4F:39:8F:51:91:B8:81:D7:E2:59:25:5C:13:22:99:65:6F:EF:BC
Authority key identifier: 6F:17:CA:B2:9D:F0:90:65:54:C1:1C:E9:AB:29:C6:0D:1E:7A:67:5C
Certificate issuer:       /CN=6f17cab29df0906554c11ce9ab29c60d1e7a675c
Certificate serial:       01901CA126DD8E50A3B9AC3940825CA211EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
Manifest number:          9C
Signing time:             Sat 15 Jun 2024 16:00:41 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:41 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:41 +0000
Files and hashes:         1: bxfKsp3wkGVUwRzpqynGDR56Z1w.crl (hash: kGQE2S3PsK5vxTupUf2B3HX6tZrHw0fCvwzbptdX1GY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:26:dd:8e:50:a3:b9:ac:39:40:82:5c:a2:11:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f17cab29df0906554c11ce9ab29c60d1e7a675c
        Validity
            Not Before: Jun 15 16:00:41 2024 GMT
            Not After : Jun 16 16:00:41 2024 GMT
        Subject: CN=304f398f5191b881d7e259255c132299656fefbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6d:45:d7:3b:83:cb:74:3b:31:63:7f:af:b9:
                    9b:00:d6:a2:98:4f:eb:52:94:a5:51:90:31:6d:f7:
                    a8:71:d0:5e:93:2d:dd:06:76:3b:7f:30:24:bb:d4:
                    82:a4:7e:de:45:15:60:82:09:76:8f:05:33:1b:8f:
                    b4:2c:c5:6a:02:42:6f:19:d0:8d:e2:03:35:91:01:
                    93:b8:04:46:2a:33:27:84:35:3b:b5:b5:3a:21:17:
                    78:71:04:74:51:c3:d7:9e:6f:99:fb:a7:f0:9f:dc:
                    e3:ef:15:f6:87:8a:32:89:6e:8d:9b:c9:d3:6e:18:
                    1c:7b:72:12:46:a3:fa:b0:50:3b:89:a9:9b:59:32:
                    8f:33:2c:1e:02:9d:72:7a:4d:79:b9:4d:ba:96:1c:
                    07:38:c8:20:bd:ad:b0:16:ce:f9:8b:be:f8:fc:eb:
                    97:ef:6a:3f:5d:12:e1:91:23:79:c0:f3:fb:36:fa:
                    6f:cc:73:c0:c8:59:af:66:07:45:ac:a0:49:e2:9e:
                    a9:06:f7:2f:af:57:aa:2b:1e:81:ee:2c:de:68:d2:
                    c4:63:4b:6f:7c:19:6a:ae:21:9e:25:95:2d:da:f3:
                    29:a9:46:58:fc:3f:09:8a:34:b6:4c:60:77:b3:a8:
                    28:75:9f:37:08:7d:53:ce:8f:2e:7f:06:68:ab:08:
                    ac:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4F:39:8F:51:91:B8:81:D7:E2:59:25:5C:13:22:99:65:6F:EF:BC
            X509v3 Authority Key Identifier:
                keyid:6F:17:CA:B2:9D:F0:90:65:54:C1:1C:E9:AB:29:C6:0D:1E:7A:67:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:24:d3:13:40:36:ce:8b:0b:df:ab:31:52:b0:26:19:7b:40:
         4d:27:43:ad:c0:0e:94:60:ba:6c:04:83:85:c2:ac:c2:dd:ed:
         b8:53:bc:83:6a:16:a9:99:8f:31:ee:ed:99:88:95:00:f6:5e:
         a9:a2:b8:08:bd:74:9c:98:8e:f5:30:25:46:4e:a2:6e:59:e7:
         2c:53:df:da:e0:0d:2f:c0:f8:13:66:85:08:33:12:49:74:bd:
         5d:5e:9b:4f:96:16:0f:b6:89:7e:7c:c2:c4:1b:79:57:ff:33:
         9e:6b:f9:07:fc:da:6b:19:c6:0b:6d:dc:a5:c7:a1:b8:06:d8:
         a6:78:0d:03:33:0a:b3:67:e2:b4:81:d4:76:f3:bb:b0:db:02:
         b0:3e:33:82:d1:7d:0b:9e:67:81:ef:be:38:58:7b:e9:d1:2e:
         c9:0b:2d:5d:a9:81:2a:e0:ec:c9:f0:74:fd:1e:fb:a8:75:98:
         ed:33:a1:74:66:fb:00:05:c2:1a:a8:66:b1:1f:bc:65:ac:91:
         27:e1:6f:a2:1d:ad:49:c0:1b:03:50:18:7a:cf:8d:87:56:78:
         bc:cf:6e:da:d4:17:77:b6:8a:61:f7:13:6f:05:18:f4:78:17:
         b8:e8:db:b8:68:3a:ef:df:07:16:ae:64:1a:85:bd:1b:6f:a9:
         f9:54:2b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:53:54 2024 by rpki-client on console-fra.rpki-client.org