Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
File:                     2nVBcltyi1qJ87-vIPh2VWPC8_s.mft (raw, json)
Hash identifier:          I3h2dqcqy/HQZ9M2phgebNjFgH0b822kp96zWddDjts=
Subject key identifier:   71:BD:54:7F:BA:CF:34:90:56:C3:22:45:45:F9:69:45:D6:1F:7B:82
Authority key identifier: DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
Certificate issuer:       /CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Certificate serial:       01901DEC1BF9943DF568B35BBD4E6A294AD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 22:02:11 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:11 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:11 +0000
Files and hashes:         1: 2nVBcltyi1qJ87-vIPh2VWPC8_s.crl (hash: njhuNUX7mrB6sXILULk0DUSaaZvmaSkwvDfwY2buwMQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:1b:f9:94:3d:f5:68:b3:5b:bd:4e:6a:29:4a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
        Validity
            Not Before: Jun 15 22:02:11 2024 GMT
            Not After : Jun 16 22:02:11 2024 GMT
        Subject: CN=71bd547fbacf349056c3224545f96945d61f7b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:58:3d:47:23:25:bb:65:4b:7c:46:17:67:60:
                    51:31:19:24:b1:b5:8d:57:a7:c6:66:6f:09:79:56:
                    bb:e2:32:89:4e:8d:b3:9a:7c:ef:c9:4a:d0:72:5a:
                    b0:32:86:56:0e:63:0d:97:bc:0b:e9:bf:df:4a:27:
                    e5:e2:84:82:7f:7c:ed:cb:19:8e:53:f6:cc:b6:ab:
                    64:56:58:7d:20:21:e3:33:e6:8d:9f:c0:3a:4a:d1:
                    27:ae:b6:85:cd:d7:1a:0f:7c:c2:30:06:21:9c:1c:
                    ec:26:47:2d:19:4c:41:29:6b:a3:5b:0e:db:43:dd:
                    2d:47:4d:1f:8c:7b:69:e4:8c:1e:c9:ca:4a:91:b5:
                    13:a7:2a:6c:94:92:d4:e7:53:9a:01:94:fc:e5:7f:
                    ba:14:95:6d:56:13:28:c0:da:44:39:e8:5c:bc:4c:
                    f2:95:4f:87:bb:08:89:86:59:a9:16:4c:bf:b0:92:
                    bd:ca:64:aa:12:3c:c2:1d:39:b1:dd:30:0d:77:3b:
                    fa:00:ed:5e:f4:5b:ff:a3:02:08:82:a8:c0:43:9c:
                    d9:99:2e:30:4d:5f:c7:ec:fa:b6:63:08:50:9e:32:
                    82:e7:f3:48:e1:72:d7:59:f4:ad:04:08:6a:4f:17:
                    19:d4:df:91:60:cf:e1:c5:60:dc:64:84:98:b4:56:
                    c5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BD:54:7F:BA:CF:34:90:56:C3:22:45:45:F9:69:45:D6:1F:7B:82
            X509v3 Authority Key Identifier:
                keyid:DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f1:e6:59:47:c4:df:9e:38:f3:6d:ed:b1:a1:ee:6c:47:de:
         ce:be:7f:48:f5:b5:0d:84:59:c5:b4:ee:87:24:34:ef:62:38:
         56:86:4a:d9:b8:48:a0:0a:73:86:86:13:94:fe:70:84:66:8d:
         18:b2:ab:24:29:44:4b:24:57:4e:38:d1:c2:d8:ce:01:4d:0d:
         07:75:20:1e:12:d5:e7:30:aa:11:62:2c:72:49:19:41:5f:62:
         97:92:c9:9b:77:0d:38:53:17:da:6f:05:26:39:94:7a:a7:b7:
         36:25:88:31:f1:c5:5e:ba:79:e6:8c:00:7b:1f:86:f2:30:99:
         bc:18:d4:26:21:7f:a3:b0:43:07:e9:3c:7e:63:8f:c5:ed:b2:
         e9:e4:67:17:40:a6:ad:6d:b1:94:e7:50:af:bd:11:5c:60:54:
         c4:4f:30:89:13:06:7b:d5:2d:87:ac:12:65:70:51:7e:fb:ae:
         4a:9c:5b:3d:af:29:e1:12:65:37:70:0c:d4:84:17:c6:a9:12:
         f6:67:83:db:98:bc:87:89:5f:8e:29:69:51:84:63:d4:fd:c6:
         2f:77:62:77:e8:4a:24:8d:81:2e:cc:c2:21:44:39:fc:da:aa:
         38:ae:6c:10:e5:fe:1e:dc:0a:02:25:7f:51:15:02:51:be:e1:
         01:85:7e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:00:26 2024 by rpki-client on console-ams.rpki-client.org