Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
File:                     Df5SSMH7abOKMYjflHLozbyFwZM.mft (raw, json)
Hash identifier:          fEdrn/++vgV/CMjnxICM5Tn72Df46gscR33bm4Bb3YY=
Subject key identifier:   BC:C1:9F:1B:6A:C9:F0:1A:6A:67:A3:5B:00:CD:8D:42:B3:23:A1:24
Authority key identifier: 0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
Certificate issuer:       /CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Certificate serial:       01901F6B43D659FDF89F4BF1C4AFECEF8F95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
Manifest number:          A6
Signing time:             Sun 16 Jun 2024 05:00:41 +0000
Manifest this update:     Sun 16 Jun 2024 05:00:41 +0000
Manifest next update:     Mon 17 Jun 2024 05:00:41 +0000
Files and hashes:         1: Df5SSMH7abOKMYjflHLozbyFwZM.crl (hash: WT+d0ch6jg94M4N/n3E80QCkxFdKtilpkynOp+SNQ64=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:6b:43:d6:59:fd:f8:9f:4b:f1:c4:af:ec:ef:8f:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
        Validity
            Not Before: Jun 16 05:00:41 2024 GMT
            Not After : Jun 17 05:00:41 2024 GMT
        Subject: CN=bcc19f1b6ac9f01a6a67a35b00cd8d42b323a124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a0:b1:5c:c7:9e:c0:3a:79:90:3c:3d:ee:da:
                    f3:94:0d:9d:56:51:8a:77:0a:d1:99:15:98:4d:80:
                    90:9c:d6:49:a6:63:75:77:f6:2e:53:de:a4:ce:44:
                    08:5b:a2:d0:7e:f2:7e:25:9a:fd:91:30:28:18:44:
                    cd:ab:e9:37:b4:8d:a5:ad:d0:a8:e0:62:6c:57:4f:
                    30:c1:7c:79:a7:20:1b:d9:5c:b6:c6:bd:52:6f:07:
                    ab:cc:6c:a2:49:3f:87:87:d3:61:76:58:e6:84:81:
                    b6:ea:aa:1b:75:e0:ee:f3:d1:08:20:06:07:fa:fa:
                    a5:19:49:49:e1:5e:5f:bc:a9:91:24:7d:73:f5:7b:
                    b7:14:89:2b:15:9a:99:32:b2:6e:cf:40:46:8d:47:
                    b8:47:84:cc:e3:1c:91:29:fe:d4:16:47:6e:2c:92:
                    d2:dd:db:a4:0e:15:a3:ea:9b:e9:2e:e0:71:1c:55:
                    92:75:dd:ff:cf:ca:eb:85:7f:12:2a:ea:a8:1e:12:
                    c1:9b:90:dd:03:8c:bc:20:c5:32:68:a2:ef:2d:c9:
                    22:e1:ed:bc:f9:4a:df:8c:cc:bb:f7:97:c3:89:94:
                    c9:61:61:a2:92:3a:76:91:f4:72:41:1f:ea:41:9c:
                    b7:db:45:67:96:c9:58:5c:5d:2b:c2:84:6c:cf:eb:
                    97:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C1:9F:1B:6A:C9:F0:1A:6A:67:A3:5B:00:CD:8D:42:B3:23:A1:24
            X509v3 Authority Key Identifier:
                keyid:0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:71:3c:f0:67:60:ef:96:ce:41:a1:bd:e3:95:fb:58:f5:c3:
         22:be:b9:e7:9b:1b:bc:43:b9:29:21:b8:64:7d:47:f0:62:ce:
         6b:0e:56:5f:cb:eb:b0:a5:8b:41:e1:1a:8f:1f:61:0c:f8:07:
         4c:22:8f:16:af:ab:45:d4:3c:57:5f:c3:79:99:1f:5c:57:58:
         df:ae:5a:5d:cf:47:c7:7a:d8:37:75:dc:d5:93:2b:fa:b4:96:
         8c:69:7b:8e:54:58:8c:be:4e:64:76:57:eb:41:d0:1e:da:62:
         db:5b:eb:fa:5f:86:7c:5c:48:36:b7:9a:55:f4:c9:e1:77:5a:
         37:62:7b:51:1c:80:b6:a0:56:30:65:a2:04:92:d0:68:16:cb:
         df:1b:75:46:76:da:ce:98:48:4b:90:27:14:19:37:3f:b3:1b:
         23:7b:2e:df:5c:b1:e5:43:8b:6c:be:50:63:b2:aa:a8:54:ec:
         4d:9b:0a:de:01:77:ae:7f:6a:61:35:69:ed:cf:af:0b:32:a0:
         a1:8a:12:d6:21:16:d1:c2:81:13:96:b1:61:c8:a8:ca:ea:52:
         8d:48:39:bd:d7:fb:e2:b7:1b:b9:07:4c:c7:17:fd:88:ac:14:
         de:6e:ce:e7:28:9c:44:82:86:c2:c5:b2:08:25:de:48:87:8b:
         57:e9:ca:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:30:22 2024 by rpki-client on console-fra.rpki-client.org