Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/71b7fc-ce24-4f52-9d6f-0bf5a59693c0/1/MKJtC08pGQMd0kUy3hy9aujaCLU.mft
File:                     MKJtC08pGQMd0kUy3hy9aujaCLU.mft (raw, json)
Hash identifier:          GQy2IU9LqFuy+DR1v+EM9/lnMjaTngl3bPPFFtnqHUk=
Subject key identifier:   8C:C1:E6:FE:91:8E:E3:A0:14:2E:2A:D9:E0:4D:E0:75:5D:BD:CB:05
Authority key identifier: 30:A2:6D:0B:4F:29:19:03:1D:D2:45:32:DE:1C:BD:6A:E8:DA:08:B5
Certificate issuer:       /CN=30a26d0b4f2919031dd24532de1cbd6ae8da08b5
Certificate serial:       01901E9025879978B30C0FD80A6B3B730228
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MKJtC08pGQMd0kUy3hy9aujaCLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/71b7fc-ce24-4f52-9d6f-0bf5a59693c0/1/MKJtC08pGQMd0kUy3hy9aujaCLU.mft
Manifest number:          06B1
Signing time:             Sun 16 Jun 2024 01:01:21 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:21 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:21 +0000
Files and hashes:         1: MKJtC08pGQMd0kUy3hy9aujaCLU.crl (hash: 515/yjvI3DZ/31T5AOBJC4j+0wLUiqGQ8TNxz9Ub+zg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/71b7fc-ce24-4f52-9d6f-0bf5a59693c0/1/MKJtC08pGQMd0kUy3hy9aujaCLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/71b7fc-ce24-4f52-9d6f-0bf5a59693c0/1/MKJtC08pGQMd0kUy3hy9aujaCLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MKJtC08pGQMd0kUy3hy9aujaCLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:25:87:99:78:b3:0c:0f:d8:0a:6b:3b:73:02:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30a26d0b4f2919031dd24532de1cbd6ae8da08b5
        Validity
            Not Before: Jun 16 01:01:21 2024 GMT
            Not After : Jun 17 01:01:21 2024 GMT
        Subject: CN=8cc1e6fe918ee3a0142e2ad9e04de0755dbdcb05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:59:f3:89:42:43:68:d1:1b:82:bd:35:69:72:
                    85:51:c1:b8:ee:16:32:1b:db:8b:16:bd:47:50:bd:
                    4a:18:da:91:aa:05:ea:29:12:a3:2a:31:6d:c4:09:
                    00:47:a6:16:80:e1:c0:d7:27:3c:9e:10:b0:7d:27:
                    06:00:8a:32:e7:ff:3c:88:12:88:f7:60:b2:99:d9:
                    f7:8f:9d:12:2d:c5:0a:34:22:de:e9:94:ea:78:44:
                    97:35:6a:5b:8a:8b:50:c6:c6:c3:61:a3:c3:e3:82:
                    86:7b:8b:bf:b2:01:0e:a2:69:39:44:9e:37:9b:10:
                    f1:78:75:b7:cb:e9:2b:6d:93:a4:5d:25:7d:0e:ee:
                    6f:c2:2b:62:7b:1f:b5:7d:da:70:1b:88:09:be:5c:
                    bd:e1:4a:d1:8a:5c:73:7d:6a:30:fb:27:f6:88:60:
                    19:67:bb:3c:fc:ca:36:a7:50:ea:9a:0c:5f:ef:2f:
                    f3:a3:68:19:6c:f5:0e:49:cf:5f:3d:a4:15:32:44:
                    d4:89:e3:fa:b1:af:0e:96:1f:27:8d:f7:94:15:de:
                    9a:93:d9:20:c3:0c:fb:c8:99:9a:63:71:fa:7a:09:
                    d4:e7:2c:cb:b5:56:03:4f:60:cb:34:b9:78:e0:f2:
                    cd:0a:47:53:7f:84:27:72:f0:10:48:8d:ee:8a:be:
                    22:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C1:E6:FE:91:8E:E3:A0:14:2E:2A:D9:E0:4D:E0:75:5D:BD:CB:05
            X509v3 Authority Key Identifier:
                keyid:30:A2:6D:0B:4F:29:19:03:1D:D2:45:32:DE:1C:BD:6A:E8:DA:08:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJtC08pGQMd0kUy3hy9aujaCLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/71b7fc-ce24-4f52-9d6f-0bf5a59693c0/1/MKJtC08pGQMd0kUy3hy9aujaCLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/71b7fc-ce24-4f52-9d6f-0bf5a59693c0/1/MKJtC08pGQMd0kUy3hy9aujaCLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:9d:f5:4a:b3:c1:6c:02:f3:f9:15:e8:5e:c9:e3:8b:a0:66:
         84:32:6e:3e:41:74:62:e6:31:a9:29:4e:05:6d:70:57:0a:bf:
         2b:82:b4:d1:c0:a3:90:5b:bd:58:2d:68:ab:f1:ce:00:d5:20:
         19:19:eb:73:48:af:b9:ce:47:83:bf:1f:77:ad:28:97:5f:4f:
         e6:24:62:f3:17:fc:5a:be:1d:54:7e:9e:a1:0d:e4:73:43:10:
         ec:8f:45:f2:31:06:42:43:40:d2:b0:dc:8b:dd:88:b2:96:6f:
         b4:08:6b:bc:83:44:d1:71:ed:7e:11:bf:d1:72:13:cf:c0:e9:
         30:43:e9:39:d2:eb:d8:2b:95:76:4f:50:26:8f:11:61:cd:7a:
         18:56:5d:67:1b:2a:ff:44:fd:93:d3:78:29:df:bb:63:44:e0:
         5a:d4:d5:6a:66:04:36:22:4f:d5:2b:6c:ff:d2:e2:92:5f:21:
         20:50:f7:35:63:94:5a:05:9f:a5:33:f8:55:08:90:a4:50:8a:
         6e:d5:bd:48:21:15:46:79:94:ad:6e:27:df:19:04:99:de:34:
         ae:17:87:0f:3b:33:d7:a9:07:92:4a:a7:f3:3d:fd:a7:c7:6b:
         44:8d:2a:9f:af:dc:14:46:ec:2b:2d:22:66:f8:37:e3:9a:4d:
         ff:f1:bd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:04:09 2024 by rpki-client on console-fra.rpki-client.org