Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.mft
File:                     IIP4tbYgnefJQAjzM3vjQ2866-Y.mft (raw, json)
Hash identifier:          dWxL9uVAkTUBDqcDAC6VykZhBdPQx8FEfSXPtF7/fmU=
Subject key identifier:   38:09:84:30:7C:D9:88:F8:67:11:40:37:DD:99:84:CB:38:EE:85:94
Authority key identifier: 20:83:F8:B5:B6:20:9D:E7:C9:40:08:F3:33:7B:E3:43:6F:3A:EB:E6
Certificate issuer:       /CN=2083f8b5b6209de7c94008f3337be3436f3aebe6
Certificate serial:       0190459D8B80979603D0DE9408330CD618F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IIP4tbYgnefJQAjzM3vjQ2866-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.mft
Manifest number:          022F
Signing time:             Sun 23 Jun 2024 15:01:10 +0000
Manifest this update:     Sun 23 Jun 2024 15:01:10 +0000
Manifest next update:     Mon 24 Jun 2024 15:01:10 +0000
Files and hashes:         1: IIP4tbYgnefJQAjzM3vjQ2866-Y.crl (hash: T3GfPwpzhhlsxyWxLrbxSpiAX6q0WQrWIiyRZYQMu8U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IIP4tbYgnefJQAjzM3vjQ2866-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 15:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:9d:8b:80:97:96:03:d0:de:94:08:33:0c:d6:18:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2083f8b5b6209de7c94008f3337be3436f3aebe6
        Validity
            Not Before: Jun 23 15:01:10 2024 GMT
            Not After : Jun 24 15:01:10 2024 GMT
        Subject: CN=380984307cd988f867114037dd9984cb38ee8594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b6:0a:6b:03:e4:c3:61:bc:d1:19:88:ca:4b:
                    3b:a0:f8:8a:7c:25:37:47:79:7e:b5:a5:84:a3:42:
                    e9:98:5f:7d:b3:d9:ff:08:7f:85:a4:d3:d8:39:84:
                    54:72:a5:8e:07:8a:a3:0f:f1:f3:9d:23:a7:a2:d9:
                    c7:98:73:0f:07:5c:d1:26:f9:11:a6:05:e3:2f:73:
                    1c:53:82:26:7a:40:2e:6d:2c:2d:ca:a5:2b:b4:12:
                    0d:3d:4b:ea:ac:a3:09:0f:e1:ea:52:35:e3:04:5a:
                    98:ec:ac:d2:a7:ab:a5:1a:2a:12:14:5d:cf:d2:de:
                    68:05:b1:5f:7f:d9:63:a6:05:f7:b5:cc:8e:f1:0f:
                    59:4f:bb:35:7b:1f:3d:16:67:a8:04:5f:d7:c2:0f:
                    79:f5:13:09:fb:e7:2f:d6:b1:84:71:fb:35:5a:b2:
                    bf:48:47:36:dc:f1:62:d6:62:7b:6d:f5:20:f8:73:
                    19:c4:09:b9:f6:b6:8e:92:6f:56:d8:dd:bb:27:3d:
                    b8:3e:46:6c:f5:5c:40:31:0a:7b:10:55:13:c7:fc:
                    69:94:8e:c1:01:a0:43:e1:79:ca:90:48:b5:60:70:
                    1d:d4:b5:2e:ac:42:c7:3c:5f:af:30:bf:83:d5:78:
                    39:b7:02:ea:d9:f5:6e:1a:99:24:01:6f:bd:81:bd:
                    d3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:09:84:30:7C:D9:88:F8:67:11:40:37:DD:99:84:CB:38:EE:85:94
            X509v3 Authority Key Identifier:
                keyid:20:83:F8:B5:B6:20:9D:E7:C9:40:08:F3:33:7B:E3:43:6F:3A:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIP4tbYgnefJQAjzM3vjQ2866-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:cb:56:68:f5:26:2d:c8:42:24:f4:cb:d7:0a:fb:f6:c2:48:
         be:de:ea:8b:88:a6:c8:0b:02:77:e8:40:c2:99:0a:79:73:e4:
         81:c8:b6:79:46:53:2a:91:ff:40:c5:2c:c7:44:24:81:09:7f:
         e8:7a:50:c6:67:d5:da:85:83:b2:a5:a5:f6:df:77:ec:00:b8:
         47:d2:17:4e:9a:62:74:6b:63:e3:44:28:e8:08:a9:a6:78:aa:
         b5:01:25:2e:76:a6:f8:74:2f:29:2e:4e:e1:e1:85:fb:5b:63:
         64:70:cc:b7:1d:f6:d9:7b:87:67:f7:f9:b4:a8:19:f2:45:ac:
         ed:06:8f:32:c0:57:18:0f:68:8e:b9:9f:5a:9d:db:7a:4b:45:
         f0:03:60:7e:db:3a:1a:aa:93:f8:d7:f1:b5:45:fd:4b:b8:cc:
         7f:9a:5d:12:ab:6e:db:82:2d:6a:d1:db:11:b2:57:ee:46:a0:
         49:a4:2a:bd:06:92:5a:ba:ee:a0:4d:e9:12:8e:65:74:c6:df:
         53:e2:1b:cd:60:a2:55:d1:8a:11:4c:1b:0b:aa:2d:60:4a:c8:
         c8:dc:dd:da:8e:21:37:39:bd:13:ae:77:67:41:15:38:65:fa:
         84:ca:d4:97:6f:f0:f0:33:af:ec:ea:14:73:25:c6:b9:dd:b2:
         2e:ef:a3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:20:23 2024 by rpki-client on console-fra.rpki-client.org