Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
File:                     r-84RCk7rWUf_YV8ka8L5WCuzWE.mft (raw, json)
Hash identifier:          j4SxcNOYqrF8JcNbO1GCCVp+FOYjU4MbP+B9cDhZCgw=
Subject key identifier:   7B:A7:AA:C7:91:75:9E:C5:1E:3D:2F:D5:10:66:14:30:86:EE:02:98
Authority key identifier: AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
Certificate issuer:       /CN=afef3844293bad651ffd857c91af0be560aecd61
Certificate serial:       01901CA17E56CD636899772437F3297CAC44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
Manifest number:          11C1
Signing time:             Sat 15 Jun 2024 16:01:03 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:03 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:03 +0000
Files and hashes:         1: r-84RCk7rWUf_YV8ka8L5WCuzWE.crl (hash: j5F28yQhVVeEmyirMUlQQQkf9zsbWoQeB5KOA3+CsqM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:7e:56:cd:63:68:99:77:24:37:f3:29:7c:ac:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afef3844293bad651ffd857c91af0be560aecd61
        Validity
            Not Before: Jun 15 16:01:03 2024 GMT
            Not After : Jun 16 16:01:03 2024 GMT
        Subject: CN=7ba7aac791759ec51e3d2fd51066143086ee0298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9f:23:05:25:ea:01:1d:03:63:78:15:78:44:
                    32:b9:fd:da:52:5b:86:86:91:bf:61:f9:d9:68:90:
                    d3:da:e1:9f:a9:90:c1:c2:aa:49:b7:18:ed:6c:8c:
                    9b:86:69:22:76:27:24:de:96:06:16:39:bd:a1:e1:
                    8d:ec:1a:35:c3:67:a8:e6:df:5b:8d:ac:66:57:c7:
                    52:37:05:67:d2:1b:19:0e:81:82:29:2c:f7:a2:37:
                    08:84:4c:5c:9e:55:ee:8e:3a:d6:67:5f:a2:22:e0:
                    d5:d9:1b:65:87:8c:5a:4e:55:8b:35:a5:98:30:31:
                    44:9c:a0:ee:b6:e6:4a:70:69:01:ea:c1:be:9f:27:
                    be:bc:65:0d:21:cf:f2:51:f8:59:01:27:06:5c:bf:
                    48:c6:7d:31:5a:34:9c:e0:80:4d:e8:05:10:dd:32:
                    62:68:2b:26:51:eb:d8:a4:a5:81:16:73:4a:9d:b9:
                    33:12:84:8d:27:a7:a4:c6:d3:63:1e:77:99:5f:8c:
                    91:b2:e7:36:93:0b:d1:91:d4:91:e1:fb:08:2b:97:
                    0d:29:f0:68:d3:72:c0:0c:08:a8:d0:b1:06:30:1f:
                    18:c1:0d:e8:2e:cc:d1:bc:ef:eb:d6:c1:90:a6:a4:
                    f9:05:bc:9d:c6:0f:aa:a7:aa:80:5d:1f:d1:ba:62:
                    97:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A7:AA:C7:91:75:9E:C5:1E:3D:2F:D5:10:66:14:30:86:EE:02:98
            X509v3 Authority Key Identifier:
                keyid:AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:6e:f0:db:2a:ce:28:8d:66:26:00:ed:84:ad:4a:36:73:f5:
         54:6e:21:02:2d:0e:18:5a:a8:86:84:1a:1a:cd:32:e6:bc:94:
         27:66:96:5d:ed:ea:af:b7:21:a1:73:23:b5:b4:52:66:47:43:
         c8:49:bf:35:24:28:57:e9:42:a2:34:19:7e:32:6b:16:c9:bf:
         fe:5c:95:3a:8d:62:86:63:43:4f:5d:1c:a3:62:f0:e8:a4:0a:
         88:c8:49:9e:9d:25:b6:fe:25:30:a2:0b:36:36:3b:83:19:95:
         61:be:69:84:d1:11:d2:6b:2e:02:2c:50:b0:e1:ec:b7:fe:93:
         5e:12:c4:70:81:19:21:f6:82:2c:e9:37:c7:3f:4d:94:10:52:
         ea:d2:9c:8c:66:e4:47:d0:d9:8c:54:1a:9f:22:6c:44:95:09:
         f6:b5:14:01:f6:90:3a:db:15:72:16:59:b6:ba:b8:18:6e:3c:
         ad:e5:dd:88:ed:b2:1d:9a:81:ed:da:10:f4:08:8c:2d:84:54:
         66:b3:8e:b4:ac:0c:6e:a7:51:7d:2d:13:40:b8:04:a7:9e:1f:
         43:06:d4:3b:23:79:b4:b5:06:55:1b:7e:4c:25:ab:5d:7b:9c:
         38:7d:b1:c2:a9:8e:c3:ec:33:b4:4b:53:37:67:01:1a:24:b5:
         9d:f6:e0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:16:38 2024 by rpki-client on console-ams.rpki-client.org