Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
File:                     c-9b03Yu9g-njtVfVE-joFE_2EI.mft (raw, json)
Hash identifier:          ZwPuXR1zrN8mLhc4hSudZViEGj+CjCNRZLpDbg5zevY=
Subject key identifier:   90:CA:1F:86:1F:CF:38:CE:78:34:0B:DC:2E:18:47:D0:9C:10:2B:97
Authority key identifier: 73:EF:5B:D3:76:2E:F6:0F:A7:8E:D5:5F:54:4F:A3:A0:51:3F:D8:42
Certificate issuer:       /CN=73ef5bd3762ef60fa78ed55f544fa3a0513fd842
Certificate serial:       01901DEB3D0B5536BAA89975A8210C0A0330
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
Manifest number:          0CCC
Signing time:             Sat 15 Jun 2024 22:01:14 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:14 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:14 +0000
Files and hashes:         1: c-9b03Yu9g-njtVfVE-joFE_2EI.crl (hash: 7zCdtQMRu6O+moI303Qgex3ceiVDwCf7xhYdDvm5F64=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:3d:0b:55:36:ba:a8:99:75:a8:21:0c:0a:03:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73ef5bd3762ef60fa78ed55f544fa3a0513fd842
        Validity
            Not Before: Jun 15 22:01:14 2024 GMT
            Not After : Jun 16 22:01:14 2024 GMT
        Subject: CN=90ca1f861fcf38ce78340bdc2e1847d09c102b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e4:07:c7:16:79:4f:97:d0:45:96:fb:58:b5:
                    d6:08:2d:29:a1:3a:c3:a9:b5:67:86:70:1c:c8:83:
                    5d:0e:cb:41:f5:f0:dc:68:de:7e:15:ab:6f:1a:da:
                    15:81:4d:09:91:90:2f:dc:63:d6:11:30:af:1c:e9:
                    21:52:97:84:03:68:c9:59:89:d4:2f:1b:0c:80:2e:
                    56:bd:52:6a:5c:fe:3f:37:41:58:f3:66:1b:49:de:
                    b3:6c:da:19:1d:54:d9:6f:9f:36:a5:7d:22:e9:c9:
                    37:4c:51:5a:91:d2:bf:54:f9:d0:ee:10:7a:91:a1:
                    2d:90:5e:c3:43:81:01:f4:a6:25:5f:80:1c:ad:32:
                    c7:5c:18:ce:7d:d9:f7:67:bf:42:5c:17:b2:aa:a6:
                    6a:98:28:36:b5:62:f4:62:4b:dd:3f:39:76:cb:a4:
                    19:b9:90:bc:e4:d2:5d:3d:b1:f9:50:68:ca:82:69:
                    1f:62:c7:00:05:49:67:ab:b5:d2:a6:7a:a7:6b:c8:
                    d4:d7:f8:a6:5a:09:af:a5:e9:83:7b:5a:e9:b4:76:
                    9f:b1:f8:27:40:10:2c:d8:52:d6:7d:33:19:9c:36:
                    64:42:14:17:43:67:a5:c3:08:55:f7:80:05:f8:67:
                    d7:ff:61:19:75:bc:f5:5d:62:f3:64:fc:3d:4b:68:
                    2b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CA:1F:86:1F:CF:38:CE:78:34:0B:DC:2E:18:47:D0:9C:10:2B:97
            X509v3 Authority Key Identifier:
                keyid:73:EF:5B:D3:76:2E:F6:0F:A7:8E:D5:5F:54:4F:A3:A0:51:3F:D8:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:1a:29:12:de:03:df:72:37:dd:a7:26:a1:61:3b:4f:70:bf:
         9a:d9:3a:95:22:c7:e5:78:ef:15:5a:24:c2:63:6e:72:10:30:
         1a:64:93:9f:69:9f:6c:29:a6:71:fd:1d:76:0b:71:81:ac:55:
         ba:1a:ed:be:0c:0f:f2:21:00:42:a9:43:7c:e8:81:e2:cd:c0:
         90:ba:c5:c4:7a:4d:c4:ae:53:0d:4c:7c:ae:c3:7a:15:15:6b:
         2a:3f:08:dd:bd:a5:2f:b9:90:19:6e:64:ea:73:27:b0:27:04:
         c1:6e:45:e7:e1:72:17:96:bc:6c:dd:10:21:a4:64:a4:5d:86:
         92:ab:67:31:6f:7e:f0:25:e6:4a:31:aa:0d:c6:7b:44:f6:c1:
         c5:d1:58:bc:66:c0:f7:7c:5a:de:2c:22:1f:04:7b:4b:96:19:
         e7:d7:cc:6f:d4:ba:78:fd:0a:bd:d0:2a:cd:d5:73:ca:15:35:
         1f:02:f4:23:29:4d:1a:00:46:14:df:cb:d8:b4:bf:0c:87:d5:
         01:26:24:43:5d:2e:8d:ed:8c:e7:4d:77:11:c6:03:17:86:e0:
         c3:1d:3b:fa:5b:99:dc:94:1f:cb:0c:60:0d:fc:58:14:ea:86:
         26:a9:a3:76:55:91:c1:99:91:1c:58:b5:85:b4:4c:dc:c4:eb:
         46:a9:65:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:05:01 2024 by rpki-client on console-ams.rpki-client.org