Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
File:                     XpgU1DFdMK28jeMGAFVq6cPPns4.mft (raw, json)
Hash identifier:          MBOPVVzkxkGyjeFcyGq68wOITVjDiVvopIjojuxYWoU=
Subject key identifier:   B2:4F:AF:2C:9B:09:1F:38:55:FF:6D:37:09:11:24:A6:FE:99:95:49
Authority key identifier: 5E:98:14:D4:31:5D:30:AD:BC:8D:E3:06:00:55:6A:E9:C3:CF:9E:CE
Certificate issuer:       /CN=5e9814d4315d30adbc8de30600556ae9c3cf9ece
Certificate serial:       01901E9006B77D83974A499EFF1B03FF548C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XpgU1DFdMK28jeMGAFVq6cPPns4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 01:01:13 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:13 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:13 +0000
Files and hashes:         1: XpgU1DFdMK28jeMGAFVq6cPPns4.crl (hash: 08H6NExqN2pVbGU3Holx/FZXHkg7Y8nqDfWiEBfHDYU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XpgU1DFdMK28jeMGAFVq6cPPns4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:06:b7:7d:83:97:4a:49:9e:ff:1b:03:ff:54:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9814d4315d30adbc8de30600556ae9c3cf9ece
        Validity
            Not Before: Jun 16 01:01:13 2024 GMT
            Not After : Jun 17 01:01:13 2024 GMT
        Subject: CN=b24faf2c9b091f3855ff6d37091124a6fe999549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e3:f0:94:0f:e6:fb:f1:57:0c:24:59:70:0f:
                    8f:f2:32:5e:67:92:ec:86:60:67:06:6c:0a:fb:4b:
                    ca:40:ed:c3:8f:20:09:f1:4a:41:c3:ae:00:ea:8b:
                    67:ae:66:11:24:bf:7e:0c:96:12:00:60:60:be:e2:
                    e4:0b:11:b6:d7:24:bb:94:04:68:9b:13:fa:db:10:
                    df:16:ca:b0:a1:f7:e9:5c:cb:78:a4:c7:33:1e:a1:
                    6b:95:38:a7:13:56:8e:8c:98:29:18:df:57:ee:ef:
                    f7:c8:d3:64:d0:97:00:79:89:83:f5:e3:09:66:88:
                    ea:7f:29:d0:1a:61:a0:4e:07:78:a2:86:b2:2d:97:
                    63:e8:bf:2a:0f:85:19:f7:15:48:0a:8b:bd:9e:2b:
                    a8:38:6c:a9:9c:a5:4e:dc:31:ad:e1:95:d4:6b:c8:
                    4a:eb:fa:e1:60:32:d6:d5:0c:29:84:ea:8a:98:04:
                    84:22:dd:30:b6:8a:02:dd:ba:8c:e0:3c:3b:51:9c:
                    81:52:6e:b0:31:65:4d:b4:8e:75:dd:d3:d2:c5:28:
                    4d:09:2b:63:6f:d0:69:c6:1e:85:3c:70:c9:8b:20:
                    1f:e4:00:a1:8f:a0:58:fc:63:09:f8:0c:b9:ce:62:
                    77:60:f9:11:9c:e1:03:1d:aa:40:54:da:d0:2a:ef:
                    31:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4F:AF:2C:9B:09:1F:38:55:FF:6D:37:09:11:24:A6:FE:99:95:49
            X509v3 Authority Key Identifier:
                keyid:5E:98:14:D4:31:5D:30:AD:BC:8D:E3:06:00:55:6A:E9:C3:CF:9E:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpgU1DFdMK28jeMGAFVq6cPPns4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:1c:e5:87:95:1b:bc:66:90:b7:6d:66:d0:48:45:08:7f:9a:
         0e:a4:0d:dc:d3:32:a0:43:9b:32:70:84:9b:3d:ce:16:72:e3:
         f4:1b:40:4b:8b:e8:c6:a8:da:84:27:be:9e:04:7a:06:fa:1c:
         db:29:ab:ba:f3:06:19:1a:da:61:5d:8b:d0:c0:fd:7d:67:3c:
         90:71:d9:cf:e1:28:c5:0d:4a:a5:1f:d8:a4:f5:bf:06:4b:30:
         c7:b6:b8:61:4c:61:d8:ec:25:b5:b0:6b:33:73:79:46:96:62:
         8b:08:2a:3e:5b:e5:83:94:11:51:6b:bc:86:ed:61:35:f9:32:
         c8:38:c6:b6:af:3a:48:3e:98:ce:af:fd:fc:1b:6b:a5:59:ee:
         33:58:82:66:81:4d:c0:6d:99:d9:41:0a:00:81:7a:21:d2:7b:
         5d:90:41:90:d9:17:e0:7a:75:e4:71:94:9e:35:6d:59:52:30:
         a5:0e:08:8b:57:87:c6:52:89:58:e4:0d:02:89:7e:ee:00:ae:
         65:50:d1:5a:38:83:7f:2f:b1:e3:0f:9a:19:48:ed:1a:9e:b9:
         fa:a1:c2:c2:0f:3f:ba:06:05:f5:38:70:50:a7:fa:2a:11:dc:
         cc:3a:74:bb:4a:bf:4a:e6:74:d9:de:90:fe:dc:ba:e6:df:21:
         63:f0:0e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:07:55 2024 by rpki-client on console-fra.rpki-client.org