Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
File:                     j3JEfEHiXE71t4N1UhxOl-katcA.mft (raw, json)
Hash identifier:          3jKPYOdjewNLNfit2JEszCchZ4jJ7IU1xZrAdRsotNk=
Subject key identifier:   47:90:72:72:BB:88:47:9D:42:09:C7:6E:D2:27:48:4A:4F:94:E3:F8
Authority key identifier: 8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0
Certificate issuer:       /CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0
Certificate serial:       01901DECEB2CA2A70F04ED7E38EC2D4F3EF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
Manifest number:          0412
Signing time:             Sat 15 Jun 2024 22:03:04 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:04 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:04 +0000
Files and hashes:         1: j3JEfEHiXE71t4N1UhxOl-katcA.crl (hash: 5XrrZYtTRkkT6jV16XzcpOxNPEKsfpvza4X6d+DzutA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:eb:2c:a2:a7:0f:04:ed:7e:38:ec:2d:4f:3e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0
        Validity
            Not Before: Jun 15 22:03:04 2024 GMT
            Not After : Jun 16 22:03:04 2024 GMT
        Subject: CN=47907272bb88479d4209c76ed227484a4f94e3f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f6:b6:00:57:08:c0:59:3f:3e:93:2d:99:fe:
                    55:f3:7b:23:94:ee:72:f3:84:d4:ad:b8:5e:f3:dd:
                    e5:be:8f:0d:1a:d0:d8:c1:5e:15:82:e4:58:5b:3c:
                    bb:29:b3:97:ca:fe:09:c2:4e:f0:47:d2:c9:8d:b9:
                    01:b9:85:7c:b6:99:95:b2:1a:14:92:e4:ab:34:3f:
                    7a:97:c2:c8:ca:f6:a5:cf:fa:e4:ba:d0:53:53:53:
                    3a:e5:2a:8e:3f:7a:db:90:cf:ed:3f:94:e2:f0:71:
                    48:e1:32:ad:65:e9:5a:b3:b8:5f:d9:ed:be:74:36:
                    1c:86:be:70:54:78:c6:6b:51:79:53:de:3f:14:8e:
                    a2:e1:08:58:20:44:dd:67:9e:aa:0a:99:a9:a7:53:
                    17:c9:cc:7c:af:bb:0a:23:2f:1a:b3:c4:f6:de:45:
                    de:b6:7d:eb:3e:e9:33:ba:85:42:3c:f2:9f:85:40:
                    f7:4b:a1:d5:4f:a2:06:05:03:91:f7:d2:7b:ba:11:
                    18:0d:28:4d:ef:e4:c4:5d:ec:90:fc:a0:58:d6:18:
                    80:50:bb:df:d9:9a:27:1b:36:9d:83:ea:b0:2e:ee:
                    05:d3:2b:61:6a:5b:ec:a5:dd:3e:b4:dc:56:07:94:
                    cb:b7:06:c1:44:ff:62:22:5d:ee:27:7c:54:07:98:
                    7d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:90:72:72:BB:88:47:9D:42:09:C7:6E:D2:27:48:4A:4F:94:E3:F8
            X509v3 Authority Key Identifier:
                keyid:8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:df:0a:9c:83:1f:96:e2:37:24:0b:9e:f9:2b:37:e0:1a:da:
         ea:c6:c7:41:60:d1:9f:66:1e:c6:13:39:f4:66:c9:47:79:31:
         29:03:fd:d6:f6:66:b3:c2:b9:cb:16:a8:24:17:9f:5c:40:17:
         8d:43:95:3c:5e:1e:ed:84:57:37:31:fd:a4:37:5a:9d:ee:43:
         e5:94:35:c9:09:95:9e:dd:7d:7f:03:47:a1:f2:25:fc:67:b6:
         d2:f1:23:fb:a1:a7:d1:e6:5e:f8:b9:1b:f0:e9:e8:e8:29:ee:
         1e:13:f8:49:db:78:5f:48:83:80:5c:e2:4b:b0:ba:d6:03:4a:
         a6:b6:9f:a5:66:a2:75:6d:21:f2:97:12:dc:49:a9:28:33:f2:
         af:36:2b:6e:cd:c8:84:de:68:1d:6d:24:2e:2e:8e:46:61:9c:
         d0:a0:bb:10:e0:88:2f:f8:75:24:ca:2f:16:fd:34:a5:53:49:
         33:0e:9a:bd:c5:62:66:e2:8c:79:19:79:38:73:bb:f4:b5:4a:
         38:e7:31:72:f4:7d:df:fc:91:5e:94:ff:37:05:83:48:a8:49:
         56:ff:9e:61:e5:db:45:3d:da:a5:95:2c:9b:04:ad:d1:d9:82:
         b4:3a:3c:e2:20:42:bb:3e:07:f0:15:6e:e3:fb:ca:61:e0:55:
         65:41:31:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:06:37 2024 by rpki-client on console-ams.rpki-client.org