Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/59c063-27dc-44ce-a60f-b149eb705dcc/1/aY1Hvt-EiaoC09tG-YtPeiZLSAo.mft
File:                     aY1Hvt-EiaoC09tG-YtPeiZLSAo.mft (raw, json)
Hash identifier:          D5uSg1NegbnJqKc3QizD+g1wf2w0heGq80liwwX7Nsc=
Subject key identifier:   12:EE:7C:E7:5E:0B:53:87:4B:1C:78:A0:82:4D:00:B2:76:53:66:03
Authority key identifier: 69:8D:47:BE:DF:84:89:AA:02:D3:DB:46:F9:8B:4F:7A:26:4B:48:0A
Certificate issuer:       /CN=698d47bedf8489aa02d3db46f98b4f7a264b480a
Certificate serial:       01904189F31EF6AB9F50794F6664404B5F36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aY1Hvt-EiaoC09tG-YtPeiZLSAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/59c063-27dc-44ce-a60f-b149eb705dcc/1/aY1Hvt-EiaoC09tG-YtPeiZLSAo.mft
Manifest number:          1167
Signing time:             Sat 22 Jun 2024 20:01:17 +0000
Manifest this update:     Sat 22 Jun 2024 20:01:17 +0000
Manifest next update:     Sun 23 Jun 2024 20:01:17 +0000
Files and hashes:         1: aY1Hvt-EiaoC09tG-YtPeiZLSAo.crl (hash: L2gqBqLeGPSPJGqd9LEhBDtkU0a4G52Bez+9VetPeUY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/59c063-27dc-44ce-a60f-b149eb705dcc/1/aY1Hvt-EiaoC09tG-YtPeiZLSAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/59c063-27dc-44ce-a60f-b149eb705dcc/1/aY1Hvt-EiaoC09tG-YtPeiZLSAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aY1Hvt-EiaoC09tG-YtPeiZLSAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 20:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:89:f3:1e:f6:ab:9f:50:79:4f:66:64:40:4b:5f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=698d47bedf8489aa02d3db46f98b4f7a264b480a
        Validity
            Not Before: Jun 22 20:01:17 2024 GMT
            Not After : Jun 23 20:01:17 2024 GMT
        Subject: CN=12ee7ce75e0b53874b1c78a0824d00b276536603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:44:a3:99:ef:1b:14:22:6d:08:3f:65:52:65:
                    d3:7a:14:df:0c:0e:49:08:47:8e:60:ac:9f:11:b1:
                    20:58:b5:82:72:96:11:a3:8d:45:40:f9:5e:d3:c7:
                    87:0d:d5:ca:f7:58:f4:18:c3:73:7f:cd:9d:c7:bc:
                    bb:70:f4:e5:0b:2a:61:4d:6c:64:e4:0f:64:66:f4:
                    38:60:34:d5:00:f8:ed:58:72:4d:af:56:0d:d5:9e:
                    b5:69:bb:6f:d1:8e:45:be:53:4f:73:14:2d:fc:19:
                    e8:05:20:6f:dc:17:53:a2:d9:71:29:f1:65:3e:17:
                    e0:d4:e9:a6:2a:05:1f:c5:da:4f:04:09:e0:c6:7c:
                    9b:06:bb:06:19:47:b1:ac:ba:da:32:ee:94:d0:14:
                    a3:65:0c:0f:6c:0e:fa:79:a6:41:bb:2d:24:a7:99:
                    ce:08:99:6b:ac:34:15:98:2f:19:b1:86:f0:7b:a9:
                    07:0a:99:53:9a:64:f0:38:58:0f:3c:dd:07:34:06:
                    55:b6:4d:7d:82:71:65:f7:8a:2b:42:97:3a:f1:60:
                    e5:1c:be:e8:4d:a5:b0:48:28:33:6f:8a:28:bf:f0:
                    a7:c1:82:18:6f:a2:bb:44:b0:20:e9:b4:7b:ee:2c:
                    d5:7e:34:28:f0:6f:74:f0:01:18:65:79:b9:f0:b5:
                    e7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EE:7C:E7:5E:0B:53:87:4B:1C:78:A0:82:4D:00:B2:76:53:66:03
            X509v3 Authority Key Identifier:
                keyid:69:8D:47:BE:DF:84:89:AA:02:D3:DB:46:F9:8B:4F:7A:26:4B:48:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aY1Hvt-EiaoC09tG-YtPeiZLSAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/59c063-27dc-44ce-a60f-b149eb705dcc/1/aY1Hvt-EiaoC09tG-YtPeiZLSAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/59c063-27dc-44ce-a60f-b149eb705dcc/1/aY1Hvt-EiaoC09tG-YtPeiZLSAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:e1:b8:17:13:fd:d6:69:20:57:eb:ea:93:33:02:e9:c2:3d:
         fc:8d:fc:c5:d3:56:35:f8:bb:e5:3d:f7:d4:8f:3d:f3:b6:5a:
         84:51:3e:92:12:00:71:17:09:04:75:80:fa:15:3a:0b:b7:db:
         83:f0:39:ab:73:34:7b:06:3d:b0:84:6a:8d:a1:71:2d:ef:75:
         66:f0:fe:d3:41:74:cb:e2:77:13:82:95:51:bc:cb:40:f4:db:
         0c:7a:95:52:b2:9a:1e:62:48:d0:0c:20:29:ed:b5:58:83:16:
         89:d8:fc:f3:e7:bd:5b:12:52:e1:b0:9d:d5:47:5d:48:12:10:
         28:f5:86:47:47:83:77:f1:09:d1:ee:9c:ec:6e:4b:6a:e0:65:
         20:6b:97:f6:85:92:9d:59:b6:95:33:b8:b3:0a:13:57:ff:d3:
         d4:fc:c8:25:4c:1d:b8:8f:dd:d6:5b:c9:c6:0d:a2:a9:af:87:
         ca:81:a3:13:46:15:d5:9d:5d:a7:14:63:8f:c6:af:8a:40:22:
         f6:b4:e5:d4:0c:fc:19:a6:10:3a:96:55:6a:a8:16:e7:d9:c3:
         91:b5:da:7f:b7:4a:91:13:3f:d4:56:95:c8:3d:9c:91:69:ba:
         b5:f5:ca:99:d8:33:22:78:10:7c:c0:2f:18:b0:f5:2d:bd:60:
         fb:10:6a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:37:53 2024 by rpki-client on console-ams.rpki-client.org