Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft
File:                     aAImjB8WbJ31GjQgRbsTLw-WyC0.mft (raw, json)
Hash identifier:          AovSBiixjF7H5nySggkpKxPJ3IosnElY0vafQO/fmMU=
Subject key identifier:   55:E6:79:D7:11:0B:CC:72:62:23:0E:AA:E4:F1:DE:F3:66:4E:CF:42
Authority key identifier: 68:02:26:8C:1F:16:6C:9D:F5:1A:34:20:45:BB:13:2F:0F:96:C8:2D
Certificate issuer:       /CN=6802268c1f166c9df51a342045bb132f0f96c82d
Certificate serial:       019040AF40E663861D99588BBBEDD532804A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aAImjB8WbJ31GjQgRbsTLw-WyC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft
Manifest number:          075A
Signing time:             Sat 22 Jun 2024 16:02:25 +0000
Manifest this update:     Sat 22 Jun 2024 16:02:25 +0000
Manifest next update:     Sun 23 Jun 2024 16:02:25 +0000
Files and hashes:         1: aAImjB8WbJ31GjQgRbsTLw-WyC0.crl (hash: 7W8t3n7FMqab81zCGjzQo+SfYQVHsbXW3d91q+7HdaQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aAImjB8WbJ31GjQgRbsTLw-WyC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:af:40:e6:63:86:1d:99:58:8b:bb:ed:d5:32:80:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6802268c1f166c9df51a342045bb132f0f96c82d
        Validity
            Not Before: Jun 22 16:02:25 2024 GMT
            Not After : Jun 23 16:02:25 2024 GMT
        Subject: CN=55e679d7110bcc7262230eaae4f1def3664ecf42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:af:08:f2:2d:55:b8:ae:8c:6e:16:d6:dd:d5:
                    72:d5:8c:8b:80:92:c6:57:3f:3a:e6:7f:d9:8d:eb:
                    14:9b:c4:27:dc:07:6d:a8:e9:15:d3:7f:a1:a6:5f:
                    39:64:fc:92:a1:65:17:95:ea:12:ea:83:26:09:49:
                    99:0a:33:f5:81:12:d1:fa:6c:23:16:67:69:2b:4e:
                    8e:65:81:e1:3f:f8:8b:5a:da:7d:70:f9:a3:ff:41:
                    0a:1a:a7:c2:ed:8b:69:48:5f:8c:d9:1a:c6:3e:90:
                    14:42:c3:da:8f:72:ef:45:27:fb:fa:ec:26:0d:e0:
                    df:8e:f4:18:f4:35:36:cd:91:c2:e2:2a:2a:7d:0a:
                    82:34:d5:ab:b3:39:f1:d9:c9:b4:0b:7d:8e:bd:06:
                    6e:60:74:19:98:ab:58:8c:3b:b0:ae:ba:24:4a:36:
                    54:21:61:69:f6:94:6c:99:0c:ad:74:7c:8a:a2:60:
                    40:30:ec:f5:30:53:3e:87:32:0b:66:a1:c1:54:50:
                    e2:d1:b6:79:d3:e6:e3:26:73:8d:2e:1e:fa:32:c4:
                    a6:f0:b6:30:84:a9:b2:9a:69:19:0f:fb:76:ed:af:
                    cb:c4:34:9f:cb:20:89:f8:a5:ed:1e:3f:01:2b:3a:
                    f1:fe:49:96:2c:08:8d:f8:89:53:56:bf:99:72:70:
                    b0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E6:79:D7:11:0B:CC:72:62:23:0E:AA:E4:F1:DE:F3:66:4E:CF:42
            X509v3 Authority Key Identifier:
                keyid:68:02:26:8C:1F:16:6C:9D:F5:1A:34:20:45:BB:13:2F:0F:96:C8:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAImjB8WbJ31GjQgRbsTLw-WyC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:90:f7:0f:fb:b5:1d:05:3d:fe:3f:ee:d3:8c:79:fb:47:4f:
         67:88:3b:99:16:71:5a:85:b7:fc:01:2c:f4:c4:85:1b:22:ae:
         82:60:c0:bb:ee:c9:cd:cd:84:ee:4f:cf:45:09:53:c2:72:f6:
         9f:00:b2:89:f4:60:4c:32:2c:b4:98:fa:75:40:04:73:17:54:
         ce:7e:95:0e:3c:d7:ae:3f:a3:22:53:bb:d3:6e:ca:26:ee:29:
         91:54:09:87:b0:2d:35:28:18:07:15:c2:68:88:14:7c:c3:60:
         2e:f3:bf:50:ff:88:ba:7d:a1:f7:df:f7:9e:ec:94:64:90:b5:
         b5:0a:03:d1:a7:e0:fb:7e:4f:02:96:df:32:14:4c:a1:a4:03:
         30:b5:d7:2f:98:34:db:fa:c3:5e:28:07:27:91:ff:2f:ae:1c:
         dd:9e:cf:73:bd:07:59:d9:a3:13:df:c0:d1:2f:45:b4:ce:5a:
         b3:b3:fd:c9:a0:92:8a:7b:5d:0b:8f:32:67:f2:e8:b1:27:37:
         fd:a8:0c:fc:b4:71:22:5a:a0:17:70:16:69:b3:ef:0a:e1:42:
         12:21:37:f9:36:6c:ed:78:49:1b:79:68:99:bb:0b:c0:a1:5e:
         ee:8a:0f:32:d6:1b:ad:3b:ff:d9:81:02:87:71:bc:ed:18:30:
         03:c5:4f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:38:10 2024 by rpki-client on console-ams.rpki-client.org