Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
File:                     2JkZ-1GnBREdaZbuww_8RC3pei8.mft (raw, json)
Hash identifier:          ltH4efCDWN+RG0U8mIIHLiMBvSlfLD9lWvbblWxMzoM=
Subject key identifier:   BC:88:75:F7:13:BA:FB:AA:0E:4D:26:09:66:15:D1:42:F2:5F:DB:45
Authority key identifier: D8:99:19:FB:51:A7:05:11:1D:69:96:EE:C3:0F:FC:44:2D:E9:7A:2F
Certificate issuer:       /CN=d89919fb51a705111d6996eec30ffc442de97a2f
Certificate serial:       01901D467BDA7CE6B0731C907630D6B1C1D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 19:01:16 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:16 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:16 +0000
Files and hashes:         1: 2JkZ-1GnBREdaZbuww_8RC3pei8.crl (hash: d8xfsbZUXmvCmCgpIOrNfbMp2tRfQH623l66YRW3FKE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:7b:da:7c:e6:b0:73:1c:90:76:30:d6:b1:c1:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d89919fb51a705111d6996eec30ffc442de97a2f
        Validity
            Not Before: Jun 15 19:01:16 2024 GMT
            Not After : Jun 16 19:01:16 2024 GMT
        Subject: CN=bc8875f713bafbaa0e4d26096615d142f25fdb45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7d:a8:6e:10:e4:a1:c9:8f:1f:70:16:61:d9:
                    5e:29:05:0c:0b:00:4c:0e:91:79:1c:61:2b:30:e0:
                    71:6b:57:54:cd:5d:ac:52:55:e4:55:94:03:e8:43:
                    38:79:28:db:00:da:cf:6b:3f:c3:a0:ba:2a:85:4f:
                    72:b7:4f:12:c8:12:7e:cd:70:f7:10:bd:02:64:8c:
                    11:45:55:86:35:55:e9:83:48:76:f9:42:6d:9f:20:
                    50:6a:cf:29:62:88:c2:61:4f:b5:63:98:4b:d6:1d:
                    b1:f0:8d:94:99:75:65:ef:b0:49:8f:3a:f0:ef:e4:
                    09:0f:31:32:94:d8:e2:39:b4:f9:74:22:b1:0f:1f:
                    55:30:97:89:a8:7f:2e:7b:41:66:61:9f:46:f2:2c:
                    72:41:62:4b:d7:20:32:3b:0f:04:47:55:1b:d3:bf:
                    29:9b:b0:b5:06:7b:97:c3:56:ed:a0:25:89:56:1b:
                    30:74:2d:49:82:ef:a6:17:78:78:e3:d8:13:cd:bd:
                    2f:44:fa:cf:f4:42:ba:90:d8:78:9a:0c:77:fb:1c:
                    05:af:fd:08:6b:85:18:d3:ab:48:b9:43:70:aa:48:
                    a3:7e:89:16:0b:1e:d5:2b:72:83:ed:f8:54:95:60:
                    b6:e3:bb:0d:75:d8:c7:70:8a:3d:80:aa:75:53:04:
                    fb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:88:75:F7:13:BA:FB:AA:0E:4D:26:09:66:15:D1:42:F2:5F:DB:45
            X509v3 Authority Key Identifier:
                keyid:D8:99:19:FB:51:A7:05:11:1D:69:96:EE:C3:0F:FC:44:2D:E9:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:4e:8c:0f:73:99:48:51:9d:da:26:cd:a6:f5:bb:4b:35:d8:
         87:40:e1:89:2f:ec:b7:5f:cd:ce:fa:f1:f5:18:6a:b0:b1:ed:
         4a:93:90:0f:a8:53:36:9e:7f:9d:75:42:3c:3f:12:1c:63:d5:
         5e:ac:e6:f1:58:41:f4:d4:7f:71:c5:f9:4e:91:8a:cc:57:72:
         94:b7:62:95:0b:51:90:14:a8:a0:77:e5:22:3f:e0:44:45:74:
         c6:de:f0:a3:75:53:1c:83:0e:0f:5a:b3:45:66:c1:8f:53:6d:
         fd:6a:cc:ce:4d:85:65:7a:a2:97:9f:07:04:ec:c6:54:49:f1:
         e1:d9:8b:2e:b6:0e:d5:04:57:12:51:ec:41:8e:88:c5:a9:00:
         fe:83:97:72:5f:e8:4e:a2:d5:02:1e:c4:4a:57:85:1c:a8:31:
         a6:47:91:1d:79:13:41:b6:b3:e4:54:25:6f:f3:2e:b1:f2:e4:
         45:4b:cb:eb:a8:7c:bc:83:1c:c9:bf:02:2f:3a:fe:ff:58:f7:
         08:fe:9f:f5:f9:0d:d1:7d:c0:10:87:7e:03:3b:9e:53:4f:56:
         29:a5:d3:a1:42:c8:52:99:8f:bb:7a:12:a7:f7:41:82:47:9c:
         73:4b:d1:aa:97:f9:25:d1:f6:e6:64:58:c5:4a:14:70:1e:d2:
         ad:cc:37:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:07:28 2024 by rpki-client on console-ams.rpki-client.org