Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.mft
File:                     I6lUuSO6IAjpheuiQdG3AHF_iEM.mft (raw, json)
Hash identifier:          H1Y3JeEvCbNSXwRVfXTTraSjvnCF1siBpVPE78cKTFo=
Subject key identifier:   BE:59:45:F1:7C:BD:B2:49:D3:54:FA:68:3C:5C:CA:95:64:C4:1C:16
Authority key identifier: 23:A9:54:B9:23:BA:20:08:E9:85:EB:A2:41:D1:B7:00:71:7F:88:43
Certificate issuer:       /CN=23a954b923ba2008e985eba241d1b700717f8843
Certificate serial:       01901DEC84E2E00A149B9F6A6370A44982CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I6lUuSO6IAjpheuiQdG3AHF_iEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.mft
Manifest number:          100E
Signing time:             Sat 15 Jun 2024 22:02:38 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:38 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:38 +0000
Files and hashes:         1: I6lUuSO6IAjpheuiQdG3AHF_iEM.crl (hash: cOnbRg6XmYtaQ4qqbtwXiut2LIkTO16ltJpPsAIXOIk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I6lUuSO6IAjpheuiQdG3AHF_iEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:84:e2:e0:0a:14:9b:9f:6a:63:70:a4:49:82:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23a954b923ba2008e985eba241d1b700717f8843
        Validity
            Not Before: Jun 15 22:02:38 2024 GMT
            Not After : Jun 16 22:02:38 2024 GMT
        Subject: CN=be5945f17cbdb249d354fa683c5cca9564c41c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:63:5a:8d:4c:6f:a9:08:d8:8f:e6:02:64:f7:
                    4a:91:4b:d4:28:3f:ab:08:f2:b1:26:2b:55:58:6a:
                    56:ec:67:a3:1a:a0:ff:6e:db:1e:bb:60:ad:f6:f7:
                    a9:f2:8e:10:5b:ea:a9:e7:2d:5b:69:2e:4c:0e:00:
                    66:19:2e:62:72:66:3c:21:97:6d:25:9c:17:3c:76:
                    d1:9d:7a:2b:9e:64:cd:48:c4:80:ba:e2:29:de:17:
                    39:55:ff:6f:0b:94:bb:9a:20:58:16:91:27:1d:e5:
                    c8:e8:5a:9f:8b:e6:bd:80:29:ca:5d:93:64:c7:0a:
                    01:24:65:c2:cd:61:54:49:0d:a0:ef:ad:0d:bb:88:
                    a4:94:27:bb:97:f0:fd:d3:a8:09:00:f3:72:52:90:
                    86:0c:81:22:67:98:f5:56:90:2d:e6:57:e3:b7:0d:
                    07:24:9c:d2:e5:1f:93:1b:54:70:c6:9b:34:ff:a1:
                    2b:5e:8f:85:6d:ac:89:9c:f9:cb:82:d5:77:91:b3:
                    fb:c9:1a:10:3e:fb:0c:ce:a7:41:24:d3:31:ef:f5:
                    cd:59:61:a8:5e:dc:90:d6:69:6b:11:08:d3:fd:db:
                    76:ae:f7:94:25:a2:d2:f9:c4:2f:8d:d8:59:59:48:
                    d1:46:2e:4b:31:c9:66:f1:86:5b:99:53:ac:d2:ac:
                    a3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:59:45:F1:7C:BD:B2:49:D3:54:FA:68:3C:5C:CA:95:64:C4:1C:16
            X509v3 Authority Key Identifier:
                keyid:23:A9:54:B9:23:BA:20:08:E9:85:EB:A2:41:D1:B7:00:71:7F:88:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6lUuSO6IAjpheuiQdG3AHF_iEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:1d:d8:80:da:14:72:63:71:e1:97:86:97:2e:47:66:7a:77:
         12:f4:34:cf:bd:b2:73:b6:de:da:08:81:ab:36:34:f6:a5:82:
         10:5c:e4:00:c5:d8:e8:d0:e6:55:95:1b:3a:62:2d:c5:44:1b:
         c1:83:9f:f8:1e:15:36:7f:ad:58:10:ec:0c:cc:f9:4f:c7:0a:
         f5:5f:db:ad:8e:01:ef:c1:d4:34:6e:5c:ed:f3:ea:79:08:75:
         46:bb:e1:f3:8f:e3:ca:9c:f5:5f:44:ad:a7:eb:1f:2f:76:1c:
         53:6a:94:65:d5:dc:79:c6:2c:40:fe:f8:a0:ca:c3:84:fa:5d:
         20:c5:e0:d7:3d:18:11:3e:c6:4d:f5:cc:36:a1:94:36:e8:29:
         df:86:fc:9a:ae:eb:5d:f6:ee:45:2a:32:05:3d:f1:a3:c2:e4:
         fd:66:f3:fa:e9:7e:27:88:f1:43:45:e4:c6:10:ae:29:54:eb:
         a3:2e:98:5b:75:01:be:12:f3:4c:48:a2:6d:e1:d3:fe:d3:38:
         7a:11:58:9d:aa:d8:2b:e1:e2:cd:0d:ff:13:ec:73:c6:d1:1e:
         9f:73:af:93:41:1b:72:26:b4:98:18:9c:f0:58:d6:e9:66:3b:
         c7:c4:74:36:f7:5b:8c:94:1a:57:10:f7:0c:cc:30:bd:b3:5f:
         51:53:90:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:54:33 2024 by rpki-client on console-fra.rpki-client.org