Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
File:                     pj6AVRuSNrvAzXHFHRlZGA58j3w.mft (raw, json)
Hash identifier:          BMBd3az8bP+m/Z0sP4Un17p3OLrqGMvSlp97sucVWno=
Subject key identifier:   9D:68:CD:A8:63:52:2D:95:43:50:D0:FF:91:D9:0C:AE:91:26:B4:D0
Authority key identifier: A6:3E:80:55:1B:92:36:BB:C0:CD:71:C5:1D:19:59:18:0E:7C:8F:7C
Certificate issuer:       /CN=a63e80551b9236bbc0cd71c51d1959180e7c8f7c
Certificate serial:       01901BFC67EB590475D9ED7C4D74AA11A903
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pj6AVRuSNrvAzXHFHRlZGA58j3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
Manifest number:          0F06
Signing time:             Sat 15 Jun 2024 13:00:44 +0000
Manifest this update:     Sat 15 Jun 2024 13:00:44 +0000
Manifest next update:     Sun 16 Jun 2024 13:00:44 +0000
Files and hashes:         1: pj6AVRuSNrvAzXHFHRlZGA58j3w.crl (hash: vTo1t8DUMye/oH0pwNKp+t6BkApyi51+B5F2LxEhTMI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pj6AVRuSNrvAzXHFHRlZGA58j3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:67:eb:59:04:75:d9:ed:7c:4d:74:aa:11:a9:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63e80551b9236bbc0cd71c51d1959180e7c8f7c
        Validity
            Not Before: Jun 15 13:00:44 2024 GMT
            Not After : Jun 16 13:00:44 2024 GMT
        Subject: CN=9d68cda863522d954350d0ff91d90cae9126b4d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:4f:8c:1d:74:1a:1b:b1:60:40:13:19:cb:
                    bd:36:db:87:82:5e:01:89:94:94:09:e6:d1:b1:5a:
                    fd:6d:43:2b:03:05:46:a1:85:45:71:a4:08:ef:3c:
                    54:74:59:0b:4a:7d:6f:7f:67:61:a5:1c:d4:65:50:
                    51:5b:9e:2d:81:bc:ca:75:49:f2:14:4b:9b:db:d1:
                    3c:8a:d0:e3:88:b9:21:55:4a:b1:bb:c5:93:25:1c:
                    94:e6:d1:b5:c7:33:72:4e:54:00:e5:a9:ce:27:f3:
                    56:ca:ed:19:97:7b:04:a6:ed:e7:28:e6:25:84:10:
                    68:c7:ea:39:b1:ff:be:ec:82:7c:ab:2c:94:fd:23:
                    f0:92:57:c3:8d:63:c8:c8:bc:c5:49:09:15:3b:3d:
                    08:10:7b:09:72:e0:61:8b:07:0f:6c:3c:aa:f7:3b:
                    db:45:53:c3:28:45:a9:e9:01:91:c6:4d:c9:bb:f2:
                    0a:d0:e2:85:71:6b:e7:a6:08:49:e4:08:3e:e2:59:
                    b9:06:3a:c2:a4:4a:ef:3f:06:47:fb:52:79:6d:fe:
                    22:c9:7b:6a:b8:4d:a8:88:2e:35:0b:84:b9:c3:a9:
                    bf:14:4b:3b:d9:5c:5e:91:f1:74:5c:f5:58:04:3e:
                    cc:0e:62:73:6b:a8:31:e5:15:3f:0c:d6:bc:90:96:
                    81:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:68:CD:A8:63:52:2D:95:43:50:D0:FF:91:D9:0C:AE:91:26:B4:D0
            X509v3 Authority Key Identifier:
                keyid:A6:3E:80:55:1B:92:36:BB:C0:CD:71:C5:1D:19:59:18:0E:7C:8F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj6AVRuSNrvAzXHFHRlZGA58j3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:7d:d0:10:bc:bb:d0:d7:a9:e0:97:b4:ba:31:a7:dc:64:33:
         9a:ac:15:21:d7:6b:75:c4:0c:27:0a:e0:90:6e:89:c3:23:0b:
         48:05:b7:db:82:ee:f0:11:2e:48:9d:69:03:89:66:90:eb:28:
         76:41:99:47:74:5c:92:a5:8e:12:02:71:88:b0:ba:0d:bd:25:
         fb:1e:8d:54:e3:4c:31:d5:53:73:6e:da:83:3a:da:0a:92:b2:
         23:b9:6e:a4:c6:d4:af:af:ce:dd:99:bc:e5:b9:71:e9:ac:52:
         b3:66:0c:47:08:25:8b:38:3c:99:4c:ba:7f:9b:a6:51:fc:76:
         87:dd:43:81:07:f4:a0:69:f4:6b:7c:ba:7e:7d:18:b0:f1:b2:
         0e:d0:b3:a0:4c:06:87:9f:18:f9:ae:bb:6a:b1:0c:d9:27:6d:
         ba:f8:c8:e9:8e:9c:01:94:1e:a0:a1:3e:b4:5c:c3:e9:26:f9:
         f5:f2:2c:00:60:8a:61:b9:bb:49:64:0c:32:78:bb:84:46:e5:
         89:09:a6:c8:aa:2d:d5:b9:c0:ae:54:30:99:7b:24:08:2e:4c:
         e9:4f:09:9a:36:93:8b:df:49:75:24:53:3e:0a:f2:0d:d6:ff:
         ca:fa:27:5c:a9:62:2b:2a:44:c4:7d:25:53:6e:7d:a5:38:e8:
         96:55:45:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:59:12 2024 by rpki-client on console-fra.rpki-client.org