Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
File:                     _sl9DBu8zD2GcSKhFxD1X3AjAI4.mft (raw, json)
Hash identifier:          Diq37WMJ0BuVqMTofyzzD7b5IcpkhcnMzgo2g8v5xRw=
Subject key identifier:   CF:8D:10:AB:00:44:16:2A:0A:FB:81:F8:82:B7:1B:E4:26:98:87:E5
Authority key identifier: FE:C9:7D:0C:1B:BC:CC:3D:86:71:22:A1:17:10:F5:5F:70:23:00:8E
Certificate issuer:       /CN=fec97d0c1bbccc3d867122a11710f55f7023008e
Certificate serial:       01901CA17996297FBECF432B2E65FC56B7A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
Manifest number:          BD
Signing time:             Sat 15 Jun 2024 16:01:02 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:02 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:02 +0000
Files and hashes:         1: _sl9DBu8zD2GcSKhFxD1X3AjAI4.crl (hash: puJsUbzuQ2Xs8IEwQS/P8gBGrz79vMzArRGG3jTIXgY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:79:96:29:7f:be:cf:43:2b:2e:65:fc:56:b7:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fec97d0c1bbccc3d867122a11710f55f7023008e
        Validity
            Not Before: Jun 15 16:01:02 2024 GMT
            Not After : Jun 16 16:01:02 2024 GMT
        Subject: CN=cf8d10ab0044162a0afb81f882b71be4269887e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ae:39:07:ee:b0:d0:5c:49:94:41:10:b8:1a:
                    0e:d3:bb:a0:7a:1e:dc:d7:ed:6a:43:aa:8d:55:63:
                    b2:11:44:05:e8:8a:3f:b8:ad:6e:e2:87:25:c7:13:
                    c4:e1:5b:1b:ca:6b:57:7b:a1:34:79:42:4a:cd:ef:
                    de:75:aa:41:49:af:41:cb:e7:92:f4:4e:1f:7e:5d:
                    49:56:19:49:61:bb:41:89:d9:40:c5:d0:2b:a2:db:
                    9a:c0:3b:47:4d:d7:ca:9b:d3:57:11:97:71:bb:35:
                    b7:4f:38:7c:38:51:b2:a4:f2:1c:5e:e0:97:86:b1:
                    90:dc:53:29:54:0e:86:b3:dc:96:32:1c:d8:4e:94:
                    8d:f5:e3:01:6d:99:83:c1:d1:7f:92:4c:f4:d8:2e:
                    12:18:d0:0d:b9:2b:65:f8:ee:a7:e3:c1:75:f4:16:
                    85:28:13:c1:25:8b:71:9b:98:2e:e0:3c:43:c7:15:
                    1f:0d:ff:b8:c4:44:6e:40:26:b1:35:a1:43:19:f5:
                    fc:f0:5d:a3:cc:f4:fe:fc:7c:4a:d0:f3:0e:a1:9c:
                    4a:ea:60:92:66:33:41:92:87:31:de:51:e8:ab:47:
                    b4:ae:8c:e6:16:8d:67:8b:44:33:59:6d:af:5b:a7:
                    2f:ca:2d:7b:45:82:f0:bd:d2:fd:8c:b0:f1:3e:d9:
                    7a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8D:10:AB:00:44:16:2A:0A:FB:81:F8:82:B7:1B:E4:26:98:87:E5
            X509v3 Authority Key Identifier:
                keyid:FE:C9:7D:0C:1B:BC:CC:3D:86:71:22:A1:17:10:F5:5F:70:23:00:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:25:c7:ec:08:24:74:b5:ca:f8:90:00:2b:0e:e5:d3:5e:d7:
         fa:1b:20:d7:05:7c:32:a4:ef:8e:44:b6:56:5b:21:61:4b:a8:
         c0:91:db:78:c8:b2:1a:fc:27:fb:33:e4:1f:5d:83:5a:c6:6e:
         bb:92:66:c5:50:dd:01:5e:21:86:a9:59:ea:24:cc:ab:b3:29:
         eb:6d:ef:81:06:1d:f9:8f:52:c8:fb:96:37:7f:33:3c:5d:a7:
         49:a4:d6:42:6e:64:ef:f5:36:3d:44:49:80:fe:ff:90:7a:27:
         37:48:1f:ff:f3:fe:62:35:b1:09:c8:50:ce:5b:68:7a:a6:b3:
         df:c6:fd:20:54:52:0d:29:b2:25:13:5e:40:1b:5e:f2:29:25:
         6d:a1:52:d4:21:43:6d:63:c0:fe:a2:12:10:51:b7:44:e8:82:
         dd:6f:04:66:4b:78:10:7a:b7:13:09:9c:97:3a:cb:1d:39:7d:
         dd:84:d2:a2:33:d8:87:a0:96:b5:55:cc:af:29:02:ab:fc:a6:
         93:6c:29:71:6d:7c:08:8f:eb:0c:dc:ac:65:3a:4a:6e:a4:c1:
         68:bd:c0:90:ee:42:fd:21:1d:59:10:b4:b8:e9:0c:be:bd:55:
         84:05:0f:0d:59:0d:f1:0b:34:84:db:65:e4:7e:bd:14:55:6f:
         3e:fb:9e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:20:22 2024 by rpki-client on console-ams.rpki-client.org