Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.mft
File:                     aDjl4BZgX27c1MlhwZys9YFMeKM.mft (raw, json)
Hash identifier:          0Iu6rZ79ZxGkerd+rYX6mSCl7xdu3EYzl0qjIpJrBDA=
Subject key identifier:   37:EC:52:D5:0F:05:C8:66:6E:BA:1D:CE:CD:37:14:E8:C9:7B:C3:18
Authority key identifier: 68:38:E5:E0:16:60:5F:6E:DC:D4:C9:61:C1:9C:AC:F5:81:4C:78:A3
Certificate issuer:       /CN=6838e5e016605f6edcd4c961c19cacf5814c78a3
Certificate serial:       019045664F7C1CEC49A00ADAA827E44E7A3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDjl4BZgX27c1MlhwZys9YFMeKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.mft
Manifest number:          0C16
Signing time:             Sun 23 Jun 2024 14:00:51 +0000
Manifest this update:     Sun 23 Jun 2024 14:00:51 +0000
Manifest next update:     Mon 24 Jun 2024 14:00:51 +0000
Files and hashes:         1: aDjl4BZgX27c1MlhwZys9YFMeKM.crl (hash: p0aie0E4qZk95vhIqqDdG1VT4Osm+9z2ra58+ns8N/Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDjl4BZgX27c1MlhwZys9YFMeKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:66:4f:7c:1c:ec:49:a0:0a:da:a8:27:e4:4e:7a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6838e5e016605f6edcd4c961c19cacf5814c78a3
        Validity
            Not Before: Jun 23 14:00:51 2024 GMT
            Not After : Jun 24 14:00:51 2024 GMT
        Subject: CN=37ec52d50f05c8666eba1dcecd3714e8c97bc318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e1:6a:69:d3:58:4b:02:80:aa:63:d4:ce:21:
                    31:db:05:f5:d9:53:73:bd:b6:ca:17:f8:91:fb:80:
                    ad:f3:6b:89:27:25:26:3a:9a:ff:d8:91:08:13:ad:
                    45:ec:00:1e:1e:56:52:76:6d:ea:cb:17:49:38:20:
                    40:ec:82:ba:cd:aa:6f:e6:de:49:40:80:51:6b:51:
                    da:47:1b:77:a7:6e:03:4a:0b:43:ae:10:b2:89:5d:
                    72:57:a9:a3:9c:f6:3b:c9:ad:97:00:ea:62:20:99:
                    c0:55:8f:06:7a:0c:b9:04:12:fc:ad:c2:c7:7c:c6:
                    f9:97:fb:7f:f8:cd:da:da:d6:9b:78:48:a1:41:dc:
                    7e:40:8f:ad:fe:2b:14:62:7d:1f:71:6a:3b:bb:7b:
                    8f:37:00:47:1b:1a:e5:fd:e1:7a:f7:54:f2:81:d9:
                    75:bd:75:cf:65:9c:a8:6d:3b:23:2f:c1:12:0b:f8:
                    ff:08:eb:46:a6:70:66:c4:1e:3d:08:50:65:67:9a:
                    37:a9:40:2c:c7:d7:69:58:15:fe:9c:40:ef:f5:df:
                    82:75:b2:84:d3:f3:98:22:01:02:f4:b4:99:7b:a1:
                    18:a0:bb:4a:ab:c0:cc:78:93:79:ae:37:9e:82:74:
                    38:36:90:0d:8d:91:2b:03:55:b6:26:56:c2:24:0e:
                    1c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:EC:52:D5:0F:05:C8:66:6E:BA:1D:CE:CD:37:14:E8:C9:7B:C3:18
            X509v3 Authority Key Identifier:
                keyid:68:38:E5:E0:16:60:5F:6E:DC:D4:C9:61:C1:9C:AC:F5:81:4C:78:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDjl4BZgX27c1MlhwZys9YFMeKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:40:fa:8f:fb:ae:2a:0e:63:1e:e4:e7:65:2f:75:60:d9:23:
         d6:56:a8:be:00:e4:c4:38:0c:37:41:92:9e:89:b4:5d:ff:9b:
         a0:bf:a8:c7:45:1e:6c:bb:ee:cd:8f:cc:29:7f:8f:7d:eb:65:
         40:e3:2e:4e:9f:3f:4f:60:f9:3a:ca:3d:f9:44:4a:9e:4e:48:
         97:b0:d1:f6:eb:e7:7e:9d:ce:68:f5:c0:7b:52:d3:64:6b:b5:
         54:93:11:b8:76:8a:5b:f4:39:b3:0f:d6:91:39:92:9c:69:92:
         af:15:d0:1c:9d:aa:55:d5:5b:58:81:16:8b:63:40:f4:e4:d9:
         f0:78:24:66:60:1c:33:b5:cd:da:1e:d3:2e:41:81:22:82:9b:
         4b:e1:eb:d1:72:03:6a:15:76:04:fe:bc:06:60:86:3b:a1:f5:
         1b:b0:f0:52:c0:0b:a4:f4:8c:cd:6c:f0:21:b4:6d:7d:53:c6:
         69:c0:a6:31:f5:8f:9c:9b:7b:92:c9:eb:29:25:ef:7e:da:83:
         ea:09:26:46:26:10:82:94:95:d6:18:e8:25:a3:f4:42:c3:06:
         87:88:d5:8a:b9:88:9a:a5:6c:2c:80:17:bd:6a:0b:2e:28:eb:
         3e:9e:8d:af:aa:8e:25:b4:7b:04:d8:9b:7a:4d:19:46:a3:99:
         ab:2d:cf:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:25:42 2024 by rpki-client on console-fra.rpki-client.org