Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.mft
File:                     JUIq59QSPce_KI8TeeQ39uHLKpo.mft (raw, json)
Hash identifier:          sG4FyczGh/PVtZNpSStaI9m9W6KIgt2TIAq3VpKRmuY=
Subject key identifier:   52:69:F7:E5:50:D6:A5:98:12:45:85:DB:8D:56:8A:1F:B3:3C:C2:6F
Authority key identifier: 25:42:2A:E7:D4:12:3D:C7:BF:28:8F:13:79:E4:37:F6:E1:CB:2A:9A
Certificate issuer:       /CN=25422ae7d4123dc7bf288f1379e437f6e1cb2a9a
Certificate serial:       01901E8FB6B3033E05578E0BE437F28FF1AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JUIq59QSPce_KI8TeeQ39uHLKpo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.mft
Manifest number:          0B42
Signing time:             Sun 16 Jun 2024 01:00:53 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:53 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:53 +0000
Files and hashes:         1: JUIq59QSPce_KI8TeeQ39uHLKpo.crl (hash: NVXo0jhuFWD5lC2ivXFzbPBZHxZICRaDceXURdxhDUo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JUIq59QSPce_KI8TeeQ39uHLKpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:b6:b3:03:3e:05:57:8e:0b:e4:37:f2:8f:f1:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25422ae7d4123dc7bf288f1379e437f6e1cb2a9a
        Validity
            Not Before: Jun 16 01:00:53 2024 GMT
            Not After : Jun 17 01:00:53 2024 GMT
        Subject: CN=5269f7e550d6a598124585db8d568a1fb33cc26f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9a:94:bd:71:3d:34:f7:75:4c:d6:38:36:a2:
                    78:49:4c:1f:00:19:fe:1c:14:74:b7:3a:e3:de:e3:
                    b6:62:05:66:ee:b2:62:b4:d2:a9:ee:20:c9:27:a9:
                    55:7a:41:0b:8f:9d:ce:56:37:de:7b:63:82:65:0c:
                    cd:97:16:f1:b4:58:82:0f:c8:e5:d8:4a:78:1a:05:
                    42:ca:25:c8:f4:23:78:78:10:97:ec:91:52:75:44:
                    0b:50:df:10:f5:9d:8d:16:7a:26:a0:8e:3a:b3:6a:
                    21:81:cc:51:bb:d0:9a:9b:8b:a7:c1:f9:4d:c1:f2:
                    20:88:18:67:33:89:3f:99:bd:20:02:78:99:9c:27:
                    aa:18:bf:de:5a:aa:0c:57:3d:d6:f1:5c:3b:3c:04:
                    0e:7c:86:d7:b1:62:fd:33:7b:9c:93:95:66:89:2e:
                    b7:f2:6c:ea:9a:96:a3:48:93:ef:22:b2:0e:e1:00:
                    5b:b0:4c:46:d5:b0:1a:f9:4c:6f:3f:3e:bb:fc:3e:
                    17:16:71:ab:39:ef:6f:55:df:fe:31:dd:22:30:5a:
                    c7:29:63:c6:5d:a4:62:2f:eb:72:97:72:56:ec:21:
                    9e:c0:5c:b0:11:92:f0:a2:0f:ed:4a:04:bf:e4:27:
                    bc:9a:92:ee:c6:44:db:3e:c2:ad:ef:ae:66:3a:11:
                    b4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:69:F7:E5:50:D6:A5:98:12:45:85:DB:8D:56:8A:1F:B3:3C:C2:6F
            X509v3 Authority Key Identifier:
                keyid:25:42:2A:E7:D4:12:3D:C7:BF:28:8F:13:79:E4:37:F6:E1:CB:2A:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUIq59QSPce_KI8TeeQ39uHLKpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:a7:73:2a:c6:11:bc:2e:7e:b7:49:56:04:41:96:a9:d6:02:
         9c:7c:40:2b:57:ad:d0:85:55:be:72:7e:46:91:0a:0e:30:9a:
         6a:46:d2:1e:3a:6e:bb:07:77:8a:5c:0d:f9:70:e3:68:c5:25:
         d2:6a:43:eb:77:73:cb:0b:cc:f1:7f:34:22:17:4d:df:b4:31:
         91:95:8f:bd:58:6b:a9:9d:2c:a9:e9:65:55:6f:15:4f:fc:f6:
         ca:06:49:4e:fb:e0:09:1e:bf:35:c9:4d:65:54:fc:b4:17:a9:
         7d:d0:83:35:1b:a7:93:4f:58:ac:33:32:3d:68:ae:ca:9f:4b:
         83:51:7a:d6:64:a0:70:98:92:e7:16:40:10:02:f5:e9:ce:64:
         49:70:ae:20:d0:ac:76:c6:fe:0f:b2:a6:c1:84:45:6b:ba:89:
         53:d3:a1:3b:77:bf:37:20:f6:b5:be:fb:9f:cb:e0:19:5e:0b:
         3f:30:b3:a4:63:33:12:fc:0b:6a:86:5d:55:10:5c:c9:ba:19:
         fe:04:dd:39:bf:28:07:f6:62:3e:5c:73:0e:c4:82:5f:a7:52:
         c0:be:3b:e4:41:f6:04:f1:07:9d:c6:17:24:a7:4d:2c:5a:75:
         87:b0:e5:f2:0d:eb:de:dc:bb:21:42:90:01:36:c6:6b:23:2b:
         29:9e:37:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:09:20 2024 by rpki-client on console-ams.rpki-client.org