Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
File:                     s48zUI2SUxNJ3z0L6bVF_I4fXms.mft (raw, json)
Hash identifier:          BHe7rQp5XgfSZchCDL6KnFbr5P7JvvnFAmbuNfUadwQ=
Subject key identifier:   D2:2A:10:D7:AB:68:3E:81:7C:CB:70:04:AA:30:F0:DC:BE:C1:F9:A6
Authority key identifier: B3:8F:33:50:8D:92:53:13:49:DF:3D:0B:E9:B5:45:FC:8E:1F:5E:6B
Certificate issuer:       /CN=b38f33508d92531349df3d0be9b545fc8e1f5e6b
Certificate serial:       01901CA10BA1781BDCECDCF829A25F60747C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
Manifest number:          0612
Signing time:             Sat 15 Jun 2024 16:00:34 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:34 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:34 +0000
Files and hashes:         1: s48zUI2SUxNJ3z0L6bVF_I4fXms.crl (hash: DQkTHiQofrEJkostdxQKeZXeAy5Lpcm3II4VPPCjY+A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:0b:a1:78:1b:dc:ec:dc:f8:29:a2:5f:60:74:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b38f33508d92531349df3d0be9b545fc8e1f5e6b
        Validity
            Not Before: Jun 15 16:00:34 2024 GMT
            Not After : Jun 16 16:00:34 2024 GMT
        Subject: CN=d22a10d7ab683e817ccb7004aa30f0dcbec1f9a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:78:52:85:58:7e:41:9a:88:be:9a:bd:2e:9e:
                    42:c0:8e:60:d3:9a:c4:e1:af:1f:e1:d0:8b:cd:68:
                    a9:5d:fc:95:5c:2b:3d:a7:8c:01:53:67:15:8b:b5:
                    76:26:7b:38:3c:29:dc:35:4d:15:90:1f:d7:00:dc:
                    70:f9:4d:f6:30:4b:e0:b9:0e:7b:a7:c4:45:73:8f:
                    d0:32:45:3f:64:b7:39:4f:f8:fa:fd:6f:80:f0:f3:
                    c6:ea:10:54:9f:90:8d:f8:af:79:f9:0e:5f:8c:90:
                    17:a8:c2:28:d7:8e:0a:19:e2:af:4a:29:62:30:50:
                    26:51:f0:43:2f:f2:71:9e:d5:7c:1a:8f:50:9e:4c:
                    bd:67:7d:b3:be:98:5b:a4:75:88:d5:88:31:a0:0e:
                    14:c4:43:5a:34:3c:62:5f:fe:ff:a2:64:4f:59:a8:
                    48:12:35:7f:df:72:74:6e:7a:52:d2:7e:27:dc:03:
                    bc:11:cc:a8:5a:20:53:b5:c2:5b:69:e7:77:ec:0d:
                    c8:81:65:cf:20:96:f9:6e:7b:17:b6:f2:51:49:c7:
                    09:6b:30:94:ae:5d:43:45:ff:1b:17:43:c0:20:af:
                    ee:2e:90:fa:d1:a4:ca:b0:df:4f:64:9d:a9:8c:23:
                    b4:e0:73:81:48:c1:fb:03:25:9e:5b:ed:0e:f4:05:
                    9e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:2A:10:D7:AB:68:3E:81:7C:CB:70:04:AA:30:F0:DC:BE:C1:F9:A6
            X509v3 Authority Key Identifier:
                keyid:B3:8F:33:50:8D:92:53:13:49:DF:3D:0B:E9:B5:45:FC:8E:1F:5E:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ad:77:ec:9b:51:14:04:9a:7b:48:66:b0:aa:77:88:a9:37:
         46:88:77:b4:80:95:7d:71:c4:0d:fa:5d:4f:a0:49:74:e3:f9:
         a3:dd:a4:14:b9:c6:57:bc:05:19:a3:ba:1d:2d:63:f3:51:45:
         91:71:c4:05:c4:59:c7:10:74:42:83:5d:00:30:e9:28:00:c1:
         e4:7e:ab:77:4e:1a:77:88:4d:62:b3:3a:f9:57:2a:ad:30:dd:
         e0:fa:01:9a:2c:9a:df:81:cc:69:a4:01:57:aa:5a:65:a7:80:
         58:75:94:99:1a:98:71:f4:88:28:cb:13:e5:f6:df:0b:fc:84:
         df:1a:d2:ef:cf:bb:2b:9d:5d:1a:bb:01:c8:59:1a:e5:ae:89:
         dc:aa:ae:12:86:b3:d3:19:3a:87:d4:17:18:2e:06:8d:59:65:
         f3:6b:d7:8c:9f:5d:23:39:61:72:25:fc:bc:17:3b:89:40:65:
         33:a5:01:5b:a0:e7:fb:08:15:59:66:92:b7:91:86:5f:bf:67:
         36:43:37:e8:da:2d:88:30:9e:ba:d7:a1:82:92:c0:4a:1e:88:
         46:76:11:ab:93:ed:8f:6f:2f:ed:26:32:9f:62:c6:d8:48:d2:
         eb:81:84:17:af:1e:81:89:d0:96:49:4b:56:7b:0d:a1:d8:c8:
         00:d2:c4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 16:57:57 2024 by rpki-client on console-fra.rpki-client.org