Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
File:                     r-iiApeGib2NX15X_MG_64Z8Mio.mft (raw, json)
Hash identifier:          gfbSJQs/2ozaV5NdYpVNEHSdAoldbwNczqgVg0y7huc=
Subject key identifier:   AE:80:B7:94:03:80:B4:71:B0:17:B9:99:BE:9E:83:78:4F:28:92:A7
Authority key identifier: AF:E8:A2:02:97:86:89:BD:8D:5F:5E:57:FC:C1:BF:EB:86:7C:32:2A
Certificate issuer:       /CN=afe8a202978689bd8d5f5e57fcc1bfeb867c322a
Certificate serial:       01901DEB5AFD0D50B44BFB69687C697F77A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 22:01:21 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:21 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:21 +0000
Files and hashes:         1: r-iiApeGib2NX15X_MG_64Z8Mio.crl (hash: Cj5Q0OuNBRzpE7C/2kCmcNKtWGNgtZ09AVPhpjYTti4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:5a:fd:0d:50:b4:4b:fb:69:68:7c:69:7f:77:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afe8a202978689bd8d5f5e57fcc1bfeb867c322a
        Validity
            Not Before: Jun 15 22:01:21 2024 GMT
            Not After : Jun 16 22:01:21 2024 GMT
        Subject: CN=ae80b7940380b471b017b999be9e83784f2892a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1d:23:e4:df:90:a6:f1:fa:0d:08:43:24:c0:
                    40:26:89:b0:21:50:82:ce:34:68:1a:9e:00:3c:f2:
                    df:f1:6b:35:e4:2c:55:57:11:c1:7e:d7:5e:8e:41:
                    dd:dd:40:2e:64:f1:82:51:4c:27:37:36:77:5e:2f:
                    9e:bc:0f:27:bf:9c:c6:40:d2:5f:a6:92:3c:63:f9:
                    4e:6c:5e:99:99:34:93:1e:01:cd:f0:80:dc:8a:50:
                    c0:79:e2:a9:8a:be:de:fb:e9:05:b8:a6:85:31:ab:
                    00:14:38:27:0e:36:7e:45:25:6c:5f:39:dc:20:cf:
                    f8:b9:4c:1c:f5:55:32:8a:86:e6:84:99:7f:46:e7:
                    b0:8c:c3:8c:71:3c:16:d9:d2:9c:41:eb:f5:2c:53:
                    6f:c3:78:80:c5:20:0c:73:8c:9d:61:5d:7e:85:7e:
                    30:a3:f3:66:ff:b3:c0:72:e9:31:0d:63:0d:27:85:
                    7f:77:76:be:e8:8c:1d:2a:11:e7:6d:22:ff:e0:be:
                    f1:a9:2c:6e:e5:6a:24:7d:ab:72:2c:35:b8:97:88:
                    08:31:7f:34:7e:28:8a:a9:40:3a:fb:dd:a5:60:a1:
                    6b:a7:09:7f:90:54:cc:ab:15:a8:79:57:46:4d:34:
                    0b:a6:c1:ff:13:94:24:85:a9:ef:56:d0:73:a3:96:
                    a4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:80:B7:94:03:80:B4:71:B0:17:B9:99:BE:9E:83:78:4F:28:92:A7
            X509v3 Authority Key Identifier:
                keyid:AF:E8:A2:02:97:86:89:BD:8D:5F:5E:57:FC:C1:BF:EB:86:7C:32:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f7:bb:aa:93:33:f4:45:ac:45:d7:83:2b:f4:32:e3:9a:bc:
         2d:1d:d8:f3:74:a3:b0:bf:48:6a:db:a8:fa:0a:70:a9:cb:f0:
         7f:4f:07:7f:6d:8f:0c:16:e8:d9:c9:8b:08:f3:03:42:5e:3a:
         d0:95:bd:ae:d0:fb:57:44:8e:aa:f0:6c:69:75:08:eb:e5:77:
         ae:d5:68:af:eb:fd:e0:c3:e7:58:46:69:0d:19:80:36:83:46:
         cc:f9:10:30:c3:e9:41:a1:f8:11:fe:21:89:0c:03:47:a6:ec:
         3b:9f:0d:2a:7e:6e:c1:29:2e:dc:86:b5:07:31:eb:c8:64:fd:
         d7:9b:73:d2:8c:85:40:58:48:b6:4c:e7:4c:ba:f7:0b:71:e9:
         f2:aa:da:b5:99:d4:cd:d2:7d:bd:d9:20:26:08:67:53:da:c3:
         03:e2:ff:14:7a:fa:ed:8b:c0:0e:34:76:e8:cd:a3:96:bd:2c:
         57:79:18:1c:b7:1d:3e:c8:c7:f0:17:fa:2b:d5:d7:59:a1:7f:
         fc:40:ec:c3:6d:93:d0:77:b5:c1:5d:36:fb:a1:e5:67:68:58:
         d2:a9:33:fa:3b:99:96:3a:7e:28:cd:86:a2:ca:8d:7c:61:c3:
         30:b3:f5:36:47:07:07:23:a3:7c:96:5b:78:c7:42:24:8a:22:
         86:12:b8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:41:05 2024 by rpki-client on console-ams.rpki-client.org