Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/c1e0cc-4f82-44d7-9508-f93d70a92472/1/tMN7Di6NgtHNKTodhqgoBVn_5fk.mft
File:                     tMN7Di6NgtHNKTodhqgoBVn_5fk.mft (raw, json)
Hash identifier:          U8iKaMLE/NU0ldNGe6+DvLWmS5FsxZxO+bIkNfv+zt0=
Subject key identifier:   D0:26:0D:09:F9:5B:1B:34:37:76:81:52:64:84:B6:0A:7D:BE:AC:E0
Authority key identifier: B4:C3:7B:0E:2E:8D:82:D1:CD:29:3A:1D:86:A8:28:05:59:FF:E5:F9
Certificate issuer:       /CN=b4c37b0e2e8d82d1cd293a1d86a8280559ffe5f9
Certificate serial:       01901E58CE17B08614E5D244D99CEDA2AFC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tMN7Di6NgtHNKTodhqgoBVn_5fk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/c1e0cc-4f82-44d7-9508-f93d70a92472/1/tMN7Di6NgtHNKTodhqgoBVn_5fk.mft
Manifest number:          016A
Signing time:             Sun 16 Jun 2024 00:00:54 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:54 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:54 +0000
Files and hashes:         1: tMN7Di6NgtHNKTodhqgoBVn_5fk.crl (hash: oTXzRkMVPCA1XVMRtVE4gRLcaJIJVNjCU1dzLTVyztE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/c1e0cc-4f82-44d7-9508-f93d70a92472/1/tMN7Di6NgtHNKTodhqgoBVn_5fk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/c1e0cc-4f82-44d7-9508-f93d70a92472/1/tMN7Di6NgtHNKTodhqgoBVn_5fk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tMN7Di6NgtHNKTodhqgoBVn_5fk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:ce:17:b0:86:14:e5:d2:44:d9:9c:ed:a2:af:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4c37b0e2e8d82d1cd293a1d86a8280559ffe5f9
        Validity
            Not Before: Jun 16 00:00:54 2024 GMT
            Not After : Jun 17 00:00:54 2024 GMT
        Subject: CN=d0260d09f95b1b34377681526484b60a7dbeace0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9d:6e:fa:83:86:b3:f9:6c:1e:36:56:9a:f8:
                    2e:37:3d:06:6b:31:0b:b2:b8:f8:ed:35:46:40:9c:
                    35:69:20:5d:d2:a4:0a:1d:27:cf:ba:d9:5e:ff:ac:
                    56:29:8f:8d:f8:f8:bb:27:93:17:88:4a:41:7d:a5:
                    31:a3:2a:cd:81:f4:f1:b4:c7:97:c5:51:9d:e6:67:
                    1f:ab:7a:d3:80:74:24:db:a0:60:51:e6:c4:c8:c7:
                    26:61:48:11:49:fc:ce:b9:b6:8d:40:1f:22:f6:a6:
                    3b:5c:97:20:3f:b1:45:a7:83:24:b7:d8:71:79:fd:
                    11:62:b9:cb:57:8f:e7:4d:42:94:56:49:73:03:5b:
                    b8:ca:98:fa:81:0c:30:14:21:d9:37:ee:1a:34:a5:
                    b1:15:cc:50:96:40:10:d4:27:82:12:41:67:4e:75:
                    df:fb:12:3c:01:30:af:fa:21:19:12:9c:07:13:cb:
                    10:ea:1e:87:3c:95:32:96:57:c3:a8:28:ed:c7:27:
                    99:de:08:7c:01:b2:57:aa:ed:6f:b4:8a:2d:10:1d:
                    30:19:0c:0b:1a:2e:16:3f:60:24:b3:92:21:bb:14:
                    f8:86:f1:83:38:d4:8a:4a:34:9b:00:ff:4e:86:23:
                    71:5f:31:ce:8e:f3:44:a9:8e:9b:eb:9e:fe:24:9a:
                    41:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:26:0D:09:F9:5B:1B:34:37:76:81:52:64:84:B6:0A:7D:BE:AC:E0
            X509v3 Authority Key Identifier:
                keyid:B4:C3:7B:0E:2E:8D:82:D1:CD:29:3A:1D:86:A8:28:05:59:FF:E5:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMN7Di6NgtHNKTodhqgoBVn_5fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c1e0cc-4f82-44d7-9508-f93d70a92472/1/tMN7Di6NgtHNKTodhqgoBVn_5fk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c1e0cc-4f82-44d7-9508-f93d70a92472/1/tMN7Di6NgtHNKTodhqgoBVn_5fk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:08:98:90:b9:83:c4:a9:d6:54:12:6c:8f:3b:45:a3:8a:3b:
         bf:a9:fd:ee:e2:e3:fd:3d:c0:63:19:02:73:d9:ac:25:16:76:
         37:08:ad:a2:f0:10:e5:a8:34:52:e0:e6:8c:c5:0e:29:95:1a:
         e3:00:76:e4:1b:1f:b1:df:64:c3:a3:b8:50:d6:db:56:c7:79:
         74:ae:2c:81:ac:82:9a:7a:f4:45:5e:8b:52:02:36:de:0a:35:
         eb:26:ff:7c:4f:0c:f4:10:d9:5a:fe:7e:15:17:90:9f:6c:bb:
         e1:8e:35:91:27:02:e5:09:b1:8c:4f:dd:a0:1f:4f:35:33:ba:
         f7:7e:19:91:c1:0d:0d:aa:11:e2:e1:5d:49:fa:5b:6f:2a:a3:
         e7:89:9a:66:3b:0c:ea:25:37:06:36:16:bb:e4:00:ab:b3:8e:
         80:8b:42:0a:51:53:6d:f1:d6:f9:ac:4f:82:4e:6e:74:52:a4:
         73:57:3a:d8:e4:d5:6c:92:3e:0b:34:1c:0d:96:86:e1:25:8d:
         47:0d:e9:9a:1f:0f:c7:b0:fc:a0:83:15:ee:96:d8:4a:54:ce:
         fc:ee:cf:75:4a:28:38:c5:28:32:f4:31:6f:a8:b7:de:25:62:
         32:5c:89:f9:db:50:17:5e:01:ae:3f:de:fd:7d:d3:5a:d0:f8:
         d4:b1:41:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:02:17 2024 by rpki-client on console-ams.rpki-client.org