Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
File:                     8G37T34-N0VYDoyPxHAj_7H6kW0.mft (raw, json)
Hash identifier:          F8GzvwKVINKEsMzzcCn3fprow6TP5nztVSGIHtW1b5I=
Subject key identifier:   A2:EE:4C:F8:6E:B4:25:89:1B:91:81:F6:BD:E3:3B:16:38:DB:BD:83
Authority key identifier: F0:6D:FB:4F:7E:3E:37:45:58:0E:8C:8F:C4:70:23:FF:B1:FA:91:6D
Certificate issuer:       /CN=f06dfb4f7e3e3745580e8c8fc47023ffb1fa916d
Certificate serial:       01901DB3BD3DA54BB2280A15C0D4D0F6B4E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
Manifest number:          FD
Signing time:             Sat 15 Jun 2024 21:00:36 +0000
Manifest this update:     Sat 15 Jun 2024 21:00:36 +0000
Manifest next update:     Sun 16 Jun 2024 21:00:36 +0000
Files and hashes:         1: 8G37T34-N0VYDoyPxHAj_7H6kW0.crl (hash: ao8M478vIAR29II4ZUw3eCJzvwvjbA3wxJ0LoF86mQs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:b3:bd:3d:a5:4b:b2:28:0a:15:c0:d4:d0:f6:b4:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f06dfb4f7e3e3745580e8c8fc47023ffb1fa916d
        Validity
            Not Before: Jun 15 21:00:36 2024 GMT
            Not After : Jun 16 21:00:36 2024 GMT
        Subject: CN=a2ee4cf86eb425891b9181f6bde33b1638dbbd83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6d:28:b0:6d:74:66:75:ba:63:5c:54:ac:2a:
                    df:77:af:98:c9:1c:43:68:74:f0:d8:70:77:c2:f3:
                    ab:26:08:a0:89:5e:5a:49:4b:b5:ea:3f:96:58:7c:
                    f3:09:2e:1a:47:c2:e7:e5:b7:0a:d2:d4:8e:b7:de:
                    61:da:4b:ea:74:fe:d1:74:3c:07:43:94:c2:32:5f:
                    75:11:f0:08:af:bc:1a:17:ac:3c:f6:ef:e6:a0:27:
                    1e:07:00:16:03:b8:5f:87:91:79:7c:fc:fe:7a:e0:
                    d4:87:07:30:dd:0f:9e:31:7b:c9:ae:54:64:ce:f1:
                    79:a7:9c:d2:16:bb:52:8f:db:e5:f6:79:4e:7f:e1:
                    17:12:25:3c:ad:e0:d6:90:4d:77:7d:d9:1b:53:20:
                    9b:23:f1:9c:db:40:af:a9:cb:ff:6c:dd:b8:1c:4d:
                    02:50:1a:a3:32:49:01:6c:7a:79:8d:cb:ee:e9:ef:
                    cc:ef:e1:8e:2e:b9:e2:de:79:db:9e:c1:ea:02:0c:
                    ad:05:5b:e4:77:58:de:5d:1d:a3:0f:22:99:93:a6:
                    5a:0b:32:8e:eb:22:3c:f8:40:69:0d:5c:b5:89:99:
                    f1:77:59:d6:28:ce:d1:c2:bf:57:a3:9e:fe:d0:4b:
                    81:d2:e2:be:0a:dd:cb:7f:fd:52:19:d7:c4:51:45:
                    b4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EE:4C:F8:6E:B4:25:89:1B:91:81:F6:BD:E3:3B:16:38:DB:BD:83
            X509v3 Authority Key Identifier:
                keyid:F0:6D:FB:4F:7E:3E:37:45:58:0E:8C:8F:C4:70:23:FF:B1:FA:91:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:88:ec:ab:00:c9:59:80:4f:5b:33:b0:b1:fb:44:da:94:f6:
         28:dc:56:cf:d5:0e:99:94:8d:60:19:0d:82:11:ff:df:73:eb:
         20:29:7b:ef:2f:82:58:ee:cf:49:b6:27:2a:ae:54:71:7a:bf:
         47:2e:6e:ed:38:f3:60:73:61:c2:2c:cd:cd:dd:ec:0b:d4:a9:
         21:0c:eb:c5:6b:a1:de:e1:01:69:d7:b7:23:c2:68:88:22:b2:
         12:8c:f1:d5:14:c6:9a:49:25:a1:18:2f:af:e7:9c:41:7c:9d:
         c6:dd:63:fb:98:ae:10:be:2b:a0:83:ff:63:6c:b3:90:70:f3:
         24:8b:e1:c2:8f:ae:29:9c:c8:e1:df:ed:6e:92:85:f1:33:ac:
         4c:dc:18:9a:f3:4a:22:0d:50:72:d7:03:fe:ce:02:d7:d4:44:
         0b:0e:27:f4:3f:b0:c7:70:be:c5:b2:99:a3:c0:91:a1:47:ed:
         3e:be:c0:93:1a:57:65:3b:60:35:ae:08:99:f5:fd:0f:c3:72:
         8d:cb:ce:77:f4:f8:84:f7:89:ee:3f:93:91:3e:da:f4:16:3c:
         96:e1:45:2c:ec:d1:40:23:3c:21:ed:36:c3:31:56:ab:60:95:
         a4:9b:85:d7:3c:59:4b:6d:bd:b8:98:cc:4c:7f:79:ca:d6:6c:
         83:45:47:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:41:21 2024 by rpki-client on console-ams.rpki-client.org