Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
File:                     7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft (raw, json)
Hash identifier:          p3GsrccXhDsmqrrBrQj3IKdng0NDfcqEHuGAt8mYCLs=
Subject key identifier:   B9:2F:63:C0:41:B4:B9:96:04:36:BD:5F:80:6E:CE:8D:7B:FB:7C:95
Authority key identifier: EE:4D:30:37:96:0E:D1:9C:07:9E:3E:21:E1:FE:A6:75:0C:0C:45:BE
Certificate issuer:       /CN=ee4d3037960ed19c079e3e21e1fea6750c0c45be
Certificate serial:       01901BFCDD36D90B3AAE589A2FB0C22B2039
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
Manifest number:          11C1
Signing time:             Sat 15 Jun 2024 13:01:14 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:14 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:14 +0000
Files and hashes:         1: 7k0wN5YO0ZwHnj4h4f6mdQwMRb4.crl (hash: 49e6IdH4F2W6WXbEVK1BcRda7JE5h2JwEtqVSDPrT8Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:dd:36:d9:0b:3a:ae:58:9a:2f:b0:c2:2b:20:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee4d3037960ed19c079e3e21e1fea6750c0c45be
        Validity
            Not Before: Jun 15 13:01:14 2024 GMT
            Not After : Jun 16 13:01:14 2024 GMT
        Subject: CN=b92f63c041b4b9960436bd5f806ece8d7bfb7c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:90:75:28:59:5f:8f:9b:8a:ca:38:61:35:85:
                    e4:f2:8b:61:e2:d9:32:0e:b4:21:12:7e:86:04:56:
                    ef:06:d7:03:b6:15:3e:d1:7b:f1:69:b9:fd:f3:da:
                    51:60:23:ff:33:3d:d8:45:66:0b:27:7c:17:04:f9:
                    98:78:a8:f8:17:b0:96:58:6b:f7:1d:b3:a7:6c:61:
                    5a:85:51:9a:96:57:36:ba:d0:5e:f2:d6:b7:ef:3f:
                    07:db:dc:cb:93:18:a6:3d:d6:1a:10:16:f2:2f:6f:
                    6e:a2:0b:39:02:95:9c:53:2a:f4:48:37:13:8b:d3:
                    a6:aa:ae:f9:39:78:8d:7e:11:e9:90:83:de:ab:da:
                    e6:50:48:a2:31:af:df:39:a6:36:04:6a:e2:c5:e5:
                    86:8b:cd:ca:ee:16:44:74:b1:9f:1d:83:34:c0:97:
                    0d:3e:52:54:64:ba:49:48:1b:c1:13:59:3e:1a:42:
                    b5:95:70:79:b4:fa:0a:31:5b:ce:7e:b4:c9:30:ee:
                    6a:a9:21:19:87:46:cc:4b:bf:3d:d9:a0:fb:cb:5f:
                    85:90:db:55:d3:87:7b:f2:cd:80:c0:a1:85:ac:02:
                    9e:82:bd:f0:e8:0f:76:e9:72:66:9f:b7:9c:ac:4a:
                    f7:46:4f:45:ce:34:40:12:0f:f7:65:3e:72:6e:28:
                    1c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2F:63:C0:41:B4:B9:96:04:36:BD:5F:80:6E:CE:8D:7B:FB:7C:95
            X509v3 Authority Key Identifier:
                keyid:EE:4D:30:37:96:0E:D1:9C:07:9E:3E:21:E1:FE:A6:75:0C:0C:45:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:bd:ea:26:83:18:3d:e4:cf:bb:99:5a:3d:e9:8c:2d:0d:1c:
         91:59:27:72:14:1f:aa:3f:b5:95:db:3a:8f:b9:76:45:75:6e:
         ad:f2:27:c2:85:2c:90:b2:58:f9:6a:03:57:77:fa:83:99:6c:
         8e:6f:93:69:2c:72:48:78:cb:9e:1e:90:7a:19:02:fd:78:4d:
         94:42:a7:f6:7e:6b:13:ab:39:44:6c:00:25:35:8c:0e:6a:1c:
         de:22:3f:a2:12:7c:73:8e:66:84:c4:db:2d:c0:a2:a6:48:f7:
         47:f4:ab:c9:6f:a3:5d:46:41:e9:bd:81:53:77:5c:81:ea:08:
         79:98:48:ae:ec:a0:22:11:58:14:3a:87:e4:14:ce:33:e2:cd:
         14:0e:1c:e5:93:82:0a:aa:45:77:ed:d8:e8:d8:91:95:8d:78:
         d1:1e:36:2b:f5:23:08:11:d7:5f:d3:26:f0:e1:16:13:9b:4a:
         2c:f9:79:0e:c0:39:38:02:86:29:93:fc:a8:bf:ba:ed:4c:47:
         8b:5a:ab:39:5c:8b:e4:3a:bd:44:87:4e:fd:15:47:5a:16:d7:
         84:34:30:d4:81:fd:1e:c6:84:97:ab:5e:df:e0:ca:fc:07:75:
         5d:6e:30:e3:c0:9f:a8:8c:aa:51:cb:21:5a:88:86:be:b3:d1:
         10:75:2d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:25:06 2024 by rpki-client on console-ams.rpki-client.org