Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/4ac129-59e3-4331-82ee-c79c6be3e42e/1/036cbTJBKLdulycQNiNBGDxa9mQ.mft
File:                     036cbTJBKLdulycQNiNBGDxa9mQ.mft (raw, json)
Hash identifier:          GNpf3Sx7f3L4ra9Ku0feUL+hXStxCdXRkt/vZKyyha0=
Subject key identifier:   DF:DC:83:C7:4E:B1:EF:CF:4F:50:C4:39:FF:2D:D8:32:99:E5:F8:85
Authority key identifier: D3:7E:9C:6D:32:41:28:B7:6E:97:27:10:36:23:41:18:3C:5A:F6:64
Certificate issuer:       /CN=d37e9c6d324128b76e972710362341183c5af664
Certificate serial:       01901DEDA98EDD7D497DCF5091D2192A9EE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/036cbTJBKLdulycQNiNBGDxa9mQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/4ac129-59e3-4331-82ee-c79c6be3e42e/1/036cbTJBKLdulycQNiNBGDxa9mQ.mft
Manifest number:          03D2
Signing time:             Sat 15 Jun 2024 22:03:53 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:53 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:53 +0000
Files and hashes:         1: 036cbTJBKLdulycQNiNBGDxa9mQ.crl (hash: QN78CK4Tdffc9tgV37uDDcFM7t+1SAqxKkmHcEWDgoE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/4ac129-59e3-4331-82ee-c79c6be3e42e/1/036cbTJBKLdulycQNiNBGDxa9mQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/4ac129-59e3-4331-82ee-c79c6be3e42e/1/036cbTJBKLdulycQNiNBGDxa9mQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/036cbTJBKLdulycQNiNBGDxa9mQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:a9:8e:dd:7d:49:7d:cf:50:91:d2:19:2a:9e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d37e9c6d324128b76e972710362341183c5af664
        Validity
            Not Before: Jun 15 22:03:53 2024 GMT
            Not After : Jun 16 22:03:53 2024 GMT
        Subject: CN=dfdc83c74eb1efcf4f50c439ff2dd83299e5f885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:95:f0:89:c1:00:fc:42:c4:fa:d8:7b:7f:68:
                    bc:d1:37:72:1f:bb:64:64:cb:d2:da:f4:53:36:bd:
                    56:44:53:75:b2:53:38:01:a3:ab:a8:12:5b:d9:fc:
                    fc:c4:07:29:69:10:7f:b1:cd:43:eb:df:c7:84:9d:
                    c8:a0:ac:a4:5a:95:0d:6b:e5:d2:06:8a:29:5e:30:
                    98:b9:81:9e:01:59:32:29:bc:bb:a5:16:52:83:6d:
                    9d:55:61:53:61:95:1b:90:f9:4b:ce:c8:58:f2:57:
                    84:93:84:50:25:b2:81:4b:b1:08:98:c6:8f:78:a7:
                    0e:bf:60:26:fa:fb:c5:8a:eb:04:1a:a3:a8:a0:f1:
                    90:53:0e:a7:e5:64:8f:97:80:55:04:28:9b:d9:b0:
                    a7:af:5e:67:c7:57:43:ef:1b:2d:ff:88:97:db:35:
                    65:d0:b8:47:5f:c4:83:43:ee:4e:97:13:d8:23:2b:
                    52:ff:29:dc:24:01:70:6f:f8:c4:d9:be:a1:98:82:
                    15:24:dc:41:5f:f7:e0:c9:b2:7d:1c:d6:c7:59:af:
                    f0:32:dc:3d:aa:ad:b4:31:f2:a1:ff:6c:4f:8c:11:
                    2c:6c:a9:e8:4e:ed:bb:f0:63:31:fb:02:68:17:bb:
                    97:67:5c:fb:0f:76:ec:49:e4:80:cf:1c:8a:4a:1c:
                    df:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:DC:83:C7:4E:B1:EF:CF:4F:50:C4:39:FF:2D:D8:32:99:E5:F8:85
            X509v3 Authority Key Identifier:
                keyid:D3:7E:9C:6D:32:41:28:B7:6E:97:27:10:36:23:41:18:3C:5A:F6:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/036cbTJBKLdulycQNiNBGDxa9mQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/4ac129-59e3-4331-82ee-c79c6be3e42e/1/036cbTJBKLdulycQNiNBGDxa9mQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/4ac129-59e3-4331-82ee-c79c6be3e42e/1/036cbTJBKLdulycQNiNBGDxa9mQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:fe:32:13:75:e1:33:b7:4e:89:fc:4c:20:48:46:54:e0:b7:
         df:4b:20:83:df:7f:85:e3:9e:36:3b:93:19:04:24:0a:88:ee:
         39:81:1b:3b:09:42:b1:79:8d:1b:6b:38:b8:a7:80:f2:c6:46:
         c8:3e:a1:2f:3f:f0:4c:13:11:8e:65:5e:b7:5e:23:b4:9f:b6:
         02:e6:cd:57:6b:3c:69:d7:a0:c5:f4:03:bc:5d:0d:c0:b7:4b:
         6a:a6:e1:5e:d3:14:ce:b2:b5:90:37:f3:aa:28:e3:e8:6a:1c:
         ef:22:40:8f:98:0e:d8:56:00:8e:62:e3:d2:fa:71:66:1a:29:
         80:da:54:1c:55:ac:50:ed:28:eb:96:9a:8d:a5:67:5d:2f:23:
         70:30:7e:ac:9e:4e:45:1e:72:8e:9d:97:c6:ba:21:4d:90:33:
         71:44:f9:ba:cd:ce:ef:b9:41:a8:bd:08:bb:c8:9b:85:a0:0f:
         36:95:2a:bd:5d:b8:bd:ba:06:29:d0:85:3b:48:16:2b:a2:1c:
         13:a0:78:f8:64:30:8e:35:9b:0a:c9:b0:09:e9:49:79:ad:2c:
         24:03:22:d8:e6:3e:33:d0:6f:25:8f:0d:15:ad:2b:3c:04:cb:
         ab:42:d6:c4:6f:1a:16:89:6c:7f:f9:5e:0e:9d:f5:a4:3e:88:
         01:fe:98:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7amO3X1Jfc9QkdIZKp7lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzN2U5YzZkMzI0MTI4Yjc2ZTk3MjcxMDM2MjM0MTE4M2M1
YWY2NjQwHhcNMjQwNjE1MjIwMzUzWhcNMjQwNjE2MjIwMzUzWjAzMTEwLwYDVQQD
EyhkZmRjODNjNzRlYjFlZmNmNGY1MGM0MzlmZjJkZDgzMjk5ZTVmODg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJXwicEA/ELE+th7f2i80TdyH7tk
ZMvS2vRTNr1WRFN1slM4AaOrqBJb2fz8xAcpaRB/sc1D69/HhJ3IoKykWpUNa+XS
BoopXjCYuYGeAVkyKby7pRZSg22dVWFTYZUbkPlLzshY8leEk4RQJbKBS7EImMaP
eKcOv2Am+vvFiusEGqOooPGQUw6n5WSPl4BVBCib2bCnr15nx1dD7xst/4iX2zVl
0LhHX8SDQ+5OlxPYIytS/yncJAFwb/jE2b6hmIIVJNxBX/fgybJ9HNbHWa/wMtw9
qq20MfKh/2xPjBEsbKnoTu278GMx+wJoF7uXZ1z7D3bsSeSAzxyKShzfXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/cg8dOse/PT1DEOf8t2DKZ5fiFMB8GA1UdIwQY
MBaAFNN+nG0yQSi3bpcnEDYjQRg8WvZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDM2Y2JUSkJLTGR1bHljUU5pTkJHRHhhOW1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC80YWMxMjktNTllMy00MzMxLTgyZWUt
Yzc5YzZiZTNlNDJlLzEvMDM2Y2JUSkJLTGR1bHljUU5pTkJHRHhhOW1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC80YWMxMjktNTllMy00MzMxLTgyZWUtYzc5YzZiZTNlNDJl
LzEvMDM2Y2JUSkJLTGR1bHljUU5pTkJHRHhhOW1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnf4yE3Xh
M7dOifxMIEhGVOC330sgg99/heOeNjuTGQQkCojuOYEbOwlCsXmNG2s4uKeA8sZG
yD6hLz/wTBMRjmVet14jtJ+2AubNV2s8adegxfQDvF0NwLdLaqbhXtMUzrK1kDfz
qijj6Goc7yJAj5gO2FYAjmLj0vpxZhopgNpUHFWsUO0o65aajaVnXS8jcDB+rJ5O
RR5yjp2XxrohTZAzcUT5us3O77lBqL0Iu8ibhaAPNpUqvV24vboGKdCFO0gWK6Ic
E6B4+GQwjjWbCsmwCelJea0sJAMi2OY+M9BvJY8NFa0rPATLq0LWxG8aFolsf/le
Dp31pD6IAf6YgA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:14:35 2024 by rpki-client on console-ams.rpki-client.org