Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/352lG6cnhKBORBIPne1HhWd5TBs.mft
File:                     352lG6cnhKBORBIPne1HhWd5TBs.mft (raw, json)
Hash identifier:          6yEzwLk/Jp4tnA7AgUPrHx0NJcVIi23xG2QMP1BfmDU=
Subject key identifier:   75:03:D6:32:3B:44:47:5E:CE:FB:93:BC:B1:EE:45:CC:54:C2:FA:7A
Authority key identifier: DF:9D:A5:1B:A7:27:84:A0:4E:44:12:0F:9D:ED:47:85:67:79:4C:1B
Certificate issuer:       /CN=df9da51ba72784a04e44120f9ded478567794c1b
Certificate serial:       01901D45F7EEEA8681D5AC73BA51457A1E2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/352lG6cnhKBORBIPne1HhWd5TBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/352lG6cnhKBORBIPne1HhWd5TBs.mft
Manifest number:          05AE
Signing time:             Sat 15 Jun 2024 19:00:43 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:43 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:43 +0000
Files and hashes:         1: 352lG6cnhKBORBIPne1HhWd5TBs.crl (hash: dDrloGEz7n+bFHJt8tiwn6wACh0RnXm4kx43FUhI4Tw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/352lG6cnhKBORBIPne1HhWd5TBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/352lG6cnhKBORBIPne1HhWd5TBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/352lG6cnhKBORBIPne1HhWd5TBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:45:f7:ee:ea:86:81:d5:ac:73:ba:51:45:7a:1e:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df9da51ba72784a04e44120f9ded478567794c1b
        Validity
            Not Before: Jun 15 19:00:43 2024 GMT
            Not After : Jun 16 19:00:43 2024 GMT
        Subject: CN=7503d6323b44475ecefb93bcb1ee45cc54c2fa7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:29:cf:65:02:b6:80:f2:f7:cd:4f:24:0e:a4:
                    8b:c9:49:d6:3c:15:f5:99:5f:6d:3d:1f:64:a7:4c:
                    60:51:00:5c:93:4f:fe:75:3b:3f:84:53:53:80:7b:
                    d0:52:24:60:07:98:60:52:f8:59:c0:99:8e:0e:14:
                    4c:43:70:3f:4f:11:5d:64:6c:a9:22:ee:fa:b6:93:
                    ad:de:1d:b8:20:24:25:1f:3d:23:1e:67:1d:c6:a1:
                    5d:5f:12:48:10:5a:57:73:d8:d6:57:3f:c0:ff:30:
                    f3:41:65:f5:b3:55:d6:21:a9:ff:d8:4a:6d:1e:1c:
                    a8:8b:d2:45:d7:8b:a0:73:28:eb:39:61:36:a4:08:
                    69:02:be:53:12:33:62:02:b1:1b:ab:9e:d5:09:9a:
                    2b:a6:6e:77:77:a7:a8:2d:61:3f:ce:39:fd:53:0a:
                    21:3f:fd:1e:f1:60:a4:ad:ce:9d:2f:b3:50:6e:63:
                    e4:38:1b:94:6c:34:58:03:04:2f:e3:ff:cb:60:b0:
                    a8:f3:19:23:67:db:4a:6d:15:6a:93:76:94:c3:e3:
                    5d:a1:c9:92:f2:1a:fd:5a:c8:5f:85:f1:fa:98:a8:
                    9a:81:46:b6:5d:c5:3d:30:4a:98:d5:9b:4a:9c:c7:
                    7b:b4:a3:d1:22:13:37:ec:5e:56:1d:e1:24:f4:e5:
                    7c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:03:D6:32:3B:44:47:5E:CE:FB:93:BC:B1:EE:45:CC:54:C2:FA:7A
            X509v3 Authority Key Identifier:
                keyid:DF:9D:A5:1B:A7:27:84:A0:4E:44:12:0F:9D:ED:47:85:67:79:4C:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/352lG6cnhKBORBIPne1HhWd5TBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/352lG6cnhKBORBIPne1HhWd5TBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/352lG6cnhKBORBIPne1HhWd5TBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:d9:cd:ca:bb:3f:c9:c9:b8:9b:74:1c:88:7c:ca:81:68:8a:
         c2:6b:af:75:d3:74:2d:94:57:e9:1b:f6:77:ae:27:25:9d:9e:
         18:9c:06:d4:b2:71:49:03:76:da:75:59:5f:8f:c2:8c:82:8c:
         10:91:dd:df:f7:ee:3b:74:96:5a:0f:a4:cb:6d:20:ce:50:3d:
         55:85:ca:45:6d:91:3e:ec:fe:9c:c8:72:b6:f7:d4:61:f0:ee:
         a6:15:29:8e:02:0e:4d:2e:b5:26:db:57:8d:40:03:f1:67:c1:
         68:50:45:33:f1:aa:dd:6b:94:41:82:00:d8:b8:bd:c6:e5:57:
         dc:00:7c:7e:09:22:bc:f9:a9:e0:f1:9a:6e:cd:18:ee:fd:d5:
         c3:4f:ff:dc:24:1d:78:08:27:bb:50:95:ab:80:a0:5d:6a:9d:
         db:6e:80:9a:8f:e2:e6:07:30:62:da:03:39:e9:66:8b:12:0b:
         7a:af:de:e0:1e:4f:d3:3f:d2:45:3a:00:39:55:b7:0a:9d:b7:
         9e:a8:dc:af:09:48:77:0a:54:63:28:b3:dd:aa:24:d1:13:66:
         ad:80:dc:72:6e:7b:ee:4c:4a:f9:21:3c:aa:32:d4:b6:62:73:
         69:15:5d:ef:f4:41:65:a9:32:5e:65:c9:2d:91:63:3a:d2:e0:
         50:cf:7b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:14:41 2024 by rpki-client on console-ams.rpki-client.org