Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
File:                     8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft (raw, json)
Hash identifier:          UEamj9Q2TeoXHZBX1FGVoQLV6UXUMQUAe5P39tuCuHE=
Subject key identifier:   4E:C4:F3:62:97:32:29:AE:B3:8B:73:C8:49:AE:84:E8:D7:3B:99:B4
Authority key identifier: F0:8C:19:64:84:70:09:1F:CA:7C:0E:D7:9C:E9:DF:6B:DA:A0:CD:FF
Certificate issuer:       /CN=f08c19648470091fca7c0ed79ce9df6bdaa0cdff
Certificate serial:       0190452F3CECC7DD8E3A9DB0DA84FF0F2050
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
Manifest number:          02B6
Signing time:             Sun 23 Jun 2024 13:00:41 +0000
Manifest this update:     Sun 23 Jun 2024 13:00:41 +0000
Manifest next update:     Mon 24 Jun 2024 13:00:41 +0000
Files and hashes:         1: 8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl (hash: 64XNljYifqGBht3HSr6s2AyuLKXCx0/3EAvIW6S4kfM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 13:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:2f:3c:ec:c7:dd:8e:3a:9d:b0:da:84:ff:0f:20:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f08c19648470091fca7c0ed79ce9df6bdaa0cdff
        Validity
            Not Before: Jun 23 13:00:41 2024 GMT
            Not After : Jun 24 13:00:41 2024 GMT
        Subject: CN=4ec4f362973229aeb38b73c849ae84e8d73b99b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:87:9e:d4:ac:4b:9a:4e:f8:ee:c3:79:9b:e2:
                    3d:d6:8b:4e:38:8b:2f:5c:6a:46:f5:5a:75:d6:e7:
                    0d:e4:6b:b9:ec:3b:96:bc:34:45:63:77:6c:3c:25:
                    66:d9:f3:d0:41:9f:86:9b:f5:bc:d9:0c:62:15:ff:
                    7e:96:69:94:e6:35:1c:7b:9f:8a:27:06:a5:46:3c:
                    a9:59:f9:4d:06:83:04:68:5d:a0:cf:97:4c:d1:57:
                    09:32:f8:3a:a7:00:a0:a3:40:3a:20:33:19:2b:fe:
                    8f:41:03:ed:1f:6b:bc:eb:57:c8:ef:9f:b9:07:6b:
                    89:e6:0b:40:e7:30:49:ef:1e:21:6b:e7:a9:62:98:
                    9c:27:42:4c:84:5b:df:97:ef:b0:5b:29:3c:65:74:
                    e7:db:5c:5b:dc:4b:ab:a0:24:96:36:e1:5f:5f:ad:
                    88:2b:a5:cb:59:7a:90:03:4d:dd:f6:20:6e:c6:10:
                    fb:af:56:54:c4:48:95:d9:dd:c4:61:b6:04:5b:a1:
                    95:1d:2b:dc:5e:f9:cd:fd:7f:14:6f:96:64:63:e6:
                    58:99:17:ff:dd:30:13:c2:12:07:f5:ff:13:4f:a8:
                    83:bc:9a:b2:60:a3:ae:0f:80:94:92:ae:a4:02:06:
                    64:c5:b0:11:61:d5:79:04:d3:10:48:52:7c:8f:13:
                    4a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C4:F3:62:97:32:29:AE:B3:8B:73:C8:49:AE:84:E8:D7:3B:99:B4
            X509v3 Authority Key Identifier:
                keyid:F0:8C:19:64:84:70:09:1F:CA:7C:0E:D7:9C:E9:DF:6B:DA:A0:CD:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:15:a2:ba:96:e4:0f:c5:cf:5f:a1:68:16:10:ec:96:bb:53:
         83:7c:db:dd:c6:5d:f7:62:f6:cb:44:38:ae:bf:8f:3e:32:f0:
         07:30:51:e5:eb:88:16:8b:61:08:59:29:e8:a4:e5:73:eb:23:
         94:47:f9:da:d5:b6:52:93:27:13:52:9d:9e:f7:62:3c:63:e2:
         ae:7a:99:02:80:28:9b:b2:f1:b1:21:b7:2a:de:66:e7:18:69:
         11:d5:0c:ef:de:10:59:0c:19:e1:19:97:36:ea:8d:75:f7:bd:
         e7:2a:9b:59:3a:11:4a:74:bf:e6:cd:d9:50:c8:5e:2e:6e:cc:
         07:45:26:d7:76:1a:ea:3e:a1:90:e7:d3:fd:26:ef:47:fb:d2:
         88:75:44:7c:a0:5b:db:79:43:15:48:2f:7a:53:c0:61:e9:33:
         f2:0c:84:b4:b9:21:41:87:b2:39:b8:99:66:cb:30:53:40:ae:
         66:e6:c6:03:d1:66:e7:a1:c5:b3:92:50:64:6d:b1:1d:73:a1:
         3b:7e:b5:57:48:e2:15:87:be:49:42:67:74:14:0c:3f:04:51:
         4d:e7:39:17:71:2e:11:48:1d:bd:f8:8f:e2:91:0e:97:21:08:
         08:ed:e0:97:29:3a:21:c0:85:d5:5f:50:e9:ba:ed:86:ed:2c:
         e2:58:72:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBFLzzsx92OOp2w2oT/DyBQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwOGMxOTY0ODQ3MDA5MWZjYTdjMGVkNzljZTlkZjZiZGFh
MGNkZmYwHhcNMjQwNjIzMTMwMDQxWhcNMjQwNjI0MTMwMDQxWjAzMTEwLwYDVQQD
Eyg0ZWM0ZjM2Mjk3MzIyOWFlYjM4YjczYzg0OWFlODRlOGQ3M2I5OWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4ee1KxLmk747sN5m+I91otOOIsv
XGpG9Vp11ucN5Gu57DuWvDRFY3dsPCVm2fPQQZ+Gm/W82QxiFf9+lmmU5jUce5+K
JwalRjypWflNBoMEaF2gz5dM0VcJMvg6pwCgo0A6IDMZK/6PQQPtH2u861fI75+5
B2uJ5gtA5zBJ7x4ha+epYpicJ0JMhFvfl++wWyk8ZXTn21xb3EuroCSWNuFfX62I
K6XLWXqQA03d9iBuxhD7r1ZUxEiV2d3EYbYEW6GVHSvcXvnN/X8Ub5ZkY+ZYmRf/
3TATwhIH9f8TT6iDvJqyYKOuD4CUkq6kAgZkxbARYdV5BNMQSFJ8jxNKCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7E82KXMimus4tzyEmuhOjXO5m0MB8GA1UdIwQY
MBaAFPCMGWSEcAkfynwO15zp32vaoM3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEl3WlpJUndDUl9LZkE3WG5PbmZhOXFnemY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jNTQ4NWUtMzgyNi00M2U4LThiZTIt
ZDFmZThjYjAxNDU2LzEvOEl3WlpJUndDUl9LZkE3WG5PbmZhOXFnemY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9jNTQ4NWUtMzgyNi00M2U4LThiZTItZDFmZThjYjAxNDU2
LzEvOEl3WlpJUndDUl9LZkE3WG5PbmZhOXFnemY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhWiupbk
D8XPX6FoFhDslrtTg3zb3cZd92L2y0Q4rr+PPjLwBzBR5euIFothCFkp6KTlc+sj
lEf52tW2UpMnE1KdnvdiPGPirnqZAoAom7LxsSG3Kt5m5xhpEdUM794QWQwZ4RmX
NuqNdfe95yqbWToRSnS/5s3ZUMheLm7MB0Um13Ya6j6hkOfT/SbvR/vSiHVEfKBb
23lDFUgvelPAYekz8gyEtLkhQYeyObiZZsswU0CuZubGA9Fm56HFs5JQZG2xHXOh
O361V0jiFYe+SUJndBQMPwRRTec5F3EuEUgdvfiP4pEOlyEICO3glyk6IcCF1V9Q
6brthu0s4lhyhQ==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:29:47 2024 by rpki-client on console-fra.rpki-client.org