Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b8367b-6eab-40d6-9df0-b6c79f337806/1/xtAUTB5z3irxCab_ldDQl0s6ydg.mft
File:                     xtAUTB5z3irxCab_ldDQl0s6ydg.mft (raw, json)
Hash identifier:          3d9ZzoYa7CO2NR+Ix8H4y+zCDDXNTN4yM65TWKZHF0Y=
Subject key identifier:   43:84:51:39:FA:DF:4E:CC:80:F5:39:F9:16:9F:45:E3:45:2B:44:BA
Authority key identifier: C6:D0:14:4C:1E:73:DE:2A:F1:09:A6:FF:95:D0:D0:97:4B:3A:C9:D8
Certificate issuer:       /CN=c6d0144c1e73de2af109a6ff95d0d0974b3ac9d8
Certificate serial:       01903F2D851FD3AE6FA680198B1D7703E5C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xtAUTB5z3irxCab_ldDQl0s6ydg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/b8367b-6eab-40d6-9df0-b6c79f337806/1/xtAUTB5z3irxCab_ldDQl0s6ydg.mft
Manifest number:          0122
Signing time:             Sat 22 Jun 2024 09:01:06 +0000
Manifest this update:     Sat 22 Jun 2024 09:01:06 +0000
Manifest next update:     Sun 23 Jun 2024 09:01:06 +0000
Files and hashes:         1: xtAUTB5z3irxCab_ldDQl0s6ydg.crl (hash: p0WA4nrIo5Ohy8fPNyF5hEsRyEUynS17PxGeN6y/aVg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/b8367b-6eab-40d6-9df0-b6c79f337806/1/xtAUTB5z3irxCab_ldDQl0s6ydg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/b8367b-6eab-40d6-9df0-b6c79f337806/1/xtAUTB5z3irxCab_ldDQl0s6ydg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xtAUTB5z3irxCab_ldDQl0s6ydg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3f:2d:85:1f:d3:ae:6f:a6:80:19:8b:1d:77:03:e5:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6d0144c1e73de2af109a6ff95d0d0974b3ac9d8
        Validity
            Not Before: Jun 22 09:01:06 2024 GMT
            Not After : Jun 23 09:01:06 2024 GMT
        Subject: CN=43845139fadf4ecc80f539f9169f45e3452b44ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1e:b1:8d:92:ce:40:25:a3:3c:29:8b:d8:29:
                    bc:0a:bb:10:05:4d:41:83:a7:13:bd:be:f3:99:96:
                    60:51:a4:e4:32:7b:ec:3f:76:26:4a:0e:8d:92:3e:
                    14:48:db:dc:89:04:fc:b2:a2:c2:bc:bb:63:30:4a:
                    19:b1:1a:a5:87:95:6a:ab:fc:72:05:30:c3:be:40:
                    df:be:06:31:29:5a:31:bc:16:6a:90:70:cc:d1:db:
                    ca:86:68:1d:d1:dc:1e:ac:64:f8:9a:cd:fa:8f:af:
                    96:29:24:c8:ea:db:00:84:04:8d:13:c8:a6:8b:d8:
                    77:3d:fb:c7:f8:5e:30:a6:02:8a:90:0e:f9:d6:bb:
                    b3:95:95:16:bd:e0:14:d9:97:7c:c2:cb:3a:0e:9e:
                    45:83:a4:9b:e6:4e:b7:d1:17:d9:63:fd:ec:18:b9:
                    94:ab:65:dd:94:3b:e0:95:1b:b7:08:ea:86:e5:ea:
                    f6:c8:9e:88:f4:8a:ff:f5:a0:1d:7d:42:01:0a:60:
                    6d:13:cc:ac:1e:37:3d:da:e2:f9:48:24:23:51:5c:
                    1a:28:d9:18:ac:45:55:ae:90:91:77:5d:71:3b:e9:
                    04:41:e0:8d:bf:ba:07:49:72:5f:0f:bf:73:96:bd:
                    fe:e0:09:6e:80:bf:6b:9c:ef:e8:b0:91:1a:6c:55:
                    a0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:84:51:39:FA:DF:4E:CC:80:F5:39:F9:16:9F:45:E3:45:2B:44:BA
            X509v3 Authority Key Identifier:
                keyid:C6:D0:14:4C:1E:73:DE:2A:F1:09:A6:FF:95:D0:D0:97:4B:3A:C9:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtAUTB5z3irxCab_ldDQl0s6ydg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b8367b-6eab-40d6-9df0-b6c79f337806/1/xtAUTB5z3irxCab_ldDQl0s6ydg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b8367b-6eab-40d6-9df0-b6c79f337806/1/xtAUTB5z3irxCab_ldDQl0s6ydg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:5c:73:2d:f1:d4:8e:71:c8:81:5c:56:7c:d6:41:9e:d4:c3:
         3d:45:b0:32:3e:48:96:8f:65:8c:de:83:be:23:b8:71:aa:74:
         53:55:bf:be:29:18:bd:b7:0a:e9:66:fe:c1:e8:2b:9c:47:2f:
         44:d9:92:7a:7b:4a:9d:22:c2:8b:34:8c:68:24:97:2e:46:a4:
         6c:82:d4:87:12:67:75:d3:e8:ee:3b:bc:17:19:d4:26:81:ea:
         19:57:f9:35:76:28:73:d7:50:54:55:fa:e4:cb:bf:b5:45:38:
         5a:df:89:22:64:c0:a7:22:7e:f3:ce:3e:6f:ad:28:50:83:a5:
         77:67:3e:90:e5:f2:ab:28:a8:ef:bb:a3:00:e4:76:3a:42:80:
         ec:54:ce:a8:7a:fb:29:e0:7c:63:86:c5:cd:e6:35:a6:dd:70:
         61:af:0f:1e:4d:85:4e:e4:1d:54:4f:c6:4f:dd:39:1c:39:ed:
         a1:ec:b1:c4:f6:40:53:94:f6:9d:c8:25:0e:f6:40:54:3e:0d:
         e7:86:d0:9b:85:2c:68:af:26:3f:85:dc:ff:30:e2:da:03:6b:
         89:b1:8d:c5:34:2f:b7:23:70:fc:df:30:7f:23:12:be:f0:ef:
         94:7a:1a:64:42:e2:37:bc:f7:4e:d5:ec:53:d0:1e:a7:e4:4a:
         cc:d8:e4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 10:15:38 2024 by rpki-client on console-fra.rpki-client.org