Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/096f45-9978-4887-893e-e7b5b397cd26/1/bfcVxYs6uhTfvf_-FTvea3p_L9g.mft
File:                     bfcVxYs6uhTfvf_-FTvea3p_L9g.mft (raw, json)
Hash identifier:          YSwuqpGsSKFAF2EwpN/x7Mhj1boY/keRsO1twkgJuXw=
Subject key identifier:   C4:B6:32:98:E1:19:02:4A:DF:E4:81:5F:3C:1D:FD:2A:3B:4D:A7:3A
Authority key identifier: 6D:F7:15:C5:8B:3A:BA:14:DF:BD:FF:FE:15:3B:DE:6B:7A:7F:2F:D8
Certificate issuer:       /CN=6df715c58b3aba14dfbdfffe153bde6b7a7f2fd8
Certificate serial:       01901F3483D111369C9CA9140ABBCD428365
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bfcVxYs6uhTfvf_-FTvea3p_L9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/096f45-9978-4887-893e-e7b5b397cd26/1/bfcVxYs6uhTfvf_-FTvea3p_L9g.mft
Manifest number:          0775
Signing time:             Sun 16 Jun 2024 04:00:53 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:53 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:53 +0000
Files and hashes:         1: bfcVxYs6uhTfvf_-FTvea3p_L9g.crl (hash: qTSL1BhizWMKkHoFFr1oBmBQhu9dpzU+EmxfY4r4lAA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/096f45-9978-4887-893e-e7b5b397cd26/1/bfcVxYs6uhTfvf_-FTvea3p_L9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/096f45-9978-4887-893e-e7b5b397cd26/1/bfcVxYs6uhTfvf_-FTvea3p_L9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bfcVxYs6uhTfvf_-FTvea3p_L9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:83:d1:11:36:9c:9c:a9:14:0a:bb:cd:42:83:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6df715c58b3aba14dfbdfffe153bde6b7a7f2fd8
        Validity
            Not Before: Jun 16 04:00:53 2024 GMT
            Not After : Jun 17 04:00:53 2024 GMT
        Subject: CN=c4b63298e119024adfe4815f3c1dfd2a3b4da73a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b1:8c:43:ef:47:4b:ca:23:48:87:e5:03:e3:
                    d6:10:56:46:e7:23:67:1d:1a:55:e2:6f:01:04:c0:
                    22:25:3d:fd:3a:de:52:82:d3:9a:67:6a:95:f7:06:
                    0e:26:8b:47:c3:da:fb:66:51:2b:e5:31:c3:38:b5:
                    3d:c4:cf:a0:d5:f9:9b:eb:8b:26:92:c7:49:31:a5:
                    03:c0:3c:9b:78:8c:b2:dc:82:7d:b3:15:96:4a:d7:
                    84:ee:f6:1d:a5:e3:da:ce:bd:80:eb:23:94:fb:b0:
                    f4:12:fa:9b:bd:77:78:a8:98:b5:bc:f8:4d:b2:b5:
                    51:66:e6:25:b0:f3:b2:67:95:fd:32:2a:e1:60:06:
                    ab:0d:2f:1b:63:b3:03:69:90:7a:a2:c3:1a:6f:1a:
                    ff:ee:3b:2d:96:51:fb:23:03:34:49:f7:8c:61:26:
                    5f:a0:aa:43:9b:92:fc:80:ec:85:0a:09:5d:61:40:
                    f4:bc:71:24:a4:36:32:26:dc:d3:d9:6d:d2:b5:8f:
                    4a:21:20:78:59:78:35:8d:9d:3a:21:d9:11:0c:c6:
                    36:69:d2:09:ce:ac:a7:d6:20:57:78:f2:c4:65:2b:
                    3a:82:0b:53:07:62:36:c6:5e:d7:37:e8:17:34:5d:
                    c3:96:ea:04:31:8f:2c:50:bd:1b:9d:fd:88:17:0c:
                    6d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B6:32:98:E1:19:02:4A:DF:E4:81:5F:3C:1D:FD:2A:3B:4D:A7:3A
            X509v3 Authority Key Identifier:
                keyid:6D:F7:15:C5:8B:3A:BA:14:DF:BD:FF:FE:15:3B:DE:6B:7A:7F:2F:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfcVxYs6uhTfvf_-FTvea3p_L9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/096f45-9978-4887-893e-e7b5b397cd26/1/bfcVxYs6uhTfvf_-FTvea3p_L9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/096f45-9978-4887-893e-e7b5b397cd26/1/bfcVxYs6uhTfvf_-FTvea3p_L9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:96:d6:6e:f6:8f:a6:db:41:9e:c7:4f:13:42:ac:b3:3a:ac:
         df:c0:22:1b:77:f3:77:de:93:53:04:7b:f2:25:f7:45:0c:8a:
         f2:fa:d6:1a:57:ea:38:d1:fb:bf:e2:f3:b6:3e:02:34:21:7a:
         7e:87:37:a2:f8:74:3f:83:d9:b4:d9:88:af:1b:8d:a0:79:da:
         54:9f:8f:84:42:0b:1e:2d:41:c3:30:66:12:aa:01:86:53:40:
         32:14:ef:21:b8:84:88:69:f3:ec:3f:af:4a:1a:1d:4f:1f:9d:
         b1:43:18:63:33:ea:ba:56:ab:fc:df:d9:98:3f:7a:4d:9d:ba:
         e4:09:24:cc:fd:45:37:05:dd:69:61:b2:e6:11:ee:2f:1b:d5:
         57:97:9b:40:09:59:94:d1:f1:b5:18:fc:00:71:55:ad:fa:6c:
         21:ae:2f:41:0c:57:a4:c6:3d:4e:ec:a4:e4:b1:0b:b8:c0:8d:
         e7:93:2e:f5:f3:d8:ac:b4:8a:88:e3:41:ff:7a:91:31:34:5a:
         34:9a:3e:cc:37:89:e6:55:90:cf:03:f3:d6:55:9e:a6:52:b7:
         e7:11:9b:2a:0e:a4:6f:49:fb:0c:2d:aa:d8:14:33:b6:84:64:
         14:3a:d4:5c:22:4d:55:47:23:bc:75:ae:31:70:52:67:10:de:
         ef:ae:50:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:36:26 2024 by rpki-client on console-ams.rpki-client.org