Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
File:                     XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft (raw, json)
Hash identifier:          /SvWAuxv/X2fHcwl4SvEePd97Hr6f/60x6bFEj4s9gA=
Subject key identifier:   41:D2:C8:52:89:CA:4A:C3:DA:A5:07:7E:A7:4D:31:EB:27:07:40:B7
Authority key identifier: 5D:FA:AF:B6:1A:0C:74:A0:49:D9:6B:CD:E5:9C:B9:42:CC:8D:55:79
Certificate issuer:       /CN=5dfaafb61a0c74a049d96bcde59cb942cc8d5579
Certificate serial:       01901DEC6914BD9D50E234994951EF2EB1A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 22:02:30 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:30 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:30 +0000
Files and hashes:         1: XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl (hash: uwGAQR3XTamJGnHr1uUzQEdUEYsmEOUc+yWsfjSDDaM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:69:14:bd:9d:50:e2:34:99:49:51:ef:2e:b1:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dfaafb61a0c74a049d96bcde59cb942cc8d5579
        Validity
            Not Before: Jun 15 22:02:30 2024 GMT
            Not After : Jun 16 22:02:30 2024 GMT
        Subject: CN=41d2c85289ca4ac3daa5077ea74d31eb270740b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ef:fb:15:b5:20:2e:f8:72:17:e9:0d:fb:99:
                    fd:df:40:4b:9c:11:05:d5:7c:1f:6c:87:76:c5:a3:
                    d5:59:e8:bd:38:97:66:21:a5:99:58:b1:35:e9:24:
                    ac:47:06:c8:98:9f:70:f9:e0:40:db:47:a1:9d:32:
                    a9:1f:79:0d:6b:cd:a4:0b:49:18:94:3b:6b:07:77:
                    3d:85:26:7f:d8:d9:b2:a4:bb:e4:f7:67:91:3c:72:
                    97:6d:1a:ec:14:af:4e:66:80:e0:89:c4:40:f4:f4:
                    20:2c:14:54:09:ba:0a:bb:16:46:92:33:fa:6c:b3:
                    4c:60:06:87:a8:86:0a:97:70:75:b2:90:43:bd:1f:
                    1c:ad:22:89:b4:23:02:dc:ca:e6:49:b5:4c:52:96:
                    5e:06:57:b9:b6:e8:d8:95:ef:c2:f4:c2:b3:28:bf:
                    a7:40:45:22:2b:2c:f5:87:92:d8:67:dd:9b:ad:a2:
                    34:b9:ba:1d:ac:0d:25:ef:7f:ab:64:9a:06:f2:aa:
                    0d:c4:07:0d:41:53:ac:77:4d:92:54:70:10:38:2f:
                    31:0f:56:ac:8f:00:04:07:0f:56:94:36:d8:3d:4c:
                    7f:1a:53:2b:70:36:24:5a:82:66:1d:88:1e:54:95:
                    bb:a1:fe:30:55:ff:75:1e:75:73:e5:99:b4:9a:c5:
                    5a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D2:C8:52:89:CA:4A:C3:DA:A5:07:7E:A7:4D:31:EB:27:07:40:B7
            X509v3 Authority Key Identifier:
                keyid:5D:FA:AF:B6:1A:0C:74:A0:49:D9:6B:CD:E5:9C:B9:42:CC:8D:55:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:46:30:3c:c6:4f:70:ae:4d:d6:7c:7c:eb:3c:24:fe:62:ff:
         bb:25:d4:68:d4:a1:5e:b7:64:17:ff:c0:88:00:1e:f1:34:93:
         46:5b:da:4e:4a:7a:9e:d1:cc:9f:46:c5:46:4e:b4:0f:1c:2d:
         e0:ba:d1:e5:9d:08:42:49:04:73:0a:f5:34:cf:c2:43:08:40:
         fe:b2:8d:8b:62:34:20:8c:57:5c:db:9b:7a:a5:ea:87:f9:41:
         a9:1a:cb:36:c7:e5:1e:37:e8:37:3a:ed:57:60:2c:0c:be:45:
         76:21:ca:b0:ea:b4:f1:3f:22:b1:bc:84:68:87:56:6f:c1:42:
         a3:c9:5f:3e:9e:d6:be:a9:b1:56:a3:77:c3:6a:f8:29:7f:e7:
         b6:97:a7:74:8f:79:de:63:4f:0e:12:7b:8d:c4:fb:ee:4b:a0:
         59:2c:16:47:40:b7:69:9a:c0:57:24:70:4d:bd:25:31:6f:b5:
         48:e1:bc:b8:c5:c4:3b:4e:81:c7:ae:49:42:7e:7b:71:e2:b2:
         f7:5a:f5:e3:59:be:bb:1c:1e:65:13:f0:11:42:6c:ed:3e:41:
         c2:21:19:41:fa:2c:69:5c:09:a1:44:1e:1d:d5:56:f4:e1:3b:
         1a:79:60:e1:0d:c1:63:9f:28:51:a3:65:2b:bb:8b:8b:db:44:
         ac:98:86:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:17:08 2024 by rpki-client on console-ams.rpki-client.org