Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
File:                     gAFl6Volo3uHPPup9TJKfiU7vdg.mft (raw, json)
Hash identifier:          JmSSAlhJFMQZO4uqWg4MUlvXOTI/rQoPoc9E6VCedC0=
Subject key identifier:   1E:C0:E6:16:46:B9:D1:6D:5C:28:E8:6C:95:FB:73:AF:75:BE:10:BE
Authority key identifier: 80:01:65:E9:5A:25:A3:7B:87:3C:FB:A9:F5:32:4A:7E:25:3B:BD:D8
Certificate issuer:       /CN=800165e95a25a37b873cfba9f5324a7e253bbdd8
Certificate serial:       019040AE9C78616E180AC08CDC4AD9F8FDB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
Manifest number:          11D3
Signing time:             Sat 22 Jun 2024 16:01:43 +0000
Manifest this update:     Sat 22 Jun 2024 16:01:43 +0000
Manifest next update:     Sun 23 Jun 2024 16:01:43 +0000
Files and hashes:         1: gAFl6Volo3uHPPup9TJKfiU7vdg.crl (hash: 0ZHDtps5Z2CKRcnW+JGT2ufPQW0vCFVb+0l6zLh3Hx0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ae:9c:78:61:6e:18:0a:c0:8c:dc:4a:d9:f8:fd:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=800165e95a25a37b873cfba9f5324a7e253bbdd8
        Validity
            Not Before: Jun 22 16:01:43 2024 GMT
            Not After : Jun 23 16:01:43 2024 GMT
        Subject: CN=1ec0e61646b9d16d5c28e86c95fb73af75be10be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7f:a0:e7:fc:b7:bc:96:d2:5d:21:c8:02:93:
                    2c:5f:89:1c:a8:cf:f6:e0:b3:1d:57:82:99:15:95:
                    bf:f1:40:1f:d3:fa:cc:46:7c:2a:db:fc:07:5b:94:
                    d9:88:36:b8:19:53:77:0b:4f:c8:13:ae:4d:aa:87:
                    38:58:3b:33:80:79:2a:06:21:42:bc:4b:2c:30:0a:
                    ed:5f:09:b7:a4:0d:d7:74:f4:c4:3c:e8:d9:44:02:
                    e7:7c:08:b3:50:49:be:fa:4c:99:96:5e:81:dc:1e:
                    15:52:47:9c:0b:a4:5d:16:3d:64:d6:f7:44:55:e1:
                    38:9a:a0:40:2a:aa:06:3b:bf:87:49:4d:7f:91:d4:
                    7d:67:31:ca:6b:19:01:d9:47:5b:13:f6:eb:81:9a:
                    0f:0c:46:a4:cd:f7:48:36:1b:d0:4b:23:2b:80:14:
                    70:1e:46:97:a6:49:62:b7:45:49:98:8d:a8:2e:1a:
                    29:ad:7d:35:b8:bd:7c:b9:fa:1a:ed:69:6f:67:83:
                    3a:2a:e1:0b:e6:d4:1f:9e:8a:ea:b3:1e:15:6c:5b:
                    e4:5b:aa:e5:c6:9e:c6:8e:7e:be:ab:5a:4d:08:03:
                    43:9f:3e:f7:f6:e5:d4:cf:a2:43:1f:39:5b:16:df:
                    de:dc:0a:40:84:97:f4:57:08:e9:8b:29:d9:61:7e:
                    35:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C0:E6:16:46:B9:D1:6D:5C:28:E8:6C:95:FB:73:AF:75:BE:10:BE
            X509v3 Authority Key Identifier:
                keyid:80:01:65:E9:5A:25:A3:7B:87:3C:FB:A9:F5:32:4A:7E:25:3B:BD:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:46:7e:96:ce:f2:9a:cc:66:f2:18:7f:8c:17:d3:21:f9:08:
         1b:54:df:aa:ca:8c:11:cb:b0:3b:a6:70:06:56:9d:b9:47:f7:
         12:a8:86:4c:ee:3b:92:ef:42:24:55:86:62:85:21:96:14:b8:
         a8:11:1a:b9:ff:d4:7c:44:08:7a:01:23:60:14:4e:9a:41:3c:
         5c:68:e5:79:49:97:2b:2f:d2:02:84:cd:36:72:bd:8f:47:2b:
         40:d0:b9:6f:11:7c:b9:21:e5:62:3f:c5:61:a3:10:3c:e0:cb:
         6f:60:e5:ea:3b:cf:98:cc:0d:e8:b1:e9:f2:87:d9:05:f2:17:
         58:05:79:b5:ca:5d:7b:94:72:94:c5:f4:37:7c:37:73:2d:0b:
         11:30:16:12:f9:38:d6:ec:8e:aa:aa:c5:42:5d:c9:05:47:ea:
         41:96:1f:0e:3d:70:da:1f:bb:5d:93:fd:c9:6e:8d:c7:8d:25:
         b8:c6:2a:9b:01:96:e7:91:b3:ce:56:ce:94:5c:e8:f1:fd:f4:
         0a:7f:54:b5:bf:e4:75:65:13:30:96:91:73:e2:55:01:ec:30:
         e6:9a:0a:78:20:e2:eb:69:f1:2c:31:88:18:4a:8c:5d:5b:ff:
         d8:29:1b:65:4f:0c:0b:97:95:4c:f9:7b:92:63:dc:4c:6e:87:
         bb:50:65:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:48:33 2024 by rpki-client on console-ams.rpki-client.org