Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
File:                     aXC3r07RGKBaFTFefYuUY0yf6iA.mft (raw, json)
Hash identifier:          OFbM1TOtrfKDFrRi0NEd9Ym3Dx0WeLU2B/7TWLQm4wA=
Subject key identifier:   A4:BD:2E:85:31:9A:B1:1C:B7:87:43:1E:A5:1D:4A:3E:5F:84:3F:B3
Authority key identifier: 69:70:B7:AF:4E:D1:18:A0:5A:15:31:5E:7D:8B:94:63:4C:9F:EA:20
Certificate issuer:       /CN=6970b7af4ed118a05a15315e7d8b94634c9fea20
Certificate serial:       01901B57FB90C25329AF2046403E029F1648
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
Manifest number:          074F
Signing time:             Sat 15 Jun 2024 10:01:09 +0000
Manifest this update:     Sat 15 Jun 2024 10:01:09 +0000
Manifest next update:     Sun 16 Jun 2024 10:01:09 +0000
Files and hashes:         1: aXC3r07RGKBaFTFefYuUY0yf6iA.crl (hash: tTup1G5ZaMCf6Rv3R+gWafdsXSBKqSYZS/JddFm3FTk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:57:fb:90:c2:53:29:af:20:46:40:3e:02:9f:16:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6970b7af4ed118a05a15315e7d8b94634c9fea20
        Validity
            Not Before: Jun 15 10:01:09 2024 GMT
            Not After : Jun 16 10:01:09 2024 GMT
        Subject: CN=a4bd2e85319ab11cb787431ea51d4a3e5f843fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ac:f2:7f:61:2b:73:bd:ca:38:0e:d7:e3:ca:
                    01:0c:09:84:ab:79:23:95:c2:29:13:8a:39:3a:50:
                    29:b2:59:5c:f2:af:ff:1e:29:1c:50:c3:ab:51:e7:
                    cc:6f:64:53:70:33:61:66:bf:d8:6e:c6:32:bd:5d:
                    f7:6c:9d:db:98:4d:a3:bb:f3:69:32:50:d5:7c:60:
                    53:a5:48:23:bd:dc:ca:ac:6c:bd:98:84:6b:b8:01:
                    55:3c:40:51:36:77:c2:05:87:0c:53:dc:a0:99:2a:
                    55:69:37:09:52:81:5c:67:45:4b:5c:5d:c7:d5:9c:
                    76:9b:1f:40:17:c8:78:51:ef:23:36:36:a9:cb:d9:
                    d7:a4:d8:79:82:72:8c:ad:2e:33:40:ff:a1:d6:34:
                    26:40:bf:cd:78:a5:be:39:b5:41:da:d0:7b:9f:7b:
                    2b:ba:ae:aa:e7:49:91:82:2f:30:95:58:38:a2:cd:
                    3f:00:17:c4:14:fe:06:52:68:33:ae:57:55:34:ee:
                    d1:6c:f8:fc:5b:dd:35:0a:22:4f:eb:07:cc:ab:ee:
                    2e:8a:c9:37:b7:34:58:b3:3e:f1:bc:0a:04:8c:ef:
                    4e:2a:a5:a9:49:4d:f8:78:d7:fe:ad:0b:06:92:0a:
                    57:e0:29:48:e7:70:f8:9e:27:0c:f4:46:c3:96:10:
                    e7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BD:2E:85:31:9A:B1:1C:B7:87:43:1E:A5:1D:4A:3E:5F:84:3F:B3
            X509v3 Authority Key Identifier:
                keyid:69:70:B7:AF:4E:D1:18:A0:5A:15:31:5E:7D:8B:94:63:4C:9F:EA:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:00:12:f3:3c:ef:dc:fe:f4:eb:eb:b2:b0:50:0e:a2:ea:19:
         58:79:2d:44:19:37:1f:d6:96:50:8f:bb:36:4c:45:00:90:7d:
         cc:16:d0:c1:71:ff:ab:24:06:80:be:e1:61:c2:f4:f5:c1:2c:
         0a:c6:ec:eb:cc:20:1c:bc:fe:3f:06:18:34:0d:9a:48:83:4b:
         d1:ff:45:73:b2:55:ff:a5:f9:be:ee:1f:58:69:49:03:db:4f:
         11:79:03:be:31:4e:34:5e:b1:d3:c9:51:f6:f2:52:2e:48:ba:
         d4:32:5c:43:85:c2:45:b7:08:8e:15:73:18:e9:de:10:1b:08:
         29:f1:a0:16:47:b2:0e:af:23:bd:33:0f:f7:b4:84:07:56:31:
         8e:68:44:f7:ed:b0:49:92:fe:02:d1:9e:ff:b6:d8:47:35:9c:
         d9:0b:e4:6d:78:80:9c:12:55:cc:8e:c3:19:f9:7c:98:1d:26:
         85:17:f0:cf:84:0e:ae:cd:70:b8:ea:10:fc:1e:e6:02:16:aa:
         e2:c0:34:7d:48:0e:ee:9d:a3:d7:dc:86:4e:59:6c:02:93:90:
         22:4b:26:5d:b8:5a:1e:f8:a6:8f:b1:48:e7:de:42:d5:00:44:
         ab:20:90:b4:b1:87:76:da:02:87:43:73:b8:13:3b:a8:c4:2d:
         80:f3:5a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:51:56 2024 by rpki-client on console-fra.rpki-client.org