Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/1b9fb2-5556-481c-ac21-0a18b5b4af37/1/IhYGqPa_59lCwZ4hn4oRNxiZZP4.mft
File:                     IhYGqPa_59lCwZ4hn4oRNxiZZP4.mft (raw, json)
Hash identifier:          62E/Qa47Xzyq/vOCMvxLFXIfCFDxHpP1wYYVvWVJ8xI=
Subject key identifier:   EE:68:96:4C:94:B5:73:57:6F:28:D1:7B:F8:C8:9C:4F:D9:DF:3A:48
Authority key identifier: 22:16:06:A8:F6:BF:E7:D9:42:C1:9E:21:9F:8A:11:37:18:99:64:FE
Certificate issuer:       /CN=221606a8f6bfe7d942c19e219f8a1137189964fe
Certificate serial:       0190452F303CD9FDA05275C479CD2CF0DC59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IhYGqPa_59lCwZ4hn4oRNxiZZP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/1b9fb2-5556-481c-ac21-0a18b5b4af37/1/IhYGqPa_59lCwZ4hn4oRNxiZZP4.mft
Manifest number:          02E7
Signing time:             Sun 23 Jun 2024 13:00:38 +0000
Manifest this update:     Sun 23 Jun 2024 13:00:38 +0000
Manifest next update:     Mon 24 Jun 2024 13:00:38 +0000
Files and hashes:         1: IhYGqPa_59lCwZ4hn4oRNxiZZP4.crl (hash: IhApC7At5AojQul1lnVn4aF/zTCF9VFqmhd8mQGIZvM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/1b9fb2-5556-481c-ac21-0a18b5b4af37/1/IhYGqPa_59lCwZ4hn4oRNxiZZP4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/1b9fb2-5556-481c-ac21-0a18b5b4af37/1/IhYGqPa_59lCwZ4hn4oRNxiZZP4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IhYGqPa_59lCwZ4hn4oRNxiZZP4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 13:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:2f:30:3c:d9:fd:a0:52:75:c4:79:cd:2c:f0:dc:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=221606a8f6bfe7d942c19e219f8a1137189964fe
        Validity
            Not Before: Jun 23 13:00:38 2024 GMT
            Not After : Jun 24 13:00:38 2024 GMT
        Subject: CN=ee68964c94b573576f28d17bf8c89c4fd9df3a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6a:04:52:86:51:4c:87:56:f3:16:59:16:83:
                    72:6f:b3:5b:3a:af:44:d4:ca:60:b1:47:6e:27:e6:
                    81:97:24:ce:3f:c7:95:c4:bd:38:2a:e6:d1:10:36:
                    5f:3a:8b:9e:6d:21:83:7b:9f:9b:22:77:22:05:02:
                    61:be:27:0b:66:bc:73:55:f7:29:bb:0a:76:4a:2f:
                    6e:a5:64:e6:90:43:9d:f8:d8:a3:61:de:74:6a:00:
                    91:d4:11:55:22:6b:21:43:44:ba:e2:2f:f8:a8:63:
                    8e:6c:4c:54:9c:53:08:89:91:15:7c:4f:5b:ec:14:
                    2c:75:38:2c:1c:05:a5:cd:3a:ab:84:0a:3f:2b:b7:
                    c0:84:96:32:06:6e:c4:b6:56:cc:98:67:5d:b9:b0:
                    8f:6c:58:e9:e6:3c:6e:28:17:f0:c0:c9:90:f0:dd:
                    ef:15:fa:49:04:90:81:b7:8a:3d:fd:c9:59:2c:8b:
                    c2:ea:c7:1d:aa:af:96:c2:b2:d3:b2:20:12:6c:22:
                    ca:12:c0:b4:cb:55:68:93:d5:44:6e:4c:bc:9e:62:
                    c0:40:3d:d3:3b:a8:cb:29:62:0f:d5:95:7c:ed:47:
                    f6:69:86:8a:da:ef:86:a0:fa:4d:15:da:6d:98:0a:
                    53:41:b7:4c:a5:33:c7:f2:64:4e:cb:cd:6e:4a:8c:
                    64:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:68:96:4C:94:B5:73:57:6F:28:D1:7B:F8:C8:9C:4F:D9:DF:3A:48
            X509v3 Authority Key Identifier:
                keyid:22:16:06:A8:F6:BF:E7:D9:42:C1:9E:21:9F:8A:11:37:18:99:64:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhYGqPa_59lCwZ4hn4oRNxiZZP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1b9fb2-5556-481c-ac21-0a18b5b4af37/1/IhYGqPa_59lCwZ4hn4oRNxiZZP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1b9fb2-5556-481c-ac21-0a18b5b4af37/1/IhYGqPa_59lCwZ4hn4oRNxiZZP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:94:09:e3:9c:95:69:ce:0d:53:54:d1:82:08:90:c3:7d:4f:
         f5:19:4d:14:ed:a3:73:28:d2:c4:0b:31:23:52:55:60:d9:07:
         64:3f:4f:ab:d0:93:80:71:56:73:fb:b2:6b:da:05:a5:81:99:
         3c:cf:07:ca:19:b3:94:f3:9c:85:96:af:7b:3e:0e:e5:30:b9:
         c8:c9:05:85:88:ab:ba:91:c6:19:dc:16:7b:69:4f:be:9d:41:
         d8:99:d2:fb:ae:d1:38:54:63:9f:48:49:ea:44:7f:f4:3c:c4:
         87:43:97:25:87:d2:a0:91:5b:67:7d:a6:20:85:0a:52:31:5e:
         d2:b0:f1:b4:01:2c:64:1e:60:3c:01:ce:25:ab:84:80:bf:92:
         a2:f3:40:68:13:ae:99:a9:32:54:44:b2:b1:2c:09:50:20:d4:
         35:6c:62:c1:81:00:83:7d:1b:ce:23:69:a2:92:7d:37:80:0c:
         a2:4e:2f:42:1b:f9:38:54:79:1f:1f:a6:aa:83:4a:41:0f:6f:
         72:44:93:3b:0b:b1:fd:02:36:de:08:ce:24:5a:71:37:68:3f:
         d3:3a:4a:5c:2d:6c:c3:8c:af:c0:84:3d:97:e2:f4:48:94:d8:
         d3:e6:73:2b:af:43:a2:f9:44:23:5d:42:68:e7:91:30:6c:6f:
         2c:13:17:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:32:31 2024 by rpki-client on console-fra.rpki-client.org