Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
File:                     tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft (raw, json)
Hash identifier:          MbC3Wh2WJELBUQNI8bePtFmGkup/gcQIv+0/PFsuBN0=
Subject key identifier:   BA:CF:24:9D:D1:BE:AD:98:E7:B3:CD:D5:8A:31:90:71:78:ED:E9:18
Authority key identifier: B5:5C:FE:77:1C:F2:84:FE:E8:D0:C2:7B:BC:F1:1D:E1:87:9C:CC:41
Certificate issuer:       /CN=b55cfe771cf284fee8d0c27bbcf11de1879ccc41
Certificate serial:       01901DEBF7C152BC7164457B44B7603D53AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
Manifest number:          09AE
Signing time:             Sat 15 Jun 2024 22:02:01 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:01 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:01 +0000
Files and hashes:         1: tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl (hash: rgC9zGcfaHFl8D4hYR1vlq96mgsmS9A3sU3LwzL/Bck=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:f7:c1:52:bc:71:64:45:7b:44:b7:60:3d:53:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b55cfe771cf284fee8d0c27bbcf11de1879ccc41
        Validity
            Not Before: Jun 15 22:02:01 2024 GMT
            Not After : Jun 16 22:02:01 2024 GMT
        Subject: CN=bacf249dd1bead98e7b3cdd58a31907178ede918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:56:89:41:60:d5:57:5a:fa:fe:94:c1:98:72:
                    2e:1f:48:bd:86:02:b9:e6:cf:26:93:bd:7a:a4:6c:
                    f9:5a:d0:34:2b:de:d4:cc:fd:b7:03:7b:fd:04:37:
                    7d:18:75:ee:8b:12:c8:ab:a7:80:d3:e0:49:d4:3e:
                    9c:ca:3d:7e:56:1c:2e:80:38:c9:bf:2b:5d:ff:2c:
                    85:5c:2c:f7:b4:d3:4f:0b:e4:fa:81:d3:11:8b:72:
                    0c:8b:10:5d:79:ff:9d:be:f9:80:6b:bb:a8:05:f8:
                    4a:22:80:5c:a8:e5:0f:ba:88:f6:9f:23:43:43:fb:
                    27:6a:09:bd:22:27:a5:37:cc:ea:12:6c:b9:b1:56:
                    73:a9:63:c2:bb:69:ea:4f:2c:8b:d7:11:57:8d:57:
                    98:b2:0e:4d:3a:e4:49:5d:9e:b0:02:f3:b9:35:0f:
                    f8:99:7a:56:8a:13:21:2c:d1:f2:6d:45:f8:55:c0:
                    07:94:fd:d2:80:49:44:a5:41:e3:e4:84:09:c0:b3:
                    dc:c6:c1:93:d8:b3:50:0c:34:43:68:ac:08:aa:c3:
                    1a:1a:bb:9f:64:cc:63:c0:55:13:3e:6b:30:54:82:
                    a5:de:ed:ce:8b:ae:22:22:71:a7:99:40:ed:92:e5:
                    b7:2b:39:1c:bc:2a:24:4e:88:31:74:bb:3d:ec:86:
                    28:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CF:24:9D:D1:BE:AD:98:E7:B3:CD:D5:8A:31:90:71:78:ED:E9:18
            X509v3 Authority Key Identifier:
                keyid:B5:5C:FE:77:1C:F2:84:FE:E8:D0:C2:7B:BC:F1:1D:E1:87:9C:CC:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:1c:20:c7:10:6a:42:17:46:2a:3b:ff:57:b5:9d:80:67:33:
         a1:6d:73:d3:38:a2:ed:08:28:0e:2b:1a:21:ca:26:3c:d6:34:
         4f:a4:65:91:ee:c6:85:e3:62:69:33:2e:61:aa:d7:5f:0f:a6:
         d3:c2:5f:23:8b:28:0c:b3:94:58:d0:58:71:e6:96:26:50:8b:
         9e:f6:05:fc:16:87:56:4a:19:e1:2c:06:97:61:ca:92:7d:72:
         19:99:20:66:05:f6:87:4b:37:e9:e0:a8:c6:1e:98:2c:64:0c:
         0e:f9:73:35:9d:33:35:70:5e:d6:3a:de:42:f3:84:c8:92:b9:
         9d:58:e7:6b:eb:eb:f8:4f:73:77:13:1a:41:86:a1:0c:de:90:
         f3:fc:45:a7:46:21:f4:ec:59:8b:6e:f7:40:49:a8:55:12:cc:
         de:08:18:ea:f0:16:34:fa:70:cd:3c:0f:2a:0d:dd:bb:c1:38:
         33:69:73:72:21:20:5e:0e:3f:3a:b3:c8:20:7c:16:06:d2:fa:
         f2:58:ca:19:69:04:d3:f0:38:c8:e9:06:6f:9a:dd:10:d2:4f:
         56:46:15:9b:87:ca:9d:ea:70:d6:5b:82:6f:ad:54:b4:b6:0b:
         2a:85:fb:0a:c6:6e:d3:e1:f6:db:50:ad:88:b5:d0:1d:e7:7c:
         20:c9:54:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd6/fBUrxxZEV7RLdgPVOsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NWNmZTc3MWNmMjg0ZmVlOGQwYzI3YmJjZjExZGUxODc5
Y2NjNDEwHhcNMjQwNjE1MjIwMjAxWhcNMjQwNjE2MjIwMjAxWjAzMTEwLwYDVQQD
EyhiYWNmMjQ5ZGQxYmVhZDk4ZTdiM2NkZDU4YTMxOTA3MTc4ZWRlOTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVaJQWDVV1r6/pTBmHIuH0i9hgK5
5s8mk716pGz5WtA0K97UzP23A3v9BDd9GHXuixLIq6eA0+BJ1D6cyj1+VhwugDjJ
vytd/yyFXCz3tNNPC+T6gdMRi3IMixBdef+dvvmAa7uoBfhKIoBcqOUPuoj2nyND
Q/snagm9IielN8zqEmy5sVZzqWPCu2nqTyyL1xFXjVeYsg5NOuRJXZ6wAvO5NQ/4
mXpWihMhLNHybUX4VcAHlP3SgElEpUHj5IQJwLPcxsGT2LNQDDRDaKwIqsMaGruf
ZMxjwFUTPmswVIKl3u3Oi64iInGnmUDtkuW3KzkcvCokTogxdLs97IYoHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrPJJ3Rvq2Y57PN1YoxkHF47ekYMB8GA1UdIwQY
MBaAFLVc/ncc8oT+6NDCe7zxHeGHnMxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZ6LWR4enloUDdvME1KN3ZQRWQ0WWVjekVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny84NDQ0MDUtN2E4Zi00MjMyLTk1Yjgt
NjVjOTI4YzdiMGJmLzEvdFZ6LWR4enloUDdvME1KN3ZQRWQ0WWVjekVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny84NDQ0MDUtN2E4Zi00MjMyLTk1YjgtNjVjOTI4YzdiMGJm
LzEvdFZ6LWR4enloUDdvME1KN3ZQRWQ0WWVjekVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhwgxxBq
QhdGKjv/V7WdgGczoW1z0zii7QgoDisaIcomPNY0T6Rlke7GheNiaTMuYarXXw+m
08JfI4soDLOUWNBYceaWJlCLnvYF/BaHVkoZ4SwGl2HKkn1yGZkgZgX2h0s36eCo
xh6YLGQMDvlzNZ0zNXBe1jreQvOEyJK5nVjna+vr+E9zdxMaQYahDN6Q8/xFp0Yh
9OxZi273QEmoVRLM3ggY6vAWNPpwzTwPKg3du8E4M2lzciEgXg4/OrPIIHwWBtL6
8ljKGWkE0/A4yOkGb5rdENJPVkYVm4fKnepw1luCb61UtLYLKoX7CsZu0+H221Ct
iLXQHed8IMlUNQ==
-----END CERTIFICATE-----
Generated at Sat Jun 15 23:43:29 2024 by rpki-client on console-ams.rpki-client.org