Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
File:                     1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft (raw, json)
Hash identifier:          d52fhA5ubRF/bWxp9ScgApVaRTHHo//P3Wcx2PTt4WQ=
Subject key identifier:   38:97:19:DF:C1:CC:2A:6C:73:A7:C1:CA:2A:EC:71:F0:A0:FA:66:9E
Authority key identifier: D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
Certificate issuer:       /CN=d42a53da038252f64b6c29359cfac4104c35b7e9
Certificate serial:       01901D462D54816E077AA2154F1FBC20BB57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
Manifest number:          0AEA
Signing time:             Sat 15 Jun 2024 19:00:56 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:56 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:56 +0000
Files and hashes:         1: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl (hash: h43ZAk6gBKCGwVirqDMrge5apQqvUNneVYRzYlXgLD8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:2d:54:81:6e:07:7a:a2:15:4f:1f:bc:20:bb:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d42a53da038252f64b6c29359cfac4104c35b7e9
        Validity
            Not Before: Jun 15 19:00:56 2024 GMT
            Not After : Jun 16 19:00:56 2024 GMT
        Subject: CN=389719dfc1cc2a6c73a7c1ca2aec71f0a0fa669e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a3:54:4b:01:20:62:f6:19:4a:a8:75:21:59:
                    d1:09:75:7e:b7:c9:2d:a5:65:62:1a:c0:9e:9a:47:
                    24:07:9f:c2:50:19:a4:55:f7:61:75:cf:8b:16:41:
                    6e:6a:03:5b:0a:75:cc:a1:1e:dd:c0:87:fd:1b:88:
                    27:1a:8b:7c:97:dc:4d:ea:6e:8e:63:c1:59:74:0c:
                    ee:4b:ea:2e:5b:bd:07:d1:86:a8:41:f3:97:ef:51:
                    22:2d:8a:01:10:ad:98:8a:d0:87:57:4a:bf:c3:65:
                    a1:20:c8:32:a6:1e:b3:d3:95:29:64:43:f1:e1:13:
                    1c:b2:55:a1:bb:4d:61:35:59:9c:4f:53:9c:b0:ee:
                    51:70:da:e9:3e:d7:62:3b:32:0b:c8:8a:17:30:b4:
                    89:59:91:80:82:c3:4e:f9:b0:52:a6:8e:6e:b6:91:
                    2f:bd:af:72:ba:a1:df:48:84:08:a7:70:09:4a:fb:
                    65:84:5f:3e:83:37:9a:0b:36:92:7e:6e:1d:83:bb:
                    7a:2f:e0:dd:ab:2d:9d:b5:48:7f:97:1d:e2:16:dc:
                    47:f0:d7:20:0f:77:4e:59:e1:1e:ff:7e:da:54:b6:
                    88:0e:41:2d:88:ef:d3:cb:30:e6:9c:44:30:b8:b7:
                    83:34:f7:ff:21:3a:29:c2:cd:7f:f0:9e:e7:99:2d:
                    c2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:97:19:DF:C1:CC:2A:6C:73:A7:C1:CA:2A:EC:71:F0:A0:FA:66:9E
            X509v3 Authority Key Identifier:
                keyid:D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:02:cb:3b:bb:f4:2c:df:cc:d4:5f:81:8f:c9:7f:e9:bb:20:
         25:d6:93:16:25:95:bb:4b:2c:69:e2:1c:04:ac:f5:2e:03:f7:
         d2:d4:e7:2f:55:ae:2a:60:aa:7c:9a:0b:7d:aa:d1:62:79:71:
         a6:10:19:55:9f:49:12:3e:8d:4d:1b:f6:d1:12:b4:fd:63:e4:
         d7:af:9f:87:ac:63:d5:d7:75:b1:81:f9:43:ef:07:e0:28:41:
         70:24:e1:75:66:69:30:92:ba:3e:32:f2:75:5e:29:10:a0:c7:
         79:7d:17:95:c3:f4:dc:cf:22:22:a5:e8:e3:e7:b8:9b:42:31:
         28:da:53:94:7e:e9:db:38:89:38:02:5a:5f:be:ac:d0:a7:51:
         ea:0e:31:ae:87:e9:31:8a:dd:06:70:66:8d:c6:de:89:4e:f5:
         e8:d1:49:0d:78:c5:4a:70:ad:ed:8e:dd:df:30:18:c9:5f:7a:
         bf:d2:ad:6d:85:bf:a6:23:25:00:d1:32:da:ba:21:3f:76:55:
         f5:a7:33:80:08:10:50:79:64:83:3a:e9:7a:a8:0c:0a:8d:a6:
         79:b0:40:df:2f:c0:4f:3a:02:84:74:1a:93:d8:9a:1c:fd:44:
         63:d8:60:32:07:08:a6:fc:04:1c:e2:93:ea:2f:8f:c3:3a:54:
         a6:70:f2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:20:07 2024 by rpki-client on console-ams.rpki-client.org