Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
File:                     ORvm1CiPvt6_hkKmoeOXeupfHzU.mft (raw, json)
Hash identifier:          WaAzA3VIh6FmNby2nF/t8rLvE6XCi4/HnuPNB7BN6PM=
Subject key identifier:   78:B7:EB:3B:DD:AE:64:8D:55:49:32:35:9B:89:A9:1D:13:CF:BA:6B
Authority key identifier: 39:1B:E6:D4:28:8F:BE:DE:BF:86:42:A6:A1:E3:97:7A:EA:5F:1F:35
Certificate issuer:       /CN=391be6d4288fbedebf8642a6a1e3977aea5f1f35
Certificate serial:       01901B57E5C294FA00ABEB81D2CD8C65DB7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
Manifest number:          0940
Signing time:             Sat 15 Jun 2024 10:01:03 +0000
Manifest this update:     Sat 15 Jun 2024 10:01:03 +0000
Manifest next update:     Sun 16 Jun 2024 10:01:03 +0000
Files and hashes:         1: ORvm1CiPvt6_hkKmoeOXeupfHzU.crl (hash: nVQ+WsUQM/d0cwErVW1YVkfjjgW4sQp9eCa9AT177mg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:57:e5:c2:94:fa:00:ab:eb:81:d2:cd:8c:65:db:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391be6d4288fbedebf8642a6a1e3977aea5f1f35
        Validity
            Not Before: Jun 15 10:01:03 2024 GMT
            Not After : Jun 16 10:01:03 2024 GMT
        Subject: CN=78b7eb3bddae648d554932359b89a91d13cfba6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:25:93:aa:a1:a7:85:67:83:c0:1e:36:c8:2e:
                    51:08:d7:8b:73:50:8b:4e:b6:fb:66:87:f6:ad:43:
                    2e:0d:fb:94:45:91:b2:ba:c4:f8:a1:22:72:72:a5:
                    b1:80:01:f8:18:19:12:09:20:be:54:e9:33:13:6f:
                    b6:e8:d3:86:23:59:04:dd:ea:8c:96:aa:67:88:4e:
                    23:e5:6e:d5:4e:68:d2:69:14:d1:ab:a3:e4:2c:eb:
                    c5:c6:af:89:6d:3d:83:4b:09:78:cd:fe:ea:26:10:
                    b1:5c:f9:a6:3e:96:41:b5:9e:8c:93:08:56:11:14:
                    74:67:9c:ca:49:3a:51:d1:fa:8c:6b:eb:bb:86:3e:
                    d3:bd:48:83:73:33:c7:be:64:49:17:82:8b:e0:0f:
                    02:2b:cb:8a:1d:b6:a4:4a:f0:76:c5:76:cf:5b:c3:
                    7a:75:43:41:02:e1:5f:01:36:d4:a4:0d:69:c1:5a:
                    ee:ce:5f:21:e4:0f:3a:13:27:06:f5:5a:57:98:f9:
                    45:f8:4e:be:7a:a1:ef:b0:51:7c:e6:c4:ea:cf:8c:
                    fc:9b:82:20:10:b7:4b:51:94:6f:5d:a8:22:51:0f:
                    99:e3:01:dd:cd:f4:ee:c9:ec:df:7f:51:d7:7b:fb:
                    fc:7f:5b:83:b4:2a:d0:17:ec:0a:19:18:97:c5:6f:
                    d0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B7:EB:3B:DD:AE:64:8D:55:49:32:35:9B:89:A9:1D:13:CF:BA:6B
            X509v3 Authority Key Identifier:
                keyid:39:1B:E6:D4:28:8F:BE:DE:BF:86:42:A6:A1:E3:97:7A:EA:5F:1F:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:68:86:3c:e8:6b:f2:09:a9:62:e0:51:28:55:bc:d4:34:bb:
         00:4b:e8:7a:51:19:e4:94:4b:7d:fd:d0:34:8d:ae:6d:97:a6:
         22:ec:78:d5:fe:31:58:83:ea:95:1a:93:f0:17:20:34:4e:41:
         0a:1e:ff:60:fa:92:38:7f:ba:33:8b:a6:f6:a6:68:21:97:ea:
         8e:a0:8d:c7:e1:e1:49:50:d5:a7:0e:0d:36:c4:51:19:76:d7:
         42:96:d8:d0:78:28:be:d4:a8:12:c6:ed:7b:64:e6:53:96:71:
         9c:6b:ab:03:bf:97:c0:36:2e:d7:5b:15:30:81:df:9e:cf:7b:
         5c:8f:f4:d1:08:1e:01:65:5e:06:08:a8:a3:5c:3d:e5:cb:56:
         19:45:a1:22:4e:fe:31:d5:61:a6:9e:bf:90:01:f2:d6:54:56:
         47:4c:9b:24:c7:08:a3:43:ee:52:b9:7f:fd:b9:ef:3b:8f:78:
         8f:c0:53:50:90:9e:c3:95:cd:b6:a1:bc:55:b9:e1:c5:8c:7d:
         16:7e:08:fb:21:44:61:aa:8b:55:6c:87:b1:2c:21:ee:93:e3:
         03:34:72:a5:2c:6c:6f:3e:9c:f0:0f:85:a9:87:57:36:0e:cd:
         07:9d:24:ab:a0:08:2c:3e:b4:a3:09:39:56:b6:a6:69:36:14:
         20:21:a8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:53:24 2024 by rpki-client on console-fra.rpki-client.org