Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
File:                     sQBtYOzMF8WGM3oONk176YAd6fE.mft (raw, json)
Hash identifier:          tQ2Ym84VURhKdZ/TrUMpEC9oHzvlJ3bZtLcTJOe4OF8=
Subject key identifier:   6F:C5:19:63:EB:B0:D4:BB:DF:29:76:27:21:5E:02:5C:F2:9B:B2:A6
Authority key identifier: B1:00:6D:60:EC:CC:17:C5:86:33:7A:0E:36:4D:7B:E9:80:1D:E9:F1
Certificate issuer:       /CN=b1006d60eccc17c586337a0e364d7be9801de9f1
Certificate serial:       01901E8FD43D4F281E6010934FE347FEAF34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
Manifest number:          1154
Signing time:             Sun 16 Jun 2024 01:01:00 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:00 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:00 +0000
Files and hashes:         1: sQBtYOzMF8WGM3oONk176YAd6fE.crl (hash: Y8wRVyuX00uUVFigeK9jbGfzCz0vmMrfgRL2dfdeBU8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:d4:3d:4f:28:1e:60:10:93:4f:e3:47:fe:af:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1006d60eccc17c586337a0e364d7be9801de9f1
        Validity
            Not Before: Jun 16 01:01:00 2024 GMT
            Not After : Jun 17 01:01:00 2024 GMT
        Subject: CN=6fc51963ebb0d4bbdf297627215e025cf29bb2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:05:88:7a:2a:4e:c9:5f:5c:5a:6c:9b:0f:5d:
                    a4:44:9d:9c:24:09:e7:0e:0d:0b:aa:9a:58:d2:ba:
                    a1:b7:39:cf:8f:2c:90:5e:09:d4:98:2d:10:5a:15:
                    78:8a:ee:db:84:39:08:3d:2a:7d:65:f1:2b:01:4b:
                    42:56:1b:42:e8:ec:7b:42:0e:7f:3c:c7:cd:45:5e:
                    14:c3:b9:70:da:af:05:df:9c:30:63:80:8f:27:bd:
                    c0:b2:10:0f:45:44:9d:b6:7a:98:a3:b8:3d:6c:81:
                    61:bb:ae:97:b0:99:e6:63:ac:40:87:c8:2c:6f:a8:
                    54:6e:86:f6:19:d1:79:4a:f8:3d:57:97:fb:60:91:
                    2f:c8:be:43:98:9b:85:f6:8d:9d:ab:30:51:b2:2c:
                    71:48:4d:c8:6a:88:78:f7:e1:68:99:e7:ce:65:6f:
                    bd:2b:13:01:9c:01:31:26:25:a8:05:1b:27:69:d4:
                    40:62:22:89:fb:65:88:8c:1b:d4:e7:20:94:6e:0a:
                    bd:8a:12:6c:3a:88:43:e0:af:a7:f4:8b:89:5c:e6:
                    48:f7:df:af:3a:31:c8:58:a5:fa:03:8d:a3:5d:2a:
                    8a:34:3f:9b:ff:09:0e:81:fe:6f:b2:6d:f3:fd:eb:
                    2d:2e:f3:80:53:ba:e3:6a:e0:e5:41:d3:e6:88:f9:
                    62:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C5:19:63:EB:B0:D4:BB:DF:29:76:27:21:5E:02:5C:F2:9B:B2:A6
            X509v3 Authority Key Identifier:
                keyid:B1:00:6D:60:EC:CC:17:C5:86:33:7A:0E:36:4D:7B:E9:80:1D:E9:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:23:f4:01:a5:f0:e0:04:f8:da:4a:1d:40:94:95:95:eb:e2:
         82:65:1b:5b:ec:ff:3d:74:41:1c:91:53:9e:77:3c:50:a5:ba:
         98:0a:d4:dc:a7:97:30:4f:4b:46:8e:e8:b4:6d:7a:1e:ea:13:
         6f:63:30:28:e0:f5:40:4f:a9:39:57:00:51:76:14:dc:91:7e:
         e2:07:29:71:a7:56:27:71:22:40:8b:df:53:ff:1f:78:b2:ed:
         f8:ee:ca:41:b2:03:a0:30:ef:c6:66:68:56:b2:52:ea:4d:db:
         0a:18:85:79:78:85:38:ac:4a:2a:22:91:a2:de:23:2e:4b:ab:
         8e:9a:87:1d:71:68:7e:37:6a:cd:fa:70:01:16:01:41:68:a3:
         c4:5e:1a:f6:3c:21:84:df:d9:46:ea:c2:be:a6:f9:59:90:0d:
         1e:43:9a:72:6b:56:56:af:a8:71:4c:53:2f:86:8e:ea:3d:d9:
         c0:b1:b0:42:a5:9a:0a:87:51:59:2d:e0:3f:c1:a5:ff:8a:81:
         62:19:56:2c:ca:85:3d:12:b3:0b:0c:bd:3a:fb:15:ae:24:53:
         8e:09:0f:97:c6:a2:85:a3:40:d3:84:d4:e6:5f:70:a2:5c:3b:
         3f:bf:8a:e3:86:d1:91:61:db:22:0c:c1:ff:46:85:13:ba:0c:
         3e:c7:36:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:17:39 2024 by rpki-client on console-fra.rpki-client.org