Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7df1e2-d613-4436-bf95-d36e7480cacd/1/8bcZ2eha9EN0SOMErTSnpkwx-fg.mft
File:                     8bcZ2eha9EN0SOMErTSnpkwx-fg.mft (raw, json)
Hash identifier:          4nFAon6hyoLdc8s2RJyDiuNxKXvdtd88KIKVEDBfiCY=
Subject key identifier:   1A:7C:D1:6F:6A:AF:03:5A:35:D4:AC:8E:B5:CA:EA:5B:26:3B:9E:88
Authority key identifier: F1:B7:19:D9:E8:5A:F4:43:74:48:E3:04:AD:34:A7:A6:4C:31:F9:F8
Certificate issuer:       /CN=f1b719d9e85af4437448e304ad34a7a64c31f9f8
Certificate serial:       01901E58DD38CB5D6711BE1A62687EF86E67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8bcZ2eha9EN0SOMErTSnpkwx-fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/7df1e2-d613-4436-bf95-d36e7480cacd/1/8bcZ2eha9EN0SOMErTSnpkwx-fg.mft
Manifest number:          11C3
Signing time:             Sun 16 Jun 2024 00:00:58 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:58 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:58 +0000
Files and hashes:         1: 8bcZ2eha9EN0SOMErTSnpkwx-fg.crl (hash: M/br5BOH3/k6glZMWVRv2i664TpwoabVh3gKFiuBgdA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/7df1e2-d613-4436-bf95-d36e7480cacd/1/8bcZ2eha9EN0SOMErTSnpkwx-fg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/7df1e2-d613-4436-bf95-d36e7480cacd/1/8bcZ2eha9EN0SOMErTSnpkwx-fg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8bcZ2eha9EN0SOMErTSnpkwx-fg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:dd:38:cb:5d:67:11:be:1a:62:68:7e:f8:6e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1b719d9e85af4437448e304ad34a7a64c31f9f8
        Validity
            Not Before: Jun 16 00:00:58 2024 GMT
            Not After : Jun 17 00:00:58 2024 GMT
        Subject: CN=1a7cd16f6aaf035a35d4ac8eb5caea5b263b9e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:47:bf:c0:65:a6:95:c0:f1:bf:d7:09:3b:b4:
                    a5:01:53:61:a6:95:b6:06:4b:a5:09:89:93:8b:9a:
                    75:60:d6:51:f6:1c:00:e9:c7:fb:89:32:ac:41:29:
                    45:98:54:dc:85:10:41:15:cd:19:6b:09:2a:5d:43:
                    ee:10:f7:23:95:ed:a5:38:a6:3f:45:51:9c:2b:a5:
                    75:ee:9f:e5:2b:d7:d5:09:22:8b:46:ab:06:f1:45:
                    b9:4f:9f:dc:0c:f6:11:0c:40:4a:3c:41:db:49:9f:
                    2d:0b:03:ca:27:12:de:bd:04:52:07:49:35:a0:d0:
                    f4:11:ca:14:68:e1:27:b8:fb:c6:a8:64:18:2a:27:
                    c4:fa:b6:76:5a:51:7d:82:54:e3:8c:23:db:3f:f4:
                    3b:00:91:0c:9c:d1:8a:4f:00:b2:47:4e:c5:59:b4:
                    ff:4d:59:a4:6d:fe:d5:c1:6e:16:5a:5d:ae:d5:dc:
                    fd:ea:70:20:b0:e2:a6:91:9a:fa:d2:cd:89:06:69:
                    34:7b:4a:b0:23:ee:47:14:83:70:b2:4d:5b:92:37:
                    19:47:b7:34:34:51:a8:ac:f7:50:90:b0:08:e9:93:
                    2b:d5:28:f0:53:42:0a:5e:47:5a:b6:0b:a5:48:cb:
                    64:ce:45:27:21:6c:3a:cd:83:b1:72:e0:ae:a5:53:
                    f6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7C:D1:6F:6A:AF:03:5A:35:D4:AC:8E:B5:CA:EA:5B:26:3B:9E:88
            X509v3 Authority Key Identifier:
                keyid:F1:B7:19:D9:E8:5A:F4:43:74:48:E3:04:AD:34:A7:A6:4C:31:F9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bcZ2eha9EN0SOMErTSnpkwx-fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7df1e2-d613-4436-bf95-d36e7480cacd/1/8bcZ2eha9EN0SOMErTSnpkwx-fg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7df1e2-d613-4436-bf95-d36e7480cacd/1/8bcZ2eha9EN0SOMErTSnpkwx-fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:95:9d:1d:8d:27:7a:db:62:bd:5c:0a:4e:36:a1:fd:31:46:
         81:69:b0:34:53:d5:87:eb:06:5d:bd:8d:64:57:c2:24:2f:16:
         0c:5e:25:5a:35:63:64:ed:dd:94:16:9f:19:1e:e3:14:25:c3:
         61:9d:61:1a:01:88:75:be:ef:83:e7:a8:64:0d:74:f0:b7:f2:
         e2:98:ab:52:8e:d8:b7:48:5f:91:b6:8c:e4:7e:f5:44:90:d1:
         36:bf:20:09:6d:18:39:f4:1b:bc:42:f5:ca:7d:a4:4e:0d:dd:
         5a:85:c9:f5:45:bb:2f:55:c0:f5:74:6e:a0:5f:b0:e1:33:2e:
         de:e3:15:2e:41:54:6c:e0:0c:59:ac:f7:c6:72:46:2a:e4:61:
         94:2c:62:8a:d2:d7:b3:11:fe:20:68:75:02:cb:8b:ce:b7:14:
         6e:db:6f:c0:6d:6a:29:8e:38:72:1f:bf:73:5a:e6:08:3c:74:
         43:68:78:81:73:45:03:f0:78:3f:a0:01:97:0c:d1:1a:d7:3d:
         ea:cd:61:ff:b9:8f:3b:94:c3:37:a6:7d:dd:18:8a:3c:ba:a8:
         ff:5d:5d:64:1d:e0:7b:3c:8c:16:84:b2:59:fa:be:c0:dc:a3:
         63:44:a3:43:7c:86:90:06:76:29:b4:30:93:94:6d:e1:e6:3a:
         e9:f0:65:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:17:45 2024 by rpki-client on console-fra.rpki-client.org