Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.mft
File:                     ltTArxW-ONL8XjD-NFdHXTS3g5o.mft (raw, json)
Hash identifier:          fG71sNR4UxvNFfWaVFYOpsOoSciXuGALnLLMEjP6JcQ=
Subject key identifier:   9E:C6:4F:EE:29:62:6E:E7:DE:12:2F:F9:8F:3D:BC:E4:A1:AC:56:33
Authority key identifier: 96:D4:C0:AF:15:BE:38:D2:FC:5E:30:FE:34:57:47:5D:34:B7:83:9A
Certificate issuer:       /CN=96d4c0af15be38d2fc5e30fe3457475d34b7839a
Certificate serial:       019040B05594525584244734D6135EA308D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ltTArxW-ONL8XjD-NFdHXTS3g5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.mft
Manifest number:          0E48
Signing time:             Sat 22 Jun 2024 16:03:36 +0000
Manifest this update:     Sat 22 Jun 2024 16:03:36 +0000
Manifest next update:     Sun 23 Jun 2024 16:03:36 +0000
Files and hashes:         1: ltTArxW-ONL8XjD-NFdHXTS3g5o.crl (hash: IvbhHYt90O5wr6VsMag9SzmCKp6v1maQ5jgO2ka5PPQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ltTArxW-ONL8XjD-NFdHXTS3g5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:b0:55:94:52:55:84:24:47:34:d6:13:5e:a3:08:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96d4c0af15be38d2fc5e30fe3457475d34b7839a
        Validity
            Not Before: Jun 22 16:03:36 2024 GMT
            Not After : Jun 23 16:03:36 2024 GMT
        Subject: CN=9ec64fee29626ee7de122ff98f3dbce4a1ac5633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:11:64:b4:d8:12:39:54:7b:f2:ec:cb:ed:d4:
                    b9:e1:49:5e:af:67:c2:f3:c3:de:fb:d1:04:0e:25:
                    56:b4:b9:a0:8e:bd:58:4f:cc:d9:e3:8e:07:c1:78:
                    45:19:90:e6:b9:27:c4:4f:0e:ec:b3:06:2f:75:ca:
                    78:cf:92:56:4c:a9:5f:17:12:d2:df:cd:f1:86:f0:
                    ba:d8:ea:c0:c9:2b:95:e0:96:a8:b9:1a:1c:f5:f9:
                    aa:5c:bf:31:ed:4b:64:f5:06:bf:44:86:5e:53:e3:
                    2c:47:9f:22:a6:08:e7:78:93:97:26:b0:42:7e:66:
                    88:cc:2f:62:f5:53:61:b3:3b:0d:26:ad:1b:13:51:
                    2a:67:52:0e:b0:2e:a0:fb:7f:cc:93:ed:e8:69:04:
                    bf:5d:27:de:c6:e0:d3:ca:81:68:ae:a9:d0:67:3d:
                    2b:7f:39:f6:d1:60:97:f9:10:62:9c:3b:e3:53:0f:
                    be:c7:31:66:fb:8b:f9:1c:70:b6:53:82:93:e0:88:
                    66:93:70:02:87:d4:ef:e1:83:79:d9:70:5c:d9:d4:
                    7c:6e:1e:72:0b:c5:8c:df:c9:d6:69:a9:bf:00:62:
                    3b:a7:43:8e:b4:b1:20:d2:ed:52:b8:50:af:9c:d7:
                    66:61:53:3f:5b:c4:37:63:df:47:43:b5:29:e8:a4:
                    ea:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C6:4F:EE:29:62:6E:E7:DE:12:2F:F9:8F:3D:BC:E4:A1:AC:56:33
            X509v3 Authority Key Identifier:
                keyid:96:D4:C0:AF:15:BE:38:D2:FC:5E:30:FE:34:57:47:5D:34:B7:83:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltTArxW-ONL8XjD-NFdHXTS3g5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:16:9a:05:67:b8:ca:bd:d1:53:1a:87:92:6f:09:1f:f6:98:
         5b:f7:2e:c7:8a:c8:ff:64:81:b4:fc:31:b6:83:a0:0a:5c:54:
         30:9f:73:0a:d9:fd:6d:cb:52:1e:9b:45:c8:0a:dc:07:13:72:
         57:04:b8:7d:86:19:d5:e8:da:0a:a8:9d:05:39:d6:81:7c:fa:
         48:38:c2:32:83:92:2f:23:82:1f:90:e7:37:bb:c1:41:fa:ab:
         b5:00:78:e3:1f:a6:f7:bf:bb:39:3e:e7:9b:28:64:29:3b:93:
         22:0e:cd:0b:39:97:6c:cb:2d:44:47:65:a4:fc:99:10:b7:0f:
         29:78:51:29:33:49:ab:65:93:09:0a:a9:26:b2:c8:f9:bf:3a:
         b6:9f:95:54:46:d7:be:55:3e:28:95:f0:ee:51:24:b7:ba:d5:
         ca:c1:42:c0:d4:ae:61:25:3f:db:ae:65:96:d8:ea:9e:49:e1:
         69:a2:d4:c3:d6:c0:62:cc:70:3a:83:3d:ef:e8:a7:3c:e5:5a:
         ed:7f:df:b1:22:8f:1f:d9:c6:ae:3e:ee:94:88:4e:11:bd:f2:
         73:0c:d7:86:3a:f7:69:a3:94:32:ef:1b:7a:fb:d4:fe:e9:23:
         68:2a:4a:c8:2e:0f:fe:a2:e9:78:22:22:4b:52:91:ea:84:16:
         a3:0d:d5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:17:43 2024 by rpki-client on console-ams.rpki-client.org