Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
File:                     SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft (raw, json)
Hash identifier:          2UbRZdJqROjSdxGlve+F+oV3JW49FgQgnssAlmIR6a8=
Subject key identifier:   75:ED:96:54:23:D6:0B:E7:BB:71:FD:F5:09:9E:3F:A5:BD:E4:FE:BB
Authority key identifier: 48:34:38:7E:BF:EC:DA:63:7A:76:E1:11:99:E1:CD:03:07:C2:F4:CA
Certificate issuer:       /CN=4834387ebfecda637a76e11199e1cd0307c2f4ca
Certificate serial:       01901DED5F4AF286DE5824BB56C813899A6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
Manifest number:          0B56
Signing time:             Sat 15 Jun 2024 22:03:33 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:33 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:33 +0000
Files and hashes:         1: SDQ4fr_s2mN6duERmeHNAwfC9Mo.crl (hash: HD8tnccyl6bQGgKeUFhthx8GP9HLgfLBE3spD5Z0Vdg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:5f:4a:f2:86:de:58:24:bb:56:c8:13:89:9a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4834387ebfecda637a76e11199e1cd0307c2f4ca
        Validity
            Not Before: Jun 15 22:03:33 2024 GMT
            Not After : Jun 16 22:03:33 2024 GMT
        Subject: CN=75ed965423d60be7bb71fdf5099e3fa5bde4febb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9f:38:09:ac:33:71:8f:75:23:dd:dd:90:82:
                    8a:51:9b:c1:d4:f5:27:54:08:33:3e:e2:b9:89:92:
                    f4:27:40:b7:6a:33:d1:02:43:6e:86:a9:aa:64:5c:
                    2e:65:b5:cc:49:c8:1e:62:c6:91:df:7d:56:ec:77:
                    46:32:23:c2:34:0d:c2:fe:80:63:b9:91:ab:39:e9:
                    96:34:7c:a4:98:a6:a9:21:eb:ed:db:74:64:d0:c7:
                    80:3c:28:aa:67:93:d0:54:46:ae:a9:0f:6a:c8:70:
                    ed:6b:4f:96:3f:24:f1:d2:96:bc:20:0f:1f:25:64:
                    50:6c:e7:98:f9:fb:97:37:98:25:5f:8e:5c:39:a5:
                    fb:1f:e2:2e:fb:db:e2:e4:e6:13:5e:7a:96:fc:fa:
                    60:a5:51:f0:63:a0:73:27:a0:ed:54:66:48:dd:06:
                    2a:eb:8d:39:ed:cb:a8:61:74:5c:5e:3c:66:8d:c2:
                    02:e2:99:ae:ab:38:51:f1:61:ef:e8:87:48:0b:a8:
                    f2:a3:ed:13:a7:3c:55:6a:44:d0:2b:17:66:12:45:
                    6d:1e:48:16:91:87:aa:f0:79:4b:e1:e6:34:01:e1:
                    7b:c7:b7:1b:62:ef:c6:55:fd:97:b1:17:12:cc:85:
                    04:ef:99:81:d3:a1:b0:88:65:6b:2f:2a:ce:2a:62:
                    82:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:ED:96:54:23:D6:0B:E7:BB:71:FD:F5:09:9E:3F:A5:BD:E4:FE:BB
            X509v3 Authority Key Identifier:
                keyid:48:34:38:7E:BF:EC:DA:63:7A:76:E1:11:99:E1:CD:03:07:C2:F4:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:b0:a4:51:10:e0:09:c6:7e:4b:c1:40:08:fa:25:36:b1:7e:
         9e:4a:3f:9d:35:a2:74:1b:cc:8a:c6:9b:32:4c:1e:86:c5:74:
         60:bb:a2:8c:46:b6:01:12:4d:12:4e:1c:02:1d:91:d7:ee:d0:
         e0:2a:d4:12:81:93:5a:b0:e3:a5:01:78:45:54:15:e5:08:c2:
         9c:fc:81:10:bc:41:fc:d3:a8:54:24:3a:49:5b:55:d5:c0:3c:
         76:02:3a:59:51:7a:b7:62:c2:e8:9b:7f:01:a9:48:dd:9d:1a:
         c7:2a:d2:96:09:39:d9:a4:90:82:fe:26:b4:72:38:d9:6e:24:
         c6:f7:9d:38:20:ed:0d:2b:fd:e1:32:07:1f:1f:d8:2d:8b:89:
         2d:4a:70:f4:f9:94:a6:91:d3:8d:4f:ea:f9:7a:ec:3a:0d:d2:
         fd:07:9f:5a:b2:44:57:cc:de:66:a2:a8:ec:ce:56:c2:75:77:
         1e:aa:7b:c6:e7:ae:17:7e:30:25:41:f3:e3:e5:94:be:c1:fa:
         38:d4:15:5c:45:ab:7c:21:d6:a7:05:c8:1e:2a:14:06:c1:c4:
         c3:c0:08:79:4d:aa:b5:9d:71:d4:1f:24:36:3b:f8:a9:f8:2d:
         cf:40:f7:40:55:62:ea:86:32:84:1b:81:28:8b:fe:bb:18:5b:
         02:f2:c8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:46:33 2024 by rpki-client on console-ams.rpki-client.org