Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
File:                     eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft (raw, json)
Hash identifier:          NekuHZzBpGXcG5GXIui7IL7twIcN+0mWKV1Co3mIJbg=
Subject key identifier:   23:6E:FE:96:7D:48:D5:7E:B5:57:96:60:05:D0:DB:AB:DC:92:1B:6B
Authority key identifier: 79:95:F9:1E:99:82:25:01:5F:47:06:3C:32:8E:0C:50:1D:68:B5:9D
Certificate issuer:       /CN=7995f91e998225015f47063c328e0c501d68b59d
Certificate serial:       01901DEB8E9253FAC56EF6236697DDF133A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
Manifest number:          0C9E
Signing time:             Sat 15 Jun 2024 22:01:34 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:34 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:34 +0000
Files and hashes:         1: eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl (hash: uz4FjyXrYHAgLaluTwBCmvD5AKefoNSKWTLfV5NMeSE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:8e:92:53:fa:c5:6e:f6:23:66:97:dd:f1:33:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7995f91e998225015f47063c328e0c501d68b59d
        Validity
            Not Before: Jun 15 22:01:34 2024 GMT
            Not After : Jun 16 22:01:34 2024 GMT
        Subject: CN=236efe967d48d57eb557966005d0dbabdc921b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:29:2e:74:eb:17:50:72:d9:b9:79:c9:2e:6b:
                    ce:86:02:57:e6:c9:c6:fb:68:6d:26:69:db:8e:03:
                    ce:d0:03:3f:5d:86:bf:ff:ef:11:39:28:97:4c:44:
                    7b:c0:fe:d4:ca:ca:0d:b4:74:3f:73:b6:c5:93:88:
                    08:ad:89:7c:82:71:0a:17:74:05:72:b8:bb:8c:91:
                    05:95:ba:7c:14:6c:bc:b2:82:13:b5:dc:46:20:0d:
                    ba:a4:2a:79:2c:04:37:c2:1c:69:1a:a7:00:c8:16:
                    48:d1:97:71:d2:fa:c0:9f:47:a9:cf:42:2c:60:2c:
                    05:ae:f1:e3:af:2e:16:bd:13:55:42:28:67:06:4f:
                    6a:40:8d:f1:ce:60:92:44:06:fc:34:b4:8c:bd:94:
                    18:ec:7d:36:b6:3a:c3:7d:e9:60:de:c5:84:1c:7b:
                    17:63:96:5e:41:dd:18:04:8e:d1:a4:2c:57:3b:60:
                    10:30:d0:8b:40:b3:8c:b7:b6:11:e6:f7:82:4d:98:
                    2b:18:4f:a9:f9:da:49:98:85:e8:95:c3:a5:19:2b:
                    74:90:9e:af:a8:c0:9a:66:59:4b:d5:c2:00:f5:ce:
                    d4:69:98:88:cf:ab:90:1b:89:ed:e5:b5:09:7f:20:
                    ee:29:81:ee:9f:26:f3:a3:c1:07:2b:f1:c9:db:fe:
                    41:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6E:FE:96:7D:48:D5:7E:B5:57:96:60:05:D0:DB:AB:DC:92:1B:6B
            X509v3 Authority Key Identifier:
                keyid:79:95:F9:1E:99:82:25:01:5F:47:06:3C:32:8E:0C:50:1D:68:B5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:2e:a0:64:a2:20:f1:ea:38:89:34:ff:e8:1c:2f:65:82:32:
         61:36:83:ae:5a:26:9f:e6:8a:92:3d:19:46:5e:a5:98:2a:a4:
         d7:29:5c:ee:f2:47:91:77:65:64:80:28:c2:40:f7:21:d7:25:
         8e:ac:ca:46:fc:e8:52:4c:2e:bc:f5:9b:25:f8:23:a3:5a:41:
         c6:dd:4f:b4:eb:86:e1:dd:ff:56:90:51:57:67:00:48:d4:ff:
         21:81:a8:8d:21:40:30:3d:19:64:6f:13:17:66:72:a7:ad:c5:
         f1:b7:8d:22:31:c2:33:75:3d:79:86:29:da:55:9b:9a:68:c3:
         a1:6c:de:11:e4:ca:50:e0:80:96:e3:c7:02:0f:ec:a0:73:b5:
         f9:6e:99:e9:de:31:f7:a2:7e:45:52:f1:ba:54:52:fe:66:6d:
         95:c8:da:98:16:b5:0b:e3:f4:75:fe:d9:57:03:d1:3b:8c:fd:
         9e:fa:59:b2:6d:07:29:06:c0:de:77:80:6a:bf:8f:93:65:cb:
         18:d8:7d:6b:56:49:22:b6:38:84:c6:f7:7f:a0:39:b7:04:c3:
         bb:1d:dd:e9:04:c7:d0:99:4e:06:20:78:db:40:e6:70:b3:50:
         d2:86:13:44:66:ec:7f:0b:9b:8b:e6:50:c2:c7:26:4c:c6:5b:
         15:29:cf:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:36:11 2024 by rpki-client on console-fra.rpki-client.org