Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/43f654-92ba-4d30-9ed0-2da1253ce993/1/4GY0WcQJMEey4XhSP1umP3X8TxY.mft
File:                     4GY0WcQJMEey4XhSP1umP3X8TxY.mft (raw, json)
Hash identifier:          PIjIi/r9HpUoXdpy6TRQOSWAQeGeCYctAGTlzvW11Cw=
Subject key identifier:   DA:C3:3F:BA:85:40:8E:D1:04:2D:E4:67:2B:81:8B:C2:49:2F:4F:9A
Authority key identifier: E0:66:34:59:C4:09:30:47:B2:E1:78:52:3F:5B:A6:3F:75:FC:4F:16
Certificate issuer:       /CN=e0663459c4093047b2e178523f5ba63f75fc4f16
Certificate serial:       01901BFF1E4197F9D455D2EA7DB903704D57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4GY0WcQJMEey4XhSP1umP3X8TxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/43f654-92ba-4d30-9ed0-2da1253ce993/1/4GY0WcQJMEey4XhSP1umP3X8TxY.mft
Manifest number:          044A
Signing time:             Sat 15 Jun 2024 13:03:42 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:42 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:42 +0000
Files and hashes:         1: 4GY0WcQJMEey4XhSP1umP3X8TxY.crl (hash: +T1zhnS07Wo0n+ODJtWF2z8j4Enk3Z0n8bkoe8pL3QE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/43f654-92ba-4d30-9ed0-2da1253ce993/1/4GY0WcQJMEey4XhSP1umP3X8TxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/43f654-92ba-4d30-9ed0-2da1253ce993/1/4GY0WcQJMEey4XhSP1umP3X8TxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4GY0WcQJMEey4XhSP1umP3X8TxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:ff:1e:41:97:f9:d4:55:d2:ea:7d:b9:03:70:4d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0663459c4093047b2e178523f5ba63f75fc4f16
        Validity
            Not Before: Jun 15 13:03:42 2024 GMT
            Not After : Jun 16 13:03:42 2024 GMT
        Subject: CN=dac33fba85408ed1042de4672b818bc2492f4f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6f:38:d6:86:a2:7e:00:ac:48:14:e8:64:8a:
                    91:11:d5:3f:0e:b2:76:60:c3:60:fc:58:ca:cf:81:
                    d1:f5:72:23:7f:4a:a6:da:85:4a:4d:8d:a6:cb:c1:
                    69:b3:22:e1:c9:6b:44:b1:d4:99:2f:62:d8:54:b7:
                    c4:7d:c5:6b:88:87:1b:5a:f5:8a:1c:17:5e:12:77:
                    a2:cd:82:e3:e6:26:20:6b:0f:c7:7b:bc:70:6f:c4:
                    27:c2:a7:7e:36:a8:e8:2f:2e:7c:4c:ee:7f:21:8b:
                    af:2c:a5:ac:d4:1f:df:e6:96:7c:e6:f9:62:1b:94:
                    fd:b9:ef:45:65:4b:d6:0a:2d:f0:67:5b:2d:b7:ef:
                    f6:81:bb:43:0e:77:e9:1d:db:07:bb:88:be:bc:d6:
                    96:18:e4:59:a0:69:49:9f:b2:01:12:9e:ec:0c:1b:
                    ea:7a:f5:8a:a1:e9:2b:6f:d6:6d:1e:6f:4b:7c:f2:
                    8b:bf:57:30:03:ae:3c:fd:d5:ae:a6:f3:a6:20:b1:
                    43:59:ff:1f:0a:b7:b5:7d:8c:c1:19:f1:fd:0d:44:
                    e3:76:03:4a:17:62:ec:d9:81:39:89:1b:6c:c8:21:
                    ab:8f:95:bb:2c:f5:c9:7f:22:bf:68:be:8d:98:c7:
                    49:ba:7f:06:fb:29:e6:92:19:99:89:bf:eb:8a:2d:
                    bf:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C3:3F:BA:85:40:8E:D1:04:2D:E4:67:2B:81:8B:C2:49:2F:4F:9A
            X509v3 Authority Key Identifier:
                keyid:E0:66:34:59:C4:09:30:47:B2:E1:78:52:3F:5B:A6:3F:75:FC:4F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GY0WcQJMEey4XhSP1umP3X8TxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/43f654-92ba-4d30-9ed0-2da1253ce993/1/4GY0WcQJMEey4XhSP1umP3X8TxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/43f654-92ba-4d30-9ed0-2da1253ce993/1/4GY0WcQJMEey4XhSP1umP3X8TxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:6f:fe:4b:ec:41:18:bb:e5:3d:c2:93:fc:2a:80:da:ef:d2:
         9f:5c:5d:6e:dc:81:51:11:2e:0b:8b:29:ba:7c:77:49:64:15:
         b0:37:9f:0c:66:be:b4:cb:79:72:9e:86:39:3c:dc:7c:16:25:
         c2:db:a5:3f:f2:a3:db:2c:ac:a5:81:eb:90:0f:6e:13:ae:37:
         23:30:fe:5e:5e:e8:76:12:d5:0d:a7:b1:82:c7:f4:c2:0b:68:
         14:8c:f4:d0:a5:35:84:c0:40:aa:f2:cd:33:83:30:78:39:8e:
         52:40:0b:69:9b:33:74:b4:14:eb:02:36:eb:cc:39:cc:f1:10:
         82:c3:e0:f1:cd:f4:4f:de:dc:f2:0d:0c:16:cc:03:e4:45:fd:
         35:3c:95:f7:c4:f0:5a:df:a9:b8:13:97:16:c6:26:83:d5:aa:
         ab:cd:3a:77:d0:7b:af:e2:de:fb:eb:be:50:8c:cc:6c:16:61:
         6b:23:16:9f:89:af:50:50:5f:cd:eb:c6:f0:6d:9a:dc:1e:cb:
         b0:fd:7b:28:9f:af:53:0f:1c:c0:81:7e:05:15:2a:92:a6:a4:
         63:26:0e:43:ee:81:af:76:51:80:4e:52:95:9c:e0:50:5a:c9:
         8b:45:cf:c4:15:d0:71:50:f6:66:3a:a0:4b:7e:59:fa:56:c2:
         fc:da:88:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:45:05 2024 by rpki-client on console-ams.rpki-client.org