Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
File:                     9WFTxQuIFb0o37sA4j5vJjIDFy4.mft (raw, json)
Hash identifier:          1pblH8QTCPK99d4is4mkcVhv8Ph4l4C2YIe0333pqdQ=
Subject key identifier:   83:F8:A0:59:69:B0:CD:EF:C3:61:FD:DB:C0:FC:7B:66:A0:7C:D9:B5
Authority key identifier: F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
Certificate issuer:       /CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Certificate serial:       01901CD823505ECCC23A4485B9A7CBCD1974
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
Manifest number:          06A8
Signing time:             Sat 15 Jun 2024 17:00:44 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:44 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:44 +0000
Files and hashes:         1: 9WFTxQuIFb0o37sA4j5vJjIDFy4.crl (hash: ESrrOfOXY9InIKfeZXKgqILYvBhy94DiQfP5AXh+xms=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:23:50:5e:cc:c2:3a:44:85:b9:a7:cb:cd:19:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56153c50b8815bd28dfbb00e23e6f263203172e
        Validity
            Not Before: Jun 15 17:00:44 2024 GMT
            Not After : Jun 16 17:00:44 2024 GMT
        Subject: CN=83f8a05969b0cdefc361fddbc0fc7b66a07cd9b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ff:fd:20:18:79:50:4f:90:82:1e:01:ad:77:
                    52:d8:3d:58:0f:1c:f0:09:c0:1e:b0:00:3a:e0:58:
                    ce:44:e9:9f:9e:9f:72:ef:27:7d:34:15:27:a5:7c:
                    32:73:16:36:6f:52:c2:94:ae:a8:c0:cd:d8:39:0c:
                    f9:bf:f5:f1:9c:d6:1c:6f:bc:df:8f:97:59:ec:13:
                    9c:77:cb:d9:4f:ae:f4:26:a2:04:75:cd:79:88:22:
                    54:ee:7d:56:f9:b2:22:02:32:c1:8b:cb:e0:f3:a3:
                    a4:d3:9c:ce:b0:be:2e:e4:ef:84:04:88:c2:30:5b:
                    d7:e4:47:36:73:53:f5:b1:e5:52:f3:50:57:f1:53:
                    09:05:a1:23:8b:ea:37:69:7b:9c:f4:30:77:a4:23:
                    85:a6:69:4c:f7:15:ec:2a:16:77:50:91:e3:2e:83:
                    3e:0b:72:b7:9c:a2:bd:97:c7:c9:46:50:15:87:26:
                    be:77:5d:d4:e0:f8:cb:3e:bc:95:a7:58:86:d8:8a:
                    85:a5:d0:98:9a:73:bc:aa:e5:79:90:d8:fb:ee:1d:
                    08:83:7b:05:0f:29:f9:d4:1b:28:f8:53:25:83:3b:
                    7c:9e:c2:13:58:33:75:2c:5b:0d:7e:5a:b6:b1:73:
                    76:12:ef:85:50:e0:8d:65:81:a5:a9:eb:18:0d:c4:
                    90:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F8:A0:59:69:B0:CD:EF:C3:61:FD:DB:C0:FC:7B:66:A0:7C:D9:B5
            X509v3 Authority Key Identifier:
                keyid:F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:bf:5e:61:eb:63:2b:ce:33:ed:40:46:2f:c3:ec:a0:af:e6:
         d7:61:ec:ca:e9:5c:63:12:8b:a1:46:b0:f7:fb:9f:8e:da:45:
         95:4f:76:f3:4a:a6:81:a8:b0:91:49:54:1f:ee:28:c2:96:ca:
         02:f3:53:1f:7a:00:83:8d:79:f1:c0:00:74:ba:0a:a9:5e:3a:
         e2:b8:96:07:e8:7f:f5:01:b8:52:4f:40:b3:a2:28:53:07:14:
         93:e0:c7:1f:12:d8:c8:fa:81:66:15:0e:94:b2:82:c5:71:b1:
         03:0f:2c:c9:a2:f4:d8:92:da:40:d6:eb:97:1a:dd:85:f8:99:
         06:2b:1c:f1:d4:ff:80:bf:86:62:d3:5d:97:c7:d8:c4:51:10:
         7e:21:28:45:e6:e2:4f:79:53:bf:06:ed:6f:98:da:d8:01:fd:
         5c:a8:bc:f5:bd:25:60:aa:98:f1:32:e5:7e:49:b8:b3:bf:fd:
         9d:bf:aa:5f:f9:c6:82:0b:f4:e9:6f:f2:c9:05:44:db:01:8a:
         63:21:19:95:37:56:04:20:96:14:4a:70:53:38:5c:3a:7d:34:
         0d:f1:1f:f3:1e:f6:ac:fc:b9:ec:d0:9a:cc:0e:44:da:25:28:
         9e:76:11:df:ae:d7:f0:6d:0f:46:8d:c8:e1:6e:75:6b:ff:80:
         ad:31:95:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:25:39 2024 by rpki-client on console-fra.rpki-client.org