Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e35132-4b64-42e7-b778-32cd6668be86/1/ThDafpumSZaP9RoB5aLULyK35N0.mft
File:                     ThDafpumSZaP9RoB5aLULyK35N0.mft (raw, json)
Hash identifier:          YCoXHZ81RGomSb0WSU3Gy0Oh8PsVwz3nnHMv+q91WQ8=
Subject key identifier:   D7:6F:D3:8C:84:AB:7E:C3:84:7D:3D:04:08:7B:2A:38:7F:97:3D:E3
Authority key identifier: 4E:10:DA:7E:9B:A6:49:96:8F:F5:1A:01:E5:A2:D4:2F:22:B7:E4:DD
Certificate issuer:       /CN=4e10da7e9ba649968ff51a01e5a2d42f22b7e4dd
Certificate serial:       01903707C8BCE67A17E035490FC7136FA48B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ThDafpumSZaP9RoB5aLULyK35N0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/e35132-4b64-42e7-b778-32cd6668be86/1/ThDafpumSZaP9RoB5aLULyK35N0.mft
Manifest number:          0478
Signing time:             Thu 20 Jun 2024 19:02:55 +0000
Manifest this update:     Thu 20 Jun 2024 19:02:55 +0000
Manifest next update:     Fri 21 Jun 2024 19:02:55 +0000
Files and hashes:         1: ThDafpumSZaP9RoB5aLULyK35N0.crl (hash: VSGCvA/JISXRinjRPiJxkglK+aR+yCvy5jb6G2DmDn8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/e35132-4b64-42e7-b778-32cd6668be86/1/ThDafpumSZaP9RoB5aLULyK35N0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/e35132-4b64-42e7-b778-32cd6668be86/1/ThDafpumSZaP9RoB5aLULyK35N0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ThDafpumSZaP9RoB5aLULyK35N0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 19:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:07:c8:bc:e6:7a:17:e0:35:49:0f:c7:13:6f:a4:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e10da7e9ba649968ff51a01e5a2d42f22b7e4dd
        Validity
            Not Before: Jun 20 19:02:55 2024 GMT
            Not After : Jun 21 19:02:55 2024 GMT
        Subject: CN=d76fd38c84ab7ec3847d3d04087b2a387f973de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:42:32:7b:4c:b3:54:55:c9:40:c8:43:a8:00:
                    03:42:33:ad:ee:09:b9:7f:57:1f:39:fc:60:4e:b3:
                    e5:f8:68:9c:6e:73:8f:9e:16:e4:cf:f1:c0:3f:05:
                    b1:d5:b9:06:ae:a6:74:73:7a:c5:9b:dd:02:d7:b8:
                    e5:2f:4d:ba:ae:e7:1d:43:79:7a:36:75:8f:ff:4d:
                    6f:d4:85:51:6d:d5:c7:87:4a:3e:f4:77:37:64:5c:
                    db:b9:f7:99:37:47:7c:b7:52:eb:ea:9c:28:00:8b:
                    de:8d:9b:0e:0c:09:5b:e3:e8:5b:a3:57:32:44:b7:
                    9c:0b:f7:bc:4b:c1:2f:ef:2f:28:99:c2:40:c0:fb:
                    d4:d5:be:f1:82:cc:16:38:5d:1e:69:c4:af:02:fb:
                    e2:c9:3d:7a:0a:4f:61:9c:12:7d:3a:0f:2a:76:4e:
                    20:eb:9d:00:eb:33:94:70:f1:a5:ed:56:a3:2f:1d:
                    c4:25:ff:26:93:fb:f8:9b:64:48:7d:dd:0c:84:a7:
                    b3:e4:24:2f:2c:9d:f6:ac:6b:e5:2c:d3:71:83:f3:
                    f3:5d:e5:6b:f3:13:0e:c6:33:bc:c1:ff:5d:24:ce:
                    aa:20:e0:a5:fc:81:7e:ff:29:54:93:e3:b1:f8:b7:
                    ac:f2:fd:86:90:b5:53:48:0f:1a:ca:47:7c:69:ad:
                    30:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6F:D3:8C:84:AB:7E:C3:84:7D:3D:04:08:7B:2A:38:7F:97:3D:E3
            X509v3 Authority Key Identifier:
                keyid:4E:10:DA:7E:9B:A6:49:96:8F:F5:1A:01:E5:A2:D4:2F:22:B7:E4:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThDafpumSZaP9RoB5aLULyK35N0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e35132-4b64-42e7-b778-32cd6668be86/1/ThDafpumSZaP9RoB5aLULyK35N0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e35132-4b64-42e7-b778-32cd6668be86/1/ThDafpumSZaP9RoB5aLULyK35N0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:59:1f:2b:c5:4e:d8:1b:ae:02:14:43:69:c4:25:96:ad:22:
         7e:a2:3c:5a:09:db:dc:f2:a8:f2:45:5e:a2:65:35:82:04:96:
         bd:42:f3:46:67:00:16:ea:ca:45:57:a5:5b:50:28:c8:e9:94:
         61:c2:a4:09:09:c2:45:21:df:0c:a1:f0:1e:97:f8:13:5c:a3:
         56:cd:3b:b9:d8:35:47:70:7a:a0:a1:a0:e3:54:f7:1c:9c:15:
         ea:90:f0:e3:c7:ed:77:b2:47:56:32:3e:16:dc:0a:36:ba:3c:
         c7:82:86:d0:0f:f9:d5:26:81:f7:fc:65:01:98:77:4a:d1:79:
         22:c4:c8:4c:29:92:f2:74:ef:ed:50:71:35:b0:66:76:25:4b:
         1a:ba:ac:27:23:78:de:ad:97:b0:dd:87:71:cf:4f:38:36:4d:
         1e:ee:89:1a:ea:30:a2:b7:62:cf:82:96:87:ec:d7:96:d6:06:
         80:1e:c2:7f:65:fc:34:50:5e:cd:ce:43:a3:26:27:c8:72:77:
         be:42:7a:46:59:6a:d4:fe:b8:32:e1:47:eb:69:0c:55:52:64:
         2a:9e:e6:32:b1:c7:83:cf:7e:91:d4:46:19:b0:8b:7d:98:57:
         45:f8:a5:7c:a1:3e:fe:93:4e:41:c6:9e:00:3e:ad:7b:db:00:
         9e:0b:41:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:22:31 2024 by rpki-client on console-ams.rpki-client.org