Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c8ebc1-b425-46c9-9d56-8aec4a9aa5b8/1/XGl5JYB9FsulLpLpIs_dXsB4hBg.mft
File:                     XGl5JYB9FsulLpLpIs_dXsB4hBg.mft (raw, json)
Hash identifier:          KxJlyDyMh5HHb7C8iSnicCuvsy1dpCkN5c7BI1qTCNw=
Subject key identifier:   75:65:3E:25:E4:23:5A:B9:1F:9A:46:72:22:6F:AF:65:8F:55:96:0F
Authority key identifier: 5C:69:79:25:80:7D:16:CB:A5:2E:92:E9:22:CF:DD:5E:C0:78:84:18
Certificate issuer:       /CN=5c697925807d16cba52e92e922cfdd5ec0788418
Certificate serial:       019037743FB5578ED025074231C6CDBFCF4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGl5JYB9FsulLpLpIs_dXsB4hBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/c8ebc1-b425-46c9-9d56-8aec4a9aa5b8/1/XGl5JYB9FsulLpLpIs_dXsB4hBg.mft
Manifest number:          09D2
Signing time:             Thu 20 Jun 2024 21:01:23 +0000
Manifest this update:     Thu 20 Jun 2024 21:01:23 +0000
Manifest next update:     Fri 21 Jun 2024 21:01:23 +0000
Files and hashes:         1: XGl5JYB9FsulLpLpIs_dXsB4hBg.crl (hash: VRSaxJdhNR3D4nS+1QQ4jBIq3W2mw6WccXMa6H7mJjE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/c8ebc1-b425-46c9-9d56-8aec4a9aa5b8/1/XGl5JYB9FsulLpLpIs_dXsB4hBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/c8ebc1-b425-46c9-9d56-8aec4a9aa5b8/1/XGl5JYB9FsulLpLpIs_dXsB4hBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XGl5JYB9FsulLpLpIs_dXsB4hBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 21:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:74:3f:b5:57:8e:d0:25:07:42:31:c6:cd:bf:cf:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c697925807d16cba52e92e922cfdd5ec0788418
        Validity
            Not Before: Jun 20 21:01:23 2024 GMT
            Not After : Jun 21 21:01:23 2024 GMT
        Subject: CN=75653e25e4235ab91f9a4672226faf658f55960f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:26:3a:78:0f:88:7f:ac:28:12:2b:5f:a8:17:
                    7a:72:7e:6e:00:05:46:24:47:1c:47:17:93:2b:6a:
                    84:4f:71:1f:ae:56:fe:09:e6:0e:2d:a2:f8:06:78:
                    16:c0:e6:11:ec:b3:a1:0c:33:1c:84:cf:1c:74:77:
                    8e:9f:9a:0a:a3:3d:b1:0b:be:96:cf:a9:81:f8:56:
                    74:ca:ad:bc:03:0c:e6:06:b5:2e:5c:bc:93:c3:db:
                    ec:a7:76:ca:b8:3a:ef:6c:ec:2b:c8:5a:ea:99:41:
                    11:0c:fe:4a:c9:71:17:b5:9c:a7:b1:58:e9:1e:e0:
                    c6:f0:94:5f:15:39:33:87:6c:9b:9f:a2:14:cc:80:
                    20:a9:f1:df:24:b0:36:6a:59:ab:01:8a:30:90:9a:
                    06:5a:70:27:b3:f2:c3:43:11:07:97:4d:66:3f:3f:
                    9b:40:ec:4f:9f:f8:e7:b0:8d:75:af:b2:59:50:f8:
                    73:5d:0d:d7:70:27:e7:c1:f6:03:33:dd:e2:64:f4:
                    c4:3c:b6:f3:69:bc:b7:d7:bc:eb:0c:fe:b3:98:4f:
                    d6:10:30:58:0f:b4:53:55:fb:36:6b:3f:5a:f0:b7:
                    60:87:61:e2:b2:97:53:be:4b:5b:86:fd:2a:9f:7d:
                    fc:d9:cf:87:5e:f8:74:aa:8d:d8:19:1f:af:5e:82:
                    15:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:65:3E:25:E4:23:5A:B9:1F:9A:46:72:22:6F:AF:65:8F:55:96:0F
            X509v3 Authority Key Identifier:
                keyid:5C:69:79:25:80:7D:16:CB:A5:2E:92:E9:22:CF:DD:5E:C0:78:84:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGl5JYB9FsulLpLpIs_dXsB4hBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c8ebc1-b425-46c9-9d56-8aec4a9aa5b8/1/XGl5JYB9FsulLpLpIs_dXsB4hBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c8ebc1-b425-46c9-9d56-8aec4a9aa5b8/1/XGl5JYB9FsulLpLpIs_dXsB4hBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:4c:5a:48:e1:a2:fe:dc:cc:d8:08:25:ee:fd:60:34:3b:a0:
         e1:5d:3d:08:80:03:3a:9f:d1:fd:1e:67:b3:ec:44:9b:30:1e:
         22:24:d6:3e:a1:ad:30:40:43:53:30:73:89:4f:db:c2:dd:d1:
         1c:a3:f4:02:5a:64:8e:01:fd:88:19:f6:bb:ff:8e:27:96:16:
         82:7a:10:72:89:4a:72:20:4c:ae:27:e6:ed:22:a0:5c:bb:ab:
         b1:64:a0:4f:0d:71:88:15:7f:36:b9:13:ce:b4:67:30:55:14:
         75:1a:7d:43:84:0a:72:56:40:c7:6b:a1:b2:68:46:48:bd:85:
         74:ac:f6:c6:5d:89:fe:50:71:e0:ec:f5:38:c8:c6:be:82:97:
         08:6c:6d:b7:2f:aa:b0:ac:88:ab:0a:1b:8b:5f:92:11:5a:91:
         7d:3c:43:72:4c:c5:c5:f4:c3:2b:81:7c:ec:c4:f8:c1:94:12:
         57:36:08:06:3d:9c:3f:c9:2d:6b:e7:e7:0c:62:75:a7:db:d2:
         04:bb:d4:8f:33:9a:5c:eb:05:45:74:52:6e:6b:fa:57:ce:0b:
         90:8f:52:67:5c:f7:03:df:20:d8:74:81:0f:39:b9:7f:01:0a:
         8c:4d:5c:5b:14:e4:de:67:83:6f:90:27:41:3a:31:9f:db:b2:
         a9:b9:86:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:02:58 2024 by rpki-client on console-fra.rpki-client.org