Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/dba2f7-7c2b-4670-a1df-b0e4103f4962/1/iX81rEgorqlfpdLYBNM6ewz_RYo.mft
File:                     iX81rEgorqlfpdLYBNM6ewz_RYo.mft (raw, json)
Hash identifier:          7d0oHVjeq3waY3Z1tJQ10r1rTgQjLOocXTncjXjSGN0=
Subject key identifier:   C9:1F:F1:A8:50:CE:A1:E4:08:7D:D5:F4:E0:DB:15:84:35:A1:1D:A4
Authority key identifier: 89:7F:35:AC:48:28:AE:A9:5F:A5:D2:D8:04:D3:3A:7B:0C:FF:45:8A
Certificate issuer:       /CN=897f35ac4828aea95fa5d2d804d33a7b0cff458a
Certificate serial:       019034A984F7A94EA524A4D75699B9CC2227
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iX81rEgorqlfpdLYBNM6ewz_RYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/dba2f7-7c2b-4670-a1df-b0e4103f4962/1/iX81rEgorqlfpdLYBNM6ewz_RYo.mft
Manifest number:          93
Signing time:             Thu 20 Jun 2024 08:00:43 +0000
Manifest this update:     Thu 20 Jun 2024 08:00:43 +0000
Manifest next update:     Fri 21 Jun 2024 08:00:43 +0000
Files and hashes:         1: iX81rEgorqlfpdLYBNM6ewz_RYo.crl (hash: cD+pJlF0joxamCPVqFgDyHGIJoi4RCUbzBZBrJppYaY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/dba2f7-7c2b-4670-a1df-b0e4103f4962/1/iX81rEgorqlfpdLYBNM6ewz_RYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/dba2f7-7c2b-4670-a1df-b0e4103f4962/1/iX81rEgorqlfpdLYBNM6ewz_RYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iX81rEgorqlfpdLYBNM6ewz_RYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:34:a9:84:f7:a9:4e:a5:24:a4:d7:56:99:b9:cc:22:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=897f35ac4828aea95fa5d2d804d33a7b0cff458a
        Validity
            Not Before: Jun 20 08:00:43 2024 GMT
            Not After : Jun 21 08:00:43 2024 GMT
        Subject: CN=c91ff1a850cea1e4087dd5f4e0db158435a11da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:43:fb:1a:c5:f5:a5:56:81:7c:cc:d1:85:ac:
                    15:5b:47:82:de:a2:ab:14:be:fa:d8:ae:f7:75:0b:
                    04:d8:8b:49:d6:3a:e8:5d:93:46:75:cf:fc:a8:c6:
                    10:79:75:cb:7e:02:c4:7f:cb:ff:5c:72:08:28:a9:
                    05:56:23:58:e1:2b:8d:12:f5:4f:41:3c:9b:5e:53:
                    f1:a1:03:04:94:bf:9f:32:4f:99:86:44:7f:21:c3:
                    1b:5a:de:b9:cd:96:54:51:b6:92:f2:ce:b0:f6:1d:
                    6f:9f:da:65:47:32:67:d7:29:bf:dd:11:ef:0d:1e:
                    a2:7b:8b:51:3f:33:3d:8a:f1:67:81:8c:74:86:84:
                    5e:6a:4b:d9:ce:d5:39:36:d9:b8:fd:da:79:81:1d:
                    e7:8b:6d:c9:18:b2:99:21:fc:dd:d6:51:fe:e8:80:
                    7e:cd:6b:33:e8:93:cd:fa:e8:76:4d:9c:2b:15:b9:
                    3d:e0:6a:ed:30:06:d5:93:2f:a3:3a:fe:74:73:f4:
                    49:75:47:9c:34:d8:f3:47:26:09:50:e1:c1:af:85:
                    37:2a:d0:bc:35:2c:21:71:5b:c5:5d:54:02:28:b6:
                    4e:62:fb:12:70:85:20:69:95:43:46:a3:09:c7:3c:
                    f9:c7:71:4b:35:1b:39:6d:12:2e:9e:09:f8:10:50:
                    e5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1F:F1:A8:50:CE:A1:E4:08:7D:D5:F4:E0:DB:15:84:35:A1:1D:A4
            X509v3 Authority Key Identifier:
                keyid:89:7F:35:AC:48:28:AE:A9:5F:A5:D2:D8:04:D3:3A:7B:0C:FF:45:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iX81rEgorqlfpdLYBNM6ewz_RYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/dba2f7-7c2b-4670-a1df-b0e4103f4962/1/iX81rEgorqlfpdLYBNM6ewz_RYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/dba2f7-7c2b-4670-a1df-b0e4103f4962/1/iX81rEgorqlfpdLYBNM6ewz_RYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:7f:6c:d7:0a:32:37:af:95:83:22:33:37:91:24:8a:c4:e9:
         b0:73:de:eb:33:22:9c:6a:37:17:38:c2:f5:7a:b1:54:fc:e5:
         a4:3c:52:63:4b:c7:ca:ad:4b:d6:52:d3:f4:df:c8:a9:af:08:
         bb:3d:52:d9:7d:73:f2:05:c2:77:d1:fa:ac:09:ed:c5:6f:36:
         2c:70:4f:74:90:93:5d:8e:f1:37:d0:df:a1:36:bd:39:a8:db:
         08:c9:e8:fd:52:1e:03:f2:7d:e4:fc:26:64:b0:c7:75:2b:d1:
         fa:c2:0d:a3:d3:b4:33:8d:ab:6b:10:4d:bb:3e:f9:01:91:14:
         74:a0:b6:89:e6:f8:59:c1:9e:4d:8c:75:4a:b0:52:26:4b:dc:
         61:8c:1b:5d:c9:df:65:79:c4:63:9c:c5:8c:54:c1:82:a4:af:
         67:d3:c5:e1:f8:fe:19:c3:ab:9c:eb:74:13:6f:6b:07:6b:7a:
         8a:26:c8:d0:57:03:07:bd:53:ac:ca:4a:43:c5:05:d1:e8:c7:
         6e:34:9e:ff:fc:d9:cf:6e:3b:59:0d:7d:da:94:53:77:ac:af:
         33:05:b9:cd:f5:5b:1e:6a:de:32:48:4d:bf:61:1c:3f:75:07:
         a8:29:72:7b:21:5f:89:19:1b:3f:46:9e:cf:3d:e5:c4:8f:5a:
         76:3c:63:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 11:35:42 2024 by rpki-client on console-ams.rpki-client.org