Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ba3ab1-f426-4779-a818-1096a982c66d/1/t-OqpZxI6Qz-Jbi0opfT3jur0sE.mft
File:                     t-OqpZxI6Qz-Jbi0opfT3jur0sE.mft (raw, json)
Hash identifier:          NePlpuHlfq9tgx/Ni/vTxSSrideuoC1DBrwJ232EViA=
Subject key identifier:   14:02:71:BF:8F:23:2B:AD:77:81:64:A5:61:49:BC:50:1C:54:F2:51
Authority key identifier: B7:E3:AA:A5:9C:48:E9:0C:FE:25:B8:B4:A2:97:D3:DE:3B:AB:D2:C1
Certificate issuer:       /CN=b7e3aaa59c48e90cfe25b8b4a297d3de3babd2c1
Certificate serial:       01901C6A3A14578E62B9E9DB96485BEFD45A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t-OqpZxI6Qz-Jbi0opfT3jur0sE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/ba3ab1-f426-4779-a818-1096a982c66d/1/t-OqpZxI6Qz-Jbi0opfT3jur0sE.mft
Manifest number:          07E8
Signing time:             Sat 15 Jun 2024 15:00:42 +0000
Manifest this update:     Sat 15 Jun 2024 15:00:42 +0000
Manifest next update:     Sun 16 Jun 2024 15:00:42 +0000
Files and hashes:         1: t-OqpZxI6Qz-Jbi0opfT3jur0sE.crl (hash: GpVNBfy0Xbcl7lbwenoGJMWaU7U6S6O8izbHlGdlG3k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/ba3ab1-f426-4779-a818-1096a982c66d/1/t-OqpZxI6Qz-Jbi0opfT3jur0sE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/ba3ab1-f426-4779-a818-1096a982c66d/1/t-OqpZxI6Qz-Jbi0opfT3jur0sE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t-OqpZxI6Qz-Jbi0opfT3jur0sE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:3a:14:57:8e:62:b9:e9:db:96:48:5b:ef:d4:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7e3aaa59c48e90cfe25b8b4a297d3de3babd2c1
        Validity
            Not Before: Jun 15 15:00:42 2024 GMT
            Not After : Jun 16 15:00:42 2024 GMT
        Subject: CN=140271bf8f232bad778164a56149bc501c54f251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:82:54:8e:69:9b:73:03:3e:3d:63:d3:af:fe:
                    fb:62:5d:c7:4f:bd:4b:50:4d:9c:28:39:cb:33:32:
                    70:ef:1f:e6:a2:cd:81:37:ac:bd:a2:34:5d:92:81:
                    c1:64:5f:c4:c9:0f:34:61:32:bd:26:11:fb:6e:59:
                    95:bb:55:ff:84:38:7b:e2:ef:f4:3a:0d:ac:b2:91:
                    c4:f4:7a:d9:a2:50:03:d7:ff:6d:4d:08:af:a7:0e:
                    55:f8:32:5b:ba:1e:db:a4:a7:39:04:a2:c0:af:d5:
                    e7:75:90:4a:60:92:c8:12:da:8b:e9:35:e4:0e:73:
                    63:3d:9b:e2:ef:91:9f:66:09:06:6f:c2:c8:a7:ac:
                    88:3a:20:81:4f:38:51:fb:ec:44:27:7f:f8:93:5c:
                    c4:3f:c5:61:06:5d:9a:98:d5:7d:4b:97:cb:83:ce:
                    bb:5c:1d:94:09:13:c5:64:75:13:6d:9f:50:c1:7e:
                    50:50:90:2d:66:c6:bd:b7:24:3c:e1:99:2b:54:76:
                    68:ac:4c:7b:7e:d1:0e:40:91:94:be:df:5b:05:de:
                    f0:ef:94:1b:ea:f7:05:18:cf:d0:71:c1:ec:0a:07:
                    0c:99:5a:ab:2c:17:48:42:b7:d6:cd:5c:d8:86:6a:
                    40:77:73:8f:ff:f4:44:73:00:7c:56:50:32:14:a6:
                    40:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:02:71:BF:8F:23:2B:AD:77:81:64:A5:61:49:BC:50:1C:54:F2:51
            X509v3 Authority Key Identifier:
                keyid:B7:E3:AA:A5:9C:48:E9:0C:FE:25:B8:B4:A2:97:D3:DE:3B:AB:D2:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-OqpZxI6Qz-Jbi0opfT3jur0sE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ba3ab1-f426-4779-a818-1096a982c66d/1/t-OqpZxI6Qz-Jbi0opfT3jur0sE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ba3ab1-f426-4779-a818-1096a982c66d/1/t-OqpZxI6Qz-Jbi0opfT3jur0sE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:0d:ff:80:43:6b:8a:44:91:b9:35:1c:31:99:45:e1:d6:a5:
         99:a7:99:b2:2f:d3:bb:e9:dd:3e:0a:7f:af:e7:83:1a:95:8b:
         5c:fa:f7:4d:95:66:d5:23:2d:7f:e1:ed:a1:c8:fd:17:a0:d8:
         04:10:dd:a9:d7:f2:89:d2:26:d8:27:57:a0:3b:da:3f:ac:86:
         02:b8:ea:01:ca:68:e2:a1:fd:e0:24:96:dd:af:dc:1c:7c:00:
         a0:95:a4:5d:c4:0d:b6:97:41:fd:96:0e:09:75:e2:96:3e:47:
         8c:25:89:03:f5:8d:aa:a1:0f:7c:07:a7:6a:ac:43:98:3e:d6:
         a5:6f:dd:45:7d:ec:ce:6d:76:39:a5:c2:45:e8:2e:78:b9:25:
         95:95:68:74:37:99:56:4c:fc:bc:61:50:3e:ed:7e:5d:2b:ab:
         1b:eb:61:3a:9f:69:8f:09:1f:13:5f:4f:37:ff:64:aa:6d:59:
         d0:a2:94:43:a6:06:7b:8c:6f:b4:4b:2b:db:84:2d:39:8c:39:
         a9:ef:fe:89:da:b4:a3:9a:1e:b8:83:ac:68:97:53:af:7d:28:
         45:93:a4:cf:17:dc:f9:88:97:9c:f5:84:78:d6:31:64:48:70:
         6f:0b:6f:8c:e1:50:23:d7:87:9a:ab:92:53:fa:db:3a:3a:f4:
         99:e8:af:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:46:06 2024 by rpki-client on console-ams.rpki-client.org