Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
File:                     G6IBGTlu61biTNCpsu4l-i2kteY.mft (raw, json)
Hash identifier:          JWCQxFF+SSJUmmHRXz+TKuI0lVmvQvlwZ8CWTS8CPOg=
Subject key identifier:   B5:61:70:26:96:1C:5B:AD:66:6A:CB:75:52:AA:E2:9B:84:FA:95:1B
Authority key identifier: 1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6
Certificate issuer:       /CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6
Certificate serial:       01903706B1044DBECAC326FF83B6ADDC57D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
Manifest number:          053A
Signing time:             Thu 20 Jun 2024 19:01:43 +0000
Manifest this update:     Thu 20 Jun 2024 19:01:43 +0000
Manifest next update:     Fri 21 Jun 2024 19:01:43 +0000
Files and hashes:         1: G6IBGTlu61biTNCpsu4l-i2kteY.crl (hash: xWCHLGdeuXeZMYT7BhbnlR+2fN2CZgeRKu+t/mLgxOQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 19:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:06:b1:04:4d:be:ca:c3:26:ff:83:b6:ad:dc:57:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6
        Validity
            Not Before: Jun 20 19:01:43 2024 GMT
            Not After : Jun 21 19:01:43 2024 GMT
        Subject: CN=b5617026961c5bad666acb7552aae29b84fa951b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8e:7e:63:c4:34:dc:f6:fe:ea:0b:1d:80:4f:
                    10:2b:15:a3:3c:76:61:52:bc:04:8b:6e:c5:0e:b2:
                    77:ef:d4:43:bb:6d:b7:6a:5c:73:4a:6b:34:51:1e:
                    cf:b0:86:95:a9:73:2e:85:23:ad:96:b9:e1:a8:b4:
                    dc:6e:a6:b2:6b:17:bd:88:d8:81:14:35:d5:a2:42:
                    3a:8b:03:8e:bc:70:26:b9:6b:5c:3c:67:e0:09:f2:
                    17:cd:e0:e0:44:c4:b6:ba:52:97:fd:ee:a9:a1:01:
                    51:b6:e2:8e:f5:12:57:ae:90:e9:da:5f:32:c7:fb:
                    3d:ce:77:45:35:9e:c4:eb:02:2b:80:34:f6:0c:f0:
                    a9:52:5d:85:99:74:b7:d3:7c:cf:b0:3a:3c:79:73:
                    66:5d:ea:75:28:f0:17:b6:dd:0a:e7:c3:bd:28:55:
                    59:6e:e1:1d:1d:97:a6:e8:4b:3c:6f:74:7f:b4:1e:
                    42:30:84:3c:c2:a2:6d:06:4b:e7:0d:5c:88:17:a0:
                    92:d6:13:98:af:16:2f:c3:17:be:54:c8:69:56:15:
                    21:25:cb:99:16:27:33:d9:b8:ae:96:d2:39:b5:de:
                    82:72:df:09:5f:ec:47:09:99:36:32:a6:57:c6:97:
                    ad:d0:1e:3b:4b:58:d0:4d:33:fa:18:07:b4:e6:52:
                    84:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:61:70:26:96:1C:5B:AD:66:6A:CB:75:52:AA:E2:9B:84:FA:95:1B
            X509v3 Authority Key Identifier:
                keyid:1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:24:18:fc:99:8a:ca:1b:f2:01:cc:be:04:a7:e6:89:de:a9:
         00:09:78:1c:ab:70:73:e4:fb:6f:12:0f:af:57:07:2e:24:19:
         18:c4:0f:fc:d2:e0:7b:9b:10:53:d6:60:80:10:ea:2b:81:9d:
         39:65:ba:2f:05:7f:ad:0e:5b:3e:03:e9:ea:11:31:b0:4d:e6:
         86:9b:15:c6:69:bf:8a:1f:a9:5b:b1:02:7d:5e:d8:e7:88:91:
         5e:6c:10:5b:ba:60:dd:f2:81:88:9e:82:40:30:cd:6b:dd:0f:
         8b:a4:c3:56:2d:76:8d:a4:d5:c1:87:14:c1:66:7d:9b:77:cd:
         a2:1e:bc:a0:ed:34:4c:93:37:34:63:96:54:86:05:74:aa:79:
         43:be:5a:38:1c:18:e9:54:df:85:05:b2:0f:b3:ce:31:92:a2:
         b8:d5:11:59:ad:25:35:22:bd:0e:72:2b:9f:a2:15:24:26:01:
         ba:c7:75:bb:5c:25:1f:60:d4:61:ed:2e:d4:54:f0:14:13:9a:
         40:05:91:de:13:61:7e:d3:7b:6e:b2:5f:45:8f:68:41:14:bb:
         aa:ce:5d:f7:da:7d:7a:7b:21:db:c4:6b:29:bc:92:6b:2c:db:
         59:0c:aa:a1:5e:62:ea:1b:41:66:ff:3f:39:aa:cf:f3:b6:3d:
         e2:f9:19:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:03:28 2024 by rpki-client on console-fra.rpki-client.org