Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ae0c68-8dce-4da4-96aa-15605ac6dd62/1/Ha03U-KHlOH4gxrnEAYLEaYzdu4.mft
File:                     Ha03U-KHlOH4gxrnEAYLEaYzdu4.mft (raw, json)
Hash identifier:          xBBgXoSTNiswVHUM0CDgfgiUU30b0NzjK8FOd5hIFbk=
Subject key identifier:   77:93:46:BC:74:59:DB:7B:D4:CA:F2:35:22:E2:DB:F1:35:46:C0:56
Authority key identifier: 1D:AD:37:53:E2:87:94:E1:F8:83:1A:E7:10:06:0B:11:A6:33:76:EE
Certificate issuer:       /CN=1dad3753e28794e1f8831ae710060b11a63376ee
Certificate serial:       01901CD87038D191AA7B2F8DAF105FEE30E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ha03U-KHlOH4gxrnEAYLEaYzdu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ae0c68-8dce-4da4-96aa-15605ac6dd62/1/Ha03U-KHlOH4gxrnEAYLEaYzdu4.mft
Manifest number:          0A60
Signing time:             Sat 15 Jun 2024 17:01:04 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:04 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:04 +0000
Files and hashes:         1: Ha03U-KHlOH4gxrnEAYLEaYzdu4.crl (hash: uLkSUDcta5VLfWyx16S1lxBvY5xsk/U9V9iu8KgUMOg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/ae0c68-8dce-4da4-96aa-15605ac6dd62/1/Ha03U-KHlOH4gxrnEAYLEaYzdu4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/ae0c68-8dce-4da4-96aa-15605ac6dd62/1/Ha03U-KHlOH4gxrnEAYLEaYzdu4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ha03U-KHlOH4gxrnEAYLEaYzdu4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:70:38:d1:91:aa:7b:2f:8d:af:10:5f:ee:30:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dad3753e28794e1f8831ae710060b11a63376ee
        Validity
            Not Before: Jun 15 17:01:04 2024 GMT
            Not After : Jun 16 17:01:04 2024 GMT
        Subject: CN=779346bc7459db7bd4caf23522e2dbf13546c056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fe:3e:4c:24:c7:79:88:f5:6a:32:45:72:08:
                    7d:0a:07:0c:b4:f1:f4:94:14:00:7c:e1:42:c6:1a:
                    ee:8c:16:55:56:44:01:48:2e:e3:78:48:41:cb:e4:
                    90:16:9b:ff:0b:82:46:f0:53:ac:0c:a1:9f:14:f3:
                    77:e4:b1:05:48:73:c6:13:e7:28:0c:f1:f7:00:c6:
                    32:40:a3:d2:36:1d:2e:26:f9:ab:3e:2c:7e:a7:66:
                    d4:37:cc:06:e0:7f:f3:d7:dc:c8:6a:dc:02:8b:e7:
                    a2:16:c6:fc:64:57:e4:50:e9:4c:1f:e9:5a:6a:22:
                    59:f4:cf:4f:0a:e0:56:b5:54:cc:a8:b7:20:69:70:
                    d6:69:a1:c3:12:b9:7c:ac:b6:01:99:c8:e8:9f:90:
                    c0:ba:26:38:7f:2e:d8:c4:aa:c5:eb:ec:6a:c1:b2:
                    92:8a:86:e5:26:09:f6:cf:d2:36:d3:f8:b9:49:52:
                    f2:15:9e:93:95:61:fc:bc:4a:d5:11:b9:92:fd:33:
                    73:f2:10:3c:af:4e:69:3f:c1:ba:7b:2b:37:3c:5e:
                    a1:e7:62:cc:4e:62:89:92:b0:7c:4e:4b:4f:0d:f5:
                    56:2f:b8:75:a0:d8:57:f5:bf:b7:55:29:33:22:78:
                    e8:c0:76:2f:b4:22:c3:04:8f:1f:30:f1:82:bd:5c:
                    20:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:93:46:BC:74:59:DB:7B:D4:CA:F2:35:22:E2:DB:F1:35:46:C0:56
            X509v3 Authority Key Identifier:
                keyid:1D:AD:37:53:E2:87:94:E1:F8:83:1A:E7:10:06:0B:11:A6:33:76:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha03U-KHlOH4gxrnEAYLEaYzdu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ae0c68-8dce-4da4-96aa-15605ac6dd62/1/Ha03U-KHlOH4gxrnEAYLEaYzdu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ae0c68-8dce-4da4-96aa-15605ac6dd62/1/Ha03U-KHlOH4gxrnEAYLEaYzdu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:4d:71:0d:38:dd:31:f5:d6:e0:b5:23:32:23:a3:a6:7e:cc:
         13:6a:42:28:e4:7f:8b:f8:fe:d6:42:07:73:01:cc:f0:59:b8:
         48:42:b9:1b:01:08:f5:96:35:f1:f2:9c:03:ec:62:1b:b0:b5:
         50:c7:05:0b:37:b2:8c:9b:80:1a:9d:0c:28:80:49:ed:a3:d0:
         83:bf:67:ce:02:37:42:91:82:3d:4b:b1:a7:fe:51:17:00:b4:
         43:55:58:0f:be:78:e6:86:aa:3b:30:a1:b8:d9:7b:b3:eb:e3:
         3b:85:ae:a7:d9:f7:fd:c1:85:99:bd:12:52:a7:f4:c3:b0:59:
         62:22:24:67:63:f6:56:c2:7d:a8:c1:0a:94:99:45:be:22:c0:
         61:81:73:87:a1:c2:fc:02:5b:42:c2:80:be:1a:77:35:b0:52:
         6d:b9:11:f8:46:00:19:3c:16:2a:3f:2e:06:20:4e:11:bf:09:
         3e:57:9e:85:74:98:4d:d2:07:5f:d6:bd:15:be:db:fe:8b:dd:
         24:70:81:e3:a0:28:67:6e:43:1d:e7:2e:8d:12:55:dd:bb:b7:
         48:35:ca:2a:7c:6f:e8:63:6e:92:ae:e4:ef:5d:6f:4a:39:df:
         d0:c4:4a:78:8e:33:64:fd:93:7e:1a:36:03:fd:53:32:87:fd:
         a9:ea:f1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:59:44 2024 by rpki-client on console-ams.rpki-client.org