Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
File:                     INyR5mZJTQ3FaiuB0imr1u41-Ew.mft (raw, json)
Hash identifier:          8iDj4L5kzmO6Z4iZXfq9Tsc/QLeehor5q/Ttke2vT0Q=
Subject key identifier:   E0:29:E8:76:70:20:DF:6F:CE:90:AC:E6:FA:00:EF:DB:33:8D:85:FE
Authority key identifier: 20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
Certificate issuer:       /CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Certificate serial:       01901DEAC2F806DF2AA9AAB60834BF414F6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
Manifest number:          11C1
Signing time:             Sat 15 Jun 2024 22:00:42 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:42 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:42 +0000
Files and hashes:         1: INyR5mZJTQ3FaiuB0imr1u41-Ew.crl (hash: ZcgDpm0fkMCkFvmpGxKZhgFzTaBHW5BjWxa7483H1eY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:c2:f8:06:df:2a:a9:aa:b6:08:34:bf:41:4f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
        Validity
            Not Before: Jun 15 22:00:42 2024 GMT
            Not After : Jun 16 22:00:42 2024 GMT
        Subject: CN=e029e8767020df6fce90ace6fa00efdb338d85fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:15:f8:d7:54:ba:cd:c9:31:76:de:af:b3:e6:
                    32:37:77:fe:15:3a:41:d9:4f:89:e6:2c:5d:e5:0a:
                    aa:14:08:c9:17:94:87:15:1e:62:b8:eb:da:6f:4d:
                    51:03:42:48:8f:a9:03:31:27:5a:b4:c5:6f:63:a8:
                    ad:23:06:9b:9f:52:11:3d:0f:1e:f0:8c:fe:00:7a:
                    15:33:3d:51:ee:c6:92:f2:05:1c:27:bf:3b:21:aa:
                    8b:b3:da:aa:fc:c8:3e:b4:7b:b9:67:57:5b:23:70:
                    df:de:6c:98:e5:6e:79:f5:74:18:f0:a3:7e:20:c0:
                    07:5b:0c:59:cc:41:6f:a1:dd:39:d7:86:e8:0b:e5:
                    bf:a9:f1:d0:ca:61:8e:98:fa:21:d3:9a:b7:d8:06:
                    d4:99:07:72:5b:bf:90:7d:91:3f:f6:49:64:dc:f1:
                    63:09:6e:ca:7d:e7:1f:f6:bb:30:59:ac:29:de:67:
                    9f:63:b8:81:b8:75:52:65:94:7f:bd:5b:93:f3:fb:
                    65:d9:aa:f0:f2:9f:12:c3:a8:c2:0c:6a:0e:9f:87:
                    cf:a5:0c:93:ee:17:45:0f:c1:61:0f:6d:a4:23:19:
                    36:d7:4c:94:1b:48:ef:25:50:43:82:32:72:89:50:
                    43:40:93:73:2f:45:88:37:59:18:17:0b:97:0f:1a:
                    87:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:29:E8:76:70:20:DF:6F:CE:90:AC:E6:FA:00:EF:DB:33:8D:85:FE
            X509v3 Authority Key Identifier:
                keyid:20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:8c:b5:20:0c:91:53:5a:c4:b7:4e:f9:d6:94:41:c0:f4:cc:
         4c:8a:92:e9:aa:84:7c:a0:90:d6:4f:ed:6b:49:b7:d0:6c:65:
         84:a3:61:06:7d:2f:95:be:d9:e7:4e:f9:a1:e9:61:80:f3:7b:
         09:48:45:b6:48:a3:af:10:51:9a:94:79:a6:bb:88:51:0a:dc:
         5f:00:43:48:00:2e:d9:40:88:34:7a:b5:eb:e4:85:b6:71:d8:
         6d:68:5f:3f:4d:27:46:83:9a:4e:47:e1:ac:59:87:83:7b:6c:
         0b:8a:bc:86:61:c5:b5:d4:0e:f1:1c:58:c6:8f:e2:2e:c6:ff:
         48:fb:fe:7b:b6:57:a9:fb:71:db:0f:f6:74:73:9b:6d:ea:26:
         b0:c1:79:27:30:1d:b7:0c:e8:78:c0:4a:08:73:bf:26:bf:57:
         08:d4:d4:7e:f1:aa:30:4a:9a:2c:fa:40:27:d8:df:be:d9:ba:
         55:66:bc:17:14:af:aa:40:fb:41:ab:c4:b6:e7:07:54:95:07:
         f0:0c:70:51:96:c2:92:07:2b:5b:20:6f:df:b1:dd:ca:89:ca:
         99:e4:47:75:6f:6c:9d:c9:30:3a:f1:ae:3f:d0:f5:25:c6:03:
         e8:6e:ad:dc:8e:d0:5d:40:d6:0c:48:6d:e5:8e:bc:e4:80:ab:
         38:db:48:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:46:09 2024 by rpki-client on console-ams.rpki-client.org