Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft
File:                     GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft (raw, json)
Hash identifier:          o+Fyff1gucqzKXGc3wexYn5qLfLWczpuSmC7x9YN6Mw=
Subject key identifier:   9A:73:D9:E7:1B:FA:95:8C:13:E3:F2:50:2E:11:97:66:63:6D:50:6E
Authority key identifier: 18:77:B1:9D:48:47:FC:3F:49:5A:F9:36:C5:B1:A1:92:8C:91:27:48
Certificate issuer:       /CN=1877b19d4847fc3f495af936c5b1a1928c912748
Certificate serial:       019048D5737D87216CF6B6EBB394D66168AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GHexnUhH_D9JWvk2xbGhkoyRJ0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft
Manifest number:          11D9
Signing time:             Mon 24 Jun 2024 06:01:06 +0000
Manifest this update:     Mon 24 Jun 2024 06:01:06 +0000
Manifest next update:     Tue 25 Jun 2024 06:01:06 +0000
Files and hashes:         1: GHexnUhH_D9JWvk2xbGhkoyRJ0g.crl (hash: NRBRdGHkEP/mH/5iEzFBlVVJiDWsCKWWFOTkjmz4LbA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GHexnUhH_D9JWvk2xbGhkoyRJ0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:d5:73:7d:87:21:6c:f6:b6:eb:b3:94:d6:61:68:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1877b19d4847fc3f495af936c5b1a1928c912748
        Validity
            Not Before: Jun 24 06:01:06 2024 GMT
            Not After : Jun 25 06:01:06 2024 GMT
        Subject: CN=9a73d9e71bfa958c13e3f2502e119766636d506e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4c:b8:8e:4f:9b:b2:1f:ba:9a:90:0d:eb:0d:
                    9f:05:d4:26:26:1d:4e:8b:f0:a5:42:f9:21:e9:61:
                    54:1f:0a:09:39:50:1e:ed:13:84:99:e5:ba:c9:1b:
                    af:aa:de:44:f1:e0:f1:5f:d2:f2:fd:6f:44:b9:30:
                    94:0c:bc:51:1d:5d:e5:96:9e:95:54:84:ce:58:69:
                    0b:4e:c7:d4:ea:93:eb:28:a9:ea:8a:a5:40:a3:ac:
                    f6:89:52:3e:dd:af:02:c4:b6:b2:1a:70:fa:6f:d5:
                    a3:3f:76:28:3e:53:0d:0e:6a:89:c6:78:1b:de:02:
                    b5:29:f1:e9:b1:26:94:47:75:e0:ec:7c:1c:7a:da:
                    9b:1a:22:e5:12:40:f5:86:67:16:47:67:58:1a:ba:
                    fc:21:7f:bb:14:66:d1:7e:58:40:d5:95:17:54:f5:
                    ca:32:da:6e:1a:2c:b5:8b:4b:a2:da:6b:7b:75:08:
                    e6:a9:60:58:a4:30:7f:e6:66:f1:42:5d:5e:f7:57:
                    3d:11:82:f4:bc:20:3d:c0:a8:78:55:9b:3a:5b:3c:
                    24:44:66:9f:eb:59:81:50:0d:4e:6d:66:3e:6b:a5:
                    01:26:1b:df:2c:00:c3:6e:e5:96:77:cf:46:e5:80:
                    1a:58:2f:9e:5e:90:bf:cf:94:10:16:1c:d1:aa:23:
                    59:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:73:D9:E7:1B:FA:95:8C:13:E3:F2:50:2E:11:97:66:63:6D:50:6E
            X509v3 Authority Key Identifier:
                keyid:18:77:B1:9D:48:47:FC:3F:49:5A:F9:36:C5:B1:A1:92:8C:91:27:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHexnUhH_D9JWvk2xbGhkoyRJ0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:87:ce:8f:a3:d8:a7:a2:c0:1b:7b:20:e5:b6:1f:81:04:2a:
         e8:96:61:27:bb:09:66:72:d5:b7:d0:5d:6b:85:ce:89:86:15:
         dc:b7:41:13:61:7f:b3:74:43:20:b1:91:e9:a5:90:a7:f6:72:
         1f:c9:35:54:8f:2f:df:9b:d9:f6:41:1e:af:ca:02:9a:ec:d1:
         c7:d4:17:a8:e9:82:94:80:22:70:aa:52:c6:e5:e7:d3:8d:df:
         76:e9:a0:e3:be:14:c6:1b:f0:8d:05:b7:62:4b:93:20:6b:ac:
         0e:e6:ba:ff:2a:83:52:16:53:9b:dd:55:cb:e4:4b:de:12:b0:
         fb:1c:00:50:50:e6:3d:aa:71:43:5c:8e:27:f9:ca:7d:9f:e2:
         dd:54:7c:2e:a2:81:4d:a2:f4:45:9d:91:51:21:b0:71:3c:31:
         5d:25:db:4c:0b:3b:68:6f:cd:61:e3:99:61:10:c3:9e:20:3e:
         b3:1d:35:18:38:c0:2c:5d:60:9d:86:98:cf:e9:24:14:cb:27:
         9e:5e:b6:58:3e:26:51:59:5a:a0:2d:d0:6c:cf:55:d6:b7:a7:
         6f:8b:b8:da:18:60:fd:17:cc:62:9f:d7:54:c2:6c:fc:d3:6f:
         46:c1:99:51:c7:79:d8:71:e8:60:b7:48:42:9b:48:77:6b:af:
         55:32:77:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:14:47 2024 by rpki-client on console-fra.rpki-client.org