Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft
File:                     GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft (raw, json)
Hash identifier:          TCvt1hA/Fz2zDmHr7eptDizYd9Sk6/k4PhNivMYYTEk=
Subject key identifier:   A7:7E:9C:17:22:3C:3B:0F:62:F6:BD:AD:83:04:67:66:B2:D3:52:85
Authority key identifier: 18:77:B1:9D:48:47:FC:3F:49:5A:F9:36:C5:B1:A1:92:8C:91:27:48
Certificate issuer:       /CN=1877b19d4847fc3f495af936c5b1a1928c912748
Certificate serial:       01901E58F25827C079FE5658D954F0AE6698
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GHexnUhH_D9JWvk2xbGhkoyRJ0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft
Manifest number:          11C3
Signing time:             Sun 16 Jun 2024 00:01:03 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:03 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:03 +0000
Files and hashes:         1: GHexnUhH_D9JWvk2xbGhkoyRJ0g.crl (hash: mYoGNblS1ky7T5k0QmSZ1wqo/r4vb3MIRCeGhyPKX/Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GHexnUhH_D9JWvk2xbGhkoyRJ0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:f2:58:27:c0:79:fe:56:58:d9:54:f0:ae:66:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1877b19d4847fc3f495af936c5b1a1928c912748
        Validity
            Not Before: Jun 16 00:01:03 2024 GMT
            Not After : Jun 17 00:01:03 2024 GMT
        Subject: CN=a77e9c17223c3b0f62f6bdad83046766b2d35285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d4:ba:51:66:e0:01:74:8a:f8:42:55:e2:c9:
                    6a:45:c3:f8:e2:a2:de:2b:8f:3f:e8:76:f6:34:6f:
                    20:25:0f:f0:f9:58:94:e5:0b:41:4d:0a:3e:82:18:
                    5f:d2:74:d7:11:82:f8:7e:61:ab:eb:ad:9b:63:41:
                    52:31:5d:c2:7e:3d:17:d0:dd:6d:f1:36:e0:98:dc:
                    d4:d8:1c:02:a2:de:0b:ec:ea:b8:a7:37:97:89:0f:
                    2b:51:e3:f0:06:80:1b:2d:56:a1:5b:8b:77:52:3f:
                    68:c9:f4:58:e5:23:62:f2:5a:fd:95:4a:8e:a6:2a:
                    e2:ba:50:64:ff:5a:4b:4e:44:16:e9:34:20:ca:e2:
                    29:b5:14:d9:5b:49:e1:57:ff:5a:f2:65:60:99:fc:
                    bc:37:af:63:5b:82:47:fd:11:1a:0f:9f:e2:e1:97:
                    fa:0a:26:6b:46:7e:7a:4f:03:b4:b4:c8:ea:5e:1a:
                    54:02:a9:20:1a:67:4b:40:c6:47:89:92:e7:f4:83:
                    9e:ef:ea:91:19:3e:ab:e7:b7:1f:d0:cf:82:45:e1:
                    91:2d:15:de:15:5c:96:92:3f:01:ac:b2:3a:3f:e8:
                    9c:3b:8c:d3:c3:4c:c2:ab:07:63:e3:82:dc:34:19:
                    18:46:e9:d3:7d:1b:2c:6e:e1:bf:87:13:9d:21:e4:
                    87:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7E:9C:17:22:3C:3B:0F:62:F6:BD:AD:83:04:67:66:B2:D3:52:85
            X509v3 Authority Key Identifier:
                keyid:18:77:B1:9D:48:47:FC:3F:49:5A:F9:36:C5:B1:A1:92:8C:91:27:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHexnUhH_D9JWvk2xbGhkoyRJ0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:f7:86:1e:79:11:19:bb:ed:09:ec:93:35:fe:a8:bc:0d:22:
         cb:e0:cd:2d:6f:90:1a:eb:ef:e7:e7:90:00:11:98:55:c1:1c:
         30:6d:7a:a3:7d:ba:f8:c5:ee:f1:5e:29:8b:cd:8b:6f:8e:e1:
         c8:97:cd:7c:cb:4e:d3:dd:31:3a:91:34:d9:06:c0:b1:e8:04:
         b3:df:05:c1:a1:d6:67:2e:cb:47:53:70:08:7f:b1:c2:f4:b5:
         cb:ba:aa:1d:30:9f:b8:16:2c:ab:4e:d2:28:90:e9:71:ac:a8:
         ba:4f:09:58:01:6a:9f:19:57:7c:d2:dc:db:5f:5f:3a:4f:5d:
         5e:18:76:c5:4f:34:d7:8a:a6:58:84:05:ba:67:f2:58:d2:67:
         ad:fd:a0:4d:47:3f:ec:06:3c:30:ec:3a:d7:84:39:32:02:40:
         f9:64:be:62:56:04:f4:78:7f:7b:ac:5f:58:89:9f:c8:4a:57:
         c2:6b:72:2a:83:f2:ed:61:0f:bc:9c:0d:d4:f7:f3:7f:5c:2d:
         9a:cb:f8:9f:c9:bd:b2:6a:ee:5e:e6:1c:92:a2:3e:37:73:4e:
         22:b5:19:34:62:16:b6:60:35:00:1b:7b:35:0e:35:4f:29:4c:
         86:40:99:29:a5:a3:f5:26:cf:1a:6a:89:36:27:21:c6:f7:15:
         47:df:a1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:50:53 2024 by rpki-client on console-ams.rpki-client.org