Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft
File:                     HbLi5zWagBYypm0QuWHk8uxt_E8.mft (raw, json)
Hash identifier:          XagA2MLee8DvSeGjYs/91MkZflEc5Kb6y7oOTo17Z1Q=
Subject key identifier:   2D:78:3D:41:28:FE:11:55:12:E1:30:37:42:D0:0A:DC:C0:D3:25:FF
Authority key identifier: 1D:B2:E2:E7:35:9A:80:16:32:A6:6D:10:B9:61:E4:F2:EC:6D:FC:4F
Certificate issuer:       /CN=1db2e2e7359a801632a66d10b961e4f2ec6dfc4f
Certificate serial:       01901E8FE27299A60C3F18B4538521F76DA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HbLi5zWagBYypm0QuWHk8uxt_E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft
Manifest number:          11C4
Signing time:             Sun 16 Jun 2024 01:01:04 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:04 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:04 +0000
Files and hashes:         1: HbLi5zWagBYypm0QuWHk8uxt_E8.crl (hash: NrLfFvXs1xkOqowGd6PBdVDUnnr9QTj0ncNf0Dugk/k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HbLi5zWagBYypm0QuWHk8uxt_E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:e2:72:99:a6:0c:3f:18:b4:53:85:21:f7:6d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1db2e2e7359a801632a66d10b961e4f2ec6dfc4f
        Validity
            Not Before: Jun 16 01:01:04 2024 GMT
            Not After : Jun 17 01:01:04 2024 GMT
        Subject: CN=2d783d4128fe115512e1303742d00adcc0d325ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:12:6f:f6:cc:6d:e9:c3:63:02:1d:c7:cc:f7:
                    d3:60:03:a7:39:57:df:f7:48:72:03:60:9c:6e:95:
                    b7:eb:e8:61:c2:3c:54:f0:e7:88:c5:49:a4:c6:8a:
                    b2:c5:af:03:02:47:b7:6a:14:6d:bf:6c:6b:c7:22:
                    1e:eb:22:41:c4:f0:fb:74:4f:47:68:f6:6f:88:e5:
                    8e:d0:9e:5f:ce:fc:6a:fb:2d:5b:99:7b:48:87:6e:
                    a7:0f:e2:0c:ff:68:2d:7d:cd:2e:e6:d5:0a:14:b7:
                    0f:47:e9:5b:cc:5e:37:b8:25:9c:95:db:fb:a7:db:
                    90:bb:95:70:aa:6d:02:0a:76:17:3f:02:df:21:6f:
                    77:95:be:7c:c0:2f:fe:d6:a8:9b:df:39:95:82:93:
                    e6:4c:9d:2d:0b:26:b3:d5:f7:d8:c9:27:d0:12:58:
                    c9:8c:97:05:43:5d:45:1f:08:ac:7b:6f:5c:dd:0b:
                    ea:9a:ee:4b:9d:e4:f8:c2:95:6a:fd:43:88:e2:90:
                    0d:27:8d:a8:c3:41:14:4b:64:32:93:b0:ee:69:4f:
                    1d:9b:16:2b:e5:fe:df:0c:ed:03:5e:fd:ef:6a:ef:
                    80:e1:79:98:8c:29:38:7c:fc:e5:71:69:21:15:fd:
                    b6:33:4f:ec:3b:af:3f:6a:9d:30:42:1e:11:ac:1e:
                    78:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:78:3D:41:28:FE:11:55:12:E1:30:37:42:D0:0A:DC:C0:D3:25:FF
            X509v3 Authority Key Identifier:
                keyid:1D:B2:E2:E7:35:9A:80:16:32:A6:6D:10:B9:61:E4:F2:EC:6D:FC:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbLi5zWagBYypm0QuWHk8uxt_E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:f6:92:cc:07:eb:50:82:78:a5:cd:66:7c:1e:94:9a:c0:2a:
         8c:c0:69:64:ef:23:f4:73:1b:c0:56:31:37:c2:c9:db:85:d7:
         b8:69:2a:b3:e3:09:b6:24:ee:dd:ea:db:3b:45:d8:ef:0e:89:
         60:e3:64:da:ef:1f:67:fc:7a:d8:1c:73:e5:59:80:10:5a:cf:
         97:8f:93:34:02:2d:f6:11:c9:f9:e3:ab:6b:f2:a0:37:8c:af:
         14:91:00:9c:06:11:db:d6:60:74:63:73:79:be:c4:d7:12:96:
         02:40:1f:90:f3:ee:68:df:1a:33:0a:6b:1f:f2:13:2f:50:d7:
         0f:b0:ff:8b:12:00:5a:1d:94:1f:9e:85:16:12:2e:bd:4c:25:
         fe:a0:71:c9:58:cf:bd:4e:5d:93:30:bf:74:d1:4e:25:83:57:
         84:df:7f:ae:bc:e9:f8:1d:f2:b8:87:bf:fa:3d:aa:25:ad:ba:
         29:3b:b5:4b:45:21:6a:4e:78:51:f9:32:fc:e4:94:7b:ca:b6:
         77:e0:96:00:f9:85:09:59:0e:f7:db:d9:66:7b:ec:9d:44:bc:
         de:b1:ed:b3:f3:ad:14:9e:ea:29:33:cc:ea:b0:04:80:98:9e:
         d9:ab:1a:06:1f:f3:a3:b0:41:b7:46:8e:df:63:fb:3d:c9:20:
         a5:14:35:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:03:36 2024 by rpki-client on console-fra.rpki-client.org