Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b1a7ab-21df-4308-9bd0-f346cfb56951/1/l7jZwuBUbEWtgewbIqExlWDV7nE.mft
File:                     l7jZwuBUbEWtgewbIqExlWDV7nE.mft (raw, json)
Hash identifier:          WslrhoKU3KN/A3RSDomHLcbA4wTNpln14GRhjrULrEI=
Subject key identifier:   AC:9F:FC:1B:65:20:77:9A:A8:CD:4B:38:38:27:37:19:17:EA:EA:5C
Authority key identifier: 97:B8:D9:C2:E0:54:6C:45:AD:81:EC:1B:22:A1:31:95:60:D5:EE:71
Certificate issuer:       /CN=97b8d9c2e0546c45ad81ec1b22a1319560d5ee71
Certificate serial:       019034730E04E6C37DEBB95D2A4D040ABF31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l7jZwuBUbEWtgewbIqExlWDV7nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/b1a7ab-21df-4308-9bd0-f346cfb56951/1/l7jZwuBUbEWtgewbIqExlWDV7nE.mft
Manifest number:          110E
Signing time:             Thu 20 Jun 2024 07:01:13 +0000
Manifest this update:     Thu 20 Jun 2024 07:01:13 +0000
Manifest next update:     Fri 21 Jun 2024 07:01:13 +0000
Files and hashes:         1: l7jZwuBUbEWtgewbIqExlWDV7nE.crl (hash: e86s77wbMScV5Zu6F5nVVF1B1v3WyDqnIasC1hSMBzM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/b1a7ab-21df-4308-9bd0-f346cfb56951/1/l7jZwuBUbEWtgewbIqExlWDV7nE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/b1a7ab-21df-4308-9bd0-f346cfb56951/1/l7jZwuBUbEWtgewbIqExlWDV7nE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l7jZwuBUbEWtgewbIqExlWDV7nE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 07:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:34:73:0e:04:e6:c3:7d:eb:b9:5d:2a:4d:04:0a:bf:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97b8d9c2e0546c45ad81ec1b22a1319560d5ee71
        Validity
            Not Before: Jun 20 07:01:13 2024 GMT
            Not After : Jun 21 07:01:13 2024 GMT
        Subject: CN=ac9ffc1b6520779aa8cd4b383827371917eaea5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e3:6b:49:8c:a5:af:d6:a9:cf:d3:fc:bd:12:
                    7c:33:c7:21:59:9b:00:4a:d5:17:33:f4:cc:59:1c:
                    e1:16:29:7c:35:f5:31:e7:f9:4b:e0:b5:41:de:67:
                    e7:b7:a1:d3:39:93:5b:cc:17:cf:9f:d7:69:f7:a3:
                    11:a8:91:ff:bb:01:4b:8a:04:4d:fd:a3:29:19:e3:
                    8d:c9:a9:34:65:8b:1f:33:67:a8:88:60:4f:b9:df:
                    0f:9e:6b:36:ce:dc:c8:8e:9f:75:02:64:a5:5d:ee:
                    8a:2f:d4:13:7c:69:32:44:0c:74:ce:37:79:b5:f3:
                    b0:a1:30:22:10:6c:cd:bb:a7:8c:e4:8d:7f:74:10:
                    08:47:54:a6:c2:22:6b:f4:2e:c1:24:af:1d:8e:08:
                    e4:3c:04:a7:23:9f:80:a7:05:7a:aa:7a:48:ee:6f:
                    3d:9a:ca:11:d4:93:cd:bc:52:73:02:31:c1:eb:a0:
                    da:23:f1:87:d3:c6:76:5a:12:15:7e:28:ba:6f:da:
                    b7:d1:36:ca:5b:58:33:70:b3:15:26:db:aa:a2:ac:
                    db:b1:82:55:27:ee:f8:8b:59:26:b0:61:fe:32:7e:
                    54:67:42:5a:fa:8b:b0:ec:bd:3d:61:e0:b5:bd:52:
                    1e:5f:a0:fb:10:8b:16:7d:56:01:c7:07:07:47:d2:
                    c8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9F:FC:1B:65:20:77:9A:A8:CD:4B:38:38:27:37:19:17:EA:EA:5C
            X509v3 Authority Key Identifier:
                keyid:97:B8:D9:C2:E0:54:6C:45:AD:81:EC:1B:22:A1:31:95:60:D5:EE:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7jZwuBUbEWtgewbIqExlWDV7nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b1a7ab-21df-4308-9bd0-f346cfb56951/1/l7jZwuBUbEWtgewbIqExlWDV7nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b1a7ab-21df-4308-9bd0-f346cfb56951/1/l7jZwuBUbEWtgewbIqExlWDV7nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:3d:cc:1b:cb:6f:a7:a9:d6:13:f0:ea:07:3c:1a:04:30:f1:
         73:e3:c0:8e:c7:16:9f:6a:a7:90:b4:f2:08:92:2c:e9:74:1f:
         d9:96:62:b5:7a:5b:cd:f5:05:9b:e0:a6:7f:ef:9d:60:4e:2e:
         8e:b3:5b:50:0b:22:d7:32:49:be:d2:c2:88:10:0c:82:be:ed:
         d3:35:48:91:29:8b:9d:f5:da:62:05:75:ea:49:25:15:50:51:
         19:ac:c4:0b:0e:3c:07:d9:c8:46:88:6d:a6:85:5c:e0:51:ae:
         2d:26:9d:e6:41:67:a1:0e:45:2c:57:20:90:50:7d:65:d7:af:
         0b:3c:be:e0:ac:f8:80:d2:47:00:e8:46:e4:91:38:e0:ad:3c:
         7f:44:ba:a4:50:45:99:47:57:88:80:73:32:65:7b:01:1e:71:
         04:2f:2d:41:df:2d:ef:be:90:63:3f:37:31:06:b3:4e:f9:66:
         71:35:66:dd:c2:45:a7:e2:7c:f2:8b:2a:03:9b:ab:c3:f4:2a:
         8d:90:0f:8e:60:13:6d:e4:14:28:17:92:24:d1:dc:1c:e8:71:
         6c:de:ad:51:65:db:25:a7:f3:d1:46:e9:11:77:28:c6:ec:37:
         60:b8:05:15:6e:44:39:62:ba:a2:a4:47:00:0d:6a:0a:e0:23:
         69:4c:18:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA0cw4E5sN967ldKk0ECr8xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YjhkOWMyZTA1NDZjNDVhZDgxZWMxYjIyYTEzMTk1NjBk
NWVlNzEwHhcNMjQwNjIwMDcwMTEzWhcNMjQwNjIxMDcwMTEzWjAzMTEwLwYDVQQD
EyhhYzlmZmMxYjY1MjA3NzlhYThjZDRiMzgzODI3MzcxOTE3ZWFlYTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweNrSYylr9apz9P8vRJ8M8chWZsA
StUXM/TMWRzhFil8NfUx5/lL4LVB3mfnt6HTOZNbzBfPn9dp96MRqJH/uwFLigRN
/aMpGeONyak0ZYsfM2eoiGBPud8Pnms2ztzIjp91AmSlXe6KL9QTfGkyRAx0zjd5
tfOwoTAiEGzNu6eM5I1/dBAIR1SmwiJr9C7BJK8djgjkPASnI5+ApwV6qnpI7m89
msoR1JPNvFJzAjHB66DaI/GH08Z2WhIVfii6b9q30TbKW1gzcLMVJtuqoqzbsYJV
J+74i1kmsGH+Mn5UZ0Ja+ouw7L09YeC1vVIeX6D7EIsWfVYBxwcHR9LI4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyf/BtlIHeaqM1LODgnNxkX6upcMB8GA1UdIwQY
MBaAFJe42cLgVGxFrYHsGyKhMZVg1e5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDdqWnd1QlViRVd0Z2V3YklxRXhsV0RWN25FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iMWE3YWItMjFkZi00MzA4LTliZDAt
ZjM0NmNmYjU2OTUxLzEvbDdqWnd1QlViRVd0Z2V3YklxRXhsV0RWN25FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9iMWE3YWItMjFkZi00MzA4LTliZDAtZjM0NmNmYjU2OTUx
LzEvbDdqWnd1QlViRVd0Z2V3YklxRXhsV0RWN25FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADT3MG8tv
p6nWE/DqBzwaBDDxc+PAjscWn2qnkLTyCJIs6XQf2ZZitXpbzfUFm+Cmf++dYE4u
jrNbUAsi1zJJvtLCiBAMgr7t0zVIkSmLnfXaYgV16kklFVBRGazECw48B9nIRoht
poVc4FGuLSad5kFnoQ5FLFcgkFB9ZdevCzy+4Kz4gNJHAOhG5JE44K08f0S6pFBF
mUdXiIBzMmV7AR5xBC8tQd8t776QYz83MQazTvlmcTVm3cJFp+J88osqA5urw/Qq
jZAPjmATbeQUKBeSJNHcHOhxbN6tUWXbJafz0UbpEXcoxuw3YLgFFW5EOWK6oqRH
AA1qCuAjaUwY0g==
-----END CERTIFICATE-----
Generated at Thu Jun 20 14:16:12 2024 by rpki-client on console-fra.rpki-client.org