Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.mft
File:                     agYc8aPo-IYXhUvTtqza2KukWhw.mft (raw, json)
Hash identifier:          /obXYIVF6r/8pPUmMtBTzdd2OL2mwiY+z7HSUcMmrYo=
Subject key identifier:   03:A6:28:BF:E7:64:2D:8F:94:B0:01:91:BD:2F:39:3D:F0:B2:CC:76
Authority key identifier: 6A:06:1C:F1:A3:E8:F8:86:17:85:4B:D3:B6:AC:DA:D8:AB:A4:5A:1C
Certificate issuer:       /CN=6a061cf1a3e8f88617854bd3b6acdad8aba45a1c
Certificate serial:       019049B137B2009CC0690926F212698DD358
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/agYc8aPo-IYXhUvTtqza2KukWhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.mft
Manifest number:          11DB
Signing time:             Mon 24 Jun 2024 10:01:09 +0000
Manifest this update:     Mon 24 Jun 2024 10:01:09 +0000
Manifest next update:     Tue 25 Jun 2024 10:01:09 +0000
Files and hashes:         1: agYc8aPo-IYXhUvTtqza2KukWhw.crl (hash: TgFTsmh0D3Oa5a+WMvkBnwTEMZFZLezQwfhSaFe5CZg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/agYc8aPo-IYXhUvTtqza2KukWhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:49:b1:37:b2:00:9c:c0:69:09:26:f2:12:69:8d:d3:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a061cf1a3e8f88617854bd3b6acdad8aba45a1c
        Validity
            Not Before: Jun 24 10:01:09 2024 GMT
            Not After : Jun 25 10:01:09 2024 GMT
        Subject: CN=03a628bfe7642d8f94b00191bd2f393df0b2cc76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a0:20:fd:76:97:5e:02:81:f4:76:a2:18:3f:
                    9e:1c:a9:e9:2d:c1:f8:b4:0f:4d:f9:09:96:f9:4f:
                    e4:c9:cf:82:76:25:37:46:ec:60:60:7b:b5:45:9a:
                    03:f8:f9:0a:95:76:81:1a:5f:c7:32:3c:32:f3:2a:
                    88:b6:c5:30:69:4e:15:1b:e0:e6:50:0f:07:db:d1:
                    8a:34:28:a8:1f:a4:9c:81:2b:bd:55:d2:38:da:48:
                    3d:0a:18:54:ff:55:93:38:e2:68:60:01:de:47:18:
                    c8:31:11:d0:0d:69:ec:1e:db:e3:4c:1b:a2:93:70:
                    f1:46:f3:2b:28:5b:65:ac:b1:af:bb:3b:9d:cb:25:
                    7e:ea:d3:ff:74:60:f7:8b:39:92:ea:fc:47:73:f1:
                    45:19:25:8e:f0:24:42:33:ed:8c:f3:d7:ba:19:b5:
                    43:2c:0e:80:97:d3:5f:14:0a:dc:4d:ca:47:44:db:
                    73:bd:f0:56:5e:64:c7:a5:76:68:87:38:a5:f3:6c:
                    26:f4:48:c1:52:f1:79:5c:65:5d:90:74:8f:92:e0:
                    2c:1e:1f:cd:29:4c:3f:b5:52:1b:5a:d9:9c:4e:27:
                    de:99:3a:d4:15:b3:ff:e8:3d:18:69:c6:7e:f3:5c:
                    ae:0d:b0:03:1c:de:93:3a:e3:09:da:1e:57:dc:c7:
                    d4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A6:28:BF:E7:64:2D:8F:94:B0:01:91:BD:2F:39:3D:F0:B2:CC:76
            X509v3 Authority Key Identifier:
                keyid:6A:06:1C:F1:A3:E8:F8:86:17:85:4B:D3:B6:AC:DA:D8:AB:A4:5A:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agYc8aPo-IYXhUvTtqza2KukWhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:52:fc:80:8a:18:9f:d6:96:8c:30:a1:27:ca:67:e3:e6:d2:
         3b:85:f2:a4:76:52:50:65:92:cd:96:09:55:86:f3:97:c7:c0:
         c6:94:18:92:b5:d6:a4:b9:01:9c:2a:b3:ca:72:58:e0:48:d9:
         11:ef:62:88:0f:d4:be:62:ed:03:47:30:d1:24:70:38:d5:c8:
         36:62:9a:db:37:84:2e:fa:6a:0c:fc:67:44:38:b0:1b:8d:c0:
         b8:95:45:cc:c7:57:8e:3a:f9:5a:39:0c:8c:e1:51:ec:66:ac:
         df:e4:47:80:64:fa:a5:d3:14:b6:d8:a6:44:90:fb:dd:45:87:
         b8:5e:fd:02:d4:87:46:78:a2:33:dc:37:d4:76:a4:45:1e:a4:
         ca:28:50:cb:b1:6a:11:a1:00:f3:fc:9f:e7:a1:39:2c:f1:47:
         7a:eb:06:aa:a5:0c:52:2d:0d:1d:0f:38:a4:0e:ad:c5:c7:18:
         62:07:71:bf:7e:9b:a3:79:23:0d:35:6e:0b:94:bf:c9:33:73:
         63:92:a9:4c:b8:1e:8d:a7:27:7a:d4:e7:53:74:9e:ef:02:d3:
         f4:29:58:5c:9f:5c:e6:bf:34:d0:4b:da:3c:fd:31:9a:4f:4b:
         bf:1e:0c:e2:e0:42:80:81:17:9f:2f:9a:23:a6:2d:10:bd:d1:
         77:4f:89:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:13:26 2024 by rpki-client on console-ams.rpki-client.org