Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
File:                     aWoG5FR9oBpci177cQQOXt0Qnuc.mft (raw, json)
Hash identifier:          6a9gyc9MwSNKA80L1Xo072E4SN4U5I7P3IIDXxfhep4=
Subject key identifier:   1C:84:26:67:FC:6E:45:7C:BF:C0:3A:DA:42:6D:EC:A3:AE:C1:93:C3
Authority key identifier: 69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7
Certificate issuer:       /CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
Certificate serial:       01901DED31D9A8FE6E4DFD4FA053244E8036
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
Manifest number:          0C3C
Signing time:             Sat 15 Jun 2024 22:03:22 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:22 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:22 +0000
Files and hashes:         1: aWoG5FR9oBpci177cQQOXt0Qnuc.crl (hash: fH8TVnaPiMlUJtz9K9tzhVX3zS/zwLN6RbRP/CgYKZs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:31:d9:a8:fe:6e:4d:fd:4f:a0:53:24:4e:80:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
        Validity
            Not Before: Jun 15 22:03:22 2024 GMT
            Not After : Jun 16 22:03:22 2024 GMT
        Subject: CN=1c842667fc6e457cbfc03ada426deca3aec193c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9a:b7:fc:35:b7:97:42:ef:7a:a6:ed:c5:b4:
                    f4:e6:f6:41:37:e6:62:23:c3:42:c3:5b:38:30:3c:
                    6c:50:c7:9d:82:8a:de:12:32:f5:50:cc:f1:ee:27:
                    4d:8c:59:ff:97:a4:7c:f2:c2:a6:08:ea:bd:88:17:
                    4f:3b:74:53:a4:41:a5:8c:a8:ba:c4:54:50:74:1d:
                    bf:75:d7:da:84:88:2f:69:23:af:1c:a4:0a:2e:f3:
                    7d:fb:8b:e7:8f:b5:b8:4d:31:2f:50:f2:50:92:04:
                    fe:84:24:48:8b:45:cc:1c:f1:c5:2c:d4:b8:08:88:
                    e3:c4:9a:c2:21:5e:16:cf:e5:77:4f:e1:a9:f7:11:
                    20:70:3d:6b:ca:ab:20:11:72:05:c6:1c:0c:26:ce:
                    e1:7f:db:c6:2a:af:d8:a3:4f:07:d9:25:e3:65:c8:
                    3a:dd:fc:26:5d:69:99:25:0f:34:50:15:4c:40:17:
                    16:d3:f1:d4:9e:b4:70:79:59:66:18:78:47:af:e5:
                    fb:24:e3:0e:1b:23:5c:fb:e1:8d:cc:0e:78:97:a0:
                    ad:ef:d0:ee:77:ce:97:49:b9:ce:42:24:0a:67:09:
                    55:15:8d:8e:c3:98:d6:9b:0a:27:a2:8d:8d:e7:97:
                    e4:32:7e:3e:95:07:bc:a9:29:97:2a:ef:09:36:00:
                    c5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:84:26:67:FC:6E:45:7C:BF:C0:3A:DA:42:6D:EC:A3:AE:C1:93:C3
            X509v3 Authority Key Identifier:
                keyid:69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e7:a0:0e:0c:49:b6:2b:78:fd:50:26:e5:68:30:80:23:e7:
         58:60:05:c8:fe:57:18:93:a1:ec:b9:d3:38:ad:44:1e:65:5c:
         cb:66:5b:5f:a9:08:02:a9:a6:7a:72:b6:02:3d:0f:0b:11:d0:
         57:de:c7:0f:f7:64:86:92:04:e9:29:3e:aa:36:08:25:c2:2d:
         6f:56:9c:a4:ca:5a:4a:31:91:dc:ec:ef:10:b6:a2:94:60:4d:
         fa:67:ec:bf:a7:d2:ce:6f:e8:41:e6:14:69:0d:fe:28:61:fa:
         e4:c3:d9:d3:d1:47:51:18:83:9f:50:a7:96:6a:14:0b:14:79:
         49:8d:bd:56:4a:a8:b2:ae:bc:22:9e:53:d7:5d:5b:55:e0:78:
         c8:5c:99:23:78:2f:c2:6e:a7:91:f7:7f:9b:37:d9:28:51:46:
         69:b5:fe:81:58:98:d7:c6:86:01:0d:11:69:3c:dc:26:9a:a7:
         54:6b:4e:8d:8c:95:3c:b5:1f:5c:30:47:50:63:81:15:35:78:
         c0:e3:9b:fa:7b:08:49:5a:6b:3a:9a:15:ce:fe:7c:81:4e:ec:
         0c:48:0b:d1:c4:5c:fd:4c:7b:f8:85:61:ce:85:67:0b:8f:74:
         ef:2c:06:35:af:1d:89:1d:98:03:88:6a:e5:31:3f:50:10:a0:
         74:8d:bb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:46:44 2024 by rpki-client on console-ams.rpki-client.org