Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
File:                     jw6u_3Y07o3-gFSthfihXoR1kRQ.mft (raw, json)
Hash identifier:          kxcEPV542L0c+uhzzGM6ux0FV7WY2yggk0W+YJQAMDU=
Subject key identifier:   20:A5:80:99:DE:A5:D3:90:77:08:C4:E3:5D:32:4B:8D:6F:61:C8:9A
Authority key identifier: 8F:0E:AE:FF:76:34:EE:8D:FE:80:54:AD:85:F8:A1:5E:84:75:91:14
Certificate issuer:       /CN=8f0eaeff7634ee8dfe8054ad85f8a15e84759114
Certificate serial:       01901CA1A79CDE2D22766B2D14A326B46C24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
Manifest number:          FD
Signing time:             Sat 15 Jun 2024 16:01:14 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:14 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:14 +0000
Files and hashes:         1: jw6u_3Y07o3-gFSthfihXoR1kRQ.crl (hash: Ez+2HO6CzdvbrEIInR/fKa6SEYSckTXAtWxIKR1WJjg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:a7:9c:de:2d:22:76:6b:2d:14:a3:26:b4:6c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0eaeff7634ee8dfe8054ad85f8a15e84759114
        Validity
            Not Before: Jun 15 16:01:14 2024 GMT
            Not After : Jun 16 16:01:14 2024 GMT
        Subject: CN=20a58099dea5d3907708c4e35d324b8d6f61c89a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:75:7f:3b:c2:55:4a:c2:5f:74:bd:d6:77:91:
                    f8:a8:aa:23:bc:27:cc:ee:f2:b5:33:4b:c3:b7:aa:
                    e5:b7:1c:25:97:ea:3c:81:e5:db:06:d3:3f:1c:be:
                    d2:7b:84:13:26:f5:ea:5c:fd:19:18:b4:4d:5d:f4:
                    b0:de:45:9d:c9:06:53:2e:cd:37:78:c3:5e:a7:58:
                    73:10:0b:04:c8:9e:8d:75:6e:24:d2:c4:44:81:32:
                    d7:d6:3f:73:6d:a3:5c:38:bc:7f:87:ed:ab:55:a3:
                    16:4b:ff:8c:2e:a1:ff:37:00:2c:53:e3:04:e6:8b:
                    84:47:5f:fd:74:16:3c:93:48:23:6e:52:9d:2f:51:
                    b5:46:83:3b:d0:ba:6c:10:68:30:e5:87:83:85:a2:
                    7a:52:1e:16:d1:83:e1:14:ae:e8:7e:70:42:19:8c:
                    d3:19:2c:77:d7:a4:5a:6a:e1:c0:0f:71:80:d0:1d:
                    e4:49:43:9a:36:ac:e4:18:50:7d:37:86:da:c1:63:
                    77:34:cc:e5:50:fe:9d:dd:8a:ac:f3:4a:18:e0:5b:
                    48:03:4c:12:81:03:0c:8a:c0:96:d3:37:d4:f6:18:
                    da:ff:af:4b:4b:9c:87:63:52:25:2b:b4:81:a0:2a:
                    aa:c4:70:6c:28:b4:da:ae:74:1c:6a:a6:b8:95:c3:
                    21:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A5:80:99:DE:A5:D3:90:77:08:C4:E3:5D:32:4B:8D:6F:61:C8:9A
            X509v3 Authority Key Identifier:
                keyid:8F:0E:AE:FF:76:34:EE:8D:FE:80:54:AD:85:F8:A1:5E:84:75:91:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:80:11:98:6f:05:c6:9a:b4:74:db:26:ba:cc:6b:39:8f:79:
         93:6c:f8:6a:03:3a:ba:52:22:5e:3a:0a:31:24:b2:43:c1:d4:
         40:b1:e3:d1:92:bf:b7:39:82:cf:4e:58:1c:a7:16:b3:e5:c6:
         fb:5e:3c:28:e9:2a:e7:a7:10:0f:94:59:34:4a:7d:36:f9:2b:
         c3:64:69:18:61:42:be:a0:d2:46:5e:05:2e:b2:7b:63:6e:14:
         73:8e:39:d0:41:38:9d:b1:a3:4f:b6:20:21:e4:70:d5:ce:90:
         21:ad:43:6a:15:3b:5c:8c:d3:db:3f:0f:56:c4:de:33:af:79:
         48:67:41:c4:21:74:19:de:4e:5c:dd:31:f6:3d:98:e1:01:db:
         ba:10:a2:ee:72:bd:cb:c9:17:99:84:19:ef:51:3a:db:27:fb:
         a6:fc:3f:d6:f6:80:2f:f2:bb:38:48:ac:35:01:b8:f0:43:65:
         3f:e3:47:12:b1:40:55:3a:65:35:83:41:15:dc:b6:41:9d:fa:
         68:89:08:01:88:7b:25:b8:8c:ea:e0:27:72:e3:ed:6e:77:bd:
         b2:e5:5c:5f:4c:b6:42:b5:af:e7:6a:e8:cc:88:db:a9:53:0e:
         aa:31:03:dd:64:fe:94:0f:3c:92:a0:1d:12:7a:1e:dd:84:bb:
         e1:3b:23:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:47:46 2024 by rpki-client on console-ams.rpki-client.org