Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
File:                     iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft (raw, json)
Hash identifier:          BjiDEossPRNYDTER1ngxPJQtHPdNx3LnAG33HT4ar5Y=
Subject key identifier:   7E:B4:BA:6F:8E:0F:00:96:4E:04:45:B6:4E:92:3C:DB:BE:B1:C6:71
Authority key identifier: 89:36:DF:4A:C2:F4:67:EA:66:C1:19:7A:86:29:D3:F6:4B:B5:63:F0
Certificate issuer:       /CN=8936df4ac2f467ea66c1197a8629d3f64bb563f0
Certificate serial:       0190448BC33E6F1CDE6539023A3B1E4A84EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
Manifest number:          0E1F
Signing time:             Sun 23 Jun 2024 10:02:08 +0000
Manifest this update:     Sun 23 Jun 2024 10:02:08 +0000
Manifest next update:     Mon 24 Jun 2024 10:02:08 +0000
Files and hashes:         1: iTbfSsL0Z-pmwRl6hinT9ku1Y_A.crl (hash: ssViU68YmyoRSnuaV/EwiGH5vQORgwNgSoQevNIx5WQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8b:c3:3e:6f:1c:de:65:39:02:3a:3b:1e:4a:84:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8936df4ac2f467ea66c1197a8629d3f64bb563f0
        Validity
            Not Before: Jun 23 10:02:08 2024 GMT
            Not After : Jun 24 10:02:08 2024 GMT
        Subject: CN=7eb4ba6f8e0f00964e0445b64e923cdbbeb1c671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:14:86:41:7b:55:58:af:e0:42:a4:0f:82:32:
                    54:4d:04:1c:7d:fe:b2:2f:19:56:dd:58:7a:2e:7a:
                    87:4e:7c:e5:b1:82:8f:84:76:32:fb:1f:d4:0f:98:
                    67:b1:54:38:d0:89:10:32:15:e9:3c:16:1c:06:5a:
                    87:81:fa:72:1c:de:45:b5:30:8f:f5:3b:74:6a:75:
                    5f:e2:c1:fc:c0:2b:ac:99:d0:c1:d9:86:ad:87:90:
                    70:c1:07:be:5e:8f:28:3b:e4:85:39:f3:04:3f:e5:
                    ec:11:b2:04:f0:d9:65:b7:61:b1:7b:0a:b1:58:df:
                    de:68:8d:d0:95:ed:10:03:ec:75:58:79:37:11:03:
                    da:c9:91:e8:e7:69:b9:a2:82:99:1c:7b:8d:9e:e1:
                    da:4c:8d:2f:6d:54:4a:82:b2:1c:68:89:c8:7f:f8:
                    d9:ec:2f:88:e4:59:77:46:f6:62:61:c0:55:3c:3f:
                    09:5e:27:dc:0c:c2:27:f2:5b:af:d3:09:f4:54:55:
                    78:0d:3e:28:1f:50:4d:83:18:18:ef:9b:00:ea:e6:
                    4e:82:74:01:3f:7f:6c:6d:46:18:06:33:94:51:b2:
                    f3:6e:fe:e9:8b:00:92:d7:48:3d:58:7b:a4:e1:ab:
                    3d:3c:6d:24:2c:44:39:07:e1:06:db:d3:35:e7:2a:
                    b4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B4:BA:6F:8E:0F:00:96:4E:04:45:B6:4E:92:3C:DB:BE:B1:C6:71
            X509v3 Authority Key Identifier:
                keyid:89:36:DF:4A:C2:F4:67:EA:66:C1:19:7A:86:29:D3:F6:4B:B5:63:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:8c:07:0e:6e:ca:cf:25:86:28:fb:18:9d:72:96:a6:16:94:
         ec:04:42:4d:8f:60:fc:48:a2:9f:6f:86:23:d1:ed:d8:20:da:
         24:a0:c7:ac:22:6b:c1:04:a0:1f:fa:64:77:34:fd:87:52:d3:
         60:11:8c:08:34:4b:ad:e8:e3:8f:cc:53:a8:9b:ab:32:d5:d2:
         dd:e2:2f:4c:a2:b1:73:82:15:b8:76:50:01:c2:bb:15:d3:95:
         cb:c4:7c:80:c0:e7:67:68:e0:2c:e7:ac:93:d7:75:99:11:d2:
         bb:11:7b:6b:61:62:a8:6e:d8:83:87:7f:75:12:6d:e1:b3:ee:
         33:73:69:8f:02:d7:db:5f:7e:d2:7b:a6:8c:77:12:2f:77:5c:
         c6:9f:25:3d:13:e1:2e:28:30:ab:78:f5:0e:33:2e:93:c7:f5:
         4f:db:8d:a2:c5:06:af:6c:2b:59:3c:f7:fb:1f:88:20:09:5e:
         55:90:b7:08:fc:69:54:5a:9f:7c:84:66:2e:df:0a:ad:39:9a:
         22:06:3a:50:b4:cb:57:d4:88:af:ec:4f:28:91:2c:68:5b:d3:
         30:15:51:e2:c8:36:b0:6c:1f:57:89:b5:74:6f:19:3b:b0:ab:
         5d:78:51:b7:49:3b:58:36:ef:1c:8b:d1:84:7c:67:d8:b2:16:
         6e:24:fb:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBEi8M+bxzeZTkCOjseSoTsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MzZkZjRhYzJmNDY3ZWE2NmMxMTk3YTg2MjlkM2Y2NGJi
NTYzZjAwHhcNMjQwNjIzMTAwMjA4WhcNMjQwNjI0MTAwMjA4WjAzMTEwLwYDVQQD
Eyg3ZWI0YmE2ZjhlMGYwMDk2NGUwNDQ1YjY0ZTkyM2NkYmJlYjFjNjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBSGQXtVWK/gQqQPgjJUTQQcff6y
LxlW3Vh6LnqHTnzlsYKPhHYy+x/UD5hnsVQ40IkQMhXpPBYcBlqHgfpyHN5FtTCP
9Tt0anVf4sH8wCusmdDB2Yath5BwwQe+Xo8oO+SFOfMEP+XsEbIE8Nllt2Gxewqx
WN/eaI3Qle0QA+x1WHk3EQPayZHo52m5ooKZHHuNnuHaTI0vbVRKgrIcaInIf/jZ
7C+I5Fl3RvZiYcBVPD8JXifcDMIn8luv0wn0VFV4DT4oH1BNgxgY75sA6uZOgnQB
P39sbUYYBjOUUbLzbv7piwCS10g9WHuk4as9PG0kLEQ5B+EG29M15yq0SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH60um+ODwCWTgRFtk6SPNu+scZxMB8GA1UdIwQY
MBaAFIk230rC9GfqZsEZeoYp0/ZLtWPwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVRiZlNzTDBaLXBtd1JsNmhpblQ5a3UxWV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi83ODk1ZjgtYWMzMS00Nzk4LTg0MDQt
NGUyNzhkZDQ4YTNmLzEvaVRiZlNzTDBaLXBtd1JsNmhpblQ5a3UxWV9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi83ODk1ZjgtYWMzMS00Nzk4LTg0MDQtNGUyNzhkZDQ4YTNm
LzEvaVRiZlNzTDBaLXBtd1JsNmhpblQ5a3UxWV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVowHDm7K
zyWGKPsYnXKWphaU7ARCTY9g/Eiin2+GI9Ht2CDaJKDHrCJrwQSgH/pkdzT9h1LT
YBGMCDRLrejjj8xTqJurMtXS3eIvTKKxc4IVuHZQAcK7FdOVy8R8gMDnZ2jgLOes
k9d1mRHSuxF7a2FiqG7Yg4d/dRJt4bPuM3NpjwLX219+0numjHcSL3dcxp8lPRPh
Ligwq3j1DjMuk8f1T9uNosUGr2wrWTz3+x+IIAleVZC3CPxpVFqffIRmLt8KrTma
IgY6ULTLV9SIr+xPKJEsaFvTMBVR4sg2sGwfV4m1dG8ZO7CrXXhRt0k7WDbvHIvR
hHxn2LIWbiT7iw==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:42:25 2024 by rpki-client on console-ams.rpki-client.org