Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
File:                     eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft (raw, json)
Hash identifier:          pNUnZGl3VCmiVIY1dwmagNbOQYSVIeL5RoPpckyYe+0=
Subject key identifier:   84:A5:F8:AE:34:3C:D7:E3:0D:2D:4E:EC:C2:15:33:CD:0A:69:73:E2
Authority key identifier: 78:CB:20:3B:BC:2D:BD:14:64:B5:42:B7:AA:DC:99:AD:40:3F:51:0F
Certificate issuer:       /CN=78cb203bbc2dbd1464b542b7aadc99ad403f510f
Certificate serial:       01903AE39381563558146726A2466AE4D947
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
Manifest number:          11D2
Signing time:             Fri 21 Jun 2024 13:01:51 +0000
Manifest this update:     Fri 21 Jun 2024 13:01:51 +0000
Manifest next update:     Sat 22 Jun 2024 13:01:51 +0000
Files and hashes:         1: eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl (hash: yximGeE7I0+T7z8K9Uz9rCLtTQTTQ55MfvGPwQlmyxM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:e3:93:81:56:35:58:14:67:26:a2:46:6a:e4:d9:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78cb203bbc2dbd1464b542b7aadc99ad403f510f
        Validity
            Not Before: Jun 21 13:01:51 2024 GMT
            Not After : Jun 22 13:01:51 2024 GMT
        Subject: CN=84a5f8ae343cd7e30d2d4eecc21533cd0a6973e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f3:97:2c:19:ab:49:31:b8:b3:a8:2b:bb:37:
                    9a:f5:ef:88:db:ac:0b:8f:20:22:8d:dc:95:4c:bb:
                    e9:5b:d2:5c:3f:63:d3:1b:6d:cc:f4:20:c2:28:f7:
                    9a:58:22:0c:2c:46:63:29:75:64:bc:9e:1d:19:28:
                    7c:3f:6f:98:7b:1c:f0:89:47:92:b6:17:95:22:ee:
                    f0:f3:b1:a2:a0:61:23:aa:12:d1:ef:7f:ae:c6:48:
                    d0:6f:99:8a:40:31:0e:26:1b:bb:00:f3:6a:5e:7b:
                    8a:5e:2b:36:d5:2e:cb:8e:e2:66:8d:50:64:a2:0b:
                    31:c4:17:82:08:a8:6e:a1:66:cc:f4:b5:17:64:58:
                    81:71:6c:84:8e:45:7e:04:40:f1:17:ff:56:9d:3c:
                    70:4f:81:57:5f:55:04:f7:cd:26:c5:cd:b4:ef:4d:
                    f5:75:0b:b5:45:26:18:90:d7:da:32:38:d4:23:53:
                    77:20:21:47:10:38:e4:b0:7e:2b:5b:74:d0:2c:46:
                    ad:b9:ee:14:fc:dd:ef:ae:d0:59:cc:71:39:32:8a:
                    6a:c4:42:6e:af:1f:15:18:31:53:b5:0b:fd:82:98:
                    d3:06:bf:3a:6d:cd:81:97:45:13:49:6a:af:c6:2f:
                    2e:d9:f0:4a:2b:35:c4:cc:52:b5:79:df:6d:67:7f:
                    f3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A5:F8:AE:34:3C:D7:E3:0D:2D:4E:EC:C2:15:33:CD:0A:69:73:E2
            X509v3 Authority Key Identifier:
                keyid:78:CB:20:3B:BC:2D:BD:14:64:B5:42:B7:AA:DC:99:AD:40:3F:51:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:1e:9d:4e:e7:4b:ba:6c:74:56:b3:8b:4f:14:05:3e:d0:c5:
         15:40:80:18:26:4f:3e:5c:04:18:81:17:23:62:d5:c5:13:78:
         db:49:dd:aa:23:df:66:a9:2b:12:83:c5:a6:35:89:55:11:18:
         6d:7c:17:92:eb:de:c8:b7:f7:2e:f4:0f:df:b8:09:cf:c2:81:
         31:21:05:74:bc:fd:9e:20:c0:d0:ed:31:c9:86:c2:00:30:6b:
         bd:4e:1e:32:7a:15:42:aa:09:bb:63:93:c2:81:4c:03:cb:fb:
         2e:c7:4d:cc:b9:fd:c1:4f:40:2e:1d:ac:1a:99:87:6e:55:96:
         30:c6:63:9f:ff:10:d4:bb:75:06:2d:fe:7f:77:87:0e:4a:d3:
         34:5e:90:d9:81:8c:b1:e6:a1:23:47:97:c4:8b:1f:b7:75:42:
         ec:6f:47:15:2f:fa:b1:03:38:dd:01:6d:da:c6:34:d7:13:12:
         07:cc:9a:5d:21:8d:3e:88:15:34:f2:71:e8:c7:c3:44:83:3a:
         d8:7c:8e:fb:55:32:36:4e:d2:10:a1:53:64:e8:c0:45:40:60:
         8a:6f:ab:72:eb:39:ab:fa:d8:c5:c7:0c:04:f3:e9:72:b3:79:
         68:ca:c6:4f:e8:86:5e:35:06:b7:1d:47:cc:8b:05:0b:e6:da:
         b9:7f:7b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:37:14 2024 by rpki-client on console-fra.rpki-client.org