Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3aab07-1085-40c3-b67e-81fed3a7e5f1/1/Ib40C2oyCYkZeIM2_OHmiSA_xL4.mft
File:                     Ib40C2oyCYkZeIM2_OHmiSA_xL4.mft (raw, json)
Hash identifier:          hXJLvibPCQ8zX3X8F9Mv9DI5EU3Ki92jvhSq0L+Tf4c=
Subject key identifier:   A2:73:1B:C5:25:6C:52:5B:1C:ED:6B:7D:4C:29:AA:98:FE:2A:61:21
Authority key identifier: 21:BE:34:0B:6A:32:09:89:19:78:83:36:FC:E1:E6:89:20:3F:C4:BE
Certificate issuer:       /CN=21be340b6a32098919788336fce1e689203fc4be
Certificate serial:       01901F34E033B715FF51EE6330926A8F5440
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ib40C2oyCYkZeIM2_OHmiSA_xL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/3aab07-1085-40c3-b67e-81fed3a7e5f1/1/Ib40C2oyCYkZeIM2_OHmiSA_xL4.mft
Manifest number:          06D0
Signing time:             Sun 16 Jun 2024 04:01:17 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:17 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:17 +0000
Files and hashes:         1: Ib40C2oyCYkZeIM2_OHmiSA_xL4.crl (hash: oUua24riW6NmGMRl9ip8xNMlqujJjR91kNITwP8EYDw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/3aab07-1085-40c3-b67e-81fed3a7e5f1/1/Ib40C2oyCYkZeIM2_OHmiSA_xL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/3aab07-1085-40c3-b67e-81fed3a7e5f1/1/Ib40C2oyCYkZeIM2_OHmiSA_xL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ib40C2oyCYkZeIM2_OHmiSA_xL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:e0:33:b7:15:ff:51:ee:63:30:92:6a:8f:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21be340b6a32098919788336fce1e689203fc4be
        Validity
            Not Before: Jun 16 04:01:17 2024 GMT
            Not After : Jun 17 04:01:17 2024 GMT
        Subject: CN=a2731bc5256c525b1ced6b7d4c29aa98fe2a6121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:54:5f:97:a9:e2:dc:17:75:95:cd:11:9b:86:
                    92:fe:3d:9c:f7:b6:17:01:8d:5a:99:a6:97:c9:45:
                    90:ff:5e:15:4b:76:f1:98:8c:62:74:57:13:7c:5f:
                    2e:95:2e:c9:69:ce:9a:c9:5d:5d:70:89:33:02:91:
                    d3:da:4f:56:11:5e:32:5b:dc:ed:73:55:c8:90:0d:
                    43:d4:95:2d:47:ab:3f:3b:7d:73:c9:90:e3:c8:8a:
                    8d:c8:d8:18:c3:8f:2f:64:7e:16:1a:19:e3:c1:fd:
                    fa:b3:9b:74:52:2c:fc:9d:6d:ea:ee:6c:a9:a4:c0:
                    bf:89:47:7f:f1:21:46:07:07:80:0d:45:8d:04:53:
                    28:10:0f:d8:9b:a9:0d:c4:ba:c6:74:f3:67:97:82:
                    94:89:4e:d1:a6:cf:2a:1d:e7:f1:3f:1d:7d:29:b5:
                    06:95:9c:c6:82:29:94:e7:2c:56:8e:16:69:63:6b:
                    7a:18:ce:30:67:d1:64:5d:c9:9f:9c:27:88:f4:e5:
                    fc:08:77:59:99:42:43:20:6b:f2:56:63:6a:ef:01:
                    b0:c2:f3:00:22:af:a3:67:f3:1c:8f:af:17:59:4f:
                    01:45:86:2e:66:51:e3:69:fd:c5:fa:5f:33:5b:93:
                    68:f6:a3:94:54:11:21:03:71:74:7d:3e:81:bc:e1:
                    cb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:73:1B:C5:25:6C:52:5B:1C:ED:6B:7D:4C:29:AA:98:FE:2A:61:21
            X509v3 Authority Key Identifier:
                keyid:21:BE:34:0B:6A:32:09:89:19:78:83:36:FC:E1:E6:89:20:3F:C4:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib40C2oyCYkZeIM2_OHmiSA_xL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3aab07-1085-40c3-b67e-81fed3a7e5f1/1/Ib40C2oyCYkZeIM2_OHmiSA_xL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3aab07-1085-40c3-b67e-81fed3a7e5f1/1/Ib40C2oyCYkZeIM2_OHmiSA_xL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:11:a9:8e:b6:76:20:95:40:1a:a6:31:8b:ba:58:f6:c7:9f:
         69:38:a1:39:a6:b3:ee:03:04:a7:45:3e:0a:1b:d4:57:39:70:
         f0:e7:e2:66:08:be:40:ce:2b:18:78:1c:dd:26:de:93:3b:84:
         29:52:be:6d:49:73:aa:00:7f:22:a0:91:28:44:f4:04:93:0a:
         2a:ef:99:38:4b:cb:67:e9:d6:86:43:1b:99:08:82:f8:7c:d4:
         03:9c:77:ba:9b:ec:f0:b7:f2:bf:d6:ea:79:01:22:0a:1d:82:
         d9:cd:f4:c6:e1:ba:9e:94:83:71:f6:f0:e8:60:be:c5:a2:8c:
         9c:89:33:41:e4:f2:4e:5a:80:92:1e:48:53:96:5d:4b:66:4b:
         cf:6e:8b:98:8e:3b:cd:80:2f:42:0a:5a:d1:21:92:7d:01:a6:
         fb:9f:a1:2c:a7:0d:3d:b6:c9:e1:72:84:da:8a:cc:e9:ce:10:
         c2:74:f7:4c:58:2e:8c:6b:b0:c7:75:41:ff:36:57:5a:88:ad:
         ae:f9:97:c6:d8:6a:8b:e0:54:62:9b:bd:0e:90:2c:ef:dc:f0:
         8b:b4:a8:12:ec:29:55:46:74:9c:00:27:34:03:04:be:3c:09:
         0e:bf:24:0e:1c:1b:4d:17:a9:ae:d8:9b:c0:6e:dd:07:a8:8a:
         5d:f7:29:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:51:08 2024 by rpki-client on console-fra.rpki-client.org