Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
File:                     tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft (raw, json)
Hash identifier:          v9kS8OUud7Ae/aaPrOx24czLPU9+PgCN++DS9uDq1fw=
Subject key identifier:   B4:CA:64:C2:8C:C3:AC:5B:F7:DE:8A:C6:A6:22:E3:92:7D:A3:96:8F
Authority key identifier: B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
Certificate issuer:       /CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Certificate serial:       0190370843A1D0C812E33654E3F73183D7F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
Manifest number:          0A6D
Signing time:             Thu 20 Jun 2024 19:03:26 +0000
Manifest this update:     Thu 20 Jun 2024 19:03:26 +0000
Manifest next update:     Fri 21 Jun 2024 19:03:26 +0000
Files and hashes:         1: tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl (hash: omBmWKr1MPdkizKF47o4Ten0obvFeK3VTzTEYUr+1i4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 19:03:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:08:43:a1:d0:c8:12:e3:36:54:e3:f7:31:83:d7:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
        Validity
            Not Before: Jun 20 19:03:26 2024 GMT
            Not After : Jun 21 19:03:26 2024 GMT
        Subject: CN=b4ca64c28cc3ac5bf7de8ac6a622e3927da3968f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ac:c9:ce:18:1a:8c:8f:cd:e7:d5:ef:95:c7:
                    87:bd:13:e3:ca:66:e8:93:2a:86:4d:c5:d1:a4:63:
                    ec:6f:cb:8e:9d:20:b1:e4:04:d4:dc:dd:55:83:34:
                    d1:4d:83:99:72:8d:6e:db:0c:dd:bb:db:7e:1e:59:
                    11:01:13:a1:b5:cb:96:6e:a2:f7:95:f6:5c:ba:4c:
                    a9:12:86:39:76:74:67:5e:61:61:ac:cf:57:c6:2c:
                    44:e2:07:cf:8c:75:b2:eb:86:0c:df:55:d3:02:cd:
                    71:08:8a:d0:78:9f:d6:4b:75:b6:da:0e:ad:b6:b5:
                    27:aa:b6:7f:d7:2b:12:26:a8:13:6e:cc:e9:68:91:
                    39:74:71:77:af:0f:de:6c:15:cd:6f:d4:19:ad:c3:
                    cb:b2:6d:45:76:ff:51:54:c9:28:b5:7a:60:dd:61:
                    86:ed:4b:45:97:cf:d5:f5:4d:63:f5:97:cf:81:3f:
                    77:18:3e:96:85:43:a8:08:40:b7:7a:a3:4a:02:84:
                    01:91:94:1d:a1:dd:44:58:03:8e:9e:59:dd:5d:3c:
                    43:1a:1b:89:28:0c:21:f0:28:e6:ae:53:30:70:17:
                    ad:b7:09:05:68:2d:12:e5:b6:cc:26:0d:58:96:02:
                    b6:ec:52:9c:dc:76:49:1d:07:d8:21:07:57:44:8b:
                    2d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CA:64:C2:8C:C3:AC:5B:F7:DE:8A:C6:A6:22:E3:92:7D:A3:96:8F
            X509v3 Authority Key Identifier:
                keyid:B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:cc:27:0f:03:88:00:58:f3:4b:e5:6d:bb:db:a1:ea:f2:de:
         97:1c:da:eb:36:67:07:12:73:7e:56:15:55:20:2c:a4:6b:85:
         aa:15:23:7f:84:2d:9e:ec:90:73:f1:77:db:b0:94:8f:50:a2:
         76:69:de:96:16:e8:61:f3:0c:03:75:75:87:ef:07:2e:97:52:
         bd:d3:26:66:45:eb:23:b7:7e:06:68:7c:23:72:ae:75:4d:24:
         64:a4:b5:f7:dc:bc:c6:a8:34:e6:2a:31:08:86:4a:08:d1:28:
         7b:cb:0f:7f:a4:d2:3c:04:88:08:46:55:82:ea:43:40:64:99:
         a1:81:13:30:d1:af:18:ae:12:ea:8c:6b:6b:21:80:fa:88:8b:
         49:b8:fc:c6:93:29:ad:23:98:5e:e7:3c:09:b6:30:f1:59:48:
         9a:07:2f:66:4e:f2:e5:e6:f6:42:bf:6d:6d:87:38:47:b4:11:
         7b:6d:a7:90:34:5e:84:a5:a3:73:f1:d6:96:b8:a4:25:a2:37:
         37:50:63:43:c6:2a:10:b0:da:12:bf:10:63:f7:d2:66:69:00:
         2a:4a:e4:e7:0a:91:05:28:69:37:b5:eb:51:9b:3d:d5:1b:63:
         09:f2:d4:4b:82:e8:99:ad:62:71:6c:f4:0f:25:38:7f:d4:08:
         25:d6:39:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:30:07 2024 by rpki-client on console-ams.rpki-client.org