Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/05e1ac-e703-4f57-a91a-b0feb4f9319a/1/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.mft
File:                     oKZ-BrWQRjXrTRyRw0Eon1mv6qc.mft (raw, json)
Hash identifier:          llQgsR34dsE1/Orl6qU1dP14S8H2qyyUQj3o566fUHk=
Subject key identifier:   4E:97:14:F1:FA:C8:E3:A8:70:46:5F:98:77:9B:AB:B6:9A:D7:97:6C
Authority key identifier: A0:A6:7E:06:B5:90:46:35:EB:4D:1C:91:C3:41:28:9F:59:AF:EA:A7
Certificate issuer:       /CN=a0a67e06b5904635eb4d1c91c341289f59afeaa7
Certificate serial:       01901DEB0D8806230A9BF5B46EC53854C88B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/05e1ac-e703-4f57-a91a-b0feb4f9319a/1/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 22:01:01 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:01 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:01 +0000
Files and hashes:         1: oKZ-BrWQRjXrTRyRw0Eon1mv6qc.crl (hash: +FZVxA/xPghIqCd6UMv8g37ZScsXNhM+S1THlqNGbrE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/05e1ac-e703-4f57-a91a-b0feb4f9319a/1/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/05e1ac-e703-4f57-a91a-b0feb4f9319a/1/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:0d:88:06:23:0a:9b:f5:b4:6e:c5:38:54:c8:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0a67e06b5904635eb4d1c91c341289f59afeaa7
        Validity
            Not Before: Jun 15 22:01:01 2024 GMT
            Not After : Jun 16 22:01:01 2024 GMT
        Subject: CN=4e9714f1fac8e3a870465f98779babb69ad7976c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:52:6f:f6:0b:c2:1d:24:98:18:d6:ef:32:7f:
                    40:a8:b0:a4:3a:4c:1f:5f:5f:a1:98:22:26:8d:32:
                    69:62:b7:a7:29:64:8b:1b:c0:f1:10:69:89:7c:b2:
                    48:fe:5a:f2:0a:ba:75:2e:db:b7:72:af:67:93:ac:
                    0c:0c:df:c7:38:4a:f9:87:df:84:07:45:11:20:0c:
                    00:3a:e1:ad:5e:49:d9:4a:e2:31:de:3c:db:41:bf:
                    c7:d6:11:42:ad:7d:ca:21:91:8d:c0:c3:d0:2e:00:
                    6c:16:5d:28:57:b3:6a:d8:57:1a:89:bc:8e:86:78:
                    26:24:2d:6a:9e:ca:ba:40:48:b2:4f:e1:a7:29:13:
                    6a:ca:8b:01:66:79:f3:07:f6:73:ac:8d:1e:a2:79:
                    75:0b:70:59:87:d2:a6:1b:72:74:55:0a:59:91:f2:
                    72:2e:1b:48:54:c5:d3:64:99:73:ec:d6:f0:5d:4c:
                    7c:8f:8f:5b:9a:fb:e7:e7:fc:03:29:39:e8:42:36:
                    2d:34:7e:db:e2:c0:fc:d9:db:1c:07:80:84:f4:02:
                    4e:5d:66:b7:30:ea:e2:64:b3:66:24:9d:ce:ac:cf:
                    76:16:85:ac:3c:0d:a1:09:91:28:60:eb:28:2c:fe:
                    3e:8a:88:36:52:cf:ae:e6:ad:35:a3:c9:11:69:cc:
                    f1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:97:14:F1:FA:C8:E3:A8:70:46:5F:98:77:9B:AB:B6:9A:D7:97:6C
            X509v3 Authority Key Identifier:
                keyid:A0:A6:7E:06:B5:90:46:35:EB:4D:1C:91:C3:41:28:9F:59:AF:EA:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/05e1ac-e703-4f57-a91a-b0feb4f9319a/1/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/05e1ac-e703-4f57-a91a-b0feb4f9319a/1/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:eb:a9:13:04:4c:94:2c:f2:66:1f:f7:64:2d:ac:07:ee:fa:
         50:03:52:16:77:f8:ef:5e:13:16:96:ff:bf:3f:9d:fc:cb:57:
         09:19:03:50:fb:74:a2:c5:ba:dc:b4:56:a1:da:e7:00:df:ed:
         56:78:38:a9:2b:84:fe:bc:d9:d8:23:5c:f8:2d:d6:9d:93:f1:
         da:f6:63:06:bd:cc:5f:7b:45:a9:40:16:4a:52:b0:92:2c:27:
         e7:1d:c2:a3:62:62:8d:80:35:c3:24:7e:fd:c0:51:25:4e:77:
         41:f0:5b:30:a4:74:ff:7e:5a:da:59:68:1b:4c:c4:61:62:dd:
         66:c7:cb:c1:c1:32:21:88:fd:5b:cd:28:ac:56:69:fd:e3:8c:
         2d:41:f6:9d:ca:bd:df:b6:94:6b:0c:2a:bc:77:6d:ec:98:6e:
         11:84:2a:86:9c:f6:02:9f:4c:b2:15:62:33:4b:9d:13:8c:20:
         35:ee:44:a0:ef:50:cc:85:c9:cf:14:54:7c:27:75:7a:e5:4a:
         78:22:03:3d:35:03:87:96:5d:31:86:b2:77:76:c3:cc:dd:42:
         a4:4a:82:d6:fa:bb:3c:cc:07:37:d8:3b:64:d2:a6:54:fd:d5:
         89:8f:47:38:a6:fa:9a:2e:7a:a4:28:a4:ed:b2:6b:31:e6:39:
         a4:99:e0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:55:13 2024 by rpki-client on console-ams.rpki-client.org