Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
File:                     Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft (raw, json)
Hash identifier:          cEeASMlIgGd/cwXizwROZ9e6XtZpDtApMcnjhXgJ4+8=
Subject key identifier:   DD:D1:7D:80:E9:55:3C:5E:E0:B3:15:9B:2B:4C:18:ED:65:50:7E:58
Authority key identifier: 39:FD:A6:ED:16:1F:82:2B:82:BE:AD:29:EE:10:61:C6:8F:FD:4A:EC
Certificate issuer:       /CN=39fda6ed161f822b82bead29ee1061c68ffd4aec
Certificate serial:       0190452F24124FF315A75CE5EF9246279FEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
Manifest number:          0A87
Signing time:             Sun 23 Jun 2024 13:00:35 +0000
Manifest this update:     Sun 23 Jun 2024 13:00:35 +0000
Manifest next update:     Mon 24 Jun 2024 13:00:35 +0000
Files and hashes:         1: Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl (hash: wc2FaJlBJZBS+Kb94k6vQT/2krPOjzXBId12ZS5+uR4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 13:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:2f:24:12:4f:f3:15:a7:5c:e5:ef:92:46:27:9f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39fda6ed161f822b82bead29ee1061c68ffd4aec
        Validity
            Not Before: Jun 23 13:00:35 2024 GMT
            Not After : Jun 24 13:00:35 2024 GMT
        Subject: CN=ddd17d80e9553c5ee0b3159b2b4c18ed65507e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6a:63:4d:de:6b:b7:b4:8f:9f:6a:8a:2c:7c:
                    dd:b3:31:74:0e:30:c1:e4:5c:ef:08:a0:39:a3:5c:
                    40:38:87:87:28:53:8e:b1:5c:46:ca:c4:dd:96:ee:
                    76:39:47:e5:ca:3a:09:95:d8:36:71:9e:1c:71:f0:
                    27:90:9b:5f:8e:b2:f5:4d:ef:5e:a9:ca:1b:46:ae:
                    73:a1:d6:e1:7a:ec:1d:a1:fc:eb:ae:b9:7b:0d:4c:
                    37:14:93:a5:41:c3:b7:dd:b9:53:81:8c:9d:15:ef:
                    b1:8a:2c:59:94:da:b1:90:6f:8e:0a:39:e1:c4:20:
                    5c:74:8c:96:79:f1:e7:a6:2b:c3:9f:3a:ed:ef:8b:
                    f7:93:1d:8b:82:1d:33:af:a6:01:96:8b:1b:21:aa:
                    aa:9e:a1:d9:75:c2:8e:0a:19:e1:d2:c8:13:7b:4e:
                    a8:1f:7c:d2:dc:3d:e7:dc:4f:ac:a0:be:8b:8d:da:
                    ba:b1:f2:9c:2e:f9:ba:50:3f:28:10:84:4d:88:c9:
                    b1:26:f6:28:75:a7:d0:bc:e9:b9:de:67:a0:b3:11:
                    f3:f2:4c:53:d9:0a:f5:c1:09:f9:64:9a:89:c7:d4:
                    7d:53:1e:8c:78:df:33:53:c9:a0:a8:8b:9a:67:80:
                    79:32:33:1b:57:ed:cc:f4:0a:ff:97:d8:cb:b4:2c:
                    46:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D1:7D:80:E9:55:3C:5E:E0:B3:15:9B:2B:4C:18:ED:65:50:7E:58
            X509v3 Authority Key Identifier:
                keyid:39:FD:A6:ED:16:1F:82:2B:82:BE:AD:29:EE:10:61:C6:8F:FD:4A:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:48:dd:fa:59:e7:52:f2:45:16:3a:f8:19:17:83:99:aa:3d:
         1e:15:ac:6d:08:69:2b:0c:a5:19:ba:8b:28:a5:11:29:0a:42:
         81:96:0b:46:c8:70:be:a6:fa:ec:62:07:42:1a:44:33:5d:61:
         88:b8:a4:0a:35:d8:ed:48:9e:ba:3f:ab:85:38:29:16:3b:65:
         bb:38:92:e1:bf:18:14:7b:89:d7:d5:72:82:77:a9:4d:1b:18:
         8c:5e:0a:56:2f:ca:e6:b9:bc:e6:a7:00:91:1b:e6:e5:37:c8:
         fa:2b:dd:2a:99:3e:ec:1c:af:52:37:72:9b:a8:4a:63:35:d8:
         29:d8:7f:76:a8:35:13:3d:62:ed:2a:37:18:ea:89:3a:15:b8:
         fa:ce:9d:b5:9e:46:9b:1a:56:d4:fb:34:e1:b4:de:fb:63:db:
         d5:12:e5:21:2b:16:25:9a:e6:54:11:e6:b4:93:1e:7f:a6:a5:
         d7:11:77:6c:74:1c:12:14:ef:a9:fe:34:f0:65:7c:a8:b4:40:
         81:35:8f:94:b5:96:5b:50:ca:67:90:ec:ba:70:4c:0d:77:9e:
         eb:74:75:d0:82:d3:43:ff:71:3a:f4:30:e4:20:f3:b9:fb:01:
         3c:63:be:c8:aa:ae:5c:86:6f:cc:7a:39:e4:1f:e0:6a:80:5a:
         90:7c:22:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:59:01 2024 by rpki-client on console-fra.rpki-client.org