Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
File:                     LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft (raw, json)
Hash identifier:          GrZxXxpI31h31OvvBgCOxeFtjOxPAsIAsqacDnKG5XU=
Subject key identifier:   97:34:70:50:14:F6:96:B5:05:61:96:B4:9F:1E:94:E5:0E:6E:83:B2
Authority key identifier: 2E:31:63:12:AD:2B:21:AA:9A:04:81:1F:62:AD:03:6B:F6:88:85:D9
Certificate issuer:       /CN=2e316312ad2b21aa9a04811f62ad036bf68885d9
Certificate serial:       01901BFDD0756DB26E3EFECAC067E93C8F5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
Manifest number:          063E
Signing time:             Sat 15 Jun 2024 13:02:16 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:16 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:16 +0000
Files and hashes:         1: LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl (hash: jGHH7PdGQ0ZTlaRo3A5WhkQnSy6CNCZi2B5201udHIM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:d0:75:6d:b2:6e:3e:fe:ca:c0:67:e9:3c:8f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e316312ad2b21aa9a04811f62ad036bf68885d9
        Validity
            Not Before: Jun 15 13:02:16 2024 GMT
            Not After : Jun 16 13:02:16 2024 GMT
        Subject: CN=9734705014f696b5056196b49f1e94e50e6e83b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:db:07:d8:d1:df:39:4b:2f:73:fc:76:c6:67:
                    3c:82:4c:eb:5e:12:9c:28:40:c6:a6:d0:c4:35:a6:
                    29:a2:f9:de:6e:8d:3c:de:8b:9e:e6:32:f3:81:cf:
                    c8:74:da:8c:df:44:a4:27:1b:b9:79:da:69:9f:92:
                    a7:f8:1a:09:34:1d:d5:8d:f2:c2:9c:34:6a:82:85:
                    64:40:7c:a0:cd:ce:27:b3:aa:f3:7f:92:de:2e:69:
                    ed:1a:78:3f:ba:41:bc:52:01:ee:2d:7c:58:b3:6d:
                    15:15:5d:4b:23:28:41:b2:82:0d:94:14:58:40:18:
                    7b:a6:c6:3c:84:bf:8e:aa:45:e6:07:77:b5:a3:68:
                    2c:1e:13:70:cc:89:d4:e4:38:27:fe:6a:fe:a5:ee:
                    b5:90:a4:3f:dd:25:4f:18:22:21:a6:d8:c0:67:e5:
                    47:1b:3d:a2:6b:26:77:4f:00:13:38:a7:88:55:72:
                    f5:d5:9e:ab:1e:c6:76:0c:de:9b:0f:db:55:cb:1c:
                    30:89:c2:23:fe:29:ee:7b:15:cf:45:51:ed:33:a1:
                    01:f5:c6:8c:2e:b7:70:fc:ca:88:2a:b9:62:37:a2:
                    88:6c:5f:03:bd:4e:52:06:4b:86:68:0e:07:76:56:
                    c6:cc:e4:da:25:08:7a:36:57:a7:e9:71:e5:53:f0:
                    a0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:34:70:50:14:F6:96:B5:05:61:96:B4:9F:1E:94:E5:0E:6E:83:B2
            X509v3 Authority Key Identifier:
                keyid:2E:31:63:12:AD:2B:21:AA:9A:04:81:1F:62:AD:03:6B:F6:88:85:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ff:c2:03:85:55:df:f1:37:a3:ee:fc:76:02:4f:bc:0f:da:
         3c:a7:59:63:f4:c9:c5:f5:b5:3f:8c:67:d0:0f:d9:b6:2e:49:
         e9:07:51:fb:4c:e9:3a:5d:d0:1e:22:3c:72:91:40:f2:76:73:
         15:9f:75:b5:3d:f1:5f:e5:5b:9d:e4:86:3f:04:4c:61:e7:61:
         6f:aa:40:38:ad:4d:cc:1a:12:81:57:22:3e:b5:c0:7c:d0:c9:
         83:3a:be:ee:23:95:4a:12:4e:bf:19:12:8b:33:2a:0f:23:23:
         f3:36:d3:8b:74:26:21:09:d0:3c:67:d3:19:03:08:72:1c:47:
         b8:f0:5d:4a:00:ca:81:f8:8d:95:43:78:eb:99:48:c2:74:cd:
         a3:e3:87:91:2e:56:49:ec:71:7e:ad:c2:96:27:25:2a:fd:c2:
         5b:08:7f:8e:4d:77:28:b1:0d:ea:0f:03:ce:4f:88:a2:53:6b:
         17:cc:72:db:41:3c:58:ea:11:34:86:e5:4f:c1:fd:30:98:bc:
         92:c5:d2:a2:3b:06:ab:a5:74:55:a8:9c:ff:3c:2e:77:06:55:
         2f:d0:80:2a:05:e2:d0:cf:b3:92:2d:af:28:99:df:d3:ee:33:
         0a:ca:c7:97:17:53:03:89:61:37:b5:e1:3b:27:76:5e:2c:37:
         6f:cc:48:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:49:21 2024 by rpki-client on console-ams.rpki-client.org