Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/d6c513-6634-4a13-a51e-6a5ad10c42dc/1/oSTU07DkSZUnHsa18coaXC0asb8.mft
File:                     oSTU07DkSZUnHsa18coaXC0asb8.mft (raw, json)
Hash identifier:          7eRYSOwHPdYWmIkzhOyrI1Tzo2WVk5zf5MXcyTiHCHE=
Subject key identifier:   C8:C9:9E:5E:2F:8B:7C:9B:0A:36:A8:B5:B8:55:1A:49:35:BD:15:2F
Authority key identifier: A1:24:D4:D3:B0:E4:49:95:27:1E:C6:B5:F1:CA:1A:5C:2D:1A:B1:BF
Certificate issuer:       /CN=a124d4d3b0e44995271ec6b5f1ca1a5c2d1ab1bf
Certificate serial:       019037062A6333016E6FE7E6DA0E16E1E5BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oSTU07DkSZUnHsa18coaXC0asb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/d6c513-6634-4a13-a51e-6a5ad10c42dc/1/oSTU07DkSZUnHsa18coaXC0asb8.mft
Manifest number:          07BF
Signing time:             Thu 20 Jun 2024 19:01:09 +0000
Manifest this update:     Thu 20 Jun 2024 19:01:09 +0000
Manifest next update:     Fri 21 Jun 2024 19:01:09 +0000
Files and hashes:         1: oSTU07DkSZUnHsa18coaXC0asb8.crl (hash: ZzBfCOE/et1Ny3uh6G5c2WCrZcGeaTd7zwTONlhZKRE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/d6c513-6634-4a13-a51e-6a5ad10c42dc/1/oSTU07DkSZUnHsa18coaXC0asb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/d6c513-6634-4a13-a51e-6a5ad10c42dc/1/oSTU07DkSZUnHsa18coaXC0asb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oSTU07DkSZUnHsa18coaXC0asb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 19:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:06:2a:63:33:01:6e:6f:e7:e6:da:0e:16:e1:e5:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a124d4d3b0e44995271ec6b5f1ca1a5c2d1ab1bf
        Validity
            Not Before: Jun 20 19:01:09 2024 GMT
            Not After : Jun 21 19:01:09 2024 GMT
        Subject: CN=c8c99e5e2f8b7c9b0a36a8b5b8551a4935bd152f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:61:10:cb:bb:4e:bd:25:e5:7c:12:74:e7:fb:
                    b6:2c:37:09:5b:03:c1:5f:0b:17:af:0c:23:91:9a:
                    83:54:e4:f5:cb:39:68:f9:df:01:0e:97:dd:e8:63:
                    84:16:a5:f6:ef:5c:04:0c:05:bd:94:91:f2:9b:6b:
                    55:fc:db:95:72:80:74:d9:74:30:fa:62:1d:7e:f4:
                    ab:53:5b:2b:c5:73:08:0a:95:e6:55:c1:c9:cc:5b:
                    6f:39:e6:09:56:67:39:2a:cb:9e:33:ba:6d:17:93:
                    92:fb:6d:4d:8a:9f:09:74:bd:db:74:58:b2:2e:4e:
                    12:ac:85:56:b4:ef:a9:b8:d0:c1:2b:4d:9b:f0:f9:
                    fb:9d:3a:42:a3:c4:04:58:e1:37:a0:3c:8f:bd:3e:
                    8d:05:20:6d:41:0c:71:b6:d5:95:df:bb:65:e3:35:
                    82:18:c9:df:2a:58:e1:4c:f8:8c:b8:5d:3a:83:42:
                    7e:3b:4f:f2:85:24:e0:d0:ff:5f:83:87:6b:0f:f4:
                    cc:cb:07:58:97:d8:eb:52:2d:5f:63:d9:8e:93:a5:
                    5f:64:d5:e0:3b:15:93:80:45:6f:b7:8b:e3:ef:fc:
                    c8:49:cb:39:63:3d:1c:23:9d:f2:ee:89:80:19:50:
                    33:72:d1:39:01:46:be:36:bb:4c:07:27:22:4c:7f:
                    55:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C9:9E:5E:2F:8B:7C:9B:0A:36:A8:B5:B8:55:1A:49:35:BD:15:2F
            X509v3 Authority Key Identifier:
                keyid:A1:24:D4:D3:B0:E4:49:95:27:1E:C6:B5:F1:CA:1A:5C:2D:1A:B1:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSTU07DkSZUnHsa18coaXC0asb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d6c513-6634-4a13-a51e-6a5ad10c42dc/1/oSTU07DkSZUnHsa18coaXC0asb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d6c513-6634-4a13-a51e-6a5ad10c42dc/1/oSTU07DkSZUnHsa18coaXC0asb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:0f:41:54:84:9e:20:4e:74:f8:5e:f5:58:51:81:e2:50:cc:
         a4:af:88:7c:d7:c1:0a:c7:d6:06:63:70:f3:04:c7:5f:e0:fb:
         cb:bf:37:ea:cb:55:a5:96:b4:4f:3d:61:51:6e:39:37:5f:30:
         99:a0:30:8b:97:c1:ec:0d:73:5a:27:cf:b6:a7:bd:4f:ad:71:
         dd:38:f4:3b:cd:df:0f:0d:f6:65:6f:57:c7:c8:89:9a:b0:a3:
         51:c0:ac:f9:1b:94:c5:d8:52:8c:de:4d:60:01:9a:10:54:4e:
         f1:0f:16:23:a7:93:02:c2:d1:df:8e:4c:e1:97:39:48:41:4f:
         9b:f6:51:d6:97:e9:b4:84:31:b5:08:68:e0:81:57:ea:13:2a:
         7f:92:6a:05:18:97:31:f0:b2:33:c8:ce:a0:ac:8b:3b:9e:3f:
         52:de:ff:e8:92:79:d4:fe:22:d5:61:0c:ba:10:1c:90:57:40:
         2a:94:98:48:58:a0:e6:d5:cc:59:d4:55:43:01:48:58:fa:c7:
         69:51:3e:04:85:70:0d:9a:13:32:f8:d7:2d:2a:ba:fc:07:bd:
         e0:16:c2:c7:fb:df:7f:82:88:b0:ea:a8:b5:91:50:f8:a9:b4:
         6b:19:91:cb:f1:9e:ed:63:e1:fd:11:d0:f1:4d:05:71:a1:ba:
         19:37:58:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:08:24 2024 by rpki-client on console-fra.rpki-client.org