Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
File:                     1-cSsxnpLABNVenTs5mQfT5R1_y0.mft (raw, json)
Hash identifier:          jcyIZnICxnnPbFC30X4kRX95b0VtE++jg452nhLsV/8=
Subject key identifier:   D5:E4:F5:72:20:76:09:8F:1E:9E:2B:C7:41:9D:63:AB:A0:4F:B4:6C
Authority key identifier: F9:C4:AC:C6:7A:4B:00:13:55:7A:74:EC:E6:64:1F:4F:94:75:FF:2D
Certificate issuer:       /CN=f9c4acc67a4b0013557a74ece6641f4f9475ff2d
Certificate serial:       01901E58975FA0255E29A79DBD947114BDE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 00:00:40 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:40 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:40 +0000
Files and hashes:         1: 1-cSsxnpLABNVenTs5mQfT5R1_y0.crl (hash: y+f14M5w0MgCx3aa3F8KMUSVd8RFihHrNc5TeoD4jrM=)
                          2: KPqUtW9e4qCBH0gKhDX9Uhwk84k.roa (hash: WI5X4J9CdxeN2W3rKhwlHqAbUJpx2a3wwsmzXXGQl9Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:97:5f:a0:25:5e:29:a7:9d:bd:94:71:14:bd:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c4acc67a4b0013557a74ece6641f4f9475ff2d
        Validity
            Not Before: Jun 16 00:00:40 2024 GMT
            Not After : Jun 17 00:00:40 2024 GMT
        Subject: CN=d5e4f5722076098f1e9e2bc7419d63aba04fb46c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:04:df:a1:e0:4e:ca:0e:33:11:27:3b:ce:62:
                    16:68:73:53:b6:c3:aa:0a:c1:26:f2:66:b3:d4:cb:
                    b8:da:65:7f:e7:d0:5a:88:81:ba:10:28:60:1e:dd:
                    dc:80:5a:3f:9d:f4:ba:98:75:67:c0:5c:45:58:27:
                    7f:c4:46:5a:25:fc:3b:0a:73:e8:4e:8a:95:57:44:
                    b5:c9:c2:6d:41:99:dd:2a:a6:f9:0e:64:da:2f:8d:
                    56:8f:a5:77:42:78:25:89:bc:25:d3:3a:2d:4f:72:
                    54:75:7d:c9:bd:4c:30:ca:f3:df:62:45:40:94:7d:
                    72:af:9c:71:60:64:e1:8f:e4:82:0f:19:0b:94:38:
                    fa:34:a0:fd:12:7a:fa:1b:f2:ce:ec:49:40:01:3b:
                    2c:dc:a3:f4:2c:e4:2e:31:3d:19:ef:ea:61:b9:d9:
                    c5:6f:11:af:27:2c:c6:87:9a:ef:3b:56:df:cf:20:
                    27:dc:c7:ba:dc:11:07:9d:80:1b:7a:59:2a:93:18:
                    ee:a2:8c:70:60:09:83:ce:7f:b1:93:ac:9c:3b:33:
                    44:99:95:55:e0:08:12:ca:0e:2c:2d:46:e8:a0:98:
                    10:f4:69:b3:6d:a7:65:23:b6:ae:f7:48:8a:4f:4c:
                    a3:b6:71:ad:f1:2e:22:f4:85:ab:02:91:6d:ed:37:
                    c6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E4:F5:72:20:76:09:8F:1E:9E:2B:C7:41:9D:63:AB:A0:4F:B4:6C
            X509v3 Authority Key Identifier:
                keyid:F9:C4:AC:C6:7A:4B:00:13:55:7A:74:EC:E6:64:1F:4F:94:75:FF:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:75:81:d8:25:0a:3d:1c:23:2d:f0:9f:73:bd:cc:dc:cc:61:
         01:2f:b7:71:af:90:58:b0:7e:91:f7:f1:85:33:82:87:59:aa:
         9e:0a:8f:8f:74:fa:02:fd:09:e3:88:d2:c1:f1:af:90:7a:d2:
         27:54:da:cb:9b:6e:6d:31:8b:2d:61:b3:38:2c:4d:86:e0:87:
         6e:78:da:d0:c1:96:e7:0a:2a:a9:1d:4b:66:19:f7:fc:40:bb:
         32:c3:b2:15:a3:8b:2e:05:6d:0d:18:ac:10:3a:ef:f0:61:2b:
         5f:65:e2:ad:01:9f:c6:17:a1:68:ff:49:7c:b3:9e:4c:ad:a9:
         9d:13:44:a7:e5:9d:2c:8d:f6:4b:31:2e:03:93:a2:c5:2d:93:
         27:0b:5d:a9:c6:b6:b4:99:39:33:76:3e:91:26:e1:c8:a3:ce:
         50:08:91:ad:17:d6:b2:f3:f7:c9:fd:14:bd:3d:18:40:cb:30:
         05:57:24:c7:d7:13:21:a9:ea:57:ac:9f:83:ac:2f:01:23:58:
         45:6e:a9:3f:00:97:66:7d:4f:47:09:35:94:99:c5:cf:20:1e:
         a2:b4:7f:36:91:3a:3e:7d:c5:58:e5:90:0c:97:f4:43:bf:cf:
         d5:37:8f:f2:aa:4d:ba:57:43:73:3e:84:1b:ef:5c:87:83:b0:
         96:bb:23:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:04:44 2024 by rpki-client on console-ams.rpki-client.org