Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft
File:                     JK_wO1q_sXhyXKbpD149mMumjr8.mft (raw, json)
Hash identifier:          cMnqpk7/Y4Aqm3yf8E8s8A2B6qqpL62TWi4ou755M/4=
Subject key identifier:   99:BE:83:91:18:1B:31:2A:26:34:4E:D0:19:40:69:36:68:A4:7E:44
Authority key identifier: 24:AF:F0:3B:5A:BF:B1:78:72:5C:A6:E9:0F:5E:3D:98:CB:A6:8E:BF
Certificate issuer:       /CN=24aff03b5abfb178725ca6e90f5e3d98cba68ebf
Certificate serial:       01901EFDDBB0F07130D5E93599F4A0379DD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JK_wO1q_sXhyXKbpD149mMumjr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft
Manifest number:          02C9
Signing time:             Sun 16 Jun 2024 03:01:11 +0000
Manifest this update:     Sun 16 Jun 2024 03:01:11 +0000
Manifest next update:     Mon 17 Jun 2024 03:01:11 +0000
Files and hashes:         1: JK_wO1q_sXhyXKbpD149mMumjr8.crl (hash: sTWpuXc89rKOViAUr1YN0zPC3epojPtvDOTTVqVxt20=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JK_wO1q_sXhyXKbpD149mMumjr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:db:b0:f0:71:30:d5:e9:35:99:f4:a0:37:9d:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24aff03b5abfb178725ca6e90f5e3d98cba68ebf
        Validity
            Not Before: Jun 16 03:01:11 2024 GMT
            Not After : Jun 17 03:01:11 2024 GMT
        Subject: CN=99be8391181b312a26344ed01940693668a47e44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:35:8c:08:f8:f9:44:39:58:ce:37:f6:5a:62:
                    8a:32:5f:73:9a:f0:c9:b7:72:50:b5:69:49:d9:32:
                    b0:3d:07:55:88:64:a9:ea:a4:f5:14:55:28:5f:d2:
                    df:24:e7:f4:d4:db:1e:63:83:fa:43:bb:d8:9d:05:
                    71:6a:45:5c:a7:c1:0d:4c:b4:62:05:de:fa:a3:2a:
                    18:a0:1c:2a:1a:ac:b4:60:dc:37:bb:9b:82:25:13:
                    69:fc:c5:a8:83:e9:b5:db:89:11:3e:81:eb:a2:c5:
                    d7:30:10:73:12:60:dc:5a:5c:b8:15:39:a4:84:8c:
                    75:f5:fa:5e:21:36:7a:7e:96:37:5c:92:57:12:63:
                    0f:fe:5d:06:45:e0:4a:80:5b:ec:59:c1:ad:29:56:
                    4c:85:1d:de:c8:39:cd:56:d9:ae:9d:57:b1:6d:4d:
                    27:17:0b:2f:c1:5d:4f:84:22:20:c4:97:2f:b3:18:
                    48:2c:9a:8f:9c:fa:9f:31:e9:43:65:cb:34:fe:4b:
                    c8:a4:68:76:d5:c0:9a:db:98:d1:3a:08:2a:85:58:
                    28:bc:eb:49:57:d9:ce:c7:16:bd:0e:07:52:83:de:
                    b7:41:76:b8:8d:d4:e2:d6:89:a5:96:b6:4d:e2:89:
                    e7:0a:3d:8e:a0:c5:7d:99:58:00:2b:a4:49:6e:ee:
                    7a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BE:83:91:18:1B:31:2A:26:34:4E:D0:19:40:69:36:68:A4:7E:44
            X509v3 Authority Key Identifier:
                keyid:24:AF:F0:3B:5A:BF:B1:78:72:5C:A6:E9:0F:5E:3D:98:CB:A6:8E:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_wO1q_sXhyXKbpD149mMumjr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:22:0f:cd:65:80:fa:fe:12:a1:a8:75:4b:05:83:28:7e:81:
         5b:a7:8d:57:f8:39:b0:1d:92:ce:61:58:b4:85:45:0e:6a:17:
         7b:ce:fb:bb:81:68:78:24:92:27:ec:63:c1:5b:d4:1e:9d:68:
         8a:f7:3e:1d:09:70:7a:cc:c4:19:ed:a1:72:3f:c6:99:58:f6:
         c0:2a:91:4e:c1:81:7b:d0:65:f8:a7:a3:23:00:e6:1b:cf:90:
         5f:2d:21:62:c2:03:8d:f1:ee:33:35:58:4d:8b:ea:e3:24:03:
         2a:74:d1:1e:27:ce:0f:6c:a6:c6:97:17:fc:6f:45:e5:31:98:
         a5:ef:42:88:eb:c3:6a:4e:c3:93:19:5b:8a:d7:a0:21:d4:e5:
         ea:6d:bd:67:93:c7:98:77:aa:7c:d8:55:e1:7b:c0:b3:5d:04:
         76:1f:ed:f4:10:c5:ec:88:9a:93:ac:56:ad:73:e9:e6:f7:d8:
         a9:47:a0:a1:12:a9:84:25:66:d9:57:ce:59:61:f5:41:84:c4:
         ae:4d:ea:5e:4f:6a:27:4e:61:0f:41:f1:c1:c3:59:04:8b:f9:
         e7:b6:4b:20:31:07:7c:24:69:cb:98:d5:ca:e0:07:cd:5a:19:
         be:90:f9:46:a4:00:9a:a0:ad:32:c1:35:4f:4d:fa:35:ff:20:
         16:da:02:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:51:22 2024 by rpki-client on console-fra.rpki-client.org