Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
File:                     xIzPWOSy4trdSoSDPAZ87iuXRek.mft (raw, json)
Hash identifier:          w/veocuT5GOl/E8Pa/RPDdqgAgCdIf8yr5mzCbDXlzs=
Subject key identifier:   0A:AC:1C:28:F0:2C:F1:94:EA:42:C4:9E:DD:CA:80:B7:48:04:70:15
Authority key identifier: C4:8C:CF:58:E4:B2:E2:DA:DD:4A:84:83:3C:06:7C:EE:2B:97:45:E9
Certificate issuer:       /CN=c48ccf58e4b2e2dadd4a84833c067cee2b9745e9
Certificate serial:       01901D45E41AC58C0ADCE4C49B77CDED62BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xIzPWOSy4trdSoSDPAZ87iuXRek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
Manifest number:          03F5
Signing time:             Sat 15 Jun 2024 19:00:37 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:37 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:37 +0000
Files and hashes:         1: xIzPWOSy4trdSoSDPAZ87iuXRek.crl (hash: 3XByWJ8/OYQrAhfUSFTGe5/7sp2/CtLK4wDlfZtKOnY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xIzPWOSy4trdSoSDPAZ87iuXRek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:45:e4:1a:c5:8c:0a:dc:e4:c4:9b:77:cd:ed:62:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c48ccf58e4b2e2dadd4a84833c067cee2b9745e9
        Validity
            Not Before: Jun 15 19:00:37 2024 GMT
            Not After : Jun 16 19:00:37 2024 GMT
        Subject: CN=0aac1c28f02cf194ea42c49eddca80b748047015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d2:7f:b2:b6:44:10:f7:a0:e3:d0:29:27:94:
                    1f:21:e6:a8:43:15:b0:bb:f5:37:49:a9:e1:cf:1f:
                    b9:40:e1:b0:e0:2f:6c:f4:60:ec:75:5a:14:cd:98:
                    59:f4:9b:05:8f:56:44:c0:81:f7:1a:29:9a:5c:24:
                    5e:01:41:4e:00:96:96:38:2e:29:4a:c7:d8:46:7a:
                    73:f5:0d:c4:b0:5d:6d:ba:f4:66:a5:c3:a8:34:fe:
                    f5:bf:bc:bd:e0:0a:43:b4:4a:94:0d:be:38:62:d4:
                    78:41:8f:8d:82:19:a6:0b:5f:a2:c8:1c:4a:92:3e:
                    71:a7:1d:5d:6d:90:f8:77:c4:4b:a0:b1:39:db:5b:
                    01:27:1a:cb:a5:bd:a7:93:06:ae:28:81:a1:4e:ad:
                    97:a1:71:19:83:8b:46:3f:ed:90:59:76:31:e4:4e:
                    79:9b:b0:49:3a:a0:bb:64:73:60:f9:92:5a:81:8a:
                    0e:10:04:17:92:b4:a7:c7:44:f2:6a:59:77:fd:f3:
                    ca:30:b3:f0:4f:f8:dd:87:2c:7d:90:10:08:eb:3e:
                    94:5a:44:28:d3:3d:02:36:5a:16:bf:01:3d:ae:77:
                    fd:32:8e:d5:42:59:8d:48:9f:50:69:0b:23:02:f5:
                    89:b9:35:a1:ae:59:58:1a:5b:cb:20:89:06:66:5e:
                    a7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AC:1C:28:F0:2C:F1:94:EA:42:C4:9E:DD:CA:80:B7:48:04:70:15
            X509v3 Authority Key Identifier:
                keyid:C4:8C:CF:58:E4:B2:E2:DA:DD:4A:84:83:3C:06:7C:EE:2B:97:45:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xIzPWOSy4trdSoSDPAZ87iuXRek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:8c:b9:e2:9d:8b:da:cf:fd:db:c9:87:98:65:94:7f:a2:22:
         89:06:7d:20:4c:0e:11:3e:d7:44:80:0b:72:aa:69:4b:c7:de:
         96:3f:15:9b:e9:a9:95:7f:61:02:bf:08:80:27:6e:61:13:67:
         bc:52:00:7d:cb:e7:d3:15:db:78:27:76:6f:06:0a:6b:a0:cb:
         ec:08:f7:67:36:30:e6:50:d8:c5:79:e7:8d:c2:b3:ba:19:85:
         9d:ce:42:8d:d2:5e:24:50:9a:24:50:76:36:ed:3d:34:ab:0e:
         ba:99:16:31:df:e4:f6:f0:1c:8d:c5:de:b4:7b:7a:aa:b8:1d:
         aa:55:2f:fd:6f:d9:3b:a5:75:a5:9a:43:3d:b7:49:d6:8a:ee:
         91:9e:89:74:d2:c1:89:be:1d:4f:d8:aa:6e:6b:67:f5:69:a5:
         b9:7b:e8:c1:88:fe:da:b2:b5:f0:30:f6:ec:3f:c6:25:56:e4:
         a0:ac:c5:ae:3e:6a:e0:cf:f5:8e:62:e4:4e:72:4b:a9:11:5f:
         e8:7c:bb:6b:b2:70:ef:29:dc:77:bb:cf:5a:77:c6:d7:b6:55:
         f3:88:fd:08:19:87:74:28:f8:fe:74:62:9b:31:70:e5:78:f3:
         d7:f0:ba:08:51:8a:c1:1f:f4:c6:07:27:cd:fc:9b:2e:90:90:
         0f:98:ed:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:06:46 2024 by rpki-client on console-ams.rpki-client.org