Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/cfb953-bfef-44fe-825a-af73dc0f6f2a/1/jYJ52u2rv5GDr7aOQ_seW7bUM6M.mft
File:                     jYJ52u2rv5GDr7aOQ_seW7bUM6M.mft (raw, json)
Hash identifier:          AJ67trf+uwN401ekt0TAsmbHbHdnOcc8oApNTkyWqgU=
Subject key identifier:   54:2A:23:92:42:CE:1D:AD:D4:B5:D6:1B:10:DD:F4:64:FB:CB:41:EE
Authority key identifier: 8D:82:79:DA:ED:AB:BF:91:83:AF:B6:8E:43:FB:1E:5B:B6:D4:33:A3
Certificate issuer:       /CN=8d8279daedabbf9183afb68e43fb1e5bb6d433a3
Certificate serial:       01901F344532D5659679C3CC1DE9B9A68B48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYJ52u2rv5GDr7aOQ_seW7bUM6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/cfb953-bfef-44fe-825a-af73dc0f6f2a/1/jYJ52u2rv5GDr7aOQ_seW7bUM6M.mft
Manifest number:          EE
Signing time:             Sun 16 Jun 2024 04:00:37 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:37 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:37 +0000
Files and hashes:         1: jYJ52u2rv5GDr7aOQ_seW7bUM6M.crl (hash: Fh422wkzFfsfOrmHzAgnzrP+PRonK/ScG+yyDB5h8/w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/cfb953-bfef-44fe-825a-af73dc0f6f2a/1/jYJ52u2rv5GDr7aOQ_seW7bUM6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/cfb953-bfef-44fe-825a-af73dc0f6f2a/1/jYJ52u2rv5GDr7aOQ_seW7bUM6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYJ52u2rv5GDr7aOQ_seW7bUM6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:45:32:d5:65:96:79:c3:cc:1d:e9:b9:a6:8b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8279daedabbf9183afb68e43fb1e5bb6d433a3
        Validity
            Not Before: Jun 16 04:00:37 2024 GMT
            Not After : Jun 17 04:00:37 2024 GMT
        Subject: CN=542a239242ce1dadd4b5d61b10ddf464fbcb41ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3a:2d:52:b2:20:0d:c7:49:e1:9d:82:f0:bd:
                    85:ab:f2:68:05:49:17:9c:59:c3:64:31:fa:9d:5f:
                    be:73:6f:b9:2d:9f:af:65:67:39:7b:d3:2b:08:3d:
                    0e:85:76:73:26:7d:f8:9a:1c:7e:a3:dc:8f:90:92:
                    ab:4e:b9:00:45:ad:4c:24:5c:95:d8:3a:bf:64:67:
                    f0:10:3d:5d:80:79:f0:05:43:da:26:26:6c:ea:d3:
                    8f:e8:22:03:88:e2:f9:28:ca:d0:42:be:16:ef:50:
                    e1:a1:4d:32:b7:a5:ac:c4:cd:37:c6:9d:24:2d:20:
                    6d:46:30:f7:9e:7c:ca:af:f7:ba:e8:b3:94:dc:07:
                    c9:54:c9:aa:7a:ee:60:5d:80:52:d6:ac:20:3a:1e:
                    19:d0:ba:36:aa:69:7d:1c:ce:a5:db:f1:a7:0f:da:
                    3f:74:4d:a1:e4:93:02:e3:a3:7a:40:56:9d:33:e2:
                    4d:00:74:e4:aa:86:7a:03:36:38:cf:e0:7d:52:c4:
                    3e:d4:e5:90:ca:55:78:db:9c:97:4e:9f:95:7a:ca:
                    45:fb:4d:0e:63:82:21:b1:87:64:1f:b1:bc:bd:ca:
                    f1:e8:5f:d1:4a:c9:9e:4c:f8:7b:85:54:8e:30:e9:
                    d2:46:68:b4:9d:12:b9:8e:bb:4d:92:82:df:47:92:
                    f8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:2A:23:92:42:CE:1D:AD:D4:B5:D6:1B:10:DD:F4:64:FB:CB:41:EE
            X509v3 Authority Key Identifier:
                keyid:8D:82:79:DA:ED:AB:BF:91:83:AF:B6:8E:43:FB:1E:5B:B6:D4:33:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYJ52u2rv5GDr7aOQ_seW7bUM6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cfb953-bfef-44fe-825a-af73dc0f6f2a/1/jYJ52u2rv5GDr7aOQ_seW7bUM6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cfb953-bfef-44fe-825a-af73dc0f6f2a/1/jYJ52u2rv5GDr7aOQ_seW7bUM6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:9f:87:03:92:88:45:7f:c0:e2:d9:a1:b2:c3:dc:76:ee:c2:
         64:58:df:e6:1f:64:9e:12:51:ce:bc:7a:39:40:b8:18:7e:4a:
         d4:fa:bb:66:e9:d7:b8:6c:89:ff:f1:e5:db:14:5c:1c:7e:11:
         2b:4a:fe:b4:46:21:a2:d9:4a:bd:62:64:6c:ad:22:4b:3f:b8:
         18:38:16:89:14:4f:a8:d6:0e:7e:2f:69:96:ba:9a:78:c3:8a:
         b6:21:70:d9:e0:d0:de:bf:ee:e3:f6:a9:37:b4:fd:fb:7e:dc:
         5c:f3:bb:e7:c3:e5:8e:1c:1e:14:d7:16:67:4c:76:72:4e:63:
         4e:12:70:e0:8c:21:cc:da:71:03:45:e0:ad:78:64:55:ec:28:
         74:e7:f6:ae:47:4b:9c:da:1c:cc:81:98:58:4d:36:89:21:0a:
         72:ab:5c:0e:8f:62:07:ea:69:86:ba:ad:8c:6e:8c:b4:4c:77:
         79:09:9f:f5:d2:75:01:c7:f6:c0:12:d1:e7:2b:7c:f4:80:7a:
         74:48:e1:71:e9:45:d3:49:64:a6:f2:ee:4c:ee:89:47:af:22:
         65:0a:9c:de:2b:d5:eb:7c:23:e0:e0:73:f7:03:a9:60:2c:32:
         15:88:37:54:12:da:6b:86:a5:50:b3:9f:6b:91:1a:ac:cb:f1:
         15:29:0e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:51:26 2024 by rpki-client on console-fra.rpki-client.org