Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
File:                     ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft (raw, json)
Hash identifier:          O0LYTZTrIeqtmGq3Nl9aOpIzig8w4flEqnGObBoS2dE=
Subject key identifier:   60:8B:E5:22:D6:C0:B6:8F:93:E4:4A:A5:83:5F:72:B8:3B:BE:85:52
Authority key identifier: 12:B3:00:8E:DB:7C:C9:D6:1D:AF:65:F0:02:26:88:AC:73:25:F0:3A
Certificate issuer:       /CN=12b3008edb7cc9d61daf65f0022688ac7325f03a
Certificate serial:       01901DEAEDA4FFE6440DB639B76E087FC085
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
Manifest number:          054B
Signing time:             Sat 15 Jun 2024 22:00:53 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:53 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:53 +0000
Files and hashes:         1: ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl (hash: vrE7Zz2cpA46x84rdh01Vk3jBYIEN9WvZhEYGCow20o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:ed:a4:ff:e6:44:0d:b6:39:b7:6e:08:7f:c0:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b3008edb7cc9d61daf65f0022688ac7325f03a
        Validity
            Not Before: Jun 15 22:00:53 2024 GMT
            Not After : Jun 16 22:00:53 2024 GMT
        Subject: CN=608be522d6c0b68f93e44aa5835f72b83bbe8552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:36:73:12:54:71:08:f4:ae:21:2f:dc:66:ec:
                    4e:93:b9:f5:75:e4:1e:75:2e:4c:e2:86:3a:92:1f:
                    79:a4:bc:a6:c4:72:51:2b:df:03:dd:45:56:03:f3:
                    27:33:56:86:dd:d0:0a:65:e2:d5:c6:94:bb:d8:7a:
                    07:50:63:b2:03:5a:6d:02:23:55:a4:da:98:71:60:
                    75:30:e9:88:a0:fb:06:a8:d2:6d:20:80:62:5a:fe:
                    ff:6e:8c:32:95:d8:7d:40:6f:a4:1c:62:eb:49:49:
                    39:44:b0:aa:bf:97:78:52:9d:7b:f8:48:68:7a:f3:
                    f4:ed:fb:d6:24:9e:3a:26:24:5c:73:f8:d8:95:78:
                    4f:f3:74:60:15:52:87:e3:cb:8c:5d:07:78:53:0c:
                    f4:21:10:8f:ab:c7:2b:af:16:aa:fa:5a:31:62:e3:
                    88:19:67:a8:62:90:b7:9e:22:71:4a:9e:83:29:ec:
                    d5:b4:79:1e:5e:91:39:43:b3:95:a2:6f:af:df:b2:
                    d0:3a:7f:97:8d:7e:5b:2e:c9:b3:f4:91:e3:a1:b0:
                    de:34:1b:c8:43:98:f2:cc:2f:8d:03:52:8d:d4:79:
                    2c:11:75:64:50:da:92:96:5a:aa:11:4c:da:30:45:
                    4e:12:99:62:b3:b4:9d:9c:2c:eb:0e:c2:49:04:4c:
                    41:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:8B:E5:22:D6:C0:B6:8F:93:E4:4A:A5:83:5F:72:B8:3B:BE:85:52
            X509v3 Authority Key Identifier:
                keyid:12:B3:00:8E:DB:7C:C9:D6:1D:AF:65:F0:02:26:88:AC:73:25:F0:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:7b:b8:94:a6:bd:4e:c3:d0:df:23:60:53:c8:23:b3:ac:84:
         68:94:19:15:b0:8d:31:b8:15:28:61:a0:c6:2a:4b:1d:3c:c5:
         b1:65:f2:40:ff:e6:9f:ba:d2:4f:fa:a8:69:7d:c6:e9:04:91:
         d0:35:75:1d:c7:c8:57:ad:c0:a4:8a:ad:56:7b:0a:1b:e6:31:
         82:19:0e:16:99:80:a7:a5:10:57:56:de:20:d6:cd:f5:4e:86:
         d2:27:67:61:2f:44:93:a5:35:53:cf:9c:d6:61:72:6a:e3:a1:
         0f:e9:2d:ba:0e:60:be:fa:bc:35:e0:e8:8a:44:33:dc:14:c9:
         b4:ac:39:7e:9e:1c:b2:3e:80:f9:18:d2:a5:1b:ba:b6:a4:f6:
         e7:2f:93:4e:dc:a5:ec:d4:28:bb:65:d2:38:31:76:9b:e5:05:
         ec:d5:6f:6f:db:99:0c:34:6c:8b:c6:0c:d2:96:81:57:13:d7:
         7d:1d:60:a0:f5:99:25:e4:b8:db:95:bd:ad:b1:3d:b1:ce:d4:
         59:57:6c:b2:ce:b5:dd:af:bb:05:d1:ea:ed:fd:44:1e:14:ad:
         cd:e6:63:9c:57:b2:85:fc:b5:ad:81:ad:07:8d:2b:c1:17:e7:
         c4:20:5e:e0:ef:4f:a7:0b:b4:7d:a3:b8:ec:79:c6:7a:7e:dc:
         75:6c:0b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:48:49 2024 by rpki-client on console-ams.rpki-client.org