Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
File:                     sNcTFlrGKE-0HV38gmV3_B2gtzA.mft (raw, json)
Hash identifier:          LNJPG8USQddYHRcLMpRvOic7PPizgbvemdyjKsJz9dk=
Subject key identifier:   23:9C:D1:7A:66:67:45:E6:39:D6:98:C8:FF:D3:92:9A:0E:66:9A:C9
Authority key identifier: B0:D7:13:16:5A:C6:28:4F:B4:1D:5D:FC:82:65:77:FC:1D:A0:B7:30
Certificate issuer:       /CN=b0d713165ac6284fb41d5dfc826577fc1da0b730
Certificate serial:       01901BFCB1F2D48B35BF5406772F05D9EE9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sNcTFlrGKE-0HV38gmV3_B2gtzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
Manifest number:          0EDB
Signing time:             Sat 15 Jun 2024 13:01:03 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:03 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:03 +0000
Files and hashes:         1: sNcTFlrGKE-0HV38gmV3_B2gtzA.crl (hash: oUcbrI4xAJwaLVjIsfR2DdwcOlSVbYk64ce/9MuysQI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sNcTFlrGKE-0HV38gmV3_B2gtzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:b1:f2:d4:8b:35:bf:54:06:77:2f:05:d9:ee:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0d713165ac6284fb41d5dfc826577fc1da0b730
        Validity
            Not Before: Jun 15 13:01:03 2024 GMT
            Not After : Jun 16 13:01:03 2024 GMT
        Subject: CN=239cd17a666745e639d698c8ffd3929a0e669ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:51:ae:8b:6d:90:13:b5:b6:56:52:72:df:fd:
                    22:8e:04:de:55:e7:c6:83:cc:05:46:dc:c3:0c:9f:
                    47:d9:1e:b4:0f:63:74:64:4d:ac:f0:c5:09:41:f3:
                    a8:0e:74:40:6e:53:47:e2:45:3d:84:da:9b:19:e7:
                    64:f1:77:2e:5d:71:2c:d9:dd:6d:25:49:b6:93:5f:
                    02:ec:c5:50:d8:14:a8:47:a2:2b:9f:86:52:85:5c:
                    bf:9a:f0:a4:3f:09:3d:c6:3a:92:56:4b:35:ff:d0:
                    8b:1c:fb:02:37:b7:7e:bd:51:ae:40:18:bd:d0:18:
                    ab:60:39:0b:ac:9e:8e:2e:a1:75:fb:40:24:7f:c9:
                    96:fa:ba:b0:98:63:a9:2d:16:23:8d:9d:a9:72:cc:
                    f0:61:9e:18:94:c1:e0:c0:6c:1d:7a:a2:46:9b:0f:
                    d4:c1:1d:b3:69:68:e8:30:18:33:a3:f3:d6:59:bf:
                    11:31:c8:cc:be:fa:da:b5:a7:8f:b9:1a:6b:0f:a1:
                    28:fa:c7:8a:a9:93:eb:ce:5f:44:25:13:1e:f0:d7:
                    4f:67:5e:1d:d7:30:9d:55:bf:b1:cb:08:0a:a2:f7:
                    95:b7:72:86:67:4f:dc:5b:cd:5d:58:ef:2e:13:d3:
                    75:5e:e6:d6:b0:5e:c2:07:d0:ec:21:59:40:31:2d:
                    2f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:9C:D1:7A:66:67:45:E6:39:D6:98:C8:FF:D3:92:9A:0E:66:9A:C9
            X509v3 Authority Key Identifier:
                keyid:B0:D7:13:16:5A:C6:28:4F:B4:1D:5D:FC:82:65:77:FC:1D:A0:B7:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNcTFlrGKE-0HV38gmV3_B2gtzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:5c:cc:0e:b6:2f:0e:05:7e:87:f3:11:b1:de:29:f8:dc:f3:
         68:f1:40:c1:2b:6f:9b:da:af:8b:45:b2:af:75:cb:7b:4c:e2:
         56:c8:80:f5:9c:2b:5d:c6:cd:2a:56:d9:e2:65:02:09:03:08:
         ff:b9:3f:6c:40:58:78:8e:bb:eb:71:11:e8:0b:8a:0a:ac:69:
         91:ec:78:71:05:c5:93:25:1d:cf:af:25:3f:f8:43:90:3e:a5:
         4c:cd:a7:f3:24:2f:64:82:c6:f3:00:ae:33:15:97:be:ce:c7:
         ed:f7:25:b5:f7:1f:93:aa:41:51:d0:63:ef:ff:fa:59:76:c9:
         9b:7f:32:e0:07:d6:76:fa:ca:df:6c:c6:40:a6:ee:05:bf:54:
         98:75:22:75:4b:64:17:21:eb:ab:bf:9c:90:9d:22:b7:2b:e5:
         f9:87:48:7d:c5:ac:d0:ee:6c:1f:4f:6e:75:82:41:83:33:79:
         17:0c:ce:28:cb:97:ba:d2:c9:d5:1f:8c:e3:ad:14:90:54:9a:
         ea:50:3d:a7:42:3a:98:96:54:08:f1:00:18:41:4e:3d:e3:29:
         64:c3:f5:f3:ca:85:a0:93:ea:d9:76:0a:87:67:68:1a:55:c0:
         a0:d9:ca:8c:4e:6c:de:a2:03:87:7f:90:4f:d4:13:9a:5b:c2:
         32:cd:e1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:51:07 2024 by rpki-client on console-ams.rpki-client.org