Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
File:                     8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft (raw, json)
Hash identifier:          4bUP0KSFZYy2nCWtP7ues3/4el/HjpoF2o/4RWWTGPA=
Subject key identifier:   DA:FB:B4:2B:03:3D:A1:F9:F9:1D:6F:8E:54:E9:19:D8:BB:E4:ED:9E
Authority key identifier: F2:BF:FA:27:42:56:32:65:03:70:29:A7:8F:93:17:33:90:53:00:9C
Certificate issuer:       /CN=f2bffa2742563265037029a78f9317339053009c
Certificate serial:       01903DACCC7875785ED96E6279AC696C4927
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
Manifest number:          01B7
Signing time:             Sat 22 Jun 2024 02:00:52 +0000
Manifest this update:     Sat 22 Jun 2024 02:00:52 +0000
Manifest next update:     Sun 23 Jun 2024 02:00:52 +0000
Files and hashes:         1: 8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl (hash: UbfEpxoqdxfbeB2skhUinjktmbs154TnyBbqC2YIPzA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 02:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3d:ac:cc:78:75:78:5e:d9:6e:62:79:ac:69:6c:49:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2bffa2742563265037029a78f9317339053009c
        Validity
            Not Before: Jun 22 02:00:52 2024 GMT
            Not After : Jun 23 02:00:52 2024 GMT
        Subject: CN=dafbb42b033da1f9f91d6f8e54e919d8bbe4ed9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:59:c4:4b:10:a3:cb:ec:4a:cc:33:a3:93:50:
                    d8:cf:3b:a1:96:34:36:50:ec:9a:3b:19:93:dc:f7:
                    c3:98:be:dd:35:ce:01:88:53:87:7a:e2:ed:64:7f:
                    37:24:00:2f:3b:db:cc:97:25:c1:69:73:c1:84:d0:
                    3b:8e:d6:ff:81:24:d1:f8:aa:e7:7b:a3:ee:ea:13:
                    30:2e:90:af:50:d2:32:23:ac:bb:0a:b1:37:82:0d:
                    39:12:24:fc:01:b4:51:5e:57:fd:b2:f2:f8:36:9c:
                    f8:6e:6f:b5:26:30:db:60:40:8b:1a:12:64:90:a0:
                    41:81:66:0d:5c:d3:94:12:04:c3:27:f4:52:6b:bb:
                    82:24:98:95:a2:e6:1b:c7:9d:2b:00:7c:66:db:77:
                    c5:c5:1f:2d:ab:40:cb:a3:7c:aa:7e:f3:86:ad:b6:
                    bb:70:10:c1:59:d1:25:c4:dd:08:92:93:57:91:68:
                    37:3d:5d:6a:b4:2d:23:83:15:77:e1:ec:10:db:fa:
                    b0:0e:e1:81:9c:75:3c:d9:a7:b4:03:90:d1:2e:83:
                    41:12:cf:ff:d7:50:df:73:ff:dd:3c:2f:9e:f8:3e:
                    e6:05:a2:27:4b:ba:6e:2c:9a:11:ea:c6:38:ac:7c:
                    76:7a:00:0d:ee:32:b8:25:2c:59:26:04:4a:9e:d5:
                    12:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FB:B4:2B:03:3D:A1:F9:F9:1D:6F:8E:54:E9:19:D8:BB:E4:ED:9E
            X509v3 Authority Key Identifier:
                keyid:F2:BF:FA:27:42:56:32:65:03:70:29:A7:8F:93:17:33:90:53:00:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:39:24:ac:12:66:52:47:bc:11:1d:a3:88:5d:4f:50:97:8c:
         f7:c7:c3:ff:be:9a:c4:a1:2a:a8:34:1f:e6:4f:60:73:26:ea:
         07:e8:b9:2b:ad:e6:04:4d:d6:d7:c9:13:d4:0f:f0:26:fb:c0:
         d8:e2:63:08:3b:39:9c:79:51:9f:d1:cc:6a:f3:10:25:fc:19:
         92:72:03:62:a7:7a:ca:fb:a3:5a:ec:4b:28:69:4e:ad:a6:08:
         0e:2e:4e:b4:ec:36:ff:73:a3:eb:cc:60:4a:76:d7:4d:70:33:
         02:6a:dc:10:6e:f5:5d:38:55:91:6e:63:a4:29:49:f9:09:43:
         a5:4a:dd:f9:86:98:50:da:fe:cb:37:9f:4e:ad:68:3b:75:b3:
         93:a7:49:39:e1:a7:b0:5d:c5:06:65:2a:af:04:c5:9e:07:ac:
         de:db:64:e0:94:39:77:cd:d4:8c:dc:b2:56:8d:15:91:2e:ae:
         da:68:46:dc:6c:e5:f0:2f:84:f7:e0:d2:9e:51:da:9b:cb:82:
         00:bb:34:ce:e2:5c:46:78:41:e3:ff:d4:b5:23:8d:97:7f:6f:
         7d:d3:54:b9:41:67:9e:ae:f7:d3:ed:0e:5b:5a:42:76:1a:e5:
         70:68:a2:c5:2a:01:16:63:d2:42:11:1e:5a:8f:b9:6f:9f:62:
         a9:ea:3b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 09:51:49 2024 by rpki-client on console-ams.rpki-client.org