Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
File:                     j75VTMOkMzzW2uRAdo6cO4M0S44.mft (raw, json)
Hash identifier:          IqPoqY5kfypdlAhG/8XhChJucTDMlXwHvJchCfuwTbA=
Subject key identifier:   2B:44:97:A2:B9:36:B2:11:95:15:4A:8A:B8:26:5F:03:2C:96:BF:A9
Authority key identifier: 8F:BE:55:4C:C3:A4:33:3C:D6:DA:E4:40:76:8E:9C:3B:83:34:4B:8E
Certificate issuer:       /CN=8fbe554cc3a4333cd6dae440768e9c3b83344b8e
Certificate serial:       01901EC6A315E447ABECB44E3B9458CA5B0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
Manifest number:          1194
Signing time:             Sun 16 Jun 2024 02:00:52 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:52 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:52 +0000
Files and hashes:         1: j75VTMOkMzzW2uRAdo6cO4M0S44.crl (hash: 3wFl9qmO7Sv+yEjgpNGYTYWsRJu15IlMNbf5oMfaUDo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:a3:15:e4:47:ab:ec:b4:4e:3b:94:58:ca:5b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fbe554cc3a4333cd6dae440768e9c3b83344b8e
        Validity
            Not Before: Jun 16 02:00:52 2024 GMT
            Not After : Jun 17 02:00:52 2024 GMT
        Subject: CN=2b4497a2b936b21195154a8ab8265f032c96bfa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d8:68:b1:77:c4:11:93:02:1b:0e:43:bc:a6:
                    a1:a3:2b:e4:e9:b1:75:f3:b1:e7:36:fb:5b:78:64:
                    39:65:95:0e:b6:fb:49:cc:75:55:57:25:2e:9c:18:
                    c3:77:8b:86:5e:4c:5d:61:c2:43:22:99:64:6e:42:
                    5f:11:44:49:e7:fc:07:f6:8c:0b:0a:91:e3:4e:f6:
                    3e:29:2e:d9:63:e6:98:cf:4f:65:61:e5:e8:f6:6a:
                    96:aa:95:d8:1e:ae:e7:52:c2:45:9c:8b:9e:e2:00:
                    3d:23:49:e8:68:e9:64:7e:8f:d4:b5:4a:10:37:94:
                    b6:cb:9b:90:3e:88:ed:c6:06:02:21:d8:58:66:3d:
                    81:6d:82:22:5d:6d:96:b6:e3:e8:79:1f:fd:3d:f5:
                    23:22:f5:6a:98:9e:f7:93:3f:3f:38:23:13:24:ea:
                    8e:64:39:37:5f:71:21:0f:3d:4d:88:7e:e7:19:5c:
                    82:11:9c:45:e9:81:6f:b2:2e:2c:2f:b3:de:c1:b6:
                    e0:fb:ca:d5:3f:c0:58:2c:08:6a:be:5c:7e:5f:43:
                    df:64:92:37:88:30:25:19:3d:af:30:c6:d1:e7:48:
                    1c:9a:f4:0d:c2:2b:e1:3d:53:a1:d2:a3:df:65:2c:
                    24:81:1d:05:ae:7f:6b:02:e4:5a:5f:0b:7b:9f:01:
                    24:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:44:97:A2:B9:36:B2:11:95:15:4A:8A:B8:26:5F:03:2C:96:BF:A9
            X509v3 Authority Key Identifier:
                keyid:8F:BE:55:4C:C3:A4:33:3C:D6:DA:E4:40:76:8E:9C:3B:83:34:4B:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:38:67:bb:32:16:e2:fa:93:19:4d:df:dc:e5:d2:db:4b:e2:
         dd:98:2f:fa:d1:2e:2f:cd:81:4b:cf:65:bb:4e:f9:b5:63:9d:
         bc:71:29:5a:3c:22:00:2f:30:b5:d5:7a:ef:82:48:f9:c5:8b:
         7a:6a:47:11:64:37:b7:d4:13:95:2e:b3:81:45:ca:7b:eb:c3:
         ad:af:31:c0:0c:f2:65:51:0e:f0:a5:10:c5:da:e9:06:f8:e8:
         0d:e3:b8:bc:08:a1:e1:38:45:f2:03:8c:c0:3e:14:82:90:bc:
         33:2c:10:9a:3b:05:67:57:1a:66:e3:1d:72:5c:29:aa:11:ac:
         86:2f:72:a9:78:63:41:8b:68:7b:23:ef:35:d4:f2:0e:c1:b4:
         19:9b:6a:cb:70:a0:57:60:3a:33:bb:4d:da:cd:26:bf:60:87:
         a3:78:4d:1c:2d:0a:2a:a3:05:d2:b5:2b:94:0d:89:e6:72:75:
         96:18:df:2d:d7:b0:8b:2b:50:3a:5d:fb:6b:df:d1:b1:22:53:
         5d:e2:20:2e:6a:b1:2e:33:c1:d9:85:2d:cb:aa:91:26:b8:37:
         e1:c5:ac:b6:30:37:7f:9c:3b:59:58:70:ab:94:29:f6:8c:da:
         c7:c5:1c:9b:b8:5e:79:95:7b:0b:36:4c:d7:d0:29:9c:fd:86:
         d7:20:44:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:00:12 2024 by rpki-client on console-ams.rpki-client.org