Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/817ecd-ed5d-4ef2-afce-694016809fdc/1/mAIRdoBqZpOzecvaxP8d_MIJbFo.mft
File:                     mAIRdoBqZpOzecvaxP8d_MIJbFo.mft (raw, json)
Hash identifier:          zW0qVEOmFCgWViaywyJ8lgMer5i+Df9fpFNcz9f1vHM=
Subject key identifier:   C8:66:FB:39:20:C7:D6:FE:6E:19:00:D1:67:5E:A2:43:27:B6:BC:CB
Authority key identifier: 98:02:11:76:80:6A:66:93:B3:79:CB:DA:C4:FF:1D:FC:C2:09:6C:5A
Certificate issuer:       /CN=98021176806a6693b379cbdac4ff1dfcc2096c5a
Certificate serial:       01901E58A9AD0F78AE406A3E760B4E377721
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mAIRdoBqZpOzecvaxP8d_MIJbFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/817ecd-ed5d-4ef2-afce-694016809fdc/1/mAIRdoBqZpOzecvaxP8d_MIJbFo.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 00:00:45 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:45 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:45 +0000
Files and hashes:         1: mAIRdoBqZpOzecvaxP8d_MIJbFo.crl (hash: HZxKFdhu+6qVw9ejLf5NdvDEQBd0FRjgW1SU/Y5R9nU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/817ecd-ed5d-4ef2-afce-694016809fdc/1/mAIRdoBqZpOzecvaxP8d_MIJbFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/817ecd-ed5d-4ef2-afce-694016809fdc/1/mAIRdoBqZpOzecvaxP8d_MIJbFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mAIRdoBqZpOzecvaxP8d_MIJbFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:a9:ad:0f:78:ae:40:6a:3e:76:0b:4e:37:77:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98021176806a6693b379cbdac4ff1dfcc2096c5a
        Validity
            Not Before: Jun 16 00:00:45 2024 GMT
            Not After : Jun 17 00:00:45 2024 GMT
        Subject: CN=c866fb3920c7d6fe6e1900d1675ea24327b6bccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:36:ca:c0:93:4e:b5:36:21:a6:d2:29:7e:4d:
                    1e:bd:04:2b:f6:ad:47:0e:f0:74:8b:f5:a0:c2:5a:
                    1c:1b:e6:bb:b8:40:fd:b2:0a:c5:80:97:85:9f:22:
                    9c:73:ec:7f:bb:56:95:46:76:93:17:04:a7:38:b7:
                    8a:1b:bd:b9:3f:dc:b8:a8:af:72:09:c5:0e:74:15:
                    f2:66:e7:53:e5:10:8e:b3:76:68:b9:dd:5c:95:a9:
                    da:bd:19:b8:54:f1:c3:46:03:d0:6f:e7:de:f0:1e:
                    6c:99:be:25:86:5a:50:c4:4c:53:79:eb:95:e0:2c:
                    63:16:89:e0:66:28:b2:fd:e8:5e:66:dd:c4:36:cc:
                    43:70:6d:49:dd:e2:d9:44:d3:43:5d:c9:9b:c6:60:
                    52:a1:bd:0b:fd:cf:18:14:57:bb:bb:00:33:fd:d0:
                    c8:c5:f1:3c:21:fc:7c:f3:52:8a:74:b4:6f:fb:33:
                    9c:77:40:e9:f9:16:e8:69:c9:cf:69:ca:f1:d5:ae:
                    dc:60:b9:b9:0c:3f:a3:b7:1b:00:eb:39:a2:7b:8c:
                    06:69:ed:14:ca:0d:db:7e:9f:37:9c:7a:d2:3c:7a:
                    b2:02:3b:8f:62:6b:c0:59:fb:4f:36:f4:52:01:cd:
                    26:55:a4:44:7d:ab:70:7a:de:ad:cd:20:ce:73:fd:
                    2e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:66:FB:39:20:C7:D6:FE:6E:19:00:D1:67:5E:A2:43:27:B6:BC:CB
            X509v3 Authority Key Identifier:
                keyid:98:02:11:76:80:6A:66:93:B3:79:CB:DA:C4:FF:1D:FC:C2:09:6C:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAIRdoBqZpOzecvaxP8d_MIJbFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/817ecd-ed5d-4ef2-afce-694016809fdc/1/mAIRdoBqZpOzecvaxP8d_MIJbFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/817ecd-ed5d-4ef2-afce-694016809fdc/1/mAIRdoBqZpOzecvaxP8d_MIJbFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:35:73:1d:2b:fe:69:a9:1b:a0:17:c5:f9:18:5a:2a:ae:71:
         76:32:37:1d:05:cc:b7:fa:92:ea:9c:d0:4c:21:8a:5c:df:bf:
         f8:5d:9b:c6:a4:6c:2c:51:be:96:bf:2c:db:4f:55:3d:aa:7d:
         45:83:31:94:db:c0:0b:8d:3d:ee:1f:81:a6:5f:20:e3:d7:11:
         a5:53:13:ae:30:ab:1a:3f:7f:fd:32:9c:96:d8:24:1b:10:7c:
         2b:40:a8:4f:a3:73:6a:d5:d5:c1:78:ea:5e:36:e8:6a:2b:b9:
         06:99:84:8a:3e:81:9a:c0:37:2c:59:a5:6b:38:31:d9:0a:f3:
         92:71:20:2b:92:10:e7:e5:5a:67:11:ac:1e:08:cf:59:ef:b7:
         72:24:64:86:d9:40:aa:04:28:2a:ab:23:60:0b:3d:7b:24:5d:
         ec:a3:59:2d:77:69:df:7d:92:2f:b1:bd:2c:44:fd:42:5c:05:
         e5:dd:cf:75:9c:db:34:30:90:01:b3:b4:d2:1b:00:d6:76:92:
         1e:e2:55:ec:cc:02:48:00:e1:0a:fd:81:f7:45:f9:e4:ad:80:
         22:4b:5a:77:06:6b:f4:cf:91:2e:cc:da:ea:31:ac:fa:20:fb:
         c2:50:b3:8d:08:fa:84:f7:0b:51:32:f3:13:96:56:72:31:62:
         0c:14:b1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:45:20 2024 by rpki-client on console-fra.rpki-client.org