Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
File:                     aZlc4YW2DnhgSd9V8VydLsBdT2s.mft (raw, json)
Hash identifier:          5gRejgeTHjloUkU8NImnA7F/WTrM0565aojo19PA6Ug=
Subject key identifier:   21:23:9B:9D:E6:A0:17:A5:C8:14:CE:87:93:8B:8C:19:43:E6:6A:76
Authority key identifier: 69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B
Certificate issuer:       /CN=69995ce185b60e786049df55f15c9d2ec05d4f6b
Certificate serial:       01901DEB1ED66E74545AE73D21D80DB34FC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 22:01:06 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:06 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:06 +0000
Files and hashes:         1: aZlc4YW2DnhgSd9V8VydLsBdT2s.crl (hash: W1H9LgJId9H7mmrxvyNrTJvNpUa0P0vnkEqxb7qjBUI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:1e:d6:6e:74:54:5a:e7:3d:21:d8:0d:b3:4f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69995ce185b60e786049df55f15c9d2ec05d4f6b
        Validity
            Not Before: Jun 15 22:01:06 2024 GMT
            Not After : Jun 16 22:01:06 2024 GMT
        Subject: CN=21239b9de6a017a5c814ce87938b8c1943e66a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e9:eb:3d:05:2e:95:05:d9:4f:c3:c7:05:36:
                    88:bf:4a:d0:00:b3:4f:18:95:85:ae:8c:0b:1d:dc:
                    21:a3:9f:04:ab:24:e1:50:cc:dc:d6:ad:fe:14:68:
                    a0:34:a4:8a:77:e5:37:d3:2f:22:f2:c5:1f:3c:fd:
                    7b:68:24:bd:00:18:36:94:3e:85:08:26:1a:d3:ac:
                    f7:1a:30:7a:88:ba:25:b4:6d:cc:a5:3f:d1:ab:e3:
                    1c:c3:4e:e1:61:39:62:57:b4:25:b5:0a:17:f9:5e:
                    07:37:7a:10:67:b4:7f:7f:0e:46:b8:a4:34:b8:21:
                    e5:c7:1a:48:73:3f:95:22:cb:d3:14:d7:7f:e8:2f:
                    bd:4e:d6:cc:4a:b3:ce:59:7d:a1:1a:c6:a4:56:f4:
                    fa:32:02:8d:e7:95:5f:fb:fd:27:cd:18:6c:6f:5e:
                    39:31:4e:b8:3f:9b:c1:e0:2f:b3:2f:37:d8:ce:c8:
                    62:da:22:6c:66:d8:94:44:81:26:25:66:06:03:e3:
                    06:f3:74:30:0d:85:f3:dc:b1:95:a6:45:d2:00:2d:
                    bb:56:ea:5e:ca:4a:31:c5:1a:64:68:4b:94:02:eb:
                    b2:18:3a:0b:c7:55:a1:3e:8b:6b:11:19:28:24:70:
                    25:35:e3:28:02:c1:8b:61:0b:f0:a6:d4:bb:17:26:
                    65:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:23:9B:9D:E6:A0:17:A5:C8:14:CE:87:93:8B:8C:19:43:E6:6A:76
            X509v3 Authority Key Identifier:
                keyid:69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:9b:d8:6a:77:3c:c4:5c:49:06:b8:e4:fb:a7:0c:ca:52:2d:
         0c:81:38:f0:6b:71:1f:4b:32:b5:2c:a3:02:83:14:7e:5f:5d:
         3c:2f:1d:65:0c:b3:58:51:bc:ed:11:6c:cb:b8:c1:12:56:d0:
         95:9a:24:2e:a7:ea:9d:17:bb:e5:22:7f:29:60:9c:0d:4b:4f:
         32:4f:91:86:65:79:db:a6:5c:1d:8d:d9:68:72:21:95:31:80:
         d5:a4:7d:6d:35:94:9d:23:92:a5:f9:6a:93:59:b6:d2:f6:c2:
         41:62:35:93:8d:8a:97:42:f8:62:95:65:89:61:58:3b:16:cf:
         1a:3c:45:e3:6f:41:a9:a1:13:2e:15:08:bb:68:67:a4:a7:33:
         76:71:2c:bc:a1:34:ce:cd:32:6d:32:1a:4c:e4:02:a6:a5:42:
         0b:ba:29:be:97:c0:d5:9c:af:59:a5:a0:bc:73:37:7d:af:96:
         ce:2a:40:7c:70:55:61:b2:5b:69:38:46:57:f6:10:46:21:18:
         dd:90:a5:f4:94:69:fb:03:1e:88:41:bb:62:94:95:c8:f8:c4:
         42:63:04:96:47:8f:fe:6f:ac:b6:d4:f4:1a:d6:c2:b6:07:c4:
         ca:d0:91:b8:2d:dd:5f:c5:53:cf:3a:48:5e:b2:f8:1d:81:70:
         6d:f1:26:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:46:04 2024 by rpki-client on console-fra.rpki-client.org