Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/77ab56-855e-4a5d-95e6-5961f84a3f36/1/3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.mft
File:                     3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.mft (raw, json)
Hash identifier:          P1Q0NBFH+dxyRU0BF0uSnzJEAbLvfXGO/iYjuuMhM1A=
Subject key identifier:   D0:EF:AD:3F:00:CF:89:07:7D:DF:14:D4:D7:2E:02:AB:44:86:64:56
Authority key identifier: DF:1E:9D:52:74:8B:16:51:75:26:3E:50:D0:10:A6:FB:05:9B:CD:05
Certificate issuer:       /CN=df1e9d52748b165175263e50d010a6fb059bcd05
Certificate serial:       01901D464CAD4E731B0899C6DB0435A3CAA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/77ab56-855e-4a5d-95e6-5961f84a3f36/1/3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.mft
Manifest number:          0BE3
Signing time:             Sat 15 Jun 2024 19:01:04 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:04 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:04 +0000
Files and hashes:         1: 3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.crl (hash: EopthkQsVGjbWrCIcosnlhRuDTn8AYKPUOtN7WcqwMc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/77ab56-855e-4a5d-95e6-5961f84a3f36/1/3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/77ab56-855e-4a5d-95e6-5961f84a3f36/1/3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:4c:ad:4e:73:1b:08:99:c6:db:04:35:a3:ca:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df1e9d52748b165175263e50d010a6fb059bcd05
        Validity
            Not Before: Jun 15 19:01:04 2024 GMT
            Not After : Jun 16 19:01:04 2024 GMT
        Subject: CN=d0efad3f00cf89077ddf14d4d72e02ab44866456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bf:73:25:88:ac:11:fc:22:1c:8c:2b:db:3f:
                    9c:ac:42:42:d4:8c:b2:d2:69:cc:2d:d5:de:66:65:
                    41:d2:75:be:95:c4:d9:f1:0a:7a:88:69:7a:6d:71:
                    eb:93:ae:3d:40:6f:d8:09:4a:d2:f1:59:1e:8e:40:
                    c1:0c:40:2a:41:89:73:e8:36:b3:b6:13:59:dd:a1:
                    b4:a2:c4:7e:d4:c7:9c:60:45:39:37:c1:b7:b6:84:
                    da:23:ea:80:d4:37:02:1b:0b:66:ba:e5:ff:f7:6c:
                    ba:e3:b4:a9:05:12:4d:d1:57:ac:35:e2:80:b3:e1:
                    55:9b:3c:b6:39:09:06:2c:44:86:12:1d:16:37:98:
                    f7:87:50:9e:05:1a:88:1f:9c:b2:15:30:ce:8b:6d:
                    61:6b:f3:e2:48:e6:3a:9f:ce:d9:a6:6f:69:a2:42:
                    d7:93:4e:6f:82:60:20:2b:c5:22:88:ba:13:07:92:
                    9f:93:57:41:c5:eb:e1:03:63:cd:0e:f0:02:02:bd:
                    55:07:d3:74:15:85:df:16:7d:7a:ad:8d:b7:c4:ab:
                    83:05:00:53:7a:c9:20:c6:df:11:91:ab:e1:fb:c6:
                    cc:55:06:87:c2:38:fc:cb:56:a2:91:04:3d:cd:76:
                    a3:87:55:7e:56:60:c7:f4:02:e3:07:42:a6:94:19:
                    ac:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EF:AD:3F:00:CF:89:07:7D:DF:14:D4:D7:2E:02:AB:44:86:64:56
            X509v3 Authority Key Identifier:
                keyid:DF:1E:9D:52:74:8B:16:51:75:26:3E:50:D0:10:A6:FB:05:9B:CD:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/77ab56-855e-4a5d-95e6-5961f84a3f36/1/3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/77ab56-855e-4a5d-95e6-5961f84a3f36/1/3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:5b:4f:d5:22:c8:18:13:e6:ab:41:e5:69:72:d5:36:45:dc:
         88:7a:6a:43:7b:c4:1a:6a:fa:e7:fb:8c:b0:b4:f7:b1:84:1a:
         b0:d8:0b:c3:7b:53:ba:1c:84:fc:e4:38:8b:f5:b6:2a:7a:52:
         c5:02:e7:f7:41:8c:60:9a:32:7c:b6:ba:a9:f0:9e:6a:bf:1b:
         c8:22:c7:98:73:ce:52:81:aa:32:95:06:6c:68:89:3f:04:bb:
         ea:fa:09:9d:b9:42:e1:c2:57:20:c4:12:da:92:89:59:b0:93:
         0b:23:0b:7e:20:98:96:1a:49:16:25:98:68:34:57:d5:e4:6d:
         74:c8:c9:92:c8:56:4b:25:20:d8:b2:1c:5e:37:87:99:89:17:
         e9:43:3f:b9:db:5b:44:96:62:20:8d:cd:d2:98:b8:1e:35:06:
         73:db:39:c2:d9:ca:e1:b9:11:ca:04:f0:2d:2e:55:68:44:e8:
         0b:3a:98:9d:4f:f1:a8:e4:d4:41:d8:06:43:59:64:09:dc:b4:
         7c:60:3d:3d:6b:77:1b:9e:94:ec:32:65:41:6d:e6:eb:89:e6:
         79:7a:f1:8b:e7:3a:60:32:50:ae:f5:b8:44:60:b9:a9:c0:fe:
         bc:72:2b:17:1b:28:19:6e:dc:e0:69:a6:66:6e:b2:55:38:32:
         4d:62:88:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:46:10 2024 by rpki-client on console-fra.rpki-client.org