Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/792a7d-1589-4912-a3bb-b79ea2728946/1/foz68AtoPEnYxse-WfhY6_BcjWQ.mft
File:                     foz68AtoPEnYxse-WfhY6_BcjWQ.mft (raw, json)
Hash identifier:          zG7lrRoLfJHws+glWNn2MALHKnfQVJiT2HWwTWEy0Bc=
Subject key identifier:   54:E6:AB:00:3E:07:84:DC:17:62:46:5C:DE:28:AF:9D:23:90:E0:8F
Authority key identifier: 7E:8C:FA:F0:0B:68:3C:49:D8:C6:C7:BE:59:F8:58:EB:F0:5C:8D:64
Certificate issuer:       /CN=7e8cfaf00b683c49d8c6c7be59f858ebf05c8d64
Certificate serial:       019048D5D108A8B6D64192CCE5424E009A96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/foz68AtoPEnYxse-WfhY6_BcjWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/792a7d-1589-4912-a3bb-b79ea2728946/1/foz68AtoPEnYxse-WfhY6_BcjWQ.mft
Manifest number:          086A
Signing time:             Mon 24 Jun 2024 06:01:30 +0000
Manifest this update:     Mon 24 Jun 2024 06:01:30 +0000
Manifest next update:     Tue 25 Jun 2024 06:01:30 +0000
Files and hashes:         1: foz68AtoPEnYxse-WfhY6_BcjWQ.crl (hash: ukiGJ4L6Bzs/5lAGyfNCH/8tiz21SrcpiF9KK/tn8QY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/792a7d-1589-4912-a3bb-b79ea2728946/1/foz68AtoPEnYxse-WfhY6_BcjWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/792a7d-1589-4912-a3bb-b79ea2728946/1/foz68AtoPEnYxse-WfhY6_BcjWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/foz68AtoPEnYxse-WfhY6_BcjWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:d5:d1:08:a8:b6:d6:41:92:cc:e5:42:4e:00:9a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e8cfaf00b683c49d8c6c7be59f858ebf05c8d64
        Validity
            Not Before: Jun 24 06:01:30 2024 GMT
            Not After : Jun 25 06:01:30 2024 GMT
        Subject: CN=54e6ab003e0784dc1762465cde28af9d2390e08f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:82:ce:90:d1:2b:1d:13:60:1e:11:49:51:d9:
                    69:f0:72:7f:9f:3f:1b:4b:0b:bd:54:f0:e8:ce:90:
                    8f:19:60:05:b1:93:b1:c6:70:80:c3:18:92:1c:31:
                    5b:bf:85:be:ab:c2:00:21:f1:7f:89:dc:2a:1e:78:
                    4e:77:46:dd:30:46:b5:f1:1a:29:44:19:a6:e1:f1:
                    3e:b8:23:d3:8d:3a:83:e5:92:e5:3d:f5:9f:9c:2d:
                    5c:bc:1b:94:d5:2b:3f:ad:ec:8c:32:51:0a:8a:b9:
                    db:91:89:ab:13:b2:eb:b6:68:99:17:13:c6:00:53:
                    26:4c:56:48:d1:25:73:e2:18:6a:4c:09:1d:51:c8:
                    7b:9c:36:e8:75:c1:74:37:28:cb:c8:b9:0a:71:8d:
                    33:b0:b4:06:73:43:00:32:0a:e7:7b:06:f7:13:3f:
                    f1:a4:38:ea:38:9b:a1:96:00:92:a1:c4:40:d2:c8:
                    6e:12:07:71:1b:19:cd:9c:93:3d:24:62:46:1a:1d:
                    fc:e1:2c:69:bc:04:d6:53:8e:56:8f:1a:7c:a5:38:
                    f3:9f:d4:3c:ce:ab:cb:87:f9:50:9b:80:5d:92:17:
                    d1:d6:19:79:97:16:3e:39:55:c7:e6:65:38:c2:c6:
                    19:34:62:53:ef:41:65:56:66:ef:60:4b:1a:dd:cf:
                    4d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E6:AB:00:3E:07:84:DC:17:62:46:5C:DE:28:AF:9D:23:90:E0:8F
            X509v3 Authority Key Identifier:
                keyid:7E:8C:FA:F0:0B:68:3C:49:D8:C6:C7:BE:59:F8:58:EB:F0:5C:8D:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/foz68AtoPEnYxse-WfhY6_BcjWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/792a7d-1589-4912-a3bb-b79ea2728946/1/foz68AtoPEnYxse-WfhY6_BcjWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/792a7d-1589-4912-a3bb-b79ea2728946/1/foz68AtoPEnYxse-WfhY6_BcjWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:59:96:e9:ad:c1:60:58:b0:dc:01:77:3c:14:b1:24:4a:2e:
         3d:86:b7:39:8b:f1:49:ba:c3:95:6e:a9:41:b8:7a:8b:61:ed:
         33:1f:ee:c4:1c:08:2a:13:86:b7:ef:ce:b4:f3:fc:53:a2:00:
         8e:23:fe:83:6e:49:eb:10:d1:76:b1:5f:95:10:79:9b:c6:77:
         db:26:dc:9c:91:08:6f:f3:ce:d4:bc:7d:06:78:c1:57:74:60:
         a2:e2:e3:a3:de:fc:62:d8:55:b6:da:30:83:1a:e9:e7:e1:0f:
         e2:32:d1:35:3a:ce:99:ce:d1:4a:a5:b6:11:b5:e1:c2:87:e9:
         30:d1:d8:9d:0a:6d:27:1e:c5:84:6d:8b:f2:75:b9:5f:03:b7:
         26:e9:c6:60:d2:7f:0e:e8:7e:1a:60:a8:75:0f:69:75:33:d9:
         27:cb:e9:3b:7e:cb:80:c0:c6:6c:a2:b6:ad:08:87:52:ca:0d:
         ba:27:fc:9d:28:91:bb:04:54:44:45:bf:db:03:6d:f7:a0:54:
         a1:d1:18:34:5d:73:d1:86:a8:05:63:5a:40:cb:cb:f9:36:f6:
         c8:1f:cf:b8:65:bd:4f:04:77:1e:12:8d:3f:8a:23:52:db:d4:
         7b:be:53:44:9e:df:97:0f:cc:9f:e0:76:da:1a:84:fb:f2:c6:
         ae:83:d2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:22:35 2024 by rpki-client on console-fra.rpki-client.org