Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
File:                     MIVZam3hzL6mZbRWxNLM0JZJmx8.mft (raw, json)
Hash identifier:          1Xw0dP8L8apcLt0dbvBRe+hpVLLe6GPljcNOgQ9T9JY=
Subject key identifier:   3D:D4:72:71:56:56:E2:5B:FB:1A:E8:5B:DB:B5:95:DE:B7:20:8D:64
Authority key identifier: 30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F
Certificate issuer:       /CN=3085596a6de1ccbea665b456c4d2ccd096499b1f
Certificate serial:       01901DEAAF8374E1A965A985EEBB3380903E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
Manifest number:          05AC
Signing time:             Sat 15 Jun 2024 22:00:37 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:37 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:37 +0000
Files and hashes:         1: MIVZam3hzL6mZbRWxNLM0JZJmx8.crl (hash: Iykh8+Yif+qZr9AiA4nbGH/PZ4kSzmBzcvRcqf7+F8w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:af:83:74:e1:a9:65:a9:85:ee:bb:33:80:90:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3085596a6de1ccbea665b456c4d2ccd096499b1f
        Validity
            Not Before: Jun 15 22:00:37 2024 GMT
            Not After : Jun 16 22:00:37 2024 GMT
        Subject: CN=3dd472715656e25bfb1ae85bdbb595deb7208d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:03:ea:26:49:41:de:60:bb:82:3a:9e:51:77:
                    33:9f:e3:8c:59:fb:09:ef:a2:3b:ec:1a:14:25:5f:
                    55:9a:13:f3:3b:b0:ec:5c:02:d2:3e:d6:c7:e4:63:
                    60:e8:12:58:7b:c4:15:fc:87:a5:78:b1:75:3e:ed:
                    78:c6:d7:62:21:74:fe:25:34:b9:dc:82:3a:31:68:
                    e2:e8:73:79:7c:96:53:38:f3:30:f6:a5:02:61:e5:
                    43:5a:83:9c:df:f3:1c:9d:d9:88:91:25:21:c7:ea:
                    2d:e8:9d:41:8c:88:2a:7e:6a:8b:a6:ab:f7:33:f7:
                    2b:3d:54:31:b8:1c:73:f9:c6:ea:38:8e:19:dd:96:
                    68:5f:a9:05:ae:62:7b:b9:2a:6c:66:35:06:3b:0e:
                    20:9a:1f:b8:3d:99:3b:89:be:79:79:2c:46:20:ed:
                    74:c9:f5:0b:d0:23:60:de:0d:3b:2d:15:a6:e6:f3:
                    31:b4:d8:80:58:61:75:b5:24:4b:1d:82:6d:49:29:
                    93:9a:c1:d0:86:78:dd:a6:bb:7e:e1:8b:7d:1a:41:
                    12:a4:d6:48:95:9a:2a:4e:f0:cd:94:a4:5b:24:9b:
                    31:26:76:53:47:0c:4b:95:cf:af:21:c2:25:4e:89:
                    1c:9a:9e:e2:2f:36:4a:24:e5:a3:38:9b:16:ec:3f:
                    c7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D4:72:71:56:56:E2:5B:FB:1A:E8:5B:DB:B5:95:DE:B7:20:8D:64
            X509v3 Authority Key Identifier:
                keyid:30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:a9:ee:77:bf:73:79:2d:e5:00:55:ee:59:1c:f8:bc:7e:fe:
         28:ed:f5:83:94:f1:c5:0a:83:ed:70:b3:97:0c:59:de:4c:2b:
         23:77:e5:93:de:27:2c:9f:65:f9:ed:5e:57:dd:fc:b5:cb:bc:
         c3:94:15:57:6b:b9:93:bd:72:d7:c0:31:69:c3:33:cc:c2:c3:
         58:4d:59:eb:ce:33:96:b5:e1:55:ea:e9:dd:7d:42:e7:60:43:
         0c:0b:c8:e0:df:fb:1d:2b:cb:a9:9e:b2:f2:69:4f:03:ec:14:
         b4:80:f6:33:e5:5c:0b:60:b7:a7:ad:ae:84:91:ad:77:27:88:
         87:41:7e:0d:49:88:20:80:e3:bb:4e:7d:0e:82:48:ec:4b:e1:
         13:74:15:64:6a:a6:46:9f:e0:2a:a0:a5:ea:40:9e:65:a2:f2:
         88:9b:01:e6:cf:f6:54:d1:dd:73:86:0b:d9:04:ba:e6:85:db:
         10:23:bd:04:76:bb:6d:58:7c:40:6a:07:48:21:48:c2:7f:ea:
         38:50:d2:c8:49:56:93:b2:20:a6:18:78:bc:e5:47:89:9f:91:
         17:90:14:aa:f7:63:b0:5a:0b:ae:aa:47:40:7a:0e:5a:df:a0:
         e8:f7:59:82:59:11:86:a9:74:c9:bc:fa:3f:b5:3e:07:ae:77:
         44:9c:d0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:46:52 2024 by rpki-client on console-fra.rpki-client.org