Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/a7cbaa-bb9d-47f5-922d-f708dad0eeca/1/IYCTB4hvuv261Th2Eu_-dxOHowA.mft
File:                     IYCTB4hvuv261Th2Eu_-dxOHowA.mft (raw, json)
Hash identifier:          w6R7JA52L7dymXyWaH78t5VuoGGe9XVOhXxbL0fHJyA=
Subject key identifier:   66:6B:42:A9:15:30:8C:E0:26:2B:7B:89:3F:A8:56:4C:8F:AD:32:09
Authority key identifier: 21:80:93:07:88:6F:BA:FD:BA:D5:38:76:12:EF:FE:77:13:87:A3:00
Certificate issuer:       /CN=21809307886fbafdbad5387612effe771387a300
Certificate serial:       0190448B4ABDD7AB3F7B192FDDDA81707A8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYCTB4hvuv261Th2Eu_-dxOHowA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/a7cbaa-bb9d-47f5-922d-f708dad0eeca/1/IYCTB4hvuv261Th2Eu_-dxOHowA.mft
Manifest number:          031E
Signing time:             Sun 23 Jun 2024 10:01:37 +0000
Manifest this update:     Sun 23 Jun 2024 10:01:37 +0000
Manifest next update:     Mon 24 Jun 2024 10:01:37 +0000
Files and hashes:         1: IYCTB4hvuv261Th2Eu_-dxOHowA.crl (hash: IBb6jQ1SevT5u0qijooFRNwpZVZ879yJHnwZq0UcxpU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/a7cbaa-bb9d-47f5-922d-f708dad0eeca/1/IYCTB4hvuv261Th2Eu_-dxOHowA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/a7cbaa-bb9d-47f5-922d-f708dad0eeca/1/IYCTB4hvuv261Th2Eu_-dxOHowA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYCTB4hvuv261Th2Eu_-dxOHowA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8b:4a:bd:d7:ab:3f:7b:19:2f:dd:da:81:70:7a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21809307886fbafdbad5387612effe771387a300
        Validity
            Not Before: Jun 23 10:01:37 2024 GMT
            Not After : Jun 24 10:01:37 2024 GMT
        Subject: CN=666b42a915308ce0262b7b893fa8564c8fad3209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:43:fc:7e:e4:61:67:93:7f:2e:39:81:09:6b:
                    e8:87:4d:55:a5:ce:3e:e5:13:a1:8d:4a:af:54:8a:
                    36:a7:56:85:3a:c4:9a:83:d6:0b:dd:fd:ad:d9:0a:
                    93:73:bb:81:63:ec:26:61:81:9d:f5:2d:1a:c6:92:
                    3e:87:13:7f:3f:8c:dc:99:4b:5e:3b:77:ed:6b:c7:
                    2b:ea:e0:51:93:71:e1:3f:4a:72:19:d1:ed:f5:35:
                    18:a9:9d:74:e0:38:e0:35:a1:8a:98:e3:7c:70:5a:
                    5a:b4:b0:55:33:0e:7d:20:94:c8:15:dd:ef:22:48:
                    c4:f5:d1:13:cb:0e:35:17:b8:80:d3:ee:c3:69:83:
                    d7:a0:4a:12:5d:c9:c4:eb:7c:93:c5:bf:25:3d:b3:
                    32:a3:ef:1f:b2:c8:76:88:41:be:27:f9:a9:40:23:
                    97:4a:2b:a1:cb:a8:1c:84:05:91:1f:fe:88:6d:52:
                    6b:5b:b0:b6:0c:1a:4b:66:f6:35:2e:49:23:2b:12:
                    79:90:a8:4b:f7:cf:2a:b6:5e:e2:9f:5d:c6:ee:d8:
                    ad:b2:25:50:e8:f9:db:6a:81:9c:b4:89:ae:66:af:
                    b3:91:68:bf:05:e5:9e:23:b2:d9:bc:d1:a9:47:4e:
                    83:35:48:3d:52:cb:f4:f7:86:18:95:51:f8:00:8b:
                    59:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6B:42:A9:15:30:8C:E0:26:2B:7B:89:3F:A8:56:4C:8F:AD:32:09
            X509v3 Authority Key Identifier:
                keyid:21:80:93:07:88:6F:BA:FD:BA:D5:38:76:12:EF:FE:77:13:87:A3:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYCTB4hvuv261Th2Eu_-dxOHowA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/a7cbaa-bb9d-47f5-922d-f708dad0eeca/1/IYCTB4hvuv261Th2Eu_-dxOHowA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/a7cbaa-bb9d-47f5-922d-f708dad0eeca/1/IYCTB4hvuv261Th2Eu_-dxOHowA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:2c:91:87:dd:2f:2d:65:49:86:a7:23:c4:94:10:01:08:23:
         d1:24:ed:53:76:1b:56:ee:1e:c1:b7:75:69:04:bd:0a:49:57:
         8c:ea:ac:d3:bf:9e:1b:4b:08:fb:eb:40:15:e2:fb:08:7d:19:
         9b:46:d8:49:2f:50:86:c2:b5:77:49:6b:53:63:06:91:d9:f6:
         72:81:86:42:35:93:60:3a:d9:04:f1:8d:1c:6a:49:60:e3:d4:
         f6:85:46:a5:0c:aa:04:48:fb:97:69:6d:af:49:a1:0d:91:18:
         9a:39:85:99:47:54:7c:3d:2f:5c:4d:98:b4:30:a1:5f:d1:a7:
         8c:b6:95:44:9f:91:b3:6d:a6:db:b3:c8:20:33:36:8a:23:bd:
         c8:88:13:c7:77:59:30:85:ff:ca:06:35:23:86:26:37:69:c8:
         26:6d:85:6f:4e:a1:19:fc:8d:6b:ea:25:74:66:94:2f:2c:1f:
         e6:d8:1c:63:c9:1e:0d:b9:78:6c:d3:9e:35:2b:ac:ad:3e:f7:
         0f:6c:02:a6:05:b6:63:32:b0:6d:a8:4a:ab:30:2b:68:c5:07:
         b9:59:ff:75:bd:3f:c9:21:fd:aa:2a:02:db:5b:5e:3c:f4:e6:
         4e:79:c7:9d:d8:4f:c9:e4:57:8a:e2:79:df:09:67:0f:4e:80:
         d3:3d:22:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:52:12 2024 by rpki-client on console-ams.rpki-client.org