Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
File:                     IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft (raw, json)
Hash identifier:          ukguCW8zlJqO4m2/ilC1dizpzBNsVg2xi4RbShWdlXQ=
Subject key identifier:   14:EF:6A:BA:56:F2:A9:C0:28:AA:34:91:76:95:AE:F1:41:2C:D0:82
Authority key identifier: 21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61
Certificate issuer:       /CN=218af26f9a36653f4d996719d4a410fe84af4861
Certificate serial:       01901DEAFE9823B01D28560F976530709E6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
Manifest number:          8A
Signing time:             Sat 15 Jun 2024 22:00:58 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:58 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:58 +0000
Files and hashes:         1: IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl (hash: BcRwEJvAUtAzzuM5odYyG3wyiDWP8gg/Zo6YH9ZFL/0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:fe:98:23:b0:1d:28:56:0f:97:65:30:70:9e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218af26f9a36653f4d996719d4a410fe84af4861
        Validity
            Not Before: Jun 15 22:00:58 2024 GMT
            Not After : Jun 16 22:00:58 2024 GMT
        Subject: CN=14ef6aba56f2a9c028aa34917695aef1412cd082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bc:24:de:1e:e9:1f:8a:79:b3:72:e7:b4:50:
                    a3:ce:f1:47:77:b6:21:ab:47:a1:da:ad:30:dd:ec:
                    8a:d5:7b:c2:9e:28:f5:91:0d:58:1e:2c:a5:df:88:
                    53:ac:44:cb:9d:77:2e:98:dc:18:8b:07:ef:db:c3:
                    e6:9c:07:94:69:7c:f7:92:3f:7a:e7:ce:57:fa:94:
                    2c:58:3c:7b:99:8e:4a:e5:2b:73:33:b5:65:f3:f4:
                    8f:cc:10:54:c3:46:62:1e:93:16:d0:4c:2e:93:19:
                    c7:2e:de:6f:8c:f7:db:68:cd:e1:db:94:ad:ef:55:
                    c7:b6:c7:3f:2a:2a:a4:e4:d7:b9:8b:24:a1:b3:29:
                    be:4d:1b:f4:ca:a2:ce:45:12:13:33:45:b8:b3:85:
                    ba:25:ca:06:ed:5e:fe:2b:05:b4:1e:a5:27:9f:98:
                    35:9d:fd:9b:e5:ba:79:69:53:aa:5e:5c:e4:aa:59:
                    63:0d:68:5c:14:9c:10:58:38:ec:64:db:fc:fd:e6:
                    07:bd:52:90:c5:82:57:82:b5:17:60:f2:e8:bd:30:
                    ff:16:64:c5:8d:11:77:2d:20:14:37:44:e4:cf:67:
                    c6:3e:21:0f:cf:3d:39:e0:91:f1:4c:09:c2:a5:46:
                    c6:4f:52:3f:cf:c1:37:33:70:78:19:33:ae:6e:92:
                    4c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EF:6A:BA:56:F2:A9:C0:28:AA:34:91:76:95:AE:F1:41:2C:D0:82
            X509v3 Authority Key Identifier:
                keyid:21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:45:25:82:31:f3:66:cf:54:de:fc:33:be:1b:fe:b8:35:1a:
         3b:da:5c:92:d6:a3:0f:9d:b8:54:d8:8a:14:99:de:b4:b2:ae:
         7a:67:9d:a6:90:00:86:27:4f:e8:8f:92:f7:4c:6a:d7:cb:80:
         7c:fa:94:57:da:c9:87:43:63:8f:30:41:44:c1:57:ba:23:59:
         d2:29:c3:b6:c1:54:6c:ea:cb:2b:2e:5a:7a:f4:1f:76:32:f4:
         3e:13:0d:51:99:8f:aa:e3:74:67:55:2c:08:c9:18:ee:55:85:
         a2:b7:6e:d6:8a:15:c9:62:af:8d:c3:20:9c:e3:d5:22:6b:97:
         4e:a4:3f:fc:ec:9a:19:11:fd:24:93:9a:3c:28:51:d8:02:2f:
         54:fe:b6:1d:9e:b0:49:00:57:b2:34:6d:e1:bd:28:df:4b:73:
         c5:bd:43:35:21:20:07:e0:0b:45:d7:cf:6a:08:6b:ca:6b:c1:
         8a:4a:e5:67:6e:cc:09:8e:06:bc:75:cf:26:4f:d9:b6:4c:b9:
         ee:7f:09:59:5b:f8:82:04:f2:a0:18:a0:49:3d:a4:33:c2:24:
         2f:3c:aa:51:3d:5f:65:de:87:8c:33:dc:19:d2:2e:fb:d4:48:
         7d:3e:c2:6c:7e:a5:90:55:49:47:16:cd:e5:bf:2f:95:96:21:
         d1:41:11:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:03:21 2024 by rpki-client on console-ams.rpki-client.org