Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e17be9-25b0-4500-9a7c-96a186e24d60/1/8_oS39r89zk5o5gPNSsF1Li6jYw.mft
File:                     8_oS39r89zk5o5gPNSsF1Li6jYw.mft (raw, json)
Hash identifier:          bwX9H79w2/noYfTtVhJyK9dBCPIY0k9e0CwnHT3EdIA=
Subject key identifier:   D7:34:21:67:75:7C:9F:9A:D2:C7:68:2A:26:1A:94:8F:DF:9C:CF:EF
Authority key identifier: F3:FA:12:DF:DA:FC:F7:39:39:A3:98:0F:35:2B:05:D4:B8:BA:8D:8C
Certificate issuer:       /CN=f3fa12dfdafcf73939a3980f352b05d4b8ba8d8c
Certificate serial:       01901F34F60BED066133ABBC909DF01F0A25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8_oS39r89zk5o5gPNSsF1Li6jYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/e17be9-25b0-4500-9a7c-96a186e24d60/1/8_oS39r89zk5o5gPNSsF1Li6jYw.mft
Manifest number:          0627
Signing time:             Sun 16 Jun 2024 04:01:22 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:22 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:22 +0000
Files and hashes:         1: 8_oS39r89zk5o5gPNSsF1Li6jYw.crl (hash: YM45+BzwB7FuSaNyA71VfJqK07Z6IpITPKdNtZ+8Yms=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/e17be9-25b0-4500-9a7c-96a186e24d60/1/8_oS39r89zk5o5gPNSsF1Li6jYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/e17be9-25b0-4500-9a7c-96a186e24d60/1/8_oS39r89zk5o5gPNSsF1Li6jYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8_oS39r89zk5o5gPNSsF1Li6jYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:f6:0b:ed:06:61:33:ab:bc:90:9d:f0:1f:0a:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3fa12dfdafcf73939a3980f352b05d4b8ba8d8c
        Validity
            Not Before: Jun 16 04:01:22 2024 GMT
            Not After : Jun 17 04:01:22 2024 GMT
        Subject: CN=d7342167757c9f9ad2c7682a261a948fdf9ccfef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b5:24:75:60:e4:4a:63:13:c2:57:5b:d7:8e:
                    e3:1b:d1:a5:cb:2c:16:91:2b:da:c4:08:ee:77:ca:
                    98:d2:a2:a6:72:f3:7d:ca:4b:7f:09:3a:e7:5a:e0:
                    42:33:f3:e0:5a:0e:d9:ec:a7:15:a0:2b:95:dd:97:
                    71:23:ec:1a:ea:eb:45:d2:ee:3b:01:76:d8:84:95:
                    bb:d4:eb:dd:26:e6:e0:d6:88:31:e9:c8:7f:c3:a5:
                    1e:7e:65:ae:4a:c7:9f:0f:70:d1:a0:c4:3a:e9:4f:
                    1f:55:77:b4:f1:68:fe:70:4e:c4:9f:7b:39:46:4f:
                    2e:22:41:7e:3f:cd:43:2d:7d:d9:00:62:71:2f:8f:
                    e8:34:98:53:14:31:d3:bc:0b:0c:25:bb:e1:c3:02:
                    51:00:82:2c:07:66:cc:22:19:bd:a4:22:ca:e9:5c:
                    55:6a:48:4e:d3:5b:3e:85:f7:80:3a:11:7c:64:c5:
                    7c:be:06:c9:67:d6:f8:b8:25:79:cd:5b:58:36:55:
                    e3:6d:39:c2:72:56:34:c1:f1:29:ba:84:4a:5b:2d:
                    c0:96:98:6b:0a:8f:ef:82:90:7d:3d:d3:41:74:64:
                    95:c9:a9:84:05:a4:fc:40:3b:29:32:a3:44:98:a5:
                    42:16:57:72:be:1f:50:ae:8c:69:be:46:58:af:5e:
                    9e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:34:21:67:75:7C:9F:9A:D2:C7:68:2A:26:1A:94:8F:DF:9C:CF:EF
            X509v3 Authority Key Identifier:
                keyid:F3:FA:12:DF:DA:FC:F7:39:39:A3:98:0F:35:2B:05:D4:B8:BA:8D:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_oS39r89zk5o5gPNSsF1Li6jYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e17be9-25b0-4500-9a7c-96a186e24d60/1/8_oS39r89zk5o5gPNSsF1Li6jYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e17be9-25b0-4500-9a7c-96a186e24d60/1/8_oS39r89zk5o5gPNSsF1Li6jYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:46:bb:d4:bd:e3:83:1f:4a:b3:0a:7d:3f:f6:fd:17:6f:4c:
         ac:9b:57:9f:81:fe:df:09:e2:61:2f:54:fa:a8:23:6c:ac:1c:
         0b:51:75:30:ce:d9:f2:44:b5:06:03:d5:ba:d2:94:87:ad:a0:
         1d:82:bd:f3:b5:01:02:92:6c:ec:21:eb:c0:e0:ca:9c:32:10:
         8a:6b:51:e9:62:e1:f4:1e:d8:c4:5b:38:e7:89:c4:73:5f:6b:
         bb:a9:c7:31:86:0b:0f:54:80:c3:66:eb:f9:ee:de:19:03:e3:
         09:9a:0b:8f:0a:4f:5a:0b:5b:f7:c8:29:00:10:08:98:db:75:
         ca:a5:89:7c:8c:1e:9e:de:b8:d4:8c:51:8f:c5:ea:89:b3:8e:
         b2:22:a7:82:40:d7:80:96:7b:89:18:56:9c:47:df:01:c2:8f:
         b5:94:7f:2c:66:31:18:03:d1:42:b5:0e:6a:ad:3e:31:8a:2c:
         bb:7c:83:89:67:e5:b7:ac:8f:75:4b:0c:31:a1:43:96:1c:7c:
         3a:cf:2c:81:d2:2b:6e:f0:bb:7a:ab:45:b2:64:a2:28:ef:d7:
         f8:cd:a4:be:f1:7c:51:dc:10:b3:b2:d6:98:7b:aa:aa:54:22:
         9e:8e:5c:ae:37:92:5c:30:f7:54:87:eb:be:b9:fc:94:52:55:
         77:0a:2e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:51:57 2024 by rpki-client on console-fra.rpki-client.org