Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e17be9-25b0-4500-9a7c-96a186e24d60/1/8_oS39r89zk5o5gPNSsF1Li6jYw.mft
File:                     8_oS39r89zk5o5gPNSsF1Li6jYw.mft (raw, json)
Hash identifier:          IJFh4aIdZDLyTU6rvLnyFZrbAKZKiWGg92qfFYqqnNg=
Subject key identifier:   EE:96:22:CC:B0:8D:E8:63:06:D6:6E:49:A1:3A:F3:FB:84:2C:5F:3C
Authority key identifier: F3:FA:12:DF:DA:FC:F7:39:39:A3:98:0F:35:2B:05:D4:B8:BA:8D:8C
Certificate issuer:       /CN=f3fa12dfdafcf73939a3980f352b05d4b8ba8d8c
Certificate serial:       019041F7A4118D873872163CB1AF881B3180
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8_oS39r89zk5o5gPNSsF1Li6jYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/e17be9-25b0-4500-9a7c-96a186e24d60/1/8_oS39r89zk5o5gPNSsF1Li6jYw.mft
Manifest number:          0639
Signing time:             Sat 22 Jun 2024 22:01:06 +0000
Manifest this update:     Sat 22 Jun 2024 22:01:06 +0000
Manifest next update:     Sun 23 Jun 2024 22:01:06 +0000
Files and hashes:         1: 8_oS39r89zk5o5gPNSsF1Li6jYw.crl (hash: xXFHH5FJ9P7b4he7WbLkwTkLsepROBH+ZdwEgPfPXlo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/e17be9-25b0-4500-9a7c-96a186e24d60/1/8_oS39r89zk5o5gPNSsF1Li6jYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/e17be9-25b0-4500-9a7c-96a186e24d60/1/8_oS39r89zk5o5gPNSsF1Li6jYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8_oS39r89zk5o5gPNSsF1Li6jYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:f7:a4:11:8d:87:38:72:16:3c:b1:af:88:1b:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3fa12dfdafcf73939a3980f352b05d4b8ba8d8c
        Validity
            Not Before: Jun 22 22:01:06 2024 GMT
            Not After : Jun 23 22:01:06 2024 GMT
        Subject: CN=ee9622ccb08de86306d66e49a13af3fb842c5f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8f:9e:67:30:63:01:6d:81:d3:79:ee:e0:b5:
                    13:23:da:69:5d:08:54:07:af:74:ac:be:60:fe:29:
                    c8:75:3e:e0:81:97:81:e0:6a:90:13:a9:7b:cd:45:
                    6e:2d:51:ca:9c:51:de:08:68:8b:08:b0:84:51:c2:
                    b4:31:c3:30:e8:24:af:07:94:c1:4d:92:6b:a2:95:
                    bb:e4:56:1f:67:e0:bc:2d:f3:e1:e6:28:07:2f:bb:
                    1e:bb:8a:5b:fa:31:e7:22:5f:06:d9:10:14:d7:cc:
                    02:08:f4:ef:7d:b3:c7:4f:98:09:b5:de:42:e5:25:
                    74:00:35:31:b5:b0:cf:fe:ca:c9:d9:96:f9:11:51:
                    74:fd:1b:cb:7a:de:cc:62:51:6a:6a:11:4e:cf:e6:
                    f4:e7:6c:c4:bb:36:a9:30:28:98:b1:38:2d:65:5e:
                    29:5d:1d:0c:76:75:e3:7b:32:35:f3:f9:e2:03:4a:
                    c0:4e:dc:55:3a:97:95:bf:87:16:0f:fb:27:e8:38:
                    40:5b:f3:76:2e:41:88:47:30:db:2e:d7:bf:57:31:
                    b7:1a:79:e9:b7:fd:5c:b1:4a:8f:b5:5c:60:04:28:
                    e8:82:8f:db:ea:a2:2a:b9:78:a6:ff:22:bd:d4:bd:
                    6a:2d:ee:b5:fb:c2:1a:64:9b:0d:d6:a0:e7:2e:68:
                    6f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:96:22:CC:B0:8D:E8:63:06:D6:6E:49:A1:3A:F3:FB:84:2C:5F:3C
            X509v3 Authority Key Identifier:
                keyid:F3:FA:12:DF:DA:FC:F7:39:39:A3:98:0F:35:2B:05:D4:B8:BA:8D:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_oS39r89zk5o5gPNSsF1Li6jYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e17be9-25b0-4500-9a7c-96a186e24d60/1/8_oS39r89zk5o5gPNSsF1Li6jYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e17be9-25b0-4500-9a7c-96a186e24d60/1/8_oS39r89zk5o5gPNSsF1Li6jYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:34:30:5c:69:81:be:c1:83:10:46:15:ba:de:bd:54:c2:c7:
         40:94:14:ad:12:d5:fe:4b:f4:13:c5:6f:35:ab:31:16:46:92:
         37:f3:86:8a:b6:6d:15:cc:8d:9d:4f:9e:af:ef:83:3f:b9:06:
         03:66:ec:b1:cc:c0:63:5f:43:d0:31:cd:7b:41:bc:25:08:05:
         47:93:dd:2e:6e:05:07:a5:34:93:9e:53:7b:41:f2:7d:62:4d:
         aa:9d:62:0f:9a:6f:f6:b7:08:c1:8f:f4:2c:7c:11:f8:82:c9:
         96:89:99:4c:5e:6e:bd:5b:ec:6f:c9:c6:a2:f7:39:5c:80:91:
         b6:85:44:8e:99:59:b1:e5:76:aa:5e:34:98:ac:0f:c6:c7:2e:
         d9:ba:e2:d6:5b:36:5c:77:c0:82:9c:55:cd:68:a6:37:91:22:
         63:03:95:3c:a2:22:e2:93:82:51:db:27:15:c6:cf:98:ff:b5:
         b8:1d:2b:b1:2d:94:30:c9:12:f9:9e:c4:e4:88:f8:63:c7:1c:
         72:d4:37:73:02:9c:ab:2e:15:16:08:8f:b7:2a:10:71:38:af:
         09:a5:cc:5c:09:15:b6:0c:e4:84:02:1f:4b:0e:8e:5e:49:4b:
         b9:7d:a9:15:41:e5:34:50:40:a1:e4:dd:cd:47:c8:f7:da:6c:
         01:35:f4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:46:31 2024 by rpki-client on console-fra.rpki-client.org