Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
File:                     V3l3onVhz5BYpS5GDJSZSAVb3T0.mft (raw, json)
Hash identifier:          XsacYKORtVUkR/jdzihNcNnNGKisJKYDockN4eOXbbk=
Subject key identifier:   CB:17:43:29:9A:25:6E:A0:FF:A6:10:33:80:48:35:ED:B0:2B:36:22
Authority key identifier: 57:79:77:A2:75:61:CF:90:58:A5:2E:46:0C:94:99:48:05:5B:DD:3D
Certificate issuer:       /CN=577977a27561cf9058a52e460c949948055bdd3d
Certificate serial:       019040AF01EAF7B6B3E023C943DD812E054D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
Manifest number:          03E6
Signing time:             Sat 22 Jun 2024 16:02:09 +0000
Manifest this update:     Sat 22 Jun 2024 16:02:09 +0000
Manifest next update:     Sun 23 Jun 2024 16:02:09 +0000
Files and hashes:         1: V3l3onVhz5BYpS5GDJSZSAVb3T0.crl (hash: hQP9UmYHajGxF+1HXvq79GUFDNC80VrNYoKI1AuRfkM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:af:01:ea:f7:b6:b3:e0:23:c9:43:dd:81:2e:05:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577977a27561cf9058a52e460c949948055bdd3d
        Validity
            Not Before: Jun 22 16:02:09 2024 GMT
            Not After : Jun 23 16:02:09 2024 GMT
        Subject: CN=cb1743299a256ea0ffa61033804835edb02b3622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1f:f3:b0:66:41:b0:22:41:e9:2b:40:10:e2:
                    ba:fb:83:6a:e0:c1:da:76:1a:7e:ae:01:06:9d:0f:
                    07:6c:61:43:19:aa:00:57:97:f3:59:86:be:d0:5e:
                    0b:3b:30:74:e8:76:73:f1:98:4e:d0:1d:b7:b8:6c:
                    c6:06:61:c2:eb:03:ff:f1:20:0f:cc:56:53:34:7d:
                    04:68:f0:1c:02:26:98:bd:39:6c:96:6d:ac:68:be:
                    bb:34:96:89:c5:72:fd:92:6d:3b:c7:a2:1e:dd:44:
                    e4:e9:bd:20:dc:f0:b7:56:7d:3d:49:fc:1b:19:c1:
                    9e:dc:ff:4c:d5:62:fb:32:68:0f:69:a5:41:4d:56:
                    64:4b:95:7f:27:b8:bb:2c:ce:f8:e8:ca:67:8d:19:
                    0e:35:30:48:95:57:fd:c0:51:86:8a:1d:8a:88:a5:
                    96:a3:76:89:e3:78:46:dc:9b:a1:65:11:d0:83:68:
                    b6:36:d0:4b:00:fe:d7:fc:5e:50:73:c7:4b:ad:ba:
                    6e:62:e6:10:62:d0:f9:db:f0:65:97:3c:3b:b7:2c:
                    4a:16:33:01:09:58:28:90:26:13:37:3b:30:7c:e6:
                    03:b0:05:27:ee:5a:ef:37:b1:b7:fe:99:07:74:5e:
                    12:c1:09:4e:0a:77:d0:c7:59:de:1b:29:4f:62:fa:
                    5c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:17:43:29:9A:25:6E:A0:FF:A6:10:33:80:48:35:ED:B0:2B:36:22
            X509v3 Authority Key Identifier:
                keyid:57:79:77:A2:75:61:CF:90:58:A5:2E:46:0C:94:99:48:05:5B:DD:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ca:05:bd:43:bf:ac:88:68:3d:55:6a:e6:f6:d9:a3:7b:ac:
         b6:42:3c:31:36:6d:fa:1c:37:71:fd:9a:f5:28:91:22:f1:c9:
         7b:84:64:00:e8:73:81:23:5f:5c:14:b0:0f:95:64:1f:62:42:
         e5:39:d2:18:47:a5:70:6f:f3:e4:73:2c:01:7a:4f:f4:72:c3:
         a1:4c:15:e6:11:bb:8d:6b:9d:45:66:8a:f0:50:bb:6e:7b:35:
         df:f1:60:9e:c5:43:42:f2:9a:63:b0:a3:92:b3:c7:88:1d:3e:
         15:2d:1a:76:0c:37:00:cf:81:ad:5c:a1:00:91:ad:7e:72:4f:
         b6:1a:1f:7d:b2:be:13:25:c6:63:ea:ec:7d:37:f0:b8:11:2f:
         e4:1d:1d:38:87:ef:00:c7:1c:b3:63:bd:6c:09:e6:c0:b4:f4:
         21:c3:52:18:f7:ac:46:52:5b:cc:46:3d:04:70:2a:ec:5b:26:
         81:94:92:33:2a:67:c1:a6:51:d5:2f:e8:a5:6e:2f:c7:b0:5a:
         02:b2:32:1d:94:3a:c3:02:ff:60:c2:6d:9b:13:40:91:7a:1d:
         64:a0:12:1e:c0:90:72:c7:ac:71:4d:df:ae:1d:73:7b:2f:b0:
         10:e6:54:0f:ac:d4:d6:d0:0d:53:48:43:2c:ab:c0:e8:52:de:
         c0:16:9a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:47:05 2024 by rpki-client on console-fra.rpki-client.org