Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
File:                     V3l3onVhz5BYpS5GDJSZSAVb3T0.mft (raw, json)
Hash identifier:          P/guN+sIAbk1vPFO+rmNEWHaVUbpm5VP1ceV/JRsY7I=
Subject key identifier:   2B:BD:DC:36:CA:68:31:A4:A4:8A:0F:FF:4F:06:75:36:78:15:C3:D7
Authority key identifier: 57:79:77:A2:75:61:CF:90:58:A5:2E:46:0C:94:99:48:05:5B:DD:3D
Certificate issuer:       /CN=577977a27561cf9058a52e460c949948055bdd3d
Certificate serial:       01901FD988987A77A8791F953A3728D9BC7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
Manifest number:          03D5
Signing time:             Sun 16 Jun 2024 07:01:08 +0000
Manifest this update:     Sun 16 Jun 2024 07:01:08 +0000
Manifest next update:     Mon 17 Jun 2024 07:01:08 +0000
Files and hashes:         1: V3l3onVhz5BYpS5GDJSZSAVb3T0.crl (hash: 7xfXRqmNu7NEN/OnCt8qMhgiRykaMB8Q3auJifj9mDY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:d9:88:98:7a:77:a8:79:1f:95:3a:37:28:d9:bc:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577977a27561cf9058a52e460c949948055bdd3d
        Validity
            Not Before: Jun 16 07:01:08 2024 GMT
            Not After : Jun 17 07:01:08 2024 GMT
        Subject: CN=2bbddc36ca6831a4a48a0fff4f0675367815c3d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b9:ee:69:76:64:35:a5:b3:95:96:ce:4d:8e:
                    20:fa:e8:45:ab:e2:ef:cb:52:c1:c3:5d:20:f5:29:
                    84:5c:c2:8d:f8:18:78:5d:e6:40:d0:22:ad:09:3f:
                    9b:98:ba:24:58:cc:cb:ab:b2:dc:ad:e7:fd:68:00:
                    9f:3c:61:94:10:ed:61:29:52:cb:34:72:3f:64:f9:
                    dc:bf:83:a7:1b:95:19:fe:94:55:e6:7a:79:4f:98:
                    d2:b8:d6:a9:41:57:e4:fa:19:9b:25:e2:02:5f:54:
                    0d:c5:91:b7:4a:7a:4d:ac:46:84:8c:ec:98:59:54:
                    69:6a:03:f6:17:6f:d2:da:cd:8c:93:37:74:26:47:
                    4d:d7:4b:71:37:df:95:4d:b9:72:d1:88:d4:fa:c4:
                    ee:a4:3d:e1:39:cb:ef:d0:c3:3a:88:63:11:cd:6b:
                    9f:34:9c:67:5e:42:aa:c1:c0:b2:81:a7:25:b5:0e:
                    a1:26:9d:f2:ce:c0:54:4b:15:68:d1:aa:0b:cf:03:
                    e0:cc:bb:b1:5d:ea:43:70:8d:3d:91:9e:b6:bb:f8:
                    b3:64:78:33:c0:e8:42:f8:1e:2a:5f:b5:8a:d3:ce:
                    24:63:69:fb:c8:92:fc:2a:ae:8c:f1:a7:8f:c9:86:
                    0a:f4:86:68:af:e6:17:65:d5:51:9d:37:01:f5:89:
                    7e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:BD:DC:36:CA:68:31:A4:A4:8A:0F:FF:4F:06:75:36:78:15:C3:D7
            X509v3 Authority Key Identifier:
                keyid:57:79:77:A2:75:61:CF:90:58:A5:2E:46:0C:94:99:48:05:5B:DD:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:96:14:27:9c:83:44:fd:b0:68:9d:1a:df:7a:46:46:be:27:
         b4:f6:dc:e1:da:5c:e4:56:b4:e6:74:49:05:44:f7:8f:c9:7e:
         c5:06:c9:c4:12:a8:3c:50:33:de:f5:29:f7:f2:39:74:4c:14:
         c6:e7:c9:96:58:e5:a2:ad:29:c2:38:6a:1a:03:a8:e8:49:0f:
         e0:85:4d:e7:f8:16:12:ed:f0:a1:06:24:49:71:c9:4b:9c:a4:
         1a:28:06:3d:f5:2e:57:fa:8f:af:a5:ed:f2:d8:74:19:bc:60:
         a0:e7:48:a6:2f:f6:34:53:c1:53:75:a4:1e:ec:e9:a2:38:dc:
         06:3c:3c:c9:a1:66:6a:d8:e6:cd:c1:95:4e:5e:e3:83:71:f5:
         ec:61:95:50:0a:6b:1f:8d:9c:d5:0a:13:a6:d2:60:77:3d:9d:
         d8:d8:04:ac:3c:b5:bf:1e:de:29:f1:ea:01:3e:35:f2:ed:fa:
         fa:ad:20:10:ee:59:bf:23:12:a4:35:d4:c1:24:6a:2f:8a:d8:
         8e:13:3d:87:0d:08:3e:90:0e:e6:c3:ff:1f:e4:d4:3a:13:3b:
         d4:1b:4c:3f:24:13:68:46:5c:68:72:82:c9:10:b8:94:95:a3:
         7f:72:58:ac:ff:6b:ba:fa:9d:b2:cd:7b:d8:60:2f:c1:c2:f7:
         76:44:37:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 08:12:34 2024 by rpki-client on console-ams.rpki-client.org