Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
File:                     G-u7vrbpIjF2ylod8UmJhgF-jig.mft (raw, json)
Hash identifier:          ANtLiZ6M/BRS6B8gg+Le6VejnVfrptsfrx4hxrSdrz4=
Subject key identifier:   89:AA:0A:C5:A4:71:25:C7:A9:C6:4D:4F:6C:7F:7D:A1:FC:D0:BA:34
Authority key identifier: 1B:EB:BB:BE:B6:E9:22:31:76:CA:5A:1D:F1:49:89:86:01:7E:8E:28
Certificate issuer:       /CN=1bebbbbeb6e9223176ca5a1df1498986017e8e28
Certificate serial:       01901DED5A3174F8D27B7D1FCA72E86B6618
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
Manifest number:          10A6
Signing time:             Sat 15 Jun 2024 22:03:32 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:32 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:32 +0000
Files and hashes:         1: G-u7vrbpIjF2ylod8UmJhgF-jig.crl (hash: vkxqwDv7eRTJbCCVw4fJHZ9kOyOTwuEyKQQFPcUAokc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:5a:31:74:f8:d2:7b:7d:1f:ca:72:e8:6b:66:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bebbbbeb6e9223176ca5a1df1498986017e8e28
        Validity
            Not Before: Jun 15 22:03:32 2024 GMT
            Not After : Jun 16 22:03:32 2024 GMT
        Subject: CN=89aa0ac5a47125c7a9c64d4f6c7f7da1fcd0ba34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4c:70:b6:20:dc:32:41:ad:fa:c3:49:8d:59:
                    00:d7:8d:42:09:9c:7d:de:34:02:5d:78:e3:a5:74:
                    da:3a:77:0c:47:b3:b9:e3:81:12:ea:db:28:f1:64:
                    6d:50:89:ae:21:51:8b:38:2b:0f:db:18:0c:aa:b1:
                    89:5a:41:26:ab:c7:25:c3:fa:af:e8:55:bf:f1:18:
                    ee:c2:6c:a6:06:2a:59:c8:33:36:bc:30:cc:c6:ac:
                    57:d9:e7:ec:2f:aa:fb:4c:0b:f3:45:1d:7d:af:ee:
                    a7:03:99:6b:20:8e:5e:2e:e9:5a:7c:cc:6b:f2:b6:
                    b7:80:6b:aa:60:d9:5b:8f:6c:0e:dd:50:e8:87:83:
                    66:36:7c:0e:87:05:c1:44:85:a8:5e:0e:4d:33:ff:
                    d3:25:da:16:73:1b:5f:fb:a1:f7:2d:be:8e:90:6c:
                    55:e6:ef:57:06:ae:60:26:59:ac:3a:0d:1a:77:72:
                    18:e6:48:de:ae:00:02:49:87:6f:b3:dc:1b:a1:d1:
                    9f:c9:3f:35:60:5f:47:a7:5f:30:1f:40:49:43:d0:
                    7f:bf:8e:d3:2e:f5:fe:93:ee:27:44:cb:33:46:b9:
                    7f:0f:fd:c6:11:ea:4e:b1:f3:aa:a0:51:8d:e1:e3:
                    93:ce:a1:7c:4f:93:e0:f5:fd:d6:56:80:4e:b7:31:
                    f8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:AA:0A:C5:A4:71:25:C7:A9:C6:4D:4F:6C:7F:7D:A1:FC:D0:BA:34
            X509v3 Authority Key Identifier:
                keyid:1B:EB:BB:BE:B6:E9:22:31:76:CA:5A:1D:F1:49:89:86:01:7E:8E:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:d3:03:02:af:e7:8c:8b:c1:04:ef:e7:ca:5a:5c:0f:6d:00:
         04:eb:66:e1:cc:55:01:02:fe:aa:d8:6e:23:62:ac:6c:68:db:
         81:1f:58:d3:fc:aa:1b:22:37:79:8c:6c:30:c5:de:d0:67:93:
         b5:52:e6:74:13:0a:42:55:c8:d0:fc:70:78:f8:46:98:a0:42:
         cb:f6:da:a9:90:07:53:19:9e:be:fc:07:1d:de:b2:89:84:4d:
         27:c9:ae:bc:9f:4f:72:c2:de:a3:3a:5e:18:0d:21:3e:2b:c8:
         b4:a1:c4:38:17:6b:36:85:9c:10:1b:f8:0f:99:c5:cc:67:3f:
         b9:c3:ae:be:44:4f:e1:f7:f5:b4:9e:b7:98:21:c2:71:a7:32:
         93:9f:7b:b5:bd:50:a1:37:c0:93:db:8c:58:b3:bb:16:df:1c:
         03:ed:38:aa:f2:0f:04:f0:4c:db:70:3b:f1:5f:d5:6f:56:e5:
         63:9f:49:87:99:23:c0:28:30:2a:12:f0:98:93:6d:8c:80:31:
         db:8d:f6:87:16:c0:ce:35:ea:f2:b9:01:21:1f:ef:a4:86:6a:
         68:10:dd:86:da:e9:e0:58:a9:30:47:d4:aa:3e:9f:d7:e6:03:
         79:c4:04:75:37:e2:9f:db:d8:5d:cf:bc:e4:a3:fe:45:36:17:
         8a:9b:97:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:51:12 2024 by rpki-client on console-ams.rpki-client.org