Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
File:                     dYOxUbdLsu2w9c5rbpux4MPQrRs.mft (raw, json)
Hash identifier:          9ukK8TSK8lyrMeCRNutMN0luqBiLLHqF2xqbketWLVY=
Subject key identifier:   66:B0:62:9A:51:93:7A:B9:4A:BA:AD:2E:63:03:A8:6E:CA:45:7F:36
Authority key identifier: 75:83:B1:51:B7:4B:B2:ED:B0:F5:CE:6B:6E:9B:B1:E0:C3:D0:AD:1B
Certificate issuer:       /CN=7583b151b74bb2edb0f5ce6b6e9bb1e0c3d0ad1b
Certificate serial:       019048D577D7CC356CDE3263782DAB8A491F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
Manifest number:          11D9
Signing time:             Mon 24 Jun 2024 06:01:07 +0000
Manifest this update:     Mon 24 Jun 2024 06:01:07 +0000
Manifest next update:     Tue 25 Jun 2024 06:01:07 +0000
Files and hashes:         1: dYOxUbdLsu2w9c5rbpux4MPQrRs.crl (hash: Qjy1A0nS4pbvtMOPB3H373wiQEv6wmVgsUum/vq9UmY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:d5:77:d7:cc:35:6c:de:32:63:78:2d:ab:8a:49:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7583b151b74bb2edb0f5ce6b6e9bb1e0c3d0ad1b
        Validity
            Not Before: Jun 24 06:01:07 2024 GMT
            Not After : Jun 25 06:01:07 2024 GMT
        Subject: CN=66b0629a51937ab94abaad2e6303a86eca457f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5f:1b:09:70:b4:a8:71:89:24:47:9e:31:0e:
                    cd:17:aa:a8:2d:d2:f7:62:03:d0:14:1b:d6:43:87:
                    be:81:bb:c3:dc:0a:36:2b:36:8c:a3:3a:f1:73:ad:
                    11:1f:ad:ca:3c:92:81:c6:c4:a8:64:eb:6b:b6:06:
                    7f:50:89:48:cc:42:6f:b9:ac:f4:bc:b6:75:d2:9b:
                    d7:77:f3:44:bd:32:fd:b2:e6:a7:dd:79:19:e8:b2:
                    b9:ea:47:cf:dc:2d:dc:d3:4a:b9:51:97:f2:8d:fe:
                    fb:55:11:22:69:bd:e7:77:77:da:f3:29:fe:d0:1f:
                    f7:9f:bc:a3:46:44:1a:29:b1:1f:bb:84:71:08:78:
                    e0:66:0d:f8:94:2e:34:8a:cd:41:f7:0f:a8:d6:5a:
                    79:61:e2:7f:bf:38:2a:ff:e0:e8:19:a6:0f:27:21:
                    6e:51:bb:71:d8:37:a9:99:e9:8d:d3:67:e2:2a:16:
                    a0:d3:36:92:58:7a:7c:21:59:8a:e7:ab:a8:75:dd:
                    7c:ef:55:9f:29:e0:67:3b:c4:21:bc:6f:d4:bb:e6:
                    b5:69:86:91:36:c8:d6:9a:0c:c9:98:c0:94:31:b8:
                    09:77:a5:19:a0:5f:96:83:a3:f8:30:b1:d5:70:5b:
                    cd:b6:89:cc:83:8e:a6:ab:b1:c7:39:51:65:22:bb:
                    ee:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B0:62:9A:51:93:7A:B9:4A:BA:AD:2E:63:03:A8:6E:CA:45:7F:36
            X509v3 Authority Key Identifier:
                keyid:75:83:B1:51:B7:4B:B2:ED:B0:F5:CE:6B:6E:9B:B1:E0:C3:D0:AD:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:26:8c:01:8d:d3:4b:8d:b0:03:4f:ed:64:29:fc:21:04:a6:
         7c:2e:2f:b2:c0:6a:cc:62:37:62:0d:1d:13:0a:d3:6b:5e:bb:
         b6:49:c4:c0:9e:07:c7:1b:32:a7:94:61:e4:e9:2e:df:7e:b3:
         ff:83:d2:65:3b:c0:1b:4b:27:ff:68:cf:ca:75:2c:98:8b:82:
         01:ee:65:11:91:5b:2c:ba:ae:2d:cc:c5:26:53:76:2f:b0:83:
         65:e2:52:28:44:8f:99:70:13:0c:96:2e:44:c4:a1:e3:d7:a7:
         d8:f2:da:a0:77:fa:94:7c:4b:af:70:a2:5f:61:55:22:a6:5e:
         3e:89:c5:8b:37:b0:76:01:0c:7e:17:d9:24:9c:96:f1:03:b3:
         da:ee:15:fb:52:40:db:e2:63:62:75:22:12:99:00:69:76:3d:
         cb:f7:d5:c9:90:cd:0a:d1:69:77:ca:14:eb:77:d9:a3:ca:72:
         69:e6:f6:52:8b:1a:d1:c4:0b:21:53:6a:04:a2:6c:e3:08:8c:
         82:16:2c:e5:ea:f7:ca:1b:d5:fc:f7:7f:cd:26:29:17:6a:be:
         96:88:9c:3d:7d:80:3f:24:87:83:88:03:bb:1f:cd:e4:91:03:
         9a:b4:01:02:7c:09:73:f6:cb:bd:d8:55:f9:38:07:5a:f4:86:
         13:e0:1d:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBI1XfXzDVs3jJjeC2rikkfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ODNiMTUxYjc0YmIyZWRiMGY1Y2U2YjZlOWJiMWUwYzNk
MGFkMWIwHhcNMjQwNjI0MDYwMTA3WhcNMjQwNjI1MDYwMTA3WjAzMTEwLwYDVQQD
Eyg2NmIwNjI5YTUxOTM3YWI5NGFiYWFkMmU2MzAzYTg2ZWNhNDU3ZjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz18bCXC0qHGJJEeeMQ7NF6qoLdL3
YgPQFBvWQ4e+gbvD3Ao2KzaMozrxc60RH63KPJKBxsSoZOtrtgZ/UIlIzEJvuaz0
vLZ10pvXd/NEvTL9suan3XkZ6LK56kfP3C3c00q5UZfyjf77VREiab3nd3fa8yn+
0B/3n7yjRkQaKbEfu4RxCHjgZg34lC40is1B9w+o1lp5YeJ/vzgq/+DoGaYPJyFu
Ubtx2DepmemN02fiKhag0zaSWHp8IVmK56uodd1871WfKeBnO8QhvG/Uu+a1aYaR
NsjWmgzJmMCUMbgJd6UZoF+Wg6P4MLHVcFvNtonMg46mq7HHOVFlIrvuoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGawYppRk3q5SrqtLmMDqG7KRX82MB8GA1UdIwQY
MBaAFHWDsVG3S7LtsPXOa26bseDD0K0bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFlPeFViZExzdTJ3OWM1cmJwdXg0TVBRclJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wNDY3ZGMtY2NmMy00MzMxLTk1N2Mt
MTU4NjA2MzE4NTI1LzEvZFlPeFViZExzdTJ3OWM1cmJwdXg0TVBRclJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8wNDY3ZGMtY2NmMy00MzMxLTk1N2MtMTU4NjA2MzE4NTI1
LzEvZFlPeFViZExzdTJ3OWM1cmJwdXg0TVBRclJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhSaMAY3T
S42wA0/tZCn8IQSmfC4vssBqzGI3Yg0dEwrTa167tknEwJ4Hxxsyp5Rh5Oku336z
/4PSZTvAG0sn/2jPynUsmIuCAe5lEZFbLLquLczFJlN2L7CDZeJSKESPmXATDJYu
RMSh49en2PLaoHf6lHxLr3CiX2FVIqZePonFizewdgEMfhfZJJyW8QOz2u4V+1JA
2+JjYnUiEpkAaXY9y/fVyZDNCtFpd8oU63fZo8pyaeb2Uosa0cQLIVNqBKJs4wiM
ghYs5er3yhvV/Pd/zSYpF2q+loicPX2APySHg4gDux/N5JEDmrQBAnwJc/bLvdhV
+TgHWvSGE+Ad/Q==
-----END CERTIFICATE-----
Generated at Mon Jun 24 09:18:19 2024 by rpki-client on console-ams.rpki-client.org