Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/943d75-130c-4f52-a760-8fdf7d9b4fb8/1/ANIfTQxk6v5tpTvmpXk6rNedabI.mft
File:                     ANIfTQxk6v5tpTvmpXk6rNedabI.mft (raw, json)
Hash identifier:          b1RYi9E+A0zovH892YLhNCJss+9VSjEj1fmxM0wppkM=
Subject key identifier:   73:FB:DE:C7:20:21:C0:0C:05:89:D2:4D:BE:C5:B3:56:F1:C2:D5:CC
Authority key identifier: 00:D2:1F:4D:0C:64:EA:FE:6D:A5:3B:E6:A5:79:3A:AC:D7:9D:69:B2
Certificate issuer:       /CN=00d21f4d0c64eafe6da53be6a5793aacd79d69b2
Certificate serial:       019043414EE1CDFEF83F905CB108FEC13732
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ANIfTQxk6v5tpTvmpXk6rNedabI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/943d75-130c-4f52-a760-8fdf7d9b4fb8/1/ANIfTQxk6v5tpTvmpXk6rNedabI.mft
Manifest number:          0E77
Signing time:             Sun 23 Jun 2024 04:01:11 +0000
Manifest this update:     Sun 23 Jun 2024 04:01:11 +0000
Manifest next update:     Mon 24 Jun 2024 04:01:11 +0000
Files and hashes:         1: ANIfTQxk6v5tpTvmpXk6rNedabI.crl (hash: TDK7RMtkjxKfIH3CO1LuNb8kzev9MHW4aZPavE3jfzI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/943d75-130c-4f52-a760-8fdf7d9b4fb8/1/ANIfTQxk6v5tpTvmpXk6rNedabI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/943d75-130c-4f52-a760-8fdf7d9b4fb8/1/ANIfTQxk6v5tpTvmpXk6rNedabI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ANIfTQxk6v5tpTvmpXk6rNedabI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 04:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:43:41:4e:e1:cd:fe:f8:3f:90:5c:b1:08:fe:c1:37:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00d21f4d0c64eafe6da53be6a5793aacd79d69b2
        Validity
            Not Before: Jun 23 04:01:11 2024 GMT
            Not After : Jun 24 04:01:11 2024 GMT
        Subject: CN=73fbdec72021c00c0589d24dbec5b356f1c2d5cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:25:df:07:14:27:33:e7:e9:03:d4:0e:21:5d:
                    6b:25:07:fc:a0:19:54:ca:dd:54:05:11:e6:4e:0e:
                    d5:52:21:46:01:bc:d1:fe:3b:31:ef:d8:39:46:4a:
                    35:b4:dd:17:37:0f:89:fd:61:b4:52:bc:08:28:0f:
                    d9:21:ca:72:f6:fe:08:ff:b6:97:ac:36:95:81:dd:
                    c6:66:61:25:a0:ce:e0:42:68:95:fb:83:af:4d:48:
                    be:22:b9:b6:f5:43:69:0f:34:75:c3:03:48:66:fe:
                    4e:49:b6:64:f6:c2:64:ba:98:6c:ea:75:1a:4a:c2:
                    f2:86:6d:1b:3d:60:10:09:2f:9a:02:6a:d7:02:79:
                    4d:ed:3e:f6:28:2d:80:cb:0f:56:d8:3f:c5:17:b8:
                    ab:d2:b5:d4:21:16:de:5b:a0:43:be:b5:a8:5d:cf:
                    fe:ed:c8:f1:0a:78:4e:28:84:70:cd:bd:b1:f3:2a:
                    d0:5e:7b:33:98:af:b4:fb:b3:a9:66:15:62:4a:32:
                    3a:29:57:2a:c2:68:f9:6f:58:e0:c1:51:3b:e4:c0:
                    1c:88:df:70:08:53:8a:23:f8:55:70:cc:ad:9f:be:
                    6d:a7:bc:db:b4:e8:7a:75:e4:19:c1:03:a8:31:e6:
                    f1:8d:06:6f:7f:7f:09:bc:af:70:72:0a:23:6c:c4:
                    12:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FB:DE:C7:20:21:C0:0C:05:89:D2:4D:BE:C5:B3:56:F1:C2:D5:CC
            X509v3 Authority Key Identifier:
                keyid:00:D2:1F:4D:0C:64:EA:FE:6D:A5:3B:E6:A5:79:3A:AC:D7:9D:69:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANIfTQxk6v5tpTvmpXk6rNedabI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/943d75-130c-4f52-a760-8fdf7d9b4fb8/1/ANIfTQxk6v5tpTvmpXk6rNedabI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/943d75-130c-4f52-a760-8fdf7d9b4fb8/1/ANIfTQxk6v5tpTvmpXk6rNedabI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ce:79:07:29:ac:04:54:73:3c:bf:42:ad:10:b0:6f:99:03:
         99:8a:ae:64:f6:95:df:5b:78:10:41:85:73:f8:77:44:80:8b:
         56:1d:7e:f6:a8:95:e8:11:2a:42:00:25:66:25:ac:fd:f9:21:
         df:ea:96:3c:03:b4:04:13:4c:f0:28:2c:a8:01:4d:55:6a:52:
         7e:6d:d9:c4:54:43:ed:41:c3:08:08:46:48:16:4c:de:56:ff:
         c0:af:e8:ba:19:7d:3c:5f:60:d3:d5:ec:12:04:6c:83:08:41:
         0a:a4:41:85:52:a6:1b:32:6d:26:75:c0:50:0b:a6:47:ab:a0:
         70:aa:e2:59:c1:64:f8:a8:f2:9c:01:a7:89:0b:16:69:76:b2:
         19:fb:c9:32:c4:04:c0:5f:2a:23:2b:d5:61:0f:42:e5:c3:51:
         17:46:0d:2f:34:33:4e:ee:74:0e:e1:9d:ef:70:8d:74:47:c7:
         68:f6:58:cd:17:e5:e8:b6:cc:43:a6:db:58:d9:e8:3a:4f:5c:
         59:23:04:c2:f7:4a:d7:13:69:49:94:fc:0a:fd:33:59:22:89:
         a0:3e:fa:c1:56:a4:38:bb:21:9e:64:16:43:60:5d:6c:bb:ff:
         1c:f6:00:26:bf:46:d7:09:0d:11:14:87:c1:d7:7c:83:a6:85:
         c5:40:11:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 15:06:52 2024 by rpki-client on console-ams.rpki-client.org