Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
File:                     7JjcJavXq2PjW2KOqsKlTZSan0Y.mft (raw, json)
Hash identifier:          mTfcgWnr5LSnPPmVBP46+4MY5F0dEuNfVmjl7HQV7cQ=
Subject key identifier:   55:C2:F0:48:8D:A6:52:FF:16:8D:2E:1F:8E:CA:3F:73:45:26:9D:F1
Authority key identifier: EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
Certificate issuer:       /CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Certificate serial:       01901DED0B8BEE64F0CF460351D166A36683
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
Manifest number:          054A
Signing time:             Sat 15 Jun 2024 22:03:12 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:12 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:12 +0000
Files and hashes:         1: 7JjcJavXq2PjW2KOqsKlTZSan0Y.crl (hash: FctRxhMScroCxSpNgJmIIKEY7YLiGdXwN0Pob6+ne/s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:0b:8b:ee:64:f0:cf:46:03:51:d1:66:a3:66:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
        Validity
            Not Before: Jun 15 22:03:12 2024 GMT
            Not After : Jun 16 22:03:12 2024 GMT
        Subject: CN=55c2f0488da652ff168d2e1f8eca3f7345269df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:61:c3:fa:b4:21:19:d8:f9:e0:c5:66:74:f6:
                    95:fe:3a:79:1c:93:2d:12:86:72:ef:3e:e6:26:ce:
                    9d:67:98:89:f6:e4:b0:41:10:19:b6:ef:4e:f7:55:
                    e2:19:b5:a2:8d:77:7d:3d:71:eb:61:ac:2d:24:fe:
                    d3:08:0b:ab:66:8c:2b:2f:6f:b8:ab:e1:8d:aa:02:
                    de:1e:1f:6b:f8:90:24:bd:77:39:07:f5:d3:84:f5:
                    cf:33:b9:d5:0d:d6:8d:d4:3b:c8:7f:a4:85:68:21:
                    de:09:c5:db:0a:6f:c3:3d:64:25:26:e3:f2:df:10:
                    00:06:7b:ed:7f:3a:96:e6:8e:31:35:53:59:6c:2e:
                    38:1b:d6:3a:e9:c6:42:ac:66:e5:01:6f:71:7f:96:
                    77:cc:13:9d:4c:c1:01:84:fb:e6:95:6b:db:48:9b:
                    c8:ec:05:d7:d8:48:88:49:86:84:ef:de:d5:5d:63:
                    c2:6c:38:2a:f7:fa:2b:e7:34:a1:e1:bf:0e:9b:4a:
                    6d:02:89:70:4f:48:5b:98:85:a2:45:c7:ea:6b:d9:
                    64:c8:57:c9:53:07:f3:87:d1:23:4c:82:2e:de:7e:
                    14:9e:58:09:d5:ac:f5:79:1d:10:81:d3:ae:c5:d8:
                    33:08:fa:7d:0a:e6:e8:e6:16:b8:6a:6a:25:ad:e5:
                    c3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C2:F0:48:8D:A6:52:FF:16:8D:2E:1F:8E:CA:3F:73:45:26:9D:F1
            X509v3 Authority Key Identifier:
                keyid:EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:41:aa:d3:e6:b9:24:a4:77:8a:6e:ad:fa:4d:c6:83:ba:eb:
         80:28:28:1f:48:1d:07:06:91:63:d0:47:cf:5e:8c:29:1d:d7:
         2c:c8:eb:97:61:7c:f6:bf:57:6d:20:3e:e2:53:cc:64:87:4e:
         95:3e:ec:af:1a:c4:01:7d:76:e1:e6:50:76:b4:f1:7d:71:d3:
         2d:18:ff:bc:ce:e2:c0:4b:d5:94:75:89:e9:25:f6:57:2d:d1:
         19:aa:d2:3d:14:f0:f7:03:ff:cd:fa:34:4c:b3:f8:2b:1f:7b:
         3e:b2:35:b7:7b:06:99:ef:6b:94:9c:b4:9c:58:dc:97:e3:22:
         94:e9:c8:e9:ce:2a:86:40:36:3b:5d:20:38:34:02:a5:dc:44:
         69:d4:a3:66:d5:94:cd:c5:42:3c:9c:39:6c:50:1d:58:81:c5:
         cf:71:82:6c:be:3e:43:d5:95:4b:1b:9b:ea:65:4f:66:a6:da:
         21:cc:13:8b:e2:55:26:d3:c1:8b:d7:22:5a:41:6c:04:fb:43:
         aa:b8:a1:27:b1:cf:e3:05:60:55:df:4e:9f:71:5c:ff:85:27:
         04:f7:64:d7:79:87:18:cd:41:a5:cf:eb:72:17:c9:ea:3c:83:
         3d:a9:d1:c2:4b:b3:80:a5:19:cb:a0:b4:40:2c:c1:1c:b2:fb:
         9e:74:75:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:51:49 2024 by rpki-client on console-ams.rpki-client.org