Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
File:                     CuenjWwPepgBOXu51SmocVlcgEc.mft (raw, json)
Hash identifier:          Z7PrRdR1gSE7TJReYQ2upXCkqAulO2I5czQq21b5bko=
Subject key identifier:   CB:F1:9D:5D:03:74:A9:FB:59:22:50:CA:0F:E1:C0:1A:65:6F:59:58
Authority key identifier: 0A:E7:A7:8D:6C:0F:7A:98:01:39:7B:B9:D5:29:A8:71:59:5C:80:47
Certificate issuer:       /CN=0ae7a78d6c0f7a9801397bb9d529a871595c8047
Certificate serial:       01903B510B45D3160253037AC3EFADDD6518
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
Manifest number:          035A
Signing time:             Fri 21 Jun 2024 15:01:25 +0000
Manifest this update:     Fri 21 Jun 2024 15:01:25 +0000
Manifest next update:     Sat 22 Jun 2024 15:01:25 +0000
Files and hashes:         1: CuenjWwPepgBOXu51SmocVlcgEc.crl (hash: zX61wI9nGSpE2KK8REITEqTJCEcdtLx1ViyFfkXyjO4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3b:51:0b:45:d3:16:02:53:03:7a:c3:ef:ad:dd:65:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ae7a78d6c0f7a9801397bb9d529a871595c8047
        Validity
            Not Before: Jun 21 15:01:25 2024 GMT
            Not After : Jun 22 15:01:25 2024 GMT
        Subject: CN=cbf19d5d0374a9fb592250ca0fe1c01a656f5958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cc:5a:7d:b6:82:53:89:b1:17:9d:ef:88:dd:
                    78:ec:86:72:54:25:e2:4f:f1:10:5c:7b:1a:c8:da:
                    ec:e8:c8:e4:70:d3:2c:7f:a9:ef:94:b0:cd:73:aa:
                    84:8b:98:32:47:85:cc:d4:40:71:03:17:a9:dd:d1:
                    8a:86:8e:85:54:a0:80:79:cb:dc:85:c4:2d:eb:7e:
                    78:63:d5:a3:c4:b5:d1:12:c9:8a:d5:04:1b:d8:15:
                    db:7f:93:64:d5:d1:d1:74:28:ff:80:bf:3a:0c:fd:
                    2d:41:07:12:e3:35:48:2f:a4:b9:f8:e1:44:f7:76:
                    9d:83:02:26:ab:3d:4b:3d:7e:1f:3d:3b:b1:d8:4c:
                    7d:14:a4:b5:80:01:9c:02:94:25:da:a2:f9:65:23:
                    43:01:28:2d:10:49:a8:17:ea:31:e9:43:8d:fc:74:
                    ea:b6:1e:0e:30:5b:5c:08:a5:e5:61:34:15:94:ac:
                    97:d2:81:95:dc:45:9a:0f:c7:da:51:72:4d:85:c9:
                    88:f0:57:21:d6:04:46:23:36:43:b6:a9:ae:5f:45:
                    5f:a8:9f:c9:05:af:fa:44:51:78:66:71:c5:6c:dd:
                    c4:93:d1:70:76:88:99:5b:22:1f:34:f4:b5:af:68:
                    bf:4c:40:4f:05:1d:3e:b0:3e:13:70:b6:72:78:77:
                    f4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F1:9D:5D:03:74:A9:FB:59:22:50:CA:0F:E1:C0:1A:65:6F:59:58
            X509v3 Authority Key Identifier:
                keyid:0A:E7:A7:8D:6C:0F:7A:98:01:39:7B:B9:D5:29:A8:71:59:5C:80:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:1b:dc:db:4a:9a:5a:e3:9a:1f:60:27:aa:ce:1d:cd:72:43:
         dc:73:b4:25:7b:9f:6f:96:23:86:3f:14:0c:81:ec:06:a4:20:
         c7:ce:19:b9:f4:05:3f:9a:c6:1c:9a:b1:c5:6d:64:f8:9f:e1:
         42:df:59:5b:a4:25:59:80:e7:41:69:35:88:5c:ee:9e:38:87:
         16:fa:76:75:0e:6e:42:8f:aa:14:90:a9:5f:07:50:79:2d:47:
         40:d0:d1:73:81:07:86:cc:54:f9:a5:5d:30:20:24:15:75:65:
         d3:b6:75:93:69:9a:a9:70:c8:6c:3b:44:cc:e5:0a:0d:7f:67:
         21:40:40:07:19:8c:a1:75:fd:68:89:5f:13:de:e0:ca:a6:76:
         1a:72:fe:f3:f4:34:a3:34:a7:8d:a9:bd:08:49:70:02:31:06:
         e3:09:a6:c8:32:09:83:be:4e:e4:38:a8:66:67:0b:65:7f:fd:
         b5:9a:ca:9a:1e:65:51:4c:0f:06:51:eb:26:6e:ae:9c:89:39:
         87:8e:e9:a3:3e:c9:d6:16:d7:36:00:fc:73:66:9c:70:e1:db:
         28:86:a0:02:07:e0:f7:4e:02:98:62:74:e6:d3:e2:8f:ca:9e:
         88:39:3e:2d:62:ea:06:7b:01:ae:62:0d:c7:6b:3a:06:c6:2f:
         6a:47:b3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:51:48 2024 by rpki-client on console-ams.rpki-client.org