Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
File:                     RGMFqaHfoG26hXtD8N6eYi9JUaM.mft (raw, json)
Hash identifier:          W3dw1XoKEJSGcz8XSoTh2Nq9X13UtkFpeMPSDux1vHI=
Subject key identifier:   A3:CA:C8:71:0B:15:D4:4E:39:57:EE:67:F8:77:77:56:3F:EC:71:63
Authority key identifier: 44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
Certificate issuer:       /CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
Certificate serial:       01901DEAFB1130E5882BF4A86F8E0EEBB5A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
Manifest number:          0654
Signing time:             Sat 15 Jun 2024 22:00:57 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:57 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:57 +0000
Files and hashes:         1: RGMFqaHfoG26hXtD8N6eYi9JUaM.crl (hash: 3b8YvR5UDWt2pjGUWM2/zNg/V9hCjR31/yxtnmh+8uY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:fb:11:30:e5:88:2b:f4:a8:6f:8e:0e:eb:b5:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
        Validity
            Not Before: Jun 15 22:00:57 2024 GMT
            Not After : Jun 16 22:00:57 2024 GMT
        Subject: CN=a3cac8710b15d44e3957ee67f87777563fec7163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:12:81:8f:22:eb:bc:0f:06:e2:c9:41:69:c3:
                    68:e1:f3:90:bf:d0:2e:03:71:95:99:a7:bb:ab:bc:
                    47:b9:42:a9:bd:97:1a:14:56:a4:cb:7b:1a:2c:41:
                    e7:fa:24:2a:3e:eb:50:ce:d0:b9:0f:ef:5b:8c:14:
                    24:83:c4:b9:68:6d:90:10:72:e8:88:f0:16:40:b4:
                    73:f3:5a:b0:ea:43:cf:e0:68:20:55:19:3c:9f:82:
                    c0:22:32:50:8a:45:6f:fd:75:3b:41:eb:07:1c:2e:
                    1b:ec:5c:b0:b9:ec:02:5f:91:10:59:82:10:c0:30:
                    90:4e:98:e6:6c:d3:72:be:67:99:23:a4:a7:9f:bc:
                    a5:4a:1b:2a:4c:69:01:7d:8b:b0:e6:41:74:84:f0:
                    34:35:2e:74:a7:a6:bf:aa:5b:27:fb:da:72:58:a7:
                    1e:5d:9a:f7:f0:7b:50:14:c7:a3:b7:35:78:9c:13:
                    f1:f1:d3:6c:2f:e7:ed:5a:24:0d:b8:b0:3a:9f:97:
                    9e:51:c9:fb:bc:e8:68:ef:75:5f:64:86:aa:fa:ac:
                    bb:18:c7:e3:17:b1:8d:2a:b1:04:41:18:da:80:e7:
                    ed:f5:c1:b7:83:8f:06:10:ac:5b:38:e7:30:d0:74:
                    1a:5a:c3:20:47:ed:9c:23:da:2a:35:80:66:5b:8e:
                    b1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:CA:C8:71:0B:15:D4:4E:39:57:EE:67:F8:77:77:56:3F:EC:71:63
            X509v3 Authority Key Identifier:
                keyid:44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:06:7c:8e:54:ef:d4:b0:fc:5c:9e:94:25:e3:ea:cf:52:a4:
         fa:bd:5e:00:85:8c:27:31:b5:fc:d1:b9:20:3a:9e:b8:be:6a:
         82:8f:eb:39:c1:ee:7d:e8:5f:b2:2d:17:58:a7:85:a0:a8:d9:
         7f:52:c1:a3:6d:74:a5:e6:d6:31:87:87:c7:9e:94:c7:e0:1e:
         3b:55:45:3f:22:a2:26:34:09:85:f1:67:72:d1:9b:78:5c:0e:
         ef:7c:45:c2:92:dd:7e:2b:84:73:f9:d6:b2:86:12:3c:d2:20:
         01:b0:fc:00:61:0e:b0:c3:52:81:07:63:3f:95:c1:7b:61:6e:
         34:6a:6f:89:7a:76:90:0a:de:de:65:d0:c8:b3:18:dc:ce:23:
         83:f7:8d:ac:61:f8:81:85:44:1c:97:63:fb:18:d5:31:60:d1:
         0f:b9:39:f8:54:87:b8:db:d9:52:9d:c0:3f:bc:48:7c:1b:32:
         18:a7:6e:2a:a3:7a:99:70:e0:13:fb:3d:13:04:45:a6:49:50:
         d9:97:79:ab:f9:7d:36:f7:74:6f:7f:71:05:dd:8f:e4:a8:e3:
         4d:22:c3:6c:15:b4:f5:0d:35:14:01:cb:a3:45:a1:17:2f:a9:
         09:52:3f:02:58:12:24:61:b5:1b:6a:dd:3f:65:55:f4:a1:0f:
         cf:4c:6e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:51:03 2024 by rpki-client on console-fra.rpki-client.org