Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
File:                     fbq8m8nDq4pzmius48V7AvRFkOs.mft (raw, json)
Hash identifier:          qY2FIi3idNXQGu0LJZi/U1MhNUJG0+R80N12UdJCyA8=
Subject key identifier:   0D:35:78:07:A2:65:7D:10:B8:52:49:B5:52:A7:76:72:EF:59:9B:47
Authority key identifier: 7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
Certificate issuer:       /CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Certificate serial:       01901D4654597595736F705F82A9760FFDB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 19:01:06 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:06 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:06 +0000
Files and hashes:         1: fbq8m8nDq4pzmius48V7AvRFkOs.crl (hash: 2BVDw+Jtnzj2U1DsZLpAnx4WbAO5jt5+P+RoNCyTvrM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:54:59:75:95:73:6f:70:5f:82:a9:76:0f:fd:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
        Validity
            Not Before: Jun 15 19:01:06 2024 GMT
            Not After : Jun 16 19:01:06 2024 GMT
        Subject: CN=0d357807a2657d10b85249b552a77672ef599b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f2:c2:2e:cf:a4:19:6a:f4:c8:90:6f:bc:56:
                    c9:47:70:d4:38:25:37:93:e5:5e:23:5d:fa:72:c5:
                    dc:b2:b7:1b:2d:38:dc:50:c9:a9:e5:e0:21:1e:5b:
                    86:0d:47:9a:d1:10:30:6e:02:0b:40:14:6c:23:b4:
                    50:d1:83:ac:c5:0d:d8:51:f9:fe:88:88:83:b3:0d:
                    84:83:53:34:cf:63:3a:fb:b3:82:e9:63:7a:d9:06:
                    18:45:f7:a4:f5:9e:bd:2e:43:54:c9:b4:5c:31:df:
                    af:b1:9b:be:1b:60:89:4e:e0:a2:a3:42:43:f0:81:
                    33:e4:a7:96:84:13:bc:6e:91:83:46:e0:3c:dc:52:
                    bc:4f:b0:4d:34:c1:8c:8f:6a:a1:f3:01:5d:4a:79:
                    a0:62:dc:94:6d:d8:83:dc:b8:50:d3:44:5b:a3:94:
                    b2:63:4c:36:8c:4f:a4:cd:aa:f9:41:f6:fc:3e:4e:
                    5a:3f:18:92:7e:6b:47:f9:97:9e:5b:c4:bc:3b:c6:
                    50:9f:d9:cb:02:ab:f6:f1:2d:43:6c:48:92:c7:20:
                    62:84:8f:7d:b0:4e:6a:4e:3a:92:60:98:05:d1:72:
                    df:a5:0e:5e:10:de:dd:03:98:e6:4e:c1:3e:e6:bb:
                    a9:0e:8f:6b:7c:ce:8d:d5:6d:b8:94:90:56:e7:52:
                    07:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:35:78:07:A2:65:7D:10:B8:52:49:B5:52:A7:76:72:EF:59:9B:47
            X509v3 Authority Key Identifier:
                keyid:7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:d8:88:03:f5:c2:f0:e1:eb:ae:16:3d:fd:8e:81:ea:bb:5b:
         c7:f1:2d:11:46:c7:55:86:12:31:fb:99:08:17:86:66:e1:8c:
         2c:a0:63:9a:f4:68:d0:6b:83:19:1b:1f:eb:be:43:f2:91:76:
         19:83:6e:98:57:c3:e1:67:7c:c8:41:aa:16:d7:b1:c5:98:95:
         8a:d6:c4:fc:12:6c:31:60:f6:43:a9:47:ac:e9:f9:54:d5:e7:
         7e:74:8b:78:aa:d9:19:cf:8c:d6:d5:81:b6:f3:b7:06:a0:83:
         e7:4d:cd:93:08:32:b6:54:79:47:2d:28:76:e5:83:1c:87:77:
         78:90:99:80:b8:55:38:b7:98:15:55:ee:52:5e:1a:a0:7b:01:
         64:99:8e:1b:17:c5:6f:29:40:74:0d:33:ca:63:38:1d:cb:1c:
         91:83:01:34:fe:81:9c:95:55:87:87:c1:31:90:ed:c4:38:6a:
         8c:11:de:33:af:75:44:77:cf:83:05:42:78:22:4f:5d:16:b2:
         f1:ee:3a:83:8c:c1:f0:fd:87:08:3a:92:e2:e8:d6:39:16:12:
         aa:8e:c8:e8:a5:69:28:32:14:44:d1:62:66:ec:1f:4a:59:01:
         a4:a4:09:d7:7a:fe:60:97:9d:e1:8b:5f:7b:f7:45:82:9c:0a:
         a0:ff:bc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:17:01 2024 by rpki-client on console-ams.rpki-client.org