Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
File:                     1II6TKTXaJe13f55iOJx_2gTGPI.mft (raw, json)
Hash identifier:          IJC3Bs8bB0FlxWz39Oel38zV3FdHZzIwHmUbG55wPqg=
Subject key identifier:   60:8D:0E:2E:7C:EF:08:49:6B:02:30:5C:EA:C2:5B:89:85:58:CB:7A
Authority key identifier: D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
Certificate issuer:       /CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Certificate serial:       019041F73F35FB89BA1DEC924BF4B37EBE7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
Manifest number:          0EBD
Signing time:             Sat 22 Jun 2024 22:00:40 +0000
Manifest this update:     Sat 22 Jun 2024 22:00:40 +0000
Manifest next update:     Sun 23 Jun 2024 22:00:40 +0000
Files and hashes:         1: 1II6TKTXaJe13f55iOJx_2gTGPI.crl (hash: 0fuy18m03/QcGxv66lwcmSMxzRgbREF9HmfzQhjh2k4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:f7:3f:35:fb:89:ba:1d:ec:92:4b:f4:b3:7e:be:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
        Validity
            Not Before: Jun 22 22:00:40 2024 GMT
            Not After : Jun 23 22:00:40 2024 GMT
        Subject: CN=608d0e2e7cef08496b02305ceac25b898558cb7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6c:1c:7b:69:3d:3d:23:bf:f8:5f:f0:91:ff:
                    d3:12:ee:fd:67:49:51:da:5b:60:a6:6b:0e:37:85:
                    f1:75:28:c1:a7:b8:f1:32:64:76:a8:7a:84:3c:1e:
                    6d:62:8a:79:e5:66:a4:4f:eb:09:3b:ac:69:aa:d8:
                    2e:e4:09:1f:1b:02:34:e4:5a:b5:4e:f4:48:b4:a4:
                    42:7f:86:8a:11:d4:a0:42:4a:1c:90:23:a6:19:a5:
                    0d:6b:10:2c:de:37:b2:62:32:80:9b:a5:d1:14:5d:
                    9f:3e:9a:12:ab:e3:b8:db:fe:27:6e:41:29:22:b0:
                    2b:d2:29:6f:fd:60:90:11:70:8e:ff:fb:c0:12:31:
                    b6:fe:ca:3e:58:3e:3b:c1:22:2e:97:32:05:02:31:
                    4e:b2:c4:9d:9e:5e:56:7f:08:4b:5e:66:29:7b:42:
                    0f:fc:19:e2:2f:f6:05:5b:15:d6:03:b7:5f:0a:b0:
                    6b:fb:42:47:c2:93:42:d0:a6:aa:13:07:df:2e:ec:
                    5f:43:06:ef:11:29:41:b5:8b:0a:8e:fa:2f:93:4f:
                    bc:97:c8:d4:b8:2a:33:db:10:db:a8:03:a5:d3:41:
                    e6:ab:39:06:25:d9:1c:3a:eb:f7:b5:13:65:38:eb:
                    35:39:95:4d:07:64:f0:15:a1:ba:77:23:4e:62:04:
                    1e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:8D:0E:2E:7C:EF:08:49:6B:02:30:5C:EA:C2:5B:89:85:58:CB:7A
            X509v3 Authority Key Identifier:
                keyid:D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d9:43:bf:d4:91:b4:49:06:57:e2:fa:56:9f:c5:46:5b:44:
         46:ca:7b:03:50:f1:82:f1:aa:d1:11:c8:68:10:07:4e:e9:49:
         14:9f:8f:8b:6c:27:19:da:53:29:81:c5:3e:ee:fb:ef:55:ef:
         a5:69:92:1f:ab:3d:93:94:4d:56:49:8d:89:40:b6:d4:c7:7f:
         1e:a7:39:7a:1b:b9:52:aa:65:13:49:2f:eb:51:e3:8f:d2:c3:
         6e:c2:16:24:29:a6:99:46:ac:41:c6:65:e2:da:20:b0:72:58:
         05:e0:53:d3:42:80:ca:ec:d6:e7:81:94:8f:36:c1:6d:33:8d:
         d2:84:02:5c:c6:9c:6d:74:1c:66:4d:8e:65:66:ee:f7:fa:f6:
         15:4f:3c:85:69:9d:03:ea:b3:b1:51:cd:cc:5b:3b:ef:c1:fc:
         0a:e3:45:5a:a0:36:c6:e3:f1:67:ff:cd:f1:b6:2f:42:6a:9a:
         43:9a:0a:c0:69:4a:f6:90:8a:15:92:4c:fd:0f:11:a3:5f:41:
         62:c3:15:d6:75:25:ea:f1:92:b0:c3:0b:b5:8a:b2:2c:ad:2c:
         7a:f3:00:29:f9:1b:b0:f6:61:9b:4f:24:c9:5e:05:da:7d:9b:
         13:65:e5:71:a2:6a:2f:bf:de:60:3e:3c:be:4d:3c:8b:b8:d0:
         1a:0a:6c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:50:43 2024 by rpki-client on console-fra.rpki-client.org